Question

A support team needs read access to a production customer database to troubleshoot live issues, but they should not see full national ID numbers or full payment card numbers. The privacy engineer must ensure that the underlying stored data remains intact and fully usable by billing batch jobs, while support staff only ever see obscured values based on their role. Which technical control best meets these requirements?

Accepted Answer

Apply dynamic data masking so sensitive fields are obfuscated at query time based on the requesting user's role, without altering stored values

Answer

Statically mask the entire production database so all sensitive fields are permanently replaced with fictitious values

Answer

Encrypt the sensitive columns at rest and grant the support team the decryption keys for troubleshooting

Answer

Replace the sensitive fields with tokens stored in a vault and give support staff access to the detokenization service