Redacting data method (Masking flow)
Masking data by using the redacting method replaces each data value with a string of exactly 10 letters of X to remove information or you can specify the replacement characters that are used to redact data. You can also specify the number of characters to mask the data.
With basic redacted data, the format of the data and referential integrity isn't retained. However, using advanced redaction, the format of the data isn't retained, but the referential integrity is retained. Advanced redact options allow you to manipulate the way that the data is redacted.
Redacting data options
Use the following options to help you redact data.
Redaction scope
- Complete (more secure): Completely redacts the data value with a masking character that's provided.
- Partial: Partially redacts data value with a masking character that's provided.
- Partial Custom: For most data classes, you can customize and partially redact the first "X" characters or Redact last "X" characters. The partial redact options for the following data classes are different because you can apply advanced customizations: Credit card number, Email address, and Date. See Partial redact options for more infomation.
Redact mask all numeric data to zero
Now all numeric types of data that you mask will be redacted to 0. Numeric types of data, such as integer, float, and decimal, are redacted to 0 for all redact rules, including full, partial, or match source value length.
Masking character
- Customize the character that you want the data value to mask to
- The masking character must be a single character. For example,
Original data: [email protected]
Redact result in basic masking: XXXXXXXXXX
Redact result in advanced masking with "Masking character = A": AAAAAAAAAA
Number of masking characters
- Match source value length: Each masked value is the same length as each source value.
- Standard (more secure): Customize how many characters you want the masked value to have. All masked values share standardized length.
The Partial redact options are different for the following three data classes because you can apply more advanced customizations to those classes.
| Data class | Partial redact options | Examples |
|---|---|---|
| Credit Card Number | Partial standard: Redact the "first 4 digits", "first 6 digits", "All but first 6 digits", or "All but first 4 digits". Partial custom: Customize redact the first "X" characters or Redact the last "X" characters. |
Original data: 370000000100018 Complete redact: XXXXXXXXXXXXXXX Partial standard redact with "first 4 digits": XXXX00000100018 Partial custom redact with "last 5 digits": 3700000001XXXXX |
| Email Address | User name: Redact only the user name part in an email address. Domain name: Redact only the domain name part in an email address. |
Original data: [email protected] Complete redact: XXXXXXXXXX Partial redact user name: [email protected] Partial redact domain name: brown.white@XXXXXXXXXX Partial redact user name and domain name: XXXXXXXXXX@XXXXXXXXXX |
| Date (YY/MM/DD) | Specify the date values you want to use to alter the original dates. | Original data: 1985-07-09 Complete redact: 1995-12-31 |
| US Social Security Number | Partial standard: Redact the "Area Number", "Group Number", or "Serial Number". Multiple options can be selected. Partial custom: Customize redact the first "X" characters or Redact the last "X" characters. |
Original data: 123-45-6789 Complete redact: XXXXXXXXXXX Partial standard redact with "Area Number": XXX-45-6789 Partial custom redact with "last 3 digits": 123-45-6XXX |
| US Phone Number | Partial standard: Redact the "Area Code", "Middle 3 digits", or "Last 4 digits". Multiple options can be selected. Partial custom: Customize redact the first "X" characters or Redact the last "X" characters. |
Original data: 123-456-7890 Complete redact: XXXXXXXXXXXX Partial standard redact with "Middle 3 digits": 123-XXX-7890 Partial custom redact with "last 3 digits": 123-456-7XXX |
Learn more
Parent topic: Advanced data masking