Adding Data Masking on Survey Responses

Updated 

The Data Masking Templates feature lets you apply predefined templates to automatically mask sensitive information in survey responses. These templates help enable compliance with data privacy regulations and protect confidential data from unauthorized access. As an administrator, you can create, customise, and manage these templates to maintain consistent and effective data protection throughout your organisation.

For use cases and value additions, please follow the securities article .

Prerequisites

In order to access security features, you would need access to survey masking with the CFM App

Masking Configuration Permissions:

  • View: You can view existing masking templates.

  • Create: You can create new masking templates.

  • Edit: You can edit templates that you’ve created or that have been shared with you with editing access.

  • Delete: You can delete templates you’ve created or those shared with you with edit permissions.

Setting Up Data Masking on Survey Responses

  • Open the desired Survey where you want to apply masking.

  • Navigate to Settings option and go to Masking Data and click Configure.

  • Go to Configure Masking screen and fill in the details:

    • Applied Masking Templates: These are the templates applied when creating a masking template for all surveys. If applicable, you’ll see a list of templates currently associated with the survey.

    • Fill in the Masking Template details:

      • Select the masking template you want to apply to the survey.

      • Apply the Template: Choose whether you want to apply the template to the entire survey (all open-text field questions) or only to specific selected questions.

        • Automatically: Selecting this option will apply the template to all open text field questions, as well as multiple-choice questions that have the "Other" text field enabled.

        • Manually: If you select this option, an additional dropdown will appear, allowing you to choose specific questions to which the masking template should be applied.

          • Questions: You can either select all questions or choose specific ones where you want the masking to be applied.

    • If a survey is published and a question is later modified or remains in a draft state, the question selector will show tags like "Published," "Modified," or "Draft." These tags help you quickly understand the current status of each question, making it easier to apply masking or make necessary updates.

    • If you want to map an additional masking template, click on “+ Masking Template.” This will open the same form described earlier, allowing you to configure and apply another template as needed.

Note: You can apply the masking template to the desired survey and, if needed, assign separate templates to selected questions. Then, monitor the responses from those surveys to ensure that sensitive data is being properly masked as intended. You can even test it by creating a test survey that includes questions asking for sensitive information such as age and phone number. Apply one masking template using the "Automatically" option and another using the "Manually" option. Fill out the survey with relevant sensitive responses, then validate that the information is masked according to the defined rules. Repeat the process with a different survey to ensure consistency and accuracy of the masking templates across various use cases.

Key points to note

  • Edit Limitation: Once a masking template is created, it cannot be edited, only deleted.

  • Historical Masking: Masking cannot be applied to previously collected responses; backfilling is not supported.

  • AI Masking Language Support: AI-based masking is currently supported only in English, French, Italian, German, Arabic, and Urdu.

  • Editing Mapping in Survey: If you update the masking mapping in a survey, the new configuration will apply to responses collected from that point onward.

  • Question Type Limitation: Masking is currently supported only for open text field questions or multiple-choice questions with an "Other" text field.

  • Lack of Respondent Notification: Respondents are not currently notified when sensitive data is being collected.