Creating Data Masking Templates

Updated 

The Data Masking Templates feature enables you to create and apply predefined templates that automatically mask sensitive information in survey responses. These templates support compliance with data privacy regulations and help prevent unauthorized access to personal data. As an admin, you can easily create, customize, and manage masking templates to ensure consistent and effective data protection across your organization.

Refer to the securities articles for more details on use cases and value additions.

Prerequisites

In order to access security features, you would need access to survey masking with the CFM app.

Masking Configuration Permissions:

  • View: You can view existing masking templates.

  • Create: You can create new masking templates.

  • Edit: You can edit templates that you’ve created or that have been shared with you with editing access.

  • Delete: You can delete templates you’ve created or those shared with you with edit permissions.

Setting Up Data Masking Templates

  1. Navigate to Customer Feedback Management persona app and then go to the left pane and navigate to Global Settings.

  2. Click Masking Templates.

  3. Click + Add masking template.

  4. Click Create under Select Asset Type and fill in the details:

    1. Name: Enter a name for your masking template. For example, "Age Masking" or "Credit Card Masking," to clearly indicate the type of data being protected.

    2. Description: Add a brief description for the masking template to provide context about its purpose. This will help you and others understand its intended use when managing templates later.

    3. User/User Group: Add users or user groups you want to share this template with. If the template isn’t shared, it will remain visible only to you.

  5. Go to Masking Details section and fill in the details:

    1. Approach: Choose the approach to create your masking template

      1. AI Based: Toggle to enable AI based approach and fill in the details:

        1. Entities: This template includes predefined AI-powered masking patterns that can be used to automatically detect and mask sensitive information.

        2. Exempt Words: You can specify words to exclude from masking by adding them manually or uploading a CSV/XLS file. Please note that only the words listed in the first column of the uploaded file will be considered for exemption.

      2. Regex Based: Toggle to enable Regex based. Enter the regular expression (Regex) pattern you want to use for masking. Once the template is created, the system will automatically scan all responses and mask any information that matches the specified pattern.

      3. Apply Masking For

        1. All Surveys (Open Text Field Questions): You can apply the masking template to all newly created surveys as well as existing ones. Once applied, masking will take effect on a forward-going basis, impacting only future responses.

        2. Individual Survey: You can also apply masking to individual surveys. In this case, you'll need to manually map the masking template to specific surveys or questions at the survey level.

      4. Masking Character: Choose a masking character that will be displayed in the UI to replace masked information. Available options include: -, *, $, #, X, and _. Select the one that best fits your formatting preferences or organizational standards.

      5. Type:

        1. Permanent: You can select Permanent Masking, which masks the response before it is stored. With this option, the original information is permanently removed and cannot be restored. Use this when data privacy requirements call for irreversible masking.

        2. Conditional: With Conditional Masking, only authorized users can access unmasked data. Access is controlled through user roles and permissions, specifically, users with the "View Unmasked PII Entity" permission will be able to view the unmasked information. This ensures sensitive data is protected while allowing access for approved roles.

    2. After completing the form, click Save to create and apply the masking template.

Note: Apply the template to the desired surveys, then monitor the incoming responses to ensure that sensitive information is being correctly masked as configured. In order to test it, you can create a test survey that includes a question asking for sensitive information, like age. Apply the appropriate masking rule for the specified data type. Then, submit responses containing that sensitive information and verify that the masking is applied correctly based on the defined rules. Repeat the process with additional surveys to ensure the template functions consistently across different survey configurations.

Key points to note

  • Edit : You can’t edit the template once created and it can only be deleted.

  • Historical Masking: You can’t mask the already received response implying the backfilling is currently not possible.

  • AI Masking: AI Based Masking is only supported for 5 languages. The 5 languages are English, French, Italian, German, Arabic and Urdu.

  • Support for Limited Question Type: Currently, masking applies only to open text field questions or multiple-choice questions that include a text field.

  • Respondents are not currently informed when sensitive data is getting collected.


Best Practices

  • Use clear and descriptive names for your templates to make their purposes easily identifiable and ensure better organization.

  • Grant access only to essential users who require it, ensuring that sensitive data is protected and visible only to authorized personnel.

  • Regularly review and update your masking templates to ensure they remain aligned with changing compliance regulations and organizational data protection needs.