Which de-identification method preserves structure while removing sensitive content by replacing with placeholders?

Which de-identification method preserves structure while removing sensitive content by replacing with placeholders?

• A. Tokenization
• B. Password manager
• C. Data masking
• D. Password best practices

Answer: (C)

Data masking keeps the look and feel of data while removing sensitive content by substituting values with placeholders. The key is to maintain the original data structure—such as length, separators, and field positions—so applications and processes that rely on a specific format can continue to operate without exposing actual data. For example, a social security number like 123-45-6789 can be masked as XXX-XX-XXXX or 123-XX-6789, preserving the familiar pattern while hiding the sensitive digits. This approach is ideal for non-production environments, testing, or data sharing where realism of format is important but actual values must be protected. Tokenization also hides data with replacements, but it centers on reversible mappings to the original values and can alter the apparent format unless carefully configured. Encryption transforms data into unreadable ciphertext, which breaks the familiar structure unless decrypted, and password managers or password best-practice guidelines are not methods for de-identifying datasets.

Data masking keeps the look and feel of data while removing sensitive content by substituting values with placeholders. The key is to maintain the original data structure—such as length, separators, and field positions—so applications and processes that rely on a specific format can continue to operate without exposing actual data. For example, a social security number like 123-45-6789 can be masked as XXX-XX-XXXX or 123-XX-6789, preserving the familiar pattern while hiding the sensitive digits.

This approach is ideal for non-production environments, testing, or data sharing where realism of format is important but actual values must be protected. Tokenization also hides data with replacements, but it centers on reversible mappings to the original values and can alter the apparent format unless carefully configured. Encryption transforms data into unreadable ciphertext, which breaks the familiar structure unless decrypted, and password managers or password best-practice guidelines are not methods for de-identifying datasets.