Data Masking

2.17 Data Masking

Data masking screen in Oracle Financial Services Lending and Leasing facilitates to mask Personally Identifiable Information (PII) displayed in the application to safeguard the sensitive and confidential information while protecting them from offenders.

As part of the product installation, standard set of identified fields (seed data) which is likely to contain either organization / customer PI information are provided for data masking in disabled status. Based on need, the required fields can be enabled and masked for specific user responsibility in the Data Masking screen. Also if there are additional PII fields identified for masking, the same can be pooled into the system using input file processing method and masked using Data Masking screen.

The data masking process involves the following steps:

Identify and enable field(s) (seed data) to be masked
Select user responsibility for whom the data has to be masked
Execute batch job to create data redaction policy
Compile the data redaction policy
(Optional) Process user identified PII data for masking.

The following table indicates the standard pre-defined fields (seed data) identified in respective screens/tabs which can be readily masked using the Data Masking screen.

Table 2-74 Data Masking

Tab Name	Field Names
Origination
Applicant	First Name, MI, Last Name, Family Name, Birth Dt, Nationality, National ID, Visa #, Passport #, License #, Marital status, Mother's maiden name, Passport number, Gender, Language, Dependents, Ethnicity, Disability, Email, Race, and Education.
Applicant > FATCA	Birth Place, Birth Country, and Permanent US Resident Status.
Applicant > Power of Attorney	Holder Name, Address, Country, Nationality, and Telephone Number.
Applicant	Active Military Duty, Military Effective Date, Duty Order Number, and Active Military duty Release date.
Addresses	Country, Postal Address Type, Address #, Street Pre, Street Name, Street Type, Street Post, Apt #, Address 1, Address 2, Address 3, Zip, Zip Extn, City, State, and Phone.
Telecoms	Phone and Extn
Employments	Employer, Country, Address #, Address 1, Address 2, Zip, Zip Extn, City, State, Phone, Extn, Income Amt - Stated, Income Amt - Actual, Salary - Stated, Salary - Actual, and Title.
Applicant > Financials	Type, Source, Account #, and Currency.
Existing Accounts	Account # and Title.
Servicing
Customer	Name, Birth Dt, Nationality, National ID, Visa #, Passport #, License #, Marital status, Mother's maiden name, Passport #, Language, Disability, Email, and Education.
Customer > FATCA	Birth Place, Birth Country, and Permanent US Resident Status.
Customer > Power of Attorney	Holder Name, Address, Country, Nationality, and Telephone Number.
Customer	Active Military Duty, Military Effective Date, Duty Order Number, and Active Military duty Release date.
Addresses	Country, Postal Address Type, Address #, Street Pre, Street Name, Street Type, Street Post, Apt #, Address 1, Address 2, Address 3, Zip, Zip Extn, City, State, Phone, and Address.
Employments	Employer, Country, Address #, Address 1, Address 2, Zip, Zip Extn, City, State, Phone, Extn, and Title.
Assets tab
Assets	Identification #, Lien Status, Lien Event Date, Second Lien Holder, Comments, Lien Release Entity, and Entity Name.

Masking Format

Oracle Financial Services Lending and Leasing supports only complete masking (not partial) of both factory shipped and user identified PII data. On masking, the masked data is presented in same structural format to facilitate internal validations. The below table indicates the default values used for masking fields based on data type:

Table 2-75 Masking Format

Data Type	Masking Value
NUMBER	9
VARCHAR	X
DATE	31/12/9999
Phone number	For UI represented format - 000-000-0009 (Masked with 0’s and last digit as 9) and for generic, masked as 9999999999
Email	xxxxx.xxx@<domain>.com

Note:

It is recommended to avoid modifying masked data for user(s) with masked responsibility. However, while editing masked data (if permitted) requires to input full data replacing the masked characters. For example, editing a masked SSN (xxx.xx.xxxx) requires to specify all nine digits of SSN and not just the last four digits.

This section consists of the following topics:

Parent topic: Administration System