A data engineer scans and masks sensitive fields such as phone numbers and ID numbers before copying production database data into test or analytics environments, then verifies the masking result.
Hand-written SQL queries to find fields, scripts or built-in database functions to mask, and manual checklists to confirm.
Copying production data straight into test environments creates compliance and leak risk, and finding sensitive fields table by table by hand is slow and easy to miss.