Mechanisms exist to apply data masking to sensitive/regulated information that is displayed or printed.
Does the organization apply data masking to sensitive/regulated information that is displayed or printed?