Is there a security rule on correct masking for sensitive information? Let's say we want to use prod data in our UAT environment. We're thinking of creating a masking logic when we transfer prod data to UAT. Changing the fields would look something like this:
Names: e.g. John Doe to JXXXXXe
Mobile Number e.g. +1-234-56799101 to X-X-XXXX9101
Birthdate e.g. 05/23/1987 to 05/XX/XXXX
Is there a standard on acceptable masking logic?