Abstract: Methods and systems for tracking masking of one or more data elements in a datastore are disclosed. The methods involve monitoring one or more masking operations on the one or more data elements in the datastore. Thereafter, one or more metadata associated with the one or more masking operations are identified. Subsequent to identifying the one or more metadata, at least a part of the one or more metadata may be recorded. This metadata may then be transmitted to the destination when a copy (full/partial) of the original data is made, enabling the same information on masking to be obtained at the destination, as at the source.

Abstract: The present invention provides a method and system for providing a view of sensitive information across an enterprise. The method includes finding locations of data stores across the enterprise and thereafter searching for sensitive information within the data stores, based on policies. Upon identifying the sensitive information, the sensitive information is optionally quarantined, masked, or encrypted, again based on policies. Information about the locations of the data stores, the sensitive information associated with the data stores, and the masking steps taken, is saved in a repository, and can be tagged. A user may then query the repository to retrieve one or more views of the sensitive information, gaining an overview of the compliance posture of the enterprise relative to one or more data compliance regulations, and for potential data exposure risk areas be able to drill down for actionable level of details.

Abstract: A method and system for de-identification of one or more data elements inside one or more tables of one or more databases is disclosed. The method includes generating one or more de-identified data elements inside the one or more databases. Upon generating the one or more de-identified data elements, the one or more data elements are updated with the one or more de-identified data elements. The updating of the one or more data elements is directly performed inside the one or more tables of the one or more databases.

Abstract: A method and system for de-identification of data comprising a plurality of data elements. The method involves identifying one or more portions of the data based on a predefined identification condition. The predefined identification condition is expressed in terms of, but is not limited to, one or more characteristics of the data. Further, one or more de-identification data elements are generated corresponding to the one or more data elements of the one or more identified portions of the data. The one or more de-identification data elements are generated based on the one or more characteristics of the one or more portions of the data. Thereafter, the one or more portions of the data are replaced with the one or more de-identification data elements respectively. As a result, the format of the one or more de-identification data elements remains identical to the format of the one or more data elements.