Concept Link IconServiceXG Basics

Sensitive Data Control

Create data groups to mask sensitive employer and member data in tabs, windows, navigation panes, tables, etc.

When data is masked, it displays as .

  • You can mask: PHI (diagnosis and procedure codes), SSNs, banking information, and/or salary information.

  • Use the Authorization Profile Editor to assign sensitive data controls to profiles. See User profiles for instructions.

Important! In the tabs, windows, etc. where data displays masked, operators can’t edit the data even if they have permission to add, update, or delete the data in that function.
Note: The masking doesn't apply to Classic session function tabs, but it does to the Pending and Recent Functions areas on the Classic session navigation pane.

Additionally, masking doesn't apply to data contained in AUX files, which users can access via the Other Member Information, Other Dependent Information, and Other Employer Information functions.

Go to: Home > System Administration > Security > Sensitive Data Control.

Add a sensitive data control

Press Enter to move through the fields or after typing a command at the Select line.

  1. In the Control Key field, type a name for the sensitive data control. For example, if the control will mask all types of sensitive data, you could call it MASKALL.

    * indicates a required field

    FieldDescription
    Control KeyA name for the sensitive data control. For example, if you wish to create a control that masks all sensitive data, you could call the control MASKALL.
    Description

    A description of the sensitive data control, for example, MASK ALL SENSITIVE DATA.

    Mask PHI

    Indicates if PHI is masked in tabs, windows, navigation panes, tables, etc. for this profile. PHI refers to diagnosis and procedure codes (on health screens) and are completely masked.

    Mask SSN

    Indicates if the first five digits of the member or dependent SSN or SIN are masked in tabs, windows, navigation panes, tables, etc. for this profile. Operators will see only the last four digits.

    Note: The SSN or SIN won’t be masked in the Advanced search window—search criteria area.

    Mask Bank Info

    Indicates if bank routing and account numbers are completely masked in tabs, windows, navigation panes, tables, etc. for this profile.

    Mask Salary/Comp

    Indicates if salary and compensation information is completely masked in tabs, windows, navigation panes, tables, etc. for this profile.

  2. At the message, type Y to confirm the action.

  3. Type a description for the sensitive data control.

  4. For each of the options 2 through 5, type Y to mask the data or N (or leave blank) to show the data (no masking).
  5. At the Select line, type F to file the changes.

After you've created sensitive data controls, assign them to profiles with the Authorization Profile Editor. See Set up a user profile

Update a sensitive data control

Press Enter to move through the fields or after typing a command at the Select line.
  1. In the Control Key field, type the name of the sensitive data control to update.

  2. At the Select line, type 1 to update the description or the sequence numbers 2 through 5 to change the value.

    * indicates a required field

    FieldDescription
    Control KeyA name for the sensitive data control. For example, if you wish to create a control that masks all sensitive data, you could call the control MASKALL.
    Description

    A description of the sensitive data control, for example, MASK ALL SENSITIVE DATA.

    Mask PHI

    Indicates if PHI is masked in tabs, windows, navigation panes, tables, etc. for this profile. PHI refers to diagnosis and procedure codes (on health screens) and are completely masked.

    Mask SSN

    Indicates if the first five digits of the member or dependent SSN or SIN are masked in tabs, windows, navigation panes, tables, etc. for this profile. Operators will see only the last four digits.

    Note: The SSN or SIN won’t be masked in the Advanced search window—search criteria area.

    Mask Bank Info

    Indicates if bank routing and account numbers are completely masked in tabs, windows, navigation panes, tables, etc. for this profile.

    Mask Salary/Comp

    Indicates if salary and compensation information is completely masked in tabs, windows, navigation panes, tables, etc. for this profile.

  3. At the Select line, type F to file the changes.

Delete a sensitive data control

Press Enter to move through the fields or after typing a command at the Select line.
  1. In the Control Key field, type the name of the sensitive data control to delete.

  2. At the Select line, type D to delete the item.

  3. At the message, type Y to confirm the action. Enter N to return to the Sensitive Data Control screen.

  4. After selecting Y, the control is deleted from Sensitive Data Control.

Concept Link IconSEE ALSO