---
schema_version: "1"
id: d905966dd53117cbaadfcad10d3db0336000c4d6284b9e834b576b002390617e
title: Create a Dynamic Data Masking Policy for Unstructured Data (Beta)
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_create_unstruc_dynamic_data_masking_policy.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_create_unstruc_dynamic_data_masking_policy.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 3aa1498ea1d8a90a97562804818828cfaa4321a02806988f9bcd40113c82a662
description: Define a masking policy to protect sensitive information in unstructured files such as PDFs and text documents.
products:
  - Data 360
release: "264"
---
# Create a Dynamic Data Masking Policy for Unstructured Data (Beta)

Define a masking policy to protect sensitive information in unstructured files such as PDFs and text documents.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All Editions</strong> supported by Data 360. See <a href="https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&amp;release=264.0.0&amp;type=5" title="Data 360 is available in several supported Salesforce editions. Some Data 360 features also require additional licenses.">Data 360 edition availability</a>.</td></tr></tbody></table>

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/images/icon_note.png)

Note Content tagging and unstructured data masking is a pilot or beta service that is subject to the Beta Services Terms at [Agreements - Salesforce.com](https://www.salesforce.com/company/legal/agreements/) or a written Unified Pilot Agreement if executed by Customer, and applicable terms in the [Product Terms Directory](https://ptd.salesforce.com/). Use of this pilot or beta service is at the Customer's sole discretion.

 
| User permission needed |   |
| --- | --- |
| To create a dynamic data masking policy: | Data Cloud Architect permission set |

To create a dynamic data masking policy:

1. In Data Cloud, go to the Data Governance tab.
2. In the left pane, click **Policies**.
3. Click New, select **Dynamic Data Masking**, and click **Next**.
4. In Policy Builder, enter a unique policy name and an optional description. The policy API name is automatically filled based on your policy name, but you can change it.
5. Click **Next**.
6. Select Rules, and select the resources to protect. In the Resource dropdown, select **String in Unstructured Data**.
    
    By default, the system applies the rule across all data spaces. As new data spaces are added, the system rules apply to their resources.
7. To restrict policies to specific data space scopes, click **Customize Scope**, deselect **Apply to the resources in all Data Spaces in Data Cloud**, and select the desired data spaces.
8. Click **Save**.
9. Select the action to take on the resource. From the Action dropdown, select **Mask**.
10. Select one of these masking methods:
    - Redaction - Replace masked characters with X. Select the number of characters to redact.
    - Nullification - Replace data with NULL.
11. Define the conditions when this action takes place.
    
    For example, set a condition to trigger the rule if the `Financial Data.Account Info` tag is present in the object. Or set a condition if the `Personal Data.Digital Identifier.Browsing History` tag isn't present in the object.
12. To apply the policy to users, select **Users**.
13. Apply the policy to all users or to users who meet specific AND and OR conditions. The conditions are based on custom permissions assigned to users.
14. To add more conditions, click **Add Condition**.
15. You can also group your conditions into different sets and use the OR operator to take action when a group meets the rule conditions. To add a group, click **Add Group**.
16. Click **Save and Activate**.