@deprecated_ii @jeffcliff Yes. I was taught to remove extra data, reduce access to what's needed, limit scope and availability (who and what they can see), and masking or truncate when you can't mask. For some reason, a lot of people feel totally fine putting unsalted bank account and social security numbers in a database when it doesn't need to be there, and it's not masked in any capacity. I think healthcare would have problems in particular because the core of meta analysis is looking at all of the extra info that was included in patient records to try and extrapolate an additional study/record. It's almost backwards from normal world because future research benefits from you hoarding as much as possible.