There are two groups of users. In a company, where one group Is allowed to see credit card numbers, while the other group Is not. Both are accessing…

The most effective and efficient way to handle different access levels to credit card numbers within

the same application is to obfuscate the credit card numbers whenever a user who does not have the

right to see them accesses the data. Option C ensures that sensitive information is masked for

unauthorized users without the need for maintaining multiple data copies or complex encryption

schemes. This approach aligns with data minimization and access control principles discussed in the

IAPP’s CIPT materials, which advocate for minimizing exposure of sensitive data.