Masking Customer Tax ID Number

Summary

Need ability to mask or hide Customer TIN on UI by role

Content

Our internal audit organization has suggested our Customer Tax Identification Number (TIN) should be treated as sensitive information. In some cases, this number could be an independent contractor using SSN for example.

What is the general process of hiding or masking a field in production? Can this field level security be handled with Expression Language? I have seen documentation on Taleo and HCM "Field Level Security" but I am unaware of the same in ERP.

Also we are aware of non-prod masking, but this is a production issue.