Guidance on Protecting Employee Bank Account Numbers in Non-Production Oracle HCM Environments

Seeking guidance on protecting employee bank account information used for Payroll direct deposit processing within our Oracle Fusion HCM non-production environments.

Current Situation

Our non-production environments (Development and Test) are refreshed from Production and contain payroll and direct deposit data, including employee banking information.

We utilize third-party implementation and managed service partners who require access to these environments for development, troubleshooting, integrations, testing, and quarterly patch validation activities.

We understand that Oracle masks employee bank account numbers on the standard front-end user interface pages, which helps prevent casual viewing of sensitive information. However, we have identified that users with appropriate reporting access can still retrieve the underlying unmasked bank account numbers through reports and extracts generated from the non-production environment.