Static Data Masking on SQL Server 2019

SQL Server 2019 introduces Static Data Masking as an alternative to Dynamic Data Masking (DDM) where masked data is permanently changed on copies of original database.

This means database administrators can create copies of databases to be used for non-productive stages (like development and test environments) with sensitive data sanitized against inappropriate use.

SQL database programmers have been using Dynamic Data Masking since SQL Server 2017. DDM applies on original data. On the other hand, Static Data Masking is new with SQL Server 2019 and applies to copies of original database.

SDM aka Static Data Masking changes the data so that original data is recoverable but DDM Dynamic Data Masking does not change original data only masks the data as it is output of the execution of SQL queries.

DDM prevents unauthorized access of original data. Wherelse SDM provides the same data to all users. System administrators or user who can apply DDM on table column data using a mask function will be able to see the original value of the data.