Create a pipeline to de-identify the email field by using recordTransformations in Cloud Data Loss Prevention (Cloud DLP) with masking as the de-identification transformations type.

Load the booking and user profile data into a BigQuery table.

Create a pipeline to de-identify the email field by using recordTransformations in Cloud DLP with format-preserving encryption with FFX as the de-identification transformation type.

Load the booking and user profile data into a BigQuery table.

Load the CSV files from Cloud Storage into a BigQuery table, and enable dynamic data masking.

Create a policy tag with the email mask as the data masking rule.

Assign the policy to the email field in both tables.

Assign the Identity and Access Management bigquerydatapolicy.maskedReader role for the BigQuery tables to the analysts.

Load the CSV files from Cloud Storage into a BigQuery table, and enable dynamic data masking.

Create a policy tag with the default masking value as the data masking rule.

Assign the policy to the email field in both tables.

Assign the Identity and Access Management bigquerydatapolicy.maskedReader role for the BigQuery tables to the analysts.