Utilize an on-the-fly encryption model where data is only decrypted and masked as needed when accessed by unauthorized users.

Apply real-time data masking at the query level, using dynamic data masking capabilities of the lakehouse platform.

Perform batch data masking operations during off-peak hours, rewriting datasets with masked versions of sensitive fields.