v.25.12New Feature

Data masking for Row-level security

Data masking for Row-level security (only available in ClickHouse Cloud). Add data masking policy parser to support it in clickhouse-client. #90552 (pufit).
Introduces data masking support for Row-level security policies, enabling sensitive data to be masked dynamically within ClickHouse Cloud environments.

Why it matters

This feature addresses the need to protect sensitive information by applying data masking as part of row-level security, enhancing privacy and compliance without altering underlying data. It allows users to restrict visibility of sensitive columns based on access policies, improving security controls in multi-tenant or regulated environments.

How to use it

Data masking policies can be defined and managed within ClickHouse Cloud. The clickhouse-client now includes a parser that supports these data masking policies, allowing users to configure and apply masking rules as part of their row-level security setups.