Masking or redacting specific sensitive fields — an SSN, a salary figure, a diagnosis code — within an otherwise-permitted record before it reaches the assembled context, rather than an all-or-nothing decision at the record level.