Prevent Payment Card numbers from appearing in AI-generated transcripts and conversations - > Create and manage data masking rules.

Retain customer interactions in accordance with company policy - > Classify and set retention policies by using Microsoft Purview.

The two requirements address different stages of information governance. Sensitive information must first be protected within the interaction itself. Dynamics 365 Contact Center data-masking rules detect configured patterns such as credit-card numbers and replace the protected data with masked characters. Microsoft documents that text masked in a conversation message is also masked in the corresponding conversation transcript. Contact Center includes predefined masking patterns for credit cards and allows administrators to define additional rules.

The second requirement concerns lifecycle governance rather than runtime visibility. Retention policy determines how long customer interaction records must remain available according to organizational and regulatory policy. In the case study, VanArsdel specifically handles PII and payment information and must prevent sensitive information from being retained in transcripts and AI-generated summaries while maintaining compliant records.

Field-level security protects Dataverse columns but does not redact sensitive values appearing inside conversation text. Sensitive-data redaction is related, but the supplied requirement specifically maps payment-card protection to configurable masking rules. Retention and classification are therefore handled independently through Microsoft Purview governance controls.

Study Guide reference: Deploy Dynamics 365 Contact Center - > Configure data protection, security, governance, and Contact Center environments.