To ensure that a subset of users can fully access the government-issued personal identification numbers stored in encrypted fields on Contact records, you must enable the "View Encrypted Data" permission in a permission set. This permission allows users to see the actual encrypted data instead of a masked value.

Steps to Enable:

Create or Edit a Permission Set:

Navigate to Setup -> Permission Sets.

Create a new permission set or edit an existing one.

Enable View Encrypted Data:

In the permission set, go to System Permissions.

Enable the "View Encrypted Data" permission.

Assign Permission Set:

Assign the permission set to the appropriate users who need to access the encrypted data.