I’m currently working on a utilities site for which signed up customers can access their personal information by means of an Account Page i.e. name, home address, email address, tel no. , billing info, submit readings and track usage.
The issue is an overzealous team member has proposed we look at masking out certain personal information (or other measure) within the users account page to restrict the amount of data exposed in case a customer’s account is breached. Is there any value by masking an email address or a telephone number? Credit card details will be masked.
While a customer’s personal info is of paramount importance to the company I can’t help thinking this added level of security paranoia will annoy users and ultimately ruin their experience. Shouldn’t it be enough that they’ve successfully completed the login process to gain access to their details? The team member’s ideas to view / unmask or edit personal details are for confirmation emails to be sent or similar means.