I am working on a FDA validated system and I have been told we have to start alter data when we perform database refresh from Prod to Dev environments to prevent developers from reading employee data.

has anyone experienced any similar situations? how have you altered the tables you refreshed?