Dan,
Variables and Participant Data are similar, but not the same thing.
Participant Data is metadata that is attached to the interaction. It's purpose is to either pass data between Flows or to provide insight into what happened. It is visible when you look at an Interaction's details. You access it from Architect using Get / Set Participant Data steps.
Variables are local storage scoped to the Flow, Task or Script. Once the context the variable is scoped to ends, the variable is no longer visible / available.
Now, Variables can be marked as "Input" and / or "output". This provides a method to pass data between contexts.
If a Script has a variable defined as "Input" then when you use the "Screen Pop" tool in Architect to define that Script, you are asked to provide values for those variables. These are not, however, written to Participant Data and so are not visible once the Script ends. So, using your example, if the Script has a variable defined as "Input" and that is tied to a control on the Script and then the Screen Pop is configured to pass the Architect variable (in this case Flow.Surname) in to that variable, then No Participant Data is involved.
If a Script has a variable defined as "Output" then when the script ends, it's value will be written to a Participant Data Attribute of the same name (which gets created if it doesn't already exist.)
A lot of what you are asking for depends on who you are trying to hide this from (and why).
Many of the answers talk about redacting Participant Data (since that's what you asked about) which would prevent anyone from looking at the interaction after it has ended and seeing the PII stored within the Participant Data. The easiest (and probably most secure) method would be to not write it to Participant Data in the first place (unless it needs to be set for other reasons.)
There is an additional curve-ball though! The new feature that allows you to "reply" a Flow's execution will reveal the values of all variables as they were at the time. If this is a regulatory / compliance thing, you also have to consider who has permission to replay and execution (and also which Flows are configured to record that information).
I hope that makes sense. Let me know.
------------------------------
Paul Simpson
Views expressed are my own and do not necessarily reflect those of my employer.
------------------------------
Original Message:
Sent: 07-30-2024 02:53
From: Dan Wong
Subject: Inbound: Agent Script - Participant Data to be viewed but removed / masked after the interaction has ended (PII)
Thanks Paul for your reply
Believe that's what we're doing.
We're storing customers information as variable / PD so we can use within the script (Eg, Flow.Surname).
As it's needed in the script, unable to mask / update until after it's delivered to the agent.
Original Message:
Sent: 7/29/2024 3:21:00 PM
From: Paul Simpson
Subject: RE: Inbound: Agent Script - Participant Data to be viewed but removed / masked after the interaction has ended (PII)
Have you considered passing the data in to the Script using Script Variables defined as "Input" and then setting them in the Script Pop Architect action?
The only other thing I could suggest is explicitly overwriting the PD values.
HTH
------------------------------
Paul Simpson
Views expressed are my own and do not necessarily reflect those of my employer.
------------------------------