Run protected reveals
Security and data protection: Run protected reveals. Starts when: Sensitive field viewed. Steps: Step-up; Reveal for limited time; Receipt. Done when: Reveal receipt exists for every reveal. Rules that apply: FCA SYSC 13; UK GDPR Art 32.