https://docs.google.com/spreadsheets/__pii_deleted__

https://docs.google.com/spreadsheets/__pii_deleted__: That placeholder—pii_deleted—is more than just a redaction. It represents a critical moment: someone removed Personally Identifiable Information (PII) from a shared spreadsheet to protect privacy. But simply deleting a few cells isn’t enough. If you work with Google Sheets that contain names, emails, addresses, or other sensitive data, you need a systematic approach to keep that information safe.

In this article, we’ll explore:

• What counts as PII and why it matters.

• Common risks when sharing Google Sheets.

• Step‑by‑step methods to redact, anonymize, or secure your data.

• How to use Google Sheets’ built‑in sharing settings effectively.

• Pro tips for ongoing data privacy.

Let’s ensure that the next time you share a spreadsheet, nobody has to manually replace your data with __pii_deleted__.

What Is PII and Why Should You Care?

Personally Identifiable Information (PII) is any data that can be used to identify a specific individual. Examples include:

• Full name

• Email address

• Phone number

• Physical address

• Social Security number (or equivalent national ID)

• IP address (in some contexts)

• Financial account numbers

If this information falls into the wrong hands, it can lead to identity theft, fraud, or legal liabilities. Under regulations like GDPR, CCPA, and HIPAA, mishandling PII can result in hefty fines and reputational damage—even if the exposure was accidental.

When you share a Google Sheet, you’re essentially giving access to a living document. Any viewer with edit permissions could copy, modify, or even download the data. That’s why securing PII must be a deliberate, proactive process.

The Hidden Risks of Sharing Google Sheets

Many people treat Google Sheets like a simple collaboration tool, but its default sharing model can expose sensitive data in unexpected ways:

1. Overly broad permissions – “Anyone with the link” can view or edit, even if you only intended to share with one person.

2. Comment and suggestion visibility – Old comments may contain PII that was later deleted from cells.

3. Version history – Even if you remove PII, the full edit history might still contain it.

4. Download and copy – Viewers can download the sheet, make copies, or export data, bypassing your access controls.

5. Add‑ons and scripts – Third‑party integrations might have access to the sheet’s content.

A redacted placeholder like __pii_deleted__ is often a manual, post‑facto attempt to clean up a sheet. But if you plan ahead, you can avoid exposing PII altogether.

Step 1: Assess What Data You Really Need to Share

Before you share anything, ask yourself:

• Does the recipient need to see PII to accomplish their task?
  If not, remove those columns or rows entirely.

• Can the data be anonymized?
  Replace names with “User A,” email addresses with dummy values, etc.

• Is a summary or aggregated view sufficient?
  Instead of sharing raw data, use Pivot Tables or filtered views to show only what’s necessary.

Taking a “need‑to‑know” approach dramatically reduces the risk of accidental exposure.

Step 2: Use Built‑in Google Sheets Tools to Protect PII

2.1 Redact or Anonymize Data

• Replace with placeholders – Use Find and replace (Ctrl+H or Cmd+H) to swap real PII with a standard placeholder like [REDACTED] or __pii_deleted__.
  Example: Replace all email addresses with redacted@example.com.

• Use helper columns – Create new columns that contain hashed or masked versions of sensitive data. For instance, use =LEFT(A2,1)&"****" to mask names.

• Hide columns – Right‑click a column and choose Hide column. This is a quick visual fix, but remember that hidden columns can still be accessed by anyone with edit permissions. Always combine hiding with restricted sharing.

2.2 Leverage Protected Ranges and Sheets

Google Sheets allows you to protect specific ranges or entire sheets:

1. Select the cells you want to protect.

2. Go to Data > Protected sheets and ranges.

3. Click Add a sheet or range.

4. Set permissions: choose Only you or specify which users can edit.

Pro tip: Even with protection, viewers can still see the data unless you also restrict their access level. Protected ranges prevent editing, but not viewing.

2.3 Use Filter Views for Safe Sharing

Filter views let you share a customized view of your data without affecting how others see the sheet. You can:

• Create a filter that hides columns containing PII.

• Share the filter view link instead of the main sheet URL.

Go to Data > Filter views > Create new temporary filter view, then hide the sensitive columns. Anyone who opens that filter view won’t see the hidden data—even if they have edit access to the underlying sheet.

Step 3: Set the Right Sharing Permissions

When you click Share in Google Sheets, you have three main options:

Best practice: Always use the least privilege necessary. If someone only needs to read the data, make them a Viewer. If they need to provide feedback but not alter data, use Commenter.

Link Sharing Options

When you generate a shareable link, choose carefully:

• Restricted – Only people explicitly added can access. This is the safest option.

• Anyone with the link – Anyone who obtains the URL can access. If you must use this, set the role to Viewer only, and never embed the link in public forums.

Step 4: Clean Up Version History and Comments

Even after you’ve removed PII from the current version, the Version history may still contain earlier drafts with sensitive data.

• To view version history: File > Version history > See version history.

• If you need to remove a version entirely, you can Restore a later version and then Make a copy of the cleaned sheet. Share the copy instead of the original.

Comments can also store PII. Review all comments and delete any that contain sensitive information. You can do this by clicking the comment icon and selecting Delete for each.

Step 5: Educate Your Team on Safe Sharing Practices

Data privacy isn’t just a technical setting—it’s a culture. Implement these team habits:

• Always double‑check sharing permissions before sending a link.

• Use a checklist before sharing:
  ☐ Are PII columns hidden or removed?
  ☐ Is version history clean?
  ☐ Are permissions set to “Restricted” or “Viewer only”?
  ☐ Have I removed unnecessary add‑ons that might access data?

• Create templates with placeholders (__pii_deleted__) to remind everyone where sensitive data should be removed.

What to Do If You’ve Already Exposed PII: https://docs.google.com/spreadsheets/__pii_deleted__

If you accidentally shared a sheet containing PII:

1. Immediately change the sharing settings to “Restricted” and remove the offending link.

2. Revoke access for any unintended viewers.

3. Check the version history to see who might have seen the data.

4. Notify affected individuals if required by law (e.g., GDPR breach notification).

5. Perform a post‑mortem to understand how it happened and prevent recurrence.

Conclusion: https://docs.google.com/spreadsheets/__pii_deleted__

The placeholder __pii_deleted__ is a stark reminder that PII can easily end up in shared spreadsheets—and that manual cleanup is often the last line of defense. By using Google Sheets’ built‑in protection features, carefully managing permissions, and fostering a privacy‑first mindset, you can share data confidently without exposing sensitive information.

Next time you hit that Share button, ask yourself: Does this sheet contain any PII? If the answer is yes, take the extra steps to protect it. Your recipients—and your organization—will thank you.

 

FOR FURTHER INFORMATION, VISIT: BECHTOLDRE.COM