Azure Cosmos DB just gained a public preview of Dynamic Data Masking — a policy-driven feature that shields sensitive data on the server side. It lets teams enforce data privacy without touching app logic or rewriting queries, bringing enterprise-grade protection a step closer to default.