The problem
You want to mask/obfuscate the data on sandbox created for CPQ implementation or UAT. This is in order to provide the security for the data. Within the GDPR regulations in place, having this extra security precaution is helpful.
The solution
Use the Salesforce Data Mask. That is a tool that Out Of The Box will mask the private and sensitive data on the sandboxes you create. Nice and easy!
Here is the link to the documentation:
And there is even a Trailhead Module for that 🙂