I've worked for organizations where you could be disciplined for not stripping out certain data from a database before using it for testing - primarily SSN and

I've worked for organizations where you could be disciplined for not stripping out certain data from a database before using it for testing - primarily SSN and email addresses, but it's absolutely necessary at times where using real data will allow you to identify the cause of an issue whereas troubleshooting blindly on test data could take 10 times as long.