"Ensure non-production environments do not contain production data"
Yeah right, so how can you reproduce some bugs that only appear on production data, on other environment that is not production?
Yeah right, so how can you reproduce some bugs that only appear on production data, on other environment that is not production?
If you really need more context to reproduce a bug, you can always try to anonimize the data before moving it out of the production environment, and delete the anonimized data from the test environment once the investigation finishes just to be on the safe side.