Column masking is only applied to SELECT statements, but it is enforced regardless of which client is used to access the database, whether it’s SQL*Plus, a .NET application, or some other tool.