Tokenization is a data security technique that replaces sensitive data, such as payment card numbers, with non-sensitive tokens, reducing the risk of data exposure in case of a breach.