[DerBesserWisser]

IMHO the problem is not encryption but to wide access rights ("Marketing needs access") and bulk access ("get me all customer data").