My understanding is that many businesses choose to encrypt their data because many laws requiring disclosure of data breaches have an exception for encrypted da

My understanding is that many businesses choose to encrypt their data because many laws requiring disclosure of data breaches have an exception for encrypted data (few of these laws have a good definition of 'encrypted'). Businesses are encrypting in a way that legally mitigates the PR risk, and not particularly paying attention to the actual security risks.