In the EU with GDPR it is nearly impossible to skip encryption. Access control would be needed to be very stringent double so if you don't control the hardware

In the EU with GDPR it is nearly impossible to skip encryption. Access control would be needed to be very stringent double so if you don't control the hardware. If you lose that data bc not encrypting it it can cost you millions (trade-off if you lose the keys your company light be toast)