You are emphatically, logically, ethically, technically, securely, and in all other ways correct. Yes and: > Encrypting data while at rest (in storage) as wel

You are emphatically, logically, ethically, technically, securely, and in all other ways correct. Yes and: > Encrypting data while at rest (in storage) as well as in-transit is the way to go. All PII must be encrypted at rest at the field level. Just like how passwords are properly stored. This is not rocket science. The book Translucent Databases demonstrates this technique for common use cases. Highest recommendation. https://www.amazon.com/Translucent-Databases-Peter-Wayner/dp/0967584418 https://www.amazon.com/Translucent-Databases-Peter-Wayner/dp...