TDE and encryption of personal identifying columns should be standard database design practice today, and the keys held only by a handful of need to know executives. A sysadmin, even the resident God Of Data, doesn't need to read credit card numbers to perform daily maintenance operations on the Customer database and keep it running.
Likewise, the NSA doesn't need to read our email and eavesdrop on phone conversation without a warrant just to keep us protected from terrorists.