To many applications still have SA rights with an easily guessed password. So encryption doesnt really help much other than the backup files now needing a certificate for the restore. These same companies still dont believe in encrypting data like bank account information, personal/customer personal data. Just waiting for the UK media to have afield day.

I have worked in too many places where the IT staff let alone the Business believe that an NDA will be adequate in protecting all of their data.