In fact, the best approach is to encrypt information as quickly as possible and keep it encrypted for as long as possible until it is actually needed, an approach sometimes called end-to-end encryption.

FORBES: The Epsilon Hack Attack: Time For "SOX For Consumers"?