Interesting. Talk Talk don't feel the need to encrypt customer data. They're advising customers to provide all the same personal data to third party Noddle to monitor for suspicious activity.
I wonder if Noddle thinks it necessary to encrypt the data they're entrusted with? (And have Noddle told Talk Talk this...)