Back in the day (2006 I think it was) when I worked on a database that included employee SSN’s, that field was encrypted and the part of it that I worked on, which included searching records, reading fields and displaying on the screen, we NEVER DISPLAYED AN ENCRYPTED FIELD unless the user login ID had the privilege to view it.

JFC this is like SQL to HTML 101.