Many companies aren't encrypting their own employees' private data, according to a Sophos survey of IT decision makers in six countries.