Justin,
I am aware that we are late with GDPR compliance, however, there is no requirement from it to encrypt the database, as long as you are able to prevent file access to it.
GDPR asks for proper actions to protect against unauthorized access to personal data (in DNN terms: mainly, but not exclusively, columns of users and userprofile table - especially if the site stores sensitive user data (medical, religious or sexual preferences) as well.. TDE is available in SQL Server Enterprise Edition only, which is not used by most sites and has its price (performance), therefore we need to use a different approach. Nonetheless, you are always advised to protect the database of your site as good as possible.

---

Cheers from Germany,
Sebastian Leupold

   

Speed up your DNN Websites with TurboDNN