Our website has some personal data that needs to be visible to both the user it belongs to and the administrators. It also needs to be encrypted.
As we want to maintain a simple system, just username and password logins, we felt the best method to do this was to encrypt and store it twice, once using the user's password (AES or similar symmetric system) and once using PGP with a public key we are already using in the system for other data.
Does storing this data encrypted in multiple ways pose a significant security risk? Does it make the data easier to recover by an attacker? Is there a better manner of achieving this while maintaining the transparency of the encryption to the end user?