If you're talking about general data that doesn't represent asset movements, then you can encrypt it before adding it to transactions, and a decryption key would be required to read it. But asset movement transactions themselves cannot currently be hidden from nodes in the network, because each node independently verifies each asset movement for itself.
