3 Types of Data That Definitely Need Encryption

Bob is a CIO. He's read a lot about privacy and encryption on the internet, but he's not too worried. When his boss asks what he's doing about security, he says that because their company doesn't hold any sensitive data, there's no need for extra protection. But is Bob right?