In the forthcoming Enterprise version of MultiChain it will be possible to defined read-permissioned streams, where only certain addresses are able to see the data published in certain streams. This uses off-chain data, tied down by hashes on the blockchain, because inevitably each node can see the full contents of the blockchain itself. We'll be releasing more information about this shortly.