Please, anyone chime in on this one: :-)

I am working towards allowing my users to access their application via VPN. Is there an additional need to encrypt the data that will be stored. We are not considering storing any financial data (i.e. credit card information).