Data in transit is data moving between systems — over networks. Protected by: TLS/HTTPS, VPNs, IPSec, SSH, SFTP, S/MIME.
TLS is the primary protection for web traffic. VPNs encrypt all traffic at the network layer. Never send sensitive data via unencrypted email or HTTP. Even internal traffic should be encrypted (zero trust).