In Chapter 2.10.3 Byte Enables, does the following description mean that "the Data value must be 0 when corresponding BE is 0"?
Yes, that's correct. If a BE value is zero, then the corresponding byte of the Data field must also be driven to 0x0. Amongst other things, this helps with output determinism, reduces power usage slightly, and provides additional protections around security.