Data protection legislation, such as the General Data Protection Regulation (GDPR), aims to protect individuals’ personal data from illegitimate processing. As in any dispute resolution mechanism extensive processing of personal data takes place also in the context of arbitration and at various stages thereof. The broad scope of the GDPR has raised important issues concerning international arbitration, the most discussed of which being whether and how the GDPR applies to the latter. This article places the focus on specific legal consequences on international arbitration in case of non-compliance with the GDPR when it is applicable.