This article investigates the need for effective cybersecurity and data protection measures in international arbitration. Reference is made to (1) relevant provisions of cybersecurity and data protection legislation in the European Union (the GDPR) and recent Asian statutes that have been influenced by it; (2) institutional arbitration rules and (3) arbitration protocols of international arbitration organisations. The article concludes with a look at recently enacted Indian legislation on the subject and an extensive list of recommendations by the authors for practical measures aimed at minimising the risks and incidence of data breaches in international arbitration.