Abstract: Legal writers have omitted to investigate and analyse the important Inter-relations between Cyber Security and Data Protection. This paper will discuss the provisions of the Protection of Personal Information Act , Act 3 of 2013 in relation to the cyber security duties of Responsible parties and the right Data Subject as well as the statutory requirement of self reporting to the Information Regulator in the event of a cyber security breach resulting in a data breach.