As more organisations rely on AI-driven systems for various tasks, they now collect, store, and process significantly more data than before. At the same time, the introduction of AI into cybersecurity brings a new challenge: it helps improve cybersecurity, but it also introduces different risks like adversary attacks, data poisoning, and unclear algorithms. Various countries are trying to face the challenges caused by new AI trends in law and ethics. In this chapter, AI and cybersecurity are considered from the standpoint of legal duties, what organizations should do, and sustainable development objectives. It evaluates the way current legal systems, among which is the GDPR, tackle the sensitive data issues involved in AI-driven technology. The chapter analyses the law, looks at real-life events, and explains the key themes to assess what organizations should do and what ethical rules they should follow when deploying AI. Considering that the study falls under the aims of SDG 9 and SDG 16, it highlights how robust rules, clear AI oversight, and reliable cyber security are required.