An embodiment of the invention discloses a data protection method and a mobile terminal. The method comprises the steps of: obtaining an instant communication message processed by the mobile terminal; if detecting that the instant communication message includes private information, obtaining face images in an environmental image through a large-view-angle lens of the mobile terminal, wherein the private information at least includes one or more of account information, password information and identity information, and the obtained face images at least include a face image of a mobile terminal owner; and if judging that the obtained face images include a strange face image, performing privacy protection operation. According to the embodiment of the invention, the privacy information is protected when the mobile terminal detects that the instant communication message includes the private information and judges that the face images in the environmental image include the strange face image, so that the instant communication security of the mobile terminal is improved and the user experience is enhanced.