To provide a data protecting apparatus and an image forming apparatus capable of providing an operating environment to make a user aware of protection of data. When turning on power of the image forming apparatus, a system is checked, and whether or not a security kit is mounted on a ROM mounting part, or whether or not the security function is made effective, is determined. When it is determined that the security kit is mounted, or the security function is made effective, an electronic mail address of a device manager is received by starting a notifying destination setting mode and displaying a notifying destination setting screen on a display part. When it is determined that the received address can be accepted as a notifying destination and can be accepted as a transmitting destination, a security program is executed by unloading such a program from the security kit mounted on the device. Or by using the security function made effective, the security kit or the security function made effective is set in operable state.