A method of transmitting data from an image forming apparatus, the method including: receiving identification information of a destination of the data; determining whether to transmit the data to the destination corresponding to the received identification information based on a security policy of the image forming apparatus; and transmitting the data to the destination in response to the destination being determined to be a destination to where the data is allowed to be transmitted, based on the security policy.