Data has become central in various activities during armed conflict, including the identification of deceased persons. While the use of data-based methods can significantly improve the efficiency of efforts to identify the dead and inform their families about their fate, data can equally enable harm. This article analyzes the obligations that arise for States regarding the processing of data related to the identification of deceased persons. Despite being drafted long before the “age of data”, several international humanitarian law (IHL) provisions can be considered to give rise to obligations which protect those whose data is used to identify the dead from certain data-based harms. However, some of these protections are based on a data protection-friendly interpretation of more general obligations, and many only apply in international armed conflict. Against this background, it is suggested that further analysis on how international human rights law and domestic or regional data protection law could help to strengthen the case for data protection where IHL does not contain specific duties to protect data would be desirable.