Data Protection: If It ain’t broke, don’t fix it?