Reinventing Data Protection?