A small step for data protection, big leap awaited