This paper examines the relevance of applying the 3-2-1 backup rule for data protection at the Université des Mascareignes (UdM). Quite often, system administrations warn university staff of the need to back up their existing data in the face of system reconfiguration or transition to newer versions of software. Inadvertently and without proper preparation, data is lost without the possibility of retrieval. This might cause frustration from staff having used such data for long and make them have recourse to burdensome re-creation of data. To better address this imminent problem, this paper calls for a policy to implement the 3-2-1 rule for better data security. A case study approach is highlighted to illustrate key situations including the current setting up of an information system. It is suggested that the classic rule has advantages while certain challenges of its implementation must equally be addressed.