A data protection method comprising the steps of: providing data path A and data path B; each of the data paths extending between first and second stations; the first station providing data to path A; the second station receiving data initially from data path A and directing data received from data path A to a second station buffer; and, providing an uninterrupted second station output following a data fault via utilizing the second station buffer to maintain an unfaulted second station output after the data fault is detected, the first station providing data to data path B, the data provided to data path B data including resend data from a first station buffer, that replaces the faulted data, and the data from data path B bypassing at least a portion of the second station buffer to merge the resend data with data received from data path A and remaining in the second station buffer; characterised by the method further comprising the steps of: determining a time t1 equal to the time required for one bit of data to traverse path A and a time t2 equal the time required for one bit of data to traverse path B; and sizing the second station buffer, in use, such that the time required for a bit to traverse the second station buffer equals or exceeds t + r1 + r2 + r3; where t = t1 + t2; where r1 equals the time required by the second station to detect the fault; where r2 equals the time required by the first station to respond to a received request to resend data; and, where r3 equals the time required by the second station to merge the resend data with data remaining in the second station buffer. providing data path A and data path B; each of the data paths extending between first and second stations; the first station providing data to path A; the second station receiving data initially from data path A and directing data received from data path A to a second station buffer; and, providing an uninterrupted second station output following a data fault via utilizing the second station buffer to maintain an unfaulted second station output after the data fault is detected, the first station providing data to data path B, the data provided to data path B data including resend data from a first station buffer, that replaces the faulted data, and the data from data path B bypassing at least a portion of the second station buffer to merge the resend data with data received from data path A and remaining in the second station buffer; characterised by the method further comprising the steps of: determining a time t1 equal to the time required for one bit of data to traverse path A and a time t2 equal the time required for one bit of data to traverse path B; and sizing the second station buffer, in use, such that the time required for a bit to traverse the second station buffer equals or exceeds t + r1 + r2 + r3; utilizing the second station buffer to maintain an unfaulted second station output after the data fault is detected, the first station providing data to data path B, the data provided to data path B data including resend data from a first station buffer, that replaces the faulted data, and the data from data path B bypassing at least a portion of the second station buffer to merge the resend data with data received from data path A and remaining in the second station buffer; determining a time t1 equal to the time required for one bit of data to traverse path A and a time t2 equal the time required for one bit of data to traverse path B; and sizing the second station buffer, in use, such that the time required for a bit to traverse the second station buffer equals or exceeds t + r1 + r2 + r3; where t = t1 + t2; where r1 equals the time required by the second station to detect the fault; where r2 equals the time required by the first station to respond to a received request to resend data; and, where r3 equals the time required by the second station to merge the resend data with data remaining in the second station buffer.