There is provided mechanisms for handling time shifted data streams in a substation network. A method is performed by an IED. The method comprises receiving a respective data stream from at least two time synchronized data sources in the substation network. The method comprises blocking, upon detecting a time shift between the data streams resulting from one of the data sources losing its time synchronization and until a configured time amount has expired, a protection function in the substation network from acting based on the data streams.