Data protection utilizing efficient data classification

Abstract

A technique of data classification and data protection includes recording, in a lineage repository, dependence relationships between data objects and recording, in a classification repository, data classifications applicable to data objects. The data classifications each indicate a respective class of sensitive data to which data protection is to be applied. Based on receiving a classification job requesting classification of a first data object, a processor determines whether the lineage repository records a dependence relationship with a second data object. Based on determining that the lineage repository records a dependence relationship with the second data object, the processor associates in the classification repository at least a particular data classification applicable to the second data object with the first data object. The processor applies data protection applicable to the particular data classification to the first data object. In some cases, the processor may order application of classification models based on cost metrics.