Abstract: A method performed by a database processing computer is provided. The method includes identifying a plurality of sensitivity levels associated with a plurality of data values stored in a database, and determining which of the plurality of sensitivity levels are associated with which of the plurality of data values. The method further includes generating a sensitivity-density data structure based on which of the plurality of sensitivity levels are associated with which of the plurality of data values. In this regard, the sensitivity-density data structure indicates density of sensitive data that is stored in the database for each of the plurality of sensitivity levels. In embodiments disclosed herein, the method also includes determining whether to perform a remedial action associated with controlling access by client devices to at least one of the plurality of data values based on whether the sensitivity-density data structure satisfies a defined rule.