Abstract: A method for passively classifying data in a database based on event logs stored in an event log database is described. The method includes retrieving, by a classification server, a first event log from the event log database, wherein the first event log represents a transaction involving a client device and the database; extracting, by the classification server, one or more pieces of information from the first event log to generate classification data; generating, by the classification server, a set of sensitivity scores corresponding to the one or more pieces of information, wherein each sensitivity score indicates the level of sensitivity associated with a corresponding piece of information from the one or more pieces of information; and storing, by the classification server, the set of sensitivity scores in a score database.