Classification-Driven Data Protection Requirements