Eight Things to Consider When Classifying Your Sensitive Data