A data security and protection system that provides monitoring, diagnostics, and analytics within an enterprise network to identify potentially sensitive data is disclosed. The system may provide one or more data stores to store and manage personal data within a network. The system may also provide one or more servers to facilitate operations using information from the one or more data stores. The system may also provide an analytics system with processing components that determines uniqueness of personal data. The system may receive personal data and population attribute data via a data access interface. The analytics system may compare the data received to determine a fraction assignment, which when further processed using at least a combination or correlation technique, may yield a detailed uniqueness factor classification and analysis of the personal data to indicate its relative sensitivity. If there is risk associated with the sensitivity of the personal data, additional security actions may be taken by the data security and protection system.