A data classification and privacy repository for creating a secure and accurate database to inventory an organization's private or sensitive personally identifiable information includes at least one Meta Data Registry which links with an organization's enterprise database. The Meta Data Registry, scans, analyzes and classifies the files stored on an enterprise database and then hosts the metadata associated with those files in an indexable format. In one embodiment, the metadata is transported to a service provider/system administrator Aggregate Meta Data Repository where the metadata is validated, monitored, and assessed for risk. When a breach occurs, notifications to the appropriate individuals, companies, regulatory bodies and government agencies are automatically generated.