A taxonomy-agnostic data protection framework includes a plugged-in data classification taxonomy definition having a taxonomy identifier and a set of data classification indicators. The taxonomy-agnostic data protection framework also includes a plugged-in set of data classification processing routines, and a plugged-in mapping mechanism which maps between data classification processing routines and data classification indicators. The framework facilitates efficient, accurate, and thorough implementation of data classification propagation per the plugged-in taxonomy, both within a given program and between programs that connect over a network. The framework also facilitates flexible implementation of per-taxonomy data protection actions such as deletion, redaction, encryption, anonymization, pseudonymization, hashing, or enrichment, in response to individual or combined data classification indicators. Static analysis of annotated source code determines whether data classifications are accurately and comprehensively propagated with a program.