What is a common mistake with data protection and classification in Cloud Security?

Applying the same controls to public and regulated data either wastes cost or under-protects sensitive information. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.