A computer-implemented method for establishing and/or adjusting user access privileges to electronic data items, the method comprising: receiving, by a computing system (200; 400), a plurality of electronic data items wherein the plurality of electronic data items includes an electronic document having a document security classification and comprising text based content data and a plurality of attributes; scanning, by the computing system, the electronic document to identify text based content data associated with a particular document security classification; generating, by the computing system, a first inference model based on the identified text based content data; receiving, by the computing system, metadata (114; 116) associated with respective electronic data items of the plurality of electronic data items; scanning, by the computing system, the electronic document for metadata corresponding to a particular attribute associated with the particular document security classification; generating, by the computing system, a second inference model (118; 120) based on (i) the received metadata data associated with the respective electronic data items, and (ii) the particular attribute; determining, by the computing system and based on the first inference model, a first weight parameter associated with the content data and based on a first accuracy metric associated with the first inference model; determining, by the computing system and based on the second inference model, a second weight parameter associated with the metadata and based on a second accuracy metric associated with the second inference model; generating, by the computing system and based on a particular combination of the weight parameters a classification model for determining a security classification of at least one further electronic data item; using the classification model to determine a security classification of at least one further electronic data item; establishing and/or adjusting at least one user access privilege to the at least one further electronic data item based on the security classification; and encrypting the at least one further electronic data item based on the security classification. receiving, by a computing system (200; 400), a plurality of electronic data items wherein the plurality of electronic data items includes an electronic document having a document security classification and comprising text based content data and a plurality of attributes; scanning, by the computing system, the electronic document to identify text based content data associated with a particular document security classification; generating, by the computing system, a first inference model based on the identified text based content data; receiving, by the computing system, metadata (114; 116) associated with respective electronic data items of the plurality of electronic data items; scanning, by the computing system, the electronic document for metadata corresponding to a particular attribute associated with the particular document security classification; generating, by the computing system, a second inference model (118; 120) based on (i) the received metadata data associated with the respective electronic data items, and (ii) the particular attribute; determining, by the computing system and based on the first inference model, a first weight parameter associated with the content data and based on a first accuracy metric associated with the first inference model; determining, by the computing system and based on the second inference model, a second weight parameter associated with the metadata and based on a second accuracy metric associated with the second inference model; generating, by the computing system and based on a particular combination of the weight parameters a classification model for determining a security classification of at least one further electronic data item; using the classification model to determine a security classification of at least one further electronic data item; establishing and/or adjusting at least one user access privilege to the at least one further electronic data item based on the security classification; and encrypting the at least one further electronic data item based on the security classification.