1. A method, comprising: identifying, using a processor of a computer, one or more objects in a database that are accessed by a statement; determining that at least one object among the identified one or more objects contains sensitive information by checking an indicator for the at least one object; identifying one or more security policies associated with the at least one object; and implementing the identified one or more security policies for the at least one object to delete sensitive information.