1. A data storage system comprising: a computing system comprising one or more hardware processors programmed to: detect a file interaction event with respect to a file on a storage device; responsive to detecting the file interaction event with respect to the file, access an encryption rule, the encryption rule including a set of rules for determining whether to encrypt files based on a set of context conditions, the set of context conditions including a geographic context; determine a set of data tokens for the file; apply the encryption rule to the set of data tokens to determine whether the file includes content designated for protection; responsive to determining that the file includes content designated for protection, determine a geographic location of the storage device; determine whether the geographic location of the storage device satisfies the geographic context for encrypting the file; and responsive to the geographic location of the storage device satisfying the geographic context, encrypting the file.