That all information in an organization must be protected equally.

The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.

There is no relationship between the two.

That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.