Make "de-identification" status and "sensitivity" level mandatory fields

its should be very clear which data are anonymised and which are pseudonymised

also, sensitivity classification can be displayed 


both should be defined in relation to GDPR - better to have some tooltips on the fields or similar to describe what the actual classification is about