One of the $10$ Generally Accepted Privacy Principles concerns security. According to GAPP, what is the nature of the relationship between security and privacy?

Security is a necessary, but not $$ufficient$,$ precondition to protect privacy.

Privacy is a necessary, but not sufficient, precondition to effective security.

Privacy is both necessary and sufficient to effective security.

Security is both necessary and sufficient to protect privacy.