How are privacy and security described in Appendix J?

• A. Privacy and security are complementary and mutually reinforcing
• B. Privacy and security are unrelated
• C. Security is a subset of privacy
• D. They are in conflict

Answer: (A)

Privacy and security are described as complementary and mutually reinforcing. In Appendix J, privacy sets the expectations for how data about individuals is collected, used, shared, stored, and erased, including user rights and consent. Security provides the protections—such as access controls, authentication, encryption, monitoring, and incident response—that enforce those privacy requirements and safeguard data from unauthorized access or disclosure. When privacy considerations drive how data is handled, security measures are tailored to protect that data appropriately; in turn, robust security makes it credible to uphold privacy commitments. This integrated view means stronger privacy is achieved through stronger security, and strong security supports the trust and compliance privacy aims to achieve. The other descriptions don’t fit because they either ignore the link between privacy and security, treat one as simply part of the other, or imply a conflict between them, which Appendix J does not endorse.