In your role as a Databricks Certified Data Engineer - Associate, you are tasked with enhancing data governance within an Azure Databricks environment to ensure data privacy and protect sensitive data assets. The organization requires a solution that not only secures data but also complies with GDPR and other data protection regulations. Considering the need for scalability and cost-effectiveness, which of the following approaches would you recommend? Choose the best option that includes enabling Unity Catalog, utilizing service principals for secure access, implementing data masking for sensitive data, and enforcing strict data access policies. (Choose one correct answer)