A public sector agency must, in collecting personal information, collect the information directly from the individual to whom the information relates unless--
(a) the individual has authorised collection of the information from someone else, or
(b) in the case of information relating to a person who is under the age of 16 years--the information has been provided by a parent or guardian of the person.