6. Any person collecting personal information relating to another person may collect such information only from the person concerned, unless the latter consents to collection from third persons.
However, he may, without the consent of the person concerned, collect such information from a third person if the law so authorizes.
He may also do so if he has a serious and legitimate reason and either of the following conditions is fulfilled:
(1) the information is collected in the interest of the person concerned and cannot be collected from him in due time;
(2) collection from a third person is necessary to ensure the accuracy of the information.