(1) COLLECTION FROM DATA SUBJECT OR VERIFICATION. An authority that maintains personally identifiable information that may result in an adverse determination about any individual’s rights, benefits or privileges shall, to the greatest extent practicable, do at least one of the following:
(a) Collect the information directly from the individual.
(b) Verify the information, if collected from another person.