Mechanisms exist to ensure information is directly collected from the data subject, whenever possible.