32 CFR 806b.10 - How to collect personal information.
Collect personal information directly from the subject of the record whenever possible. Only ask third parties when:
(a) You must verify information.
(b) You want opinions or evaluations.
(c) You can't contact the subject.
(d) You are doing so at the request of the subject individual.