1 Personal data must be obtained from the person concerned or with that person's knowledge unless the proceedings would be otherwise be prejudiced or unreasonable inconvenience or expense would be incurred.
2 If personal data is obtained without the knowledge of the person concerned, that person must be notified thereof immediately. Where overriding public or private interests so require, notification may be dispensed with or postponed.