The Department must not collect personal information unless:

  • it is collected for a lawful purpose directly related to a function or activity of the Department; and
  • the means of collection are lawful and fair.