| (a) | - | unless otherwise provided in this Act, obtain the consent of an individual [, or in the case of a child obtain the consent of his parent or guardian] before collecting his identity information for the purposes of authentication in such manner as may be specified by regulations; and |
| (b) | - | ensure that the identity information of an individual is only used for submission to the Central Identities Data Repository for authentication. |