Personal information that is collected directly from an individual for a specific purpose (as identified in the collection statement) cannot be used for an unrelated purpose or shared with another program area, without the consent of the individual."