§ 4 SächsDSG
Lawfulness of the processing of personal data for a different purpose
(1)Processing for a purpose other than that for which the personal data were collected shall be lawful where
(2)The processing of special categories of personal data within the meaning of Article 9(1) of Regulation (EU) 2016/679 for a purpose other than that for which the data were collected shall be lawful where the conditions set out in paragraph 1 are met and an exception pursuant to Article 9(2) of Regulation (EU) 2016/679 applies.
(3)Where personal data processed on the basis of legal provisions within the meaning of Article 6(1)(c) or (e) of Regulation (EU) 2016/679 are linked to further personal data of the data subject or of third parties in such a way that separation is not possible or is only possible with disproportionate effort, the transmission of such data to public bodies shall also be lawful, unless the rights and freedoms of the data subject or other persons in maintaining the confidentiality of such data manifestly outweigh the interest in transmission; any further processing of such data shall be unlawful.
(4)Where the transmitted data are subject to professional secrecy, their processing for a different purpose within the meaning of paragraphs 1 and 2 shall only be lawful where the person or body bound by the obligation of confidentiality has given consent.
(5)By derogation from Article 13(3) and Article 14(4) of Regulation (EU) 2016/679, the data subject shall not be informed about the data processing pursuant to paragraph 1, numbers 1 to 3, insofar as and for as long as such information would jeopardise the purpose of the processing.