§ 7 DSG LSA
Purpose limitation, change of purpose
(1)The purpose of processing personal data shall also include processing 1. for the exercise of supervisory and control powers, for audit purposes and for the conduct of organisational reviews, and 2. for training, further education, continuing education, teaching and examination purposes, insofar as the legitimate interests of the data subject in the confidentiality of the data do not prevail.
(2)Processing of personal data for a purpose other than that for which the data were collected shall be permissible to the extent and for as long as 1. the data processing is necessary to avert substantial detriment to the common good or another present substantial danger to public safety, 2. the data processing is necessary for the prosecution of criminal offences or administrative offences, for the enforcement or execution of sentences or of measures within the meaning of Section 11(1), number 8, of the Criminal Code, or of educational measures or disciplinary measures within the meaning of the Youth Courts Act, or for the enforcement of fines, 3. the data processing is necessary to avert a serious impairment of the rights and freedoms of another person, 4. the data processing is necessary to verify information provided by the data subject because there are factual indications of its inaccuracy, 5. the data processing is necessary for the protection of the data subject and there is no reason to assume that the data subject would refuse consent if aware of the other purpose, 6. the data can be taken from generally accessible sources or the data processing body would be entitled to publish them, unless the legitimate interests of the data subject manifestly oppose the data processing, or 7. it is obvious that the processing of personal data by public bodies in the course of the performance of their tasks is in the interest of the data subject and there is no reason to assume that the data subject would refuse consent if aware of the other purpose.
(3)Paragraph 2 shall not apply to personal data that 1. are subject to professional secrecy or a special official secret and have been transmitted to the data processing body by the person bound to secrecy in the exercise of his or her professional or official duty, or 2. are stored exclusively for the purposes of data protection supervision, ensuring data security or the orderly operation of a data processing system.
(4)The data subject shall not be informed pursuant to Article 13(3) and Article 14(4) of Regulation (EU) 2016/679 of the data processing pursuant to paragraph 2, numbers 1 to 4, insofar and for as long as the purpose of the processing would thereby be jeopardised. zur Einzelansicht § 7