Purpose limitation, and storage, alteration and use of social data for other purposes

(1) The storage, alteration or use of social data by the bodies named in section 35 of the First Book is permissible where it is required for the performance of the statutory functions under this Code falling within the controller's competence, and takes place for the purposes for which the data were collected. Where no collection has preceded, the data may be altered or used only for the purposes for which they were stored.
(2) Data stored under subsection (1) may be stored, altered or used by the same controller for other purposes only where 1. the data are required for the performance of functions under legal provisions of this Code other than those for which they were collected; or 2. it is required for carrying out a particular project of scientific research or planning in the field of social benefits, and the conditions of section 75(1), (2) or (4a), first sentence are met.
(3) The bodies named in section 35 of the First Book may also store, alter or use the social data that they have collected for another purpose for developing, in particular training, validating and testing, AI models and AI systems, insofar as the data are required for this, the use of anonymised data would falsify the processing results, and the AI models and AI systems serve the performance of a statutory function under this Code by the same body. The social data must be pseudonymised. Under the conditions named in the first sentence, the bodies named in section 35 of the First Book may also collect, store, alter or use pseudonymised social data from other bodies named in section 35 of the First Book, insofar as the data transmitted stand in an objective connection with the area of responsibility of the collecting body. Data collected, stored, altered or used under the first to third sentences may be used only for the purposes named in the first sentence; the bodies under the first and third sentences must take the appropriate technical and organisational precautions for this, such as technical access restrictions to a limited number of employees, their special qualification, and a technical separation of data holdings by their differing processing purposes, and must determine an appropriate erasure period. Insofar as data under Article 9 of Regulation (EU) 2016/679 are processed, section 22(2) of the Federal Data Protection Act applies correspondingly.
(4) Storage, alteration or use of social data is permissible where it is required for the exercise of supervisory, control and disciplinary powers, of auditing, or of the conduct of organisational investigations for the controller, or for maintaining or restoring the security and functionality of an information-technology system by the Federal Office for Information Security. The same applies to alteration or use for training and examination purposes by the controller, insofar as predominant interests of the person concerned worthy of protection do not preclude this.
(5) Social data stored exclusively for purposes of data-protection control, data security, or ensuring the proper operation of a data-processing installation may be altered, used and have their processing restricted only for these purposes.
(6) Social data collected or stored for purposes of scientific research or planning in the field of social benefits may be altered or used by the bodies named in section 35 of the First Book only for a particular project of scientific research, or of planning, in the field of social benefits. The social data must be anonymised as soon as this is possible having regard to the research or planning purpose. Until then, the characteristics by which individual particulars of the personal or material circumstances of a determined or determinable person can be attributed must be stored separately. They may be combined with the individual particulars only insofar as the research or planning purpose requires this.
(7) The storage and use of the identification number under the Identification Number Act is permissible exclusively for the purpose of the unambiguous attribution of the person concerned in the rendering of administrative services under the Online Access Act, and for quality assurance under section 10 of the Identification Number Act, and for performing the functions under section 2 of the Identification Number Act.