Learning new information from sensitive data?

May new variables be created from potentially sensitive data?

You are only allowed to process sensitive personal data if you can invoke one of the 10 exceptions to the ban on processing special personal data as well as one of the six normal processing grounds. This is a prerequisite for creating new variables. In addition, data may only be processed within the purpose for which it was collected. If these conditions are met, there is a good chance that new variables may be created on the basis of sensitive personal data. It is important that you can argue why creating the variables fits within the processing purpose. In this context, it is highly advisable to create new variables only if it is beneficial to the data subjects whose data is being processed.