This paper demonstrates the importance of machine-interpretable databases for the functioning of the electronic risk management systems of the German tax authorities. The existing databases can be used for a variety of purposes or linked with each other. Therefore, taking into account the data protection law principle of purpose limitation, the legal bases under Union and constitutional law for the (further) processing of the data are the focus of the explanations.