For the purposes of Article 9(2)(h) of the UK GDPR (processing for health or social care purposes etc), the circumstances in which the processing of personal data is carried out subject to the conditions and safeguards referred to in Article 9(3) of the UK GDPR (obligation of secrecy) include circumstances in which it is carried out—
by or under the responsibility of a health professional or a social work professional, or
by another person who in the circumstances owes a duty of confidentiality under an enactment or rule of law.
In Article 10 of the UK GDPR and section 10, references to personal data relating to criminal convictions and offences or related security measures include personal data relating to—
the alleged commission of offences by the data subject, or
proceedings for an offence committed or alleged to have been committed by the data subject or the disposal of such proceedings, including sentencing.