The Data Protection (Processing of Sensitive Personal Data) Order 2000

4.  The processing—

(a) is in the substantial public interest;

(b) is necessary for the discharge of any function which is designed for the provision of confidential counselling, advice, support or any other service; and

(c) is carried out without the explicit consent of the data subject because the processing—

(i) is necessary in a case where consent cannot be given by the data subject,

(ii) is necessary in a case where the data controller cannot reasonably be expected to obtain the explicit consent of the data subject, or

(iii) must necessarily be carried out without the explicit consent of the data subject being sought so as not to prejudice the provision of that counselling, advice, support or other service.