In SharePoint 2010 platform workflow, there is action called "Replace item level permission " in Impersonation step, it will stop inheriting all parent permission to current item, and assign new permission to current list item.
You can create SharePoint 2010 platform workflow from SharePoint Designer, use if condition to judge if a certain label is added, then "Replace item level permission" for users on current item.
Choose start the workflow automatically when an item is created/modified.
For more detailed information, refer to the article about using a Workflow to remove or change document permissions:
https://www.c-sharpcorner.com/UploadFile/Roji.Joy/how-to-set-item-level-permission-using-sharepoint-designer-2/
https://truapps.portalfront.com/how-toset-sharepoint-item-level-permissions-based-on-column-or-field-values.html