ICO launches investigation after serious privacy breach
A former healthcare worker has received a formal caution after attempting to access and sell the medical records of Catherine, Princess of Wales. The case was handled by the Information Commissioner’s Office after concerns were raised in March 2024 about improper access to sensitive patient data.
The incident took place at the London Clinic in London, where the Princess was treated for abdominal surgery earlier in 2024.
Attempt to access private medical data
Investigators found that a staff member at the private hospital tried to view the Princess’s medical notes without permission. The worker also attempted to sell the information for money.
The Information Commissioner’s Office confirmed that this was a deliberate misuse of highly sensitive personal data.
ICO response and legal action
The Information Commissioner’s Office stated that a caution was the most suitable outcome for the case. It described the incident as serious but isolated.
Ian Hulme, a senior official at the ICO, said patients must be able to trust that their medical information remains secure and protected from misuse.
Hospital statement
The London Clinic said it had fully cooperated with the investigation. The hospital also said the case did not reflect any wider problems in its systems or operations.
Timeline of Princess of Wales health updates
The Princess of Wales had abdominal surgery in January 2024. She stepped back from public duties during her recovery period.
Later that year, she confirmed she had been undergoing cancer treatment. At the start of 2025, she announced she was in remission and gradually returned to public engagements.
She recently attended the Order of the Garter service, where she appeared alongside other senior royals.
