A former healthcare worker at the London Clinic has been issued a formal caution by the Information Commissioner's Office (ICO) after attempting to sell the Princess of Wales's private medical records. The incident occurred while Kate was a patient at the private hospital in central London following abdominal surgery on January 16, 2024.
ICO Investigation and Outcome
The UK privacy watchdog confirmed on Wednesday that it had concluded its criminal investigation into the unauthorized access and disclosure of medical information. The ICO stated that the former employee offered to disclose the highly sensitive data for financial gain, representing a clear breach of trust.
Under the Data Protection Act 2018, the individual was cautioned for the offense. The ICO deemed a caution as the appropriate and proportionate enforcement response. According to reports, the worker, believed to be a nurse, has been struck off.
Statements from Authorities
Ian Hulme, executive director for regulatory supervision at the ICO, emphasized the importance of trust in healthcare settings. “People should be able to trust that the personal information they’re giving to healthcare settings is safe and protected from exploitation. When this trust is broken, it’s right that the law allows us to take action,” he said.
A spokesperson for The London Clinic expressed satisfaction with the conclusion of the investigation, stating, “We all take considerable pride in delivering the very highest standards of care and discretion for every patient. We are pleased our work with the ICO has brought this sad and isolated incident to a conclusion. There were no regulatory breaches by the hospital.”
Background
The princess was admitted for abdominal surgery in January 2024 and later diagnosed with an undisclosed form of cancer, for which she underwent chemotherapy. She announced she was in remission in January 2025. The ICO found no wider organizational failings at the clinic.
