A former healthcare worker at The London Clinic has been given a formal caution by the Information Commissioner's Office (ICO) after the Princess of Wales's private medical records were offered for financial gain.
At least one member of staff tried to access Kate's notes while she was a patient at the private hospital in central London in January 2024, The Mirror previously reported.
The princess was admitted to the hospital for abdominal surgery on January 16, 2024.
The UK privacy and data protection watchdog said on Wednesday it has concluded its criminal investigation into the unlawful obtaining and disclosure of medical information to a third party without the consent of the data controller, related to a breach reported by the London Clinic in March 2024.
Following a full assessment under the Code for Crown Prosecutors and the Information Commissioner's Office's Prosecution Policy, the ICO said it issued a now former healthcare professional from London with a formal caution in relation to an offence under section 170(5) of the Data Protection Act 2018.
The conduct involved the deliberate misuse of highly sensitive personal information and an offer to disclose it for financial gain, representing a clear breach of trust, the ICO said.
In this case, the ICO concluded that a caution was the appropriate and proportionate enforcement response.
The worker, who The Mirror has reported is believed to be a nurse, has been struck off, according to the newspaper.
Ian Hulme, executive director for regulatory supervision, said: “People should be able to trust that the personal information they’re giving to healthcare settings is safe and protected from exploitation. When this trust is broken, it’s right that the law allows us to take action. We will not hesitate to pursue criminal prosecution where it is necessary and proportionate to do so.”
The watchdog also considered whether there were any wider organisational issues arising from the healthcare provision in this matter. Based on the evidence available, it did not identify any failings that would meet the threshold for regulatory enforcement, the ICO said.
A spokesperson at The London Clinic said: “We all take considerable pride in delivering the very highest standards of care and discretion for every patient at The London Clinic. We are pleased our work with the ICO has brought this sad and isolated incident to a conclusion. There were no regulatory breaches by the hospital.”
Kate was diagnosed with an undisclosed form of cancer early in 2024, for which she underwent chemotherapy, and revealed she was in remission 16 months ago in January 2025.
