A former healthcare worker at the London Clinic has been issued a formal caution by the Information Commissioner's Office (ICO) after attempting to sell the Princess of Wales's medical records for financial gain.
Breach of Trust
The employee, who worked at the facility where Kate Middleton underwent abdominal surgery, accessed her confidential medical records and offered to disclose them for money. The individual has since been dismissed and removed from the professional register following an inquiry into allegations that staff members improperly viewed medical files in 2024.
At least one staff member attempted to look at Kate's records while she was receiving treatment at the private central London hospital in January 2024, as previously reported by The Mirror. The princess was admitted for abdominal surgery on January 16, 2024.
ICO Investigation
The ICO launched a criminal probe in March 2024 into the unlawful acquisition and sharing of medical data with a third party without authorisation from the data controller, after being notified of a breach by the London Clinic. The ICO confirmed on Wednesday: "Following a full assessment under the Code for Crown Prosecutors and the ICO's Prosecution Policy, the ICO issued a now former healthcare professional from London with a formal caution in relation to an offence under section 170(5) of the Data Protection Act 2018."
The conduct involved deliberate misuse of highly sensitive personal information and an offer to disclose it for financial gain, representing a clear breach of trust. The ICO determined a caution was "the appropriate and proportionate enforcement response."
Ian Hulme, executive director for regulatory supervision, stated: "People should be able to trust that the personal information they're giving to healthcare settings is safe and protected from exploitation. When this trust is broken, it's right that the law allows us to take action."
Wider Context
The King had also been receiving care at the same facility during the same period, undergoing treatment for an enlarged prostate. During his three-night admission, doctors found he had a "form of cancer," which continues to require ongoing treatment. Buckingham Palace was informed about the alleged breach concerning Kate after the clinic provided assurances that the King's private medical records had not been assessed.
A source told the Mirror: "This has been a complex and delicate matter involving a senior member of the royal family and one of the world's most trusted hospitals. There has been great anxiousness on all sides and it has been wholly appropriate that the correct procedures during the investigation have been followed."
A spokesperson for The London Clinic remarked: "We all take considerable pride in delivering the very highest standards of care and discretion for every patient at The London Clinic. We are pleased our work with the ICO has brought this sad and isolated incident to a conclusion. There were no regulatory breaches by the hospital."
