Former London Clinic Employee Cautioned for Attempting to Sell Catherine, Princess of Wales' Medical Records
A former healthcare worker has been issued a caution by the Information Commissioner's Office (ICO) for attempting to illicitly obtain and subsequently sell the medical records of Catherine, the Princess of Wales.
ICO Investigation and Findings
The ICO initiated a criminal investigation in March 2024, following reports that a staff member at the London Clinic sought to access the Princess's confidential notes while she was undergoing abdominal surgery there earlier that year. The London Clinic stated that it was "pleased our work with the ICO has brought this sad and isolated incident to a conclusion. There were no regulatory breaches by the hospital."
The privacy and data protection watchdog deemed a caution as "the appropriate and proportionate enforcement response," citing a "deliberate misuse of highly sensitive personal information and an offer to disclose it for financial gain." Crucially, the ICO's investigation found no evidence of "wider organisational issues arising from the healthcare provision in this matter."
Ian Hulme, the ICO's executive director for regulatory supervision, emphasised the fundamental expectation that "People should be able to trust that the personal information they're giving to healthcare settings is safe and protected from exploitation. When this trust is broken, it's right that the law allows us to take action."
The London Clinic and Royal Patients
The London Clinic, situated near Regent's Park, bills itself as the UK's largest independent private hospital and is a frequent choice for members of the Royal Family. The Princess of Wales underwent abdominal surgery at the institution in January 2024, subsequently withdrawing from public duties for her recovery. Two months later, she disclosed she was receiving cancer treatment. Early in 2025, the Princess confirmed she was in remission and has since gradually resumed public engagements.
