Lead

A former healthcare worker at a private London hospital has been formally cautioned by the UK's data protection watchdog for deliberately misusing the Princess of Wales's medical records and offering to disclose them for financial gain.

The Information Commissioner's Office (ICO) said it had concluded a criminal investigation into the incident, which involved the deliberate misuse of highly sensitive personal information. The case stems from a breach reported by the London Clinic in March 2024, where the princess had undergone abdominal surgery two months earlier.

Coverage comparison

The Guardian reported that the ICO issued a formal caution under section 170(5) of the Data Protection Act 2018, describing the action as "the appropriate and proportionate enforcement response." The outlet also noted that the watchdog did not identify any wider failings at the London Clinic that would meet the threshold for regulatory enforcement.

The Jerusalem Post, citing a Reuters report, framed the incident as a "royal medical records scandal," emphasizing the financial motive behind the misuse. Both outlets reported that the information was offered for disclosure in exchange for financial gain, and both noted the princess's abdominal surgery in 2024.

Key claims

  • A former healthcare worker at the London Clinic deliberately misused sensitive information and offered to disclose it for financial gain.
  • The incident involved the Princess of Wales's medical records.
  • The London Clinic reported a breach in March 2024.
  • The ICO issued a formal caution under section 170(5) of the Data Protection Act 2018.
  • The ICO did not find any wider failings at the London Clinic.
  • The Princess of Wales underwent abdominal surgery in 2024 and later received chemotherapy for an unspecified form of cancer, as reported by one source.

Perspectives

The Information Commissioner's Office emphasized that the caution was a proportionate response, with executive director Ian Hulme stating: "People should be able to trust that the personal information they're giving to healthcare settings is safe and protected from exploitation." The ICO also noted that no wider organizational issues were identified at the London Clinic.

Kensington Palace declined to comment on the case, as did the ICO regarding the specific individual whose records were involved. Sky News reported that the case concerned Kate, the Princess of Wales, though the watchdog did not confirm this directly.