The UK Information Commissioner’s Office (ICO) issues a formal caution to a former healthcare worker linked to the London Clinic after an incident involving the Princess of Wales’s private medical records. Multiple outlets report that the worker was cautioned for illegally accessing her records and for offering to disclose them to a third party without the proper consent.
According to the Guardian and other reports, the ICO initiated its response after the London Clinic reported a data breach in March 2024. The ICO investigation focuses on deliberate misuse of medical information and alleged attempts to obtain and share sensitive records for financial gain. While some outlets describe the matter as involving criminal behaviour, at least one report notes that the individual ultimately avoids criminal prosecution and instead receives a formal caution.
Separate reports indicate the Princess of Wales had abdominal surgery at the London Clinic in early 2024, and that the alleged access and/or attempts to obtain the information occurred while she was a patient. The published accounts consistently state that the ICO is the regulator involved and that the underlying issue concerns unauthorised access and disclosure of personal health data.