A staff member at a private clinic where the Princess of Wales underwent abdominal surgery has been dismissed and banned from their position after an investigation revealed that the Princess’ medical records were accessed by hospital staff in 2024. The Information Commissioner’s Office disclosed that the employee deliberately viewed and offered to disclose the files for financial gain, leading to a breach of trust and misuse of sensitive personal information.
Following an internal inquiry, the worker, who was employed at The London Clinic during the Princess’ admission on January 16, 2024, was let go from their role. The individual was suspected of trying to obtain the Princess’ confidential medical records after her hospitalization, amidst rumors circulating on social media about her condition.
The breach, first reported by The Mirror on March 19, 2024, raised concerns about the security of the royal family’s personal data. The incident occurred while the Princess and the King were both receiving treatment at the clinic, with the King later diagnosed with a form of cancer.
Upon discovering the breach, the hospital promptly notified Buckingham Palace to ensure the privacy of the King’s medical records. The Information Commissioner’s Office was informed within 72 hours, leading to an extensive investigation lasting over two years. The ICO approved the removal of the staff member from their position.
The maximum penalty for unauthorized access to medical records is an unlimited fine. Although the Princess had the option to pursue a civil claim, she reportedly has no intention to do so. The breach deeply affected hospital staff, known for discreetly treating notable figures.
The London Clinic, where prominent individuals like the late Queen Elizabeth II and Prince Philip received treatment, had previously faced criticism for lax record accessibility. However, an inspection affirmed that patient records were stored securely. The ICO concluded its investigation by cautioning the individual responsible for the breach.
The clinic emphasized its commitment to patient confidentiality and expressed satisfaction with the resolution of the incident. Kensington Palace declined to comment on the matter.