A staff member at the private clinic where the Princess of Wales underwent abdominal surgery has been dismissed and removed from their position after an inquiry revealed unauthorized access to the Princess’ medical records in 2024.
The Information Commissioner’s Office disclosed that the staff member in question intentionally viewed and offered to disclose the Princess of Wales’ medical files for personal gain.
Following an internal investigation, it was found that the individual breached patient confidentiality and violated trust by inappropriately handling sensitive personal information. The employee, who was on duty at The London Clinic during the Princess’ admission on January 16, 2024, was suspected of trying to access the Princess’ confidential medical records after her hospitalization, amidst unfounded speculations on social media.
On March 19, 2024, The Mirror reported this exclusive story, causing concern at the hospital and Kensington Palace regarding the security of the royal family’s private data.
During the Princess’ hospitalization, another patient, the King, was also receiving treatment for a prostate condition that was later diagnosed as a form of cancer, necessitating ongoing treatment.
In response to the breach, the hospital contacted Buckingham Palace to reassure them that the King’s medical records remained secure and unaffected.
The UK’s privacy watchdog, the Information Commissioner’s Office (ICO), was promptly informed of the breach and conducted a thorough investigation lasting over two years. The ICO endorsed the decision to terminate the employee and revoke their credentials.
The maximum penalty for unauthorized access to medical records is an unlimited fine. Despite the breach, the Princess of Wales, who later disclosed her cancer diagnosis, has not indicated any intention to pursue legal action.
Reports indicated that the hospital staff were deeply disturbed by the allegations, given the institution’s reputation for discreetly treating high-profile individuals.
The London Clinic has been previously criticized for lax access controls to medical records but was commended for securely storing patient information.
The ICO concluded its criminal investigation by cautioning the healthcare professional involved for their misuse of personal information and breach of trust. No further regulatory enforcement was deemed necessary.
The hospital reiterated its commitment to patient confidentiality and expressed satisfaction with the conclusion of the incident. Kensington Palace declined to comment on the matter.
