Sarah Hooper | News Reporter
Published June 17, 2026 12:02pm
Updated June 17, 2026 4:55pm
A hospital worker at the London Clinic has been given a formal caution for accessing Kate Middleton’s medical records from her surgery in 2024.
The Princess of Wales had abdominal surgery at the London Clinic in early 2024.
Now, a worker at the private clinic has been cautioned over claims she accessed the records along with three other employees.
The Marylebone clinic, on the corner of Devonshire Place in one of London’s most exclusive neighbourhoods, has a long history of treating the royal family and A-list celebrities.
The three were dismissed from their roles after an internal investigation.
The Information Commissioner’s Office (ICO) said on Wednesday it has ‘concluded its criminal investigation into the unlawful obtaining and disclosure of medical information to a third party without the consent of the data controller, related to a breach reported by the London Clinic in March 2024.’
It has now issued a former healthcare worker with ‘a formal caution in relation to an offence under section 170(5) of the Data Protection Act 2018’.
The ICO said the caution came after the ‘deliberate misuse of highly sensitive personal information and an offer to disclose it for financial gain, representing a clear breach of trust’ and concluded a caution was ‘appropriate’.
Ian Hulme, executive director for regulatory supervision, said: ‘People should be able to trust that the personal information they’re giving to healthcare settings is safe and protected from exploitation.
‘When this trust is broken, it’s right that the law allows us to take action.
‘We will not hesitate to pursue criminal prosecution where it is necessary and proportionate to do so.’
The incident took place around three weeks after Kate’s abdominal surgery. The Prince and Princess of Wales were made aware of the breach at the time.
A source said: ‘This is a major security breach and incredibly damaging for the hospital, given its unblemished reputation for treating members of the Royal Family.’
In a statement, the CEO of the London Clinic said: ‘Everyone at the London Clinic is acutely aware of our individual, professional, ethical and legal duties with regard to patient confidentiality.
‘We have systems in place to monitor management of patient information and, in the case of any breach, all appropriate investigatory, regulatory and disciplinary steps will be taken.
‘There is no place at our hospital for those who intentionally breach the trust of any of our patients or colleagues.’
Get in touch with our news team by emailing us at [email protected].
For more stories like this, check our news page.
MORE: Woman’s body only discovered when smell got so bad neighbours raised concerns
MORE: The best places in London to watch the World Cup
MORE: Boris Johnson’s dad reveals he underwent cancer treatment
News Updates
Stay on top of the headlines with daily email updates.