Former hospital worker cautioned over Princess Catherine medical records breach

Published on: June 18, 2026 12:31 PM

A former London healthcare worker has received a formal criminal caution after attempting to access and sell private medical records belonging to Catherine, Princess of Wales, according to Britain’s Information Commissioner’s Office (ICO).

The incident relates to Princess Catherine’s treatment at a private London hospital, where she underwent abdominal surgery in January 2024. She later spent two weeks at the facility and was subsequently diagnosed with an undisclosed form of cancer, for which she received chemotherapy before later announcing she was in remission.

Investigations revealed that at least one former staff member at the hospital attempted to access the Princess’s confidential medical notes during her stay. The case was reported to the ICO in March 2024 after concerns were raised about a potential breach of patient confidentiality.

The data watchdog launched a criminal investigation into the “unlawful obtaining and disclosure of medical information to a third party,” focusing on whether sensitive records had been accessed and offered for financial gain without consent. The ICO confirmed on Wednesday that the investigation had concluded with the issuance of a formal caution to a former healthcare professional based in London.

Officials said the conduct involved a deliberate misuse of highly sensitive personal data and represented a serious breach of trust. However, the regulator did not disclose the identity of the individual involved.

The London hospital involved in the case stated that it cooperated fully with the investigation and expressed satisfaction that the matter had been brought to a conclusion. It added that there were no regulatory breaches by the institution itself.

The ICO emphasized that patients must be able to trust that their personal health information remains secure within medical systems. It warned that unlawful access or disclosure of medical data would be met with strict legal action where necessary.

The case has highlighted growing concerns over data security in healthcare institutions and reinforced the importance of safeguarding patient confidentiality, particularly in high-profile cases involving public figures.