A staff member at a private hospital where the Princess of Wales underwent abdominal surgery is facing possible criminal charges after an investigation revealed unauthorized access to the princess’s medical records in 2024. Three employees at The London Clinic, where the princess was treated on January 16, 2024, were dismissed following suspicions of trying to access her confidential medical information after her hospitalization.

The incident, first reported by The Mirror on March 19, 2024, raised concerns about the security of the royal family’s personal data and caused a stir at both the hospital and Kensington Palace. The hospital notified Buckingham Palace about the breach to ensure that the King’s private medical records were not compromised.

The Information Commissioner’s Office (ICO) was promptly informed of the breach, and an investigation lasting over two years ensued. Accessing medical records without authorization can result in hefty fines, as per UK regulations. The Princess of Wales, who later disclosed her cancer diagnosis, retains the option to pursue a civil claim but has not indicated any plans to do so.

The hospital, known for discreetly treating notable figures, had previously faced criticism for lax access to medical records, as highlighted in a Care Quality Commission report. Despite this, patient records were confirmed to be securely stored at the clinic.

Kensington Palace, The London Clinic, and the ICO have not yet provided comments on the matter.