Former London Clinic worker cautioned by ICO for attempting to sell Princess of Wales's medical records

Unbiased summary

A former healthcare worker at the London Clinic in London has received a formal caution from the Information Commissioner's Office (ICO) following a criminal investigation into the unlawful accessing and attempted sale of the Princess of Wales's private medical records. The London Clinic reported the data breach in March 2024, after the Princess had undergone abdominal surgery there in January 2024. The ICO found the conduct constituted deliberate misuse of highly sensitive personal information offered for financial gain, in breach of Section 170(5) of the Data Protection Act 2018. The ICO determined a caution was the proportionate response and found no wider organisational failings at the clinic that would warrant regulatory enforcement action against the institution itself. The worker is no longer employed at the clinic.

Coverage by outlet

The Guardian left

Angle Frames the story as a systemic privacy and data protection issue, emphasising institutional accountability and the role of the regulatory watchdog.

Bias The Guardian gives the most complete regulatory context, including the ICO's finding of no wider organisational failings, which serves to exonerate the institution while keeping focus on the watchdog's role. It uniquely notes that King Charles was also treated at the clinic, adding contextual weight that could subtly broaden the perceived scale of the privacy concern. The coverage is largely factual and close to neutral, with minimal sensationalism.

Ex-health worker cautioned after Kate’s medical notes offered for financial gain

The Independent centre-left

Angle Presents a straightforward factual account while adding an unverified detail from a third-party source about the worker's identity.

Bias The Independent is broadly neutral and factually accurate, closely mirroring the ICO's official statements. However, it introduces a claim from The Mirror that the worker is believed to be a nurse and has been struck off — information not confirmed by the ICO or official sources — without sufficiently caveating its reliability. This addition, while potentially informative, risks lending credibility to unverified reporting. Otherwise, the piece does not noticeably emphasise or downplay any element of the story.

Ex-healthcare worker tried to leak Princess Kate’s medical records for cash

Daily Mail right

Angle Leads with the Princess of Wales as a sympathetic royal victim, foregrounding her identity and personal details over the regulatory and data protection substance.

Bias The Daily Mail is the only outlet to mention the Princess's age, a detail irrelevant to the legal or regulatory facts, which personalises and tabloidises the story around her celebrity profile rather than the data protection issues at stake. The inclusion of photographs — police outside the clinic and the Princess at a public event — further shifts emphasis toward royal interest content. The outlet omits the ICO's finding of no wider organisational failings, which is a notable omission that leaves open the implication of broader institutional fault.

Hospital worker at London Clinic where Princess of Wales had abdominal surgery is cautioned for trying to sell her medical records