Britain's data protection watchdog has closed its criminal investigation into the unlawful attempt to access and sell medical records linked to Catherine, Princess of Wales, bringing a two-year case to a conclusion.
The Information Commissioner's Office (ICO) said Wednesday that a former healthcare worker at the London Clinic, where Catherine underwent abdominal surgery in January 2024, received a formal caution for deliberately misusing sensitive personal information and offering to disclose it for financial gain.
The ICO did not publicly confirm whose records were involved, but UK outlets including Sky News and the Mirror reported the case centered on Catherine's file.
The London Clinic reported the breach to the ICO in March 2024. After reviewing the matter, the watchdog found no wider regulatory failings at the hospital itself.
"People should be able to trust that the personal information they're giving to healthcare settings is safe and protected from exploitation," said Ian Hulme, the ICO's executive director for regulatory supervision. "When this trust is broken, it's right that the law allows us to take action."
Catherine was diagnosed with cancer shortly after her surgery and underwent months of chemotherapy before announcing her remission in January 2025.
Friends and royal biographers have noted that her Christian faith, instilled since childhood and formalized through her confirmation into the Church of England, became a steadying source of strength during treatment; she was seen attending Sunday services even while undergoing chemotherapy, and Archbishop of Canterbury Justin Welby publicly prayed for her recovery when her diagnosis was first announced.
Catherine has since resumed a full schedule of public duties, including an appearance at Royal Ascot this week.
