A hospital worker from the private clinic where Catherine, the Princess of Wales, had abdominal surgery in 2024 has been struck off and sacked from their role, after it was found they allegedly attempted to access and sell the royal’s private files. 

Per The Mirror, the Information Commissioner’s Office has concluded its two-year-long investigation into the former healthcare professional, who worked at The London Clinic when the 44-year-old stayed for 13 days after her procedure.

Catherine, Princess of Wales, at Garter Day on June 15, 2026.

A hospital worker allegedly tried to access and sell information from Catherine’s files. Chris Jackson/Getty Images

The news of the supposed breach was shared three weeks after both Kate and King Charles, who was being treated for cancer in the same hospital at the same time, were discharged on January 29, 2024. 

Kate then disappeared from the public eye, while rumours milled on social media about her condition and whereabouts. 

This led to the royal coming out with a video weeks later, sharing that she had been fighting cancer and was undergoing treatment. She is now in remission. 

The result of the ICO’s investigation was a formal caution for what was described as “the deliberate misuse of highly sensitive personal information” and “a clear breach of trust”.

The ICO has the power to give out huge fines as punishments, though they did not do so in this instance.

Scotland Yard was notified of the ICO’s probe but did not pursue an investigation for criminal prosecution. 

Following the result being handed down, Kate has the right to launch a civil claim against the employee, though it seems she does not have any plans to do so. 

In a statement, a spokesperson from the ICO shared: “We also considered whether there were any wider organisational issues arising from the healthcare provision in this matter. Based on the evidence available, we did not identify any failings that would meet the threshold for regulatory enforcement. ”

Ian Hulme, Executive Director for Regulatory Supervision told media, “People should be able to trust that the personal information they’re giving to healthcare settings is safe and protected from exploitation. 

“When this trust is broken, it’s right that the law allows us to take action. We will not hesitate to pursue criminal prosecution where it is necessary and proportionate to do so.”

The London Clinic shared via spokeperson, “We all take considerable pride in delivering the very highest standards of care and discretion for every patient at The London Clinic. 

Catherine, Princess of Wales, announces cancer diagnosis in video message

Catherine announced her cancer diagnosis in video message. Kensington Palace

“We are pleased our work with the ICO has brought this sad and isolated incident to a conclusion. There were no regulatory breaches by the hospital.”

Kensington Palace has not yet commented on the incident.