A former healthcare worker has been cautioned by the Information Commissioner's Office (ICO) for trying to obtain and sell Catherine, the Princess of Wales' medical records.

The ICO began their criminal investigation in March 2024, following a report that a member of staff at the London Clinic tried to access the princess's notes while she was a patient there for abdominal surgery earlier that year.

A spokesperson for the private hospital said: "We are pleased our work with the ICO has brought this sad and isolated incident to a conclusion. There were no regulatory breaches by the hospital."

The ICO said a caution was "the appropriate and proportionate enforcement response".

The privacy and data protection watchdog said there had been "deliberate misuse of highly sensitive personal information and an offer to disclose it for financial gain".

They added that their investigation did not find any evidence of "wider organisational issues arising from the healthcare provision in this matter".

The ICO's executive director for regulatory supervision, Ian Hulme, said: "People should be able to trust that the personal information they're giving to healthcare settings is safe and protected from exploitation.

"When this trust is broken, it's right that the law allows us to take action."

The London Clinic, near Regent's Park in central London, describes itself as the UK's largest independent private hospital and is frequently used by royals.

Catherine had abdominal surgery at the hospital in January 2024 and stepped back from public duties during her recovery.

The princess confirmed at the start of 2025 she was in remission from cancer and gradually returned to more public events after the end of her treatment.

On Monday, she was seen smiling and joking with other royals during the Order of the Garter service, a year after missing the event while receiving cancer treatment.