A former London healthcare worker has been given a formal criminal caution, Britain’s data watchdog said on Wednesday, after Princess Catherine’s private medical records were offered for sale.

At least one ex-staff member at the private London Clinic hospital tried to access her medical notes while she was a patient there in January 2024, The Mirror tabloid has previously reported.

A health minister subsequently confirmed law enforcement were examining the allegation. The clinic reported the breach in March 2024 to the Information Commissioner’s Office (ICO), which can investigate and prosecute individuals and organisations for breaches of data protection and freedom of information laws.

It launched a criminal probe into “the unlawful obtaining and disclosure of medical information to a third party” without consent, which it said Wednesday had now concluded. “Following a full assessment … the ICO issued a now former healthcare professional from London with a formal caution,” it said in a statement, without naming the princess.

“The conduct involved the deliberate misuse of highly sensitive personal information and an offer to disclose it for financial gain, representing a clear breach of trust.”