Kate Middleton Medical Records Breach Sparks 'Police Probe'

Kate Middleton's medical records are the subject of an investigation after a report said a hospital staff member tried to gain unauthorized access to them.

The Princess of Wales had abdominal surgery on January 16 at The London Clinic and spent almost two weeks in the hospital.

The clinic has since launched an investigation into claims that at least one staff member attempted to breach Kate's confidentiality by accessing her data, the Daily Mirror reported.

Al Russell, chief executive of The London Clinic, told Newsweek in a statement: "Everyone at The London Clinic is acutely aware of our individual, professional, ethical and legal duties with regards to patient confidentiality.

"We take enormous pride in the outstanding care and discretion we aim to deliver for all our patients that put their trust in us every day.

"We have systems in place to monitor management of patient information and, in the case of any breach, all appropriate investigatory, regulatory and disciplinary steps will be taken.

"There is no place at our hospital for those who intentionally breach the trust of any of our patients or colleagues."

The potential breach of data protection rules has been reported to the Information Commissioner's Office [ICO], a U.K. regulator with the power to impose fines. According to a top politician, the police have also been brought in, though London's Metropolitan Police said they were unaware of the referral.

Maria Caulfield, a government health minister, told radio station LBC: "My understanding is that police have been asked to look at it. Whether they take action is a matter for them."

A Met spokesperson told Newsweek in a statement: "We are not aware of any referral to the Metropolitan Police at this time."

Caulfield added: "The information commissioner can also take prosecutions, can also issue fines, the NMC [Nursing and Midwifery Council], other health regulators can strike you off the register if the breach is serious enough.

"So there are particularly hefty implications if you are looking at notes for medical records that you should not be looking at."

An ICO spokesperson told Newsweek: "We can confirm that we have received a breach report and are assessing the information provided."

Kensington Palace told Newsweek: "This is a matter for The London Clinic."

It comes amid a major public frenzy over Kate's recovery, with many on social media describing her as missing and spreading conspiracy theories.

A video published by The Sun and TMZ purporting to show Kate walking with Prince William to Windsor Farm Shop sparked a fresh wave of controversy, which included suggestions the pair were impersonators.

Though many in the media ridiculed the notion, the debate continued in the absence of a response from the palace.

The video followed the revelation Kate had doctored a Mother's Day portrait put out by Kensington Palace on March 10.

Kensington Palace fiercely protects the right to privacy around the royal family's health, and Kate has chosen to not discuss her diagnosis publicly.

The alleged breach at The London Clinic is said to have occurred while Kate was a patient there in January. That would give a likely window between January 16, the date of her operation, and January 29, when the palace said she had returned home.

The procedure was announced on January 17, when Kensington Palace said she was expecting to spend up to two weeks in hospital followed by a three-month recovery time.

Media commentators and social media users remarked on the length of time Kate was due to remain in the hospital, with many curious about the kind of procedure that would require that length of stay.

It is unlikely U.K. publications would publish confidential medical information, owing in part to British privacy laws and also to the likely reputational implications of a public confrontation with the palace over such a sensitive subject.

It would also be illegal to pay for the information under the Bribery Act, which applies to employees of private companies and public officials.

However, palace staff operate in a world where there is a significant international market for royal news, and overseas titles may be bound by less stringent laws over privacy.

There have also been more sinister attacks on royal privacy in the past. In December, hackers targeted King Edward VII's Hospital, where Kate and Prince Philip had previously been treated.

According to the Daily Mail, a message on the dark web said: "Unique files are presented to your attention! Data from the Royal Family! A large amount of patient and employee data. Sale in one lot!!"

The hackers wanted £300,000 in bitcoin, about $381,000, for the information, the outlet reported, while the intelligence agency GCHQ and the police were investigating.

Jack Royston is Newsweek's chief royal correspondent based in London. You can find him on X, formerly Twitter, at @jack_royston and read his stories on Newsweek's The Royals Facebook page.

Do you have a question about King Charles III, William and Kate, Meghan and Harry, or their family that you would like our experienced royal correspondents to answer? Email royals@newsweek.com. We'd love to hear from you.