The unnamed worker was employed by The London Clinic, which reported the breach in March 2024.

Ian Hulme, executive director for regulatory supervision at the Information Commissioner's Office, said: ‘People should be able to trust that the personal information they're giving to healthcare settings is safe and protected from exploitation. When this trust is broken, it's right that the law allows us to take action.   

‘We will not hesitate to pursue criminal prosecution where it is necessary and proportionate to do so.'

The Princess of Wales, who revealed in early 2025 she was in remission for cancer, had abdominal surgery at the hospital in January 2024.

A spokesperson at The London Clinic said: ‘We all take considerable pride in delivering the very highest standards of care and discretion for every patient at The London Clinic. We are pleased our work with the ICO has brought this sad and isolated incident to a conclusion. There were no regulatory breaches by the hospital.'