Everything old is new again, and everything around the “what’s going on with the Princess of Wales” conversation hearkens back to what we were dealing with in March. Mysterious “sightings” of Kate with janky photos and videos, lies about when certain photos were taken, lies about the chronology of Kate’s illness and recovery. Back in March, in the days just before Kate’s cancer-announcement video, one of the big stories was about a data breach at the London Clinic, and suspicions that someone in the hospital tried to access Kate’s medical records. The story was everywhere for a week… the week before the cancer-announcement video. I had my suspicions about what was really going on, but I will say two things can coexist: Kate has the right to medical privacy and I was personally surprised that no one at the London Clinic actually sold any information to the tabloids about Kate. Well, the whole medical-record story has gotten even weirder. According to the Mail, the “investigation” hasn’t even been referred to Scotland Yard.
Staff at the prestigious hospital at the centre of a data breach over the Princess of Wales’s private medical records may have had to contend with a ‘decoy’ trap set by managers, experts believe. The MoS can reveal that, three months on, The London Clinic remains under investigation and the case has not yet been referred to Scotland Yard, despite Health Minister Maria Caulfield stating in March that police had been asked to look at it.
Bosses at the hospital launched a probe after it was claimed at least one staff member had attempted to access personal details about Kate following her planned abdominal surgery in January. It is a criminal offence for any NHS or private healthcare staff to access the medical records of a patient without the consent of the organisation’s data controller. Now several data specialists have told this newspaper that, if the breach occurred, staff could have been caught through a ‘decoy’ tactic used by private hospitals that often have high-profile clients.
To protect the health data of VIP patients, hospitals often store it in a file under a fake name. A ‘decoy’ file is then created under the celebrity’s real name. This contains false information and is regularly checked by bosses to see if any wayward staff have opened it without permission.
If a breach is suspected, hospitals are required to launch their own inquiry while the Information Commissioner’s Office (ICO) investigates whether management did anything wrong. But this process is laboriously slow. Sam Smith, of health data privacy group MedConfidential, said: ‘It’s disappointing but sadly normal that three months on there is no update about the investigation.’
He said data breaches were ‘unfortunately common’, adding: ‘It’s rare that people find out when a data breach has happened, even rarer that they can get the evidence to prove it, and if they do, the process is still very slow.’
Tom Llewellyn, a partner in commercial litigation and data protection at Ashfords law firm, said: ‘It might take years for action to be taken against the individuals.’ He highlighted a similar case last year when a former NHS secretary was fined £648 for accessing the medical records of more than 150 patients – four years after the breaches took place.
The London Clinic has provided no update since the suspected breach of the Princess of Wales’s health data was reported. The ICO told the MoS: ‘Investigations into reported data breaches can be highly complex and our expert team must be given adequate time to make their enquiries. To protect the integrity of a live investigation, we will not provide regular updates on its progress to those not directly involved until its conclusion.’
The Met Police confirmed they were ‘not aware of any referral’ about the breach. Kensington Palace said: ‘This is a matter for The London Clinic.’
Hm. My gut says “cover up.” I’ve believed for some time that there’s so much going on behind-the-scenes with this particular story about the data breach and the reports of multiple London Clinic people attempting to access Kate’s files. The “decoy file” sounds both real and like an explanation the palace would give if Kate’s file ever becomes public. Like, if there’s ever a report of “this is why Kate was really hospitalized initially and this is when she was checked in,” the palace and the London Clinic can say “oh, that was the decoy file, that’s all a lie!” And the fact that the case hasn’t been passed on to Scotland Yard or the Met Police? Something really weird is happening here.
Photos courtesy of Cover Images.
The Princess of Wales at the official opening of the Evelina London Children’s Day Surgery Unit at London’s Guy’s and St Thomas’ Hospital Featuring: Catherine, Princess of Wales Where: London, United Kingdom When: 05 Dec 2023 Credit: PA Images/INSTARimages **NORTH AMERICA RIGHTS ONLY** The Princess of Wales during a visit to officially open the Evelina London Children’s Day Surgery Unit at London’s Guy’s and St Thomas’ Hospital Featuring: Catherine, Princess of Wales Where: London, United Kingdom When: 05 Dec 2023 Credit: PA Images/INSTARimages **NORTH AMERICA RIGHTS ONLY** Catherine, Princess of Wales, visits the Evelina Children’s Hospital and officially opens their new Day Surgery Unit Featuring: Catherine, Princess of Wales Where: London, United Kingbom When: 05 Dec 2023 Credit: John Rainford/Cover Images **NOT AVAILABLE FOR PUBLICATION IN THE UK**
The Prince of Wales (left) drives away from the London Clinic, in central London, where the Princess of Wales is recovering after undergoing successful abdominal surgery. She was admitted to The London Clinic on Tuesday for the planned procedure Featuring: William, Prince Of Wales Where: London, United Kingdom When: 18 Jan 2024 Credit: PA Images/INSTARimages **NORTH AMERICA RIGHTS ONLY** The Prince of Wales, known as the Duke of Cornwall when in Cornwall, breaks ground for the new facility during a visit to St. Mary’s Community Hospital, Isles of Scilly, to meet staff and hear about a new integrated health and social care facility which is set to be built on adjacent land owned by the Duchy of Cornwall Featuring: William, Prince of Wales Where: Isles of Scilly , United Kingdom When: 10 May 2024 Credit: POOL/Cover Images The Prince of Wales, known as the Duke of Cornwall when in Cornwall, breaks ground for the new facility during a visit to St. Mary’s Community Hospital, Isles of Scilly, to meet staff and hear about a new integrated health and social care facility which is set to be built on adjacent land owned by the Duchy of Cornwall Featuring: William, Prince of Wales Where: Isles of Scilly , United Kingdom When: 10 May 2024 Credit: POOL/Cover Images
ncG1vNJzZmivp6x7pLHLnpmirJOdxm%2BvzqZmcW9kaH94e9OhnJihnquytMDIoJitoZ%2BjrKq606iWqaqZo7Cmv9KYopqslaisrrHDopqapI%2BnsqS70Z2qmK%2BRqLu1q9GenZ6qopqxoMDOmKuhnY%2BlvK21wp5m