The Information Commissioner’s Office (ICO) has confirmed in a statement that it is looking into a reported data breach concerning the medical records of Kate Middleton, the Princess of Wales.

The data protection watchdog issued a statement which read: ““We can confirm that we have received a breach report and are assessing the information provided.”

Several media outlets have reported that staff at the London Clinic tried to access Middleton’s medical records during her stay following her reported abdominal surgery.

Rumours surrounding the Princess have caused mass speculation since her surgery, with members of the public also drawing attention to the images the Crown has shared of the Princess which appear to be digitally altered.

The Crown has not provided any more specifics on the abdominal surgery, and there has been speculation that the Princess is distancing herself from the Royal Family.

The Mirror reported that potentially three staff are being investigated by the London Clinic, a private hospital that serves the Royal Family.

Recommended reading

• ICO Launches Public Survey Amid Care Data Access Concerns
• ICO Publishes New Data Protection Fining Guidance
• ICO Reprimands NHS Lanarkshire Staff for WhatsApp Data Sharing

The ICO’s investigation could lead to an unlimited fine, not just to the staff members that attempted to access the records, but on the London Clinic itself it if is found to have not put in place proper data protection safeguards.

If issued, the fine could be expected to be large as the case concerns a member of the British Royal Family.

The London Clinic has attempted to reassure its patients by saying that they have appropriate systems set up to manage protect patient information.

“Everyone at The London Clinic is acutely aware of our individual, professional, ethical and legal duties with regards to patient confidentiality,” Al Russel, The London Clinic CEO, told NBC News.