Exclusive: ICO reportedly was not told within guideline 72 hours of alleged attempts to access Princess of Wales’s records at the London Clinic
The privacy watchdog is investigating whether the London Clinic delayed notifying it about claims staff attempted to access the Princess of Wales’s private medical records, the Guardian can reveal.
Official guidance from the Information Commissioner’s Office (ICO) is that personal data breaches must be reported within 72 hours from the time of discovery if a risk is posed to an individual’s rights and freedoms.