Exclusive: ICO assessing ‘timeliness of reporting’ by London Clinic of alleged attempt to access medical records
The privacy watchdog is investigating whether the London Clinic delayed notifying it about claims staff attempted to access the Princess of Wales’s private medical records, the Guardian has learned.
Official guidance from the Information Commissioner’s Office (ICO) is that personal data breaches must be reported within 72 hours from the time of discovery if a risk is posed to an individual’s rights and freedoms.
