AceShowbiz - Kate Middleton may take legal action over a reported "major security breach" to her medical records at The London Clinic. An attorney and legal expert shares in a new interview that the royal could "absolutely" file a civil lawsuit over the matter.

"Kate can always file a civil lawsuit for invasion of privacy," Neama Rahmani, who is not involved with the case, spilled to Us Weekly on Wednesday, March 20. "If she wants to go after the perpetrator to say that her privacy rights were violated, she can absolutely do so."

Neama claimed that it should be "easy to catch" the perpetrator, given the nature of the breach. He continued, "It's pretty clear right now whenever you access a file or a site, who's doing so. It's just really a question of, did the perpetrator just try to access the data or was he or she able to actually see it? In which case that would be a very serious violation."

The attorney revealed that the consequences for the perpetrator could range from "a criminal investigation and prosecution" to a professional penalty. "Obviously a doctor or a nurse or a medical professional, they would be licensed, and there'd be a body that regulates them. So, there could be some administrative penalty," he explained. "They could be suspended or even lose their license entirely."

On Wednesday, The London Clinic CEO Al Russell issued a statement in response to the security breach. "Everyone at The London Clinic is acutely aware of our individual, professional, ethical and legal duties with regards to patient confidentiality," he said.

He also noted that the hospital has "systems in place to monitor management of patient information and, in the case of any breach, all appropriate investigatory, regulatory and disciplinary steps will be taken."

As for the Kensington Palace, it said in a statement a day prior, "This is a matter for the London Clinic." An investigation is reportedly underway at the hospital.