CQC now expect care providers to have published their DSPT to Standards Met in the last 12 months to demonstrate compliance with data protection and cyber security. See their guidance about this under the Governance, Management and Sustainability quality statements here: https://www.cqc.org.uk/guidance-regulation/providers/assessment/single-assessment-framework/well-led/governance-management-sustainability
