If you have never completed the Data Security Protection Toolkit (DSPT) here is some useful information

The DSPT provides you with a method of checking you are working within the law. Publishing the DSPT (44 simple questions) allows you to assert compliance with GDPR and NHS Data Standards: let’s you know you are doing what is expected of you.

  • You are required to publish DSPT if you have access to any NHS data systems (including NHS Mail).  As we increasingly work in a digital world the NHS intends to further open its systems to Adult Social Care providers. Access to NHS digital systems will transform the way you deliver care, but in order to access these services, providers must be able to demonstrate that they have adequate Data Protection policies in place.  This is where the Toolkit comes in.

Why do I need to do this?

  • Adult Social Care and the Health Services are inextricably linked and this is being demonstrated by the increasing importance and use of digital care and health systems.
  • During the COVID 19 pandemic the NHS encouraged care providers to sign up to NHS Mail and this has resulted in much more streamlined sharing of records and data.
  • The NHS does not want to lose what we have gained and it wants to further expand the data and systems that it can share with Adult Social Care.
  • The DSPT underpins all this as it shows that you have good data protection and security protections in place.
  • The DSPT is an extremely useful tool because it covers all areas of GDPR compliance that you as a Care Provider are required to implement, such as having up to date policies and ICO registration, ensuring you are operating within the law.
  • It is also a contractual requirement set by CCG’s and Local Authorities.
  • It is looked upon favourably by CQC (KLOE 2.8 Well Led).

What are the benefits?

  • Once you have completed the DSPT you can create free NHS secure email accounts, meaning you can securely pass data to the NHS and back again. For example, it allows GPs to send prescriptions to you securely.
  • It also includes Microsoft Teams video conferencing which is being used by doctors to carry out virtual consultations and meetings
  • DSPT compliance can also give you access to NHS records

What if I do need more help?

  • The DSPT has been rewritten to make it simple to understand and complete
  • Completing the DSPT is not a 5 minute job and requires some preparation beforehand, so a program of free support is available to help you successfully complete the Toolkit, both at a national level and locally.
  • Digital Social Care website has lots of online resources and templates you can access, and they are also delivering a series of webinars to give you more information about the DSPT.
  • HCPA has information on what you need to complete the Toolkit (please see the section titled “Resources”) and we’ve also put together a program of information webinars you can attend, where we can talk you through the Toolkit, allowing you to complete it – with our help – while you are on the webinar.
  • A getting started guide has been created by Digital Social Care: Click here

Registering for DSPT:

  1. Visit here and find your NHS ODS code / see if your organisation or site has already registered or published DSPT NOTE: For individual sites / services, this code should start with letter V, groups completing one DSPT on behalf of multiple sites will have a code which starts with letter A
  2. Visit: here – You will be asked to enter your email address and ODS code
  3. A registration email will be sent, which is good for 24 hours only
  4. Find this email (may go to your Spam folder) and click into the link to set up your password
  5. To book onto an Information webinar, please email us at DataProtection@HCPA.co.uk (stating that you have no experience of the DSPT) or call us on 01707 70 80 18,
  6. After attending an information webinar, we can ensure you receive any further support required to publish your DSPT.

HCPA are here to support you 100% and all support is provided for free