The Data Security & Protection Toolkit (DSPT) is a free, online annual self-assessment for health and care organisations.
This toolkit supports care providers to ensure that the information they hold about people is being managed safely and securely, and to safeguard against the risks of a data breach or cyberattack.
Benefits
- demonstrate that your organisation is meeting legal requirements under legislation and standards
- reassure those who use services, their families and the internal workforce that their information is being managed safely
- providers can assure the CQC that they're managing data securely under Well Led – Governance, management and sustainability
- participate in wider health and caresharing initiatives, allowing for access to NHSMail, e-Referrals and other systems
-
provides a ‘health check’ to providers to ensure they have the right procedures and processes in place
-
help providers assure themselves that they know what to do in the event of a data breach or cyberattack, and to minimise the risks.
Skills for Care can support care providers across Greater Manchester area (Bolton, Bury, Manchester, Oldham, Rochdale, Salford, Stockport, Tameside, Trafford, Wigan) in the registration, completion, and submission of their DSPT.
If you're outside Greater Manchester, you can identify your local support organisation who can help you with your DSPT submission.
One-to-one provider support
If you are a care provider and would like to receive one-to-one support on the DSPT, and have specific queries around registration, completion and submission, please contact us at dspt@skillsforcare.org.uk.
Our team will be very happy to help provide the guidance and support you need, from the process of registration through to submission.
We can visit your organisation to provide one-to-one support in person, or we can offer one-to-one support through video calls, where you can talk through any queries or issues to help you complete the toolkit successfully.
One-to-one support is suitable for any provider looking to complete the DSPT, including providers who have not registered or not completed it before. All you need is a computer, laptop or tablet, and an internet connection.
To book a one-to-one please contact us at dspt@skillsforcare.org.uk
Submissions
Submitting the toolkit involves answering a series of questions, where care providers can demonstrate that they are compliant with data protection legislation, the health and social care data security standards, and good practice.
CQC-registered providers must complete a submission at least once a year. It's also a requirement to submit the toolkit if you deliver services under a NHS contract, use a shared health and care record, or are applying for NHSMail.
Following DSPT submission, a provider can meet 3 standards, depending on the detail provided when the toolkit is completed online (number of questions answered).
- Approaching standards:
Meeting minimum legal standards, with an action plan to go further.
- Standards met:
Above legal standards, and can provide assurances to CQC and wider organisations.
- Standards exceeded:
Exceeding standards and is an exemplar of good practice in securely managing information.