The Data Security and Protection Toolkit is an online self-assessment tool that allows organisations to measure their performance against the National Data Guardian’s 10 data security standards.
All organisations that have access to NHS patient data and systems must use this toolkit to provide assurance that they are practising good data security and that personal information is handled correctly.
This system is subject to ongoing development.
What's new?
Toolkit webinar slides (Updated 22 September 2025)
Including video and presentation slides from recent Webinar sessions including the hints and tips for the DSPT for 24-25.
Reminder: DSPT Improvement plan updates to be submitted by 30th September 2025 (22 September 2025)
Details of how to submit your September DSPT Improvement plan update.
DSPT Audit 25-26 Areas of Mandatory Audit (22 September 2025)
The outcomes and assertions of the DSPT which must be included in a 25-26 DSPT Audit for NHS Trusts, ICBs, ALBs, CSU, OES, Genomics and IT Suppliers
Outcomes, Assertions and Evidence items for the Data Security and Protection Toolkit 2025-26 version 8 (18 September 2025)
Data Security and Protection Toolkit 2025-26 version 8 in spreadsheet format.
Changes to the DSPT for large NHS Organisations in 2024-25 and Independent providers who are Operators of Essential Services (OES) 25-26 (updated 15 Sept 2025)
Details about how the DSPT is changing for Independent Providers who are Operators of Essential Services and has changed in 24-25 for NHS Trusts, CSUs, ALBs and ICBs and a copy of the 23-24 DSPT Outcomes and Indicators of good practice, FAQs, a mapping to other frameworks, example scoping templates and DSPT mapping for NHS Trusts, OES, CSUs, ALBs and ICBs. FAQs have been updated.
Toolkit webinars and update events for 2025-26 (10 September 2025)
Includes details of dates and Teams details of Webinars through June 2026. (Note change of Date for September Webinar for Dentists, GPs, Local Authorities, Opticians, Others (including Hospice and Charities), Pharmacies and University (including Researchers)