The Data Security and Protection Toolkit is an online self-assessment tool that allows organisations to measure their performance against the National Data Guardian’s 10 data security standards.
All organisations that have access to NHS patient data and systems must use this toolkit to provide assurance that they are practising good data security and that personal information is handled correctly.
This system is subject to ongoing development.
What's new?
Changes to the DSPT for large NHS Organisations in 2024-25 and Independent providers who are Operators of Essential Services (OES) and Genomics organisations in 25-26 (updated 13 February 2026)
Details about how the DSPT is changing for Independent Providers who are Operators of Essential Services and Genomics organisations (as nominated by the Department of Health and Social Care) and has changed in 24-25 for NHS Trusts, CSUs, ALBs and ICBs and a copy of the 23-24 DSPT Outcomes and Indicators of good practice, FAQs, a mapping to other frameworks, example scoping templates, MFA exception template and DSPT mapping for NHS Trusts, OES, CSUs, ALBs and ICBs. FAQs have been updated.
Toolkit webinar slides (Updated 09 February 2026)
Including video and presentation slides from recent Webinar sessions including the hints and tips for the DSPT for 25-26.
Toolkit webinars and update events for 2025-26 (27 January 2026)
Includes details of dates and Teams details of Webinars through to June 2026.
Reminder: DSPT Improvement plan updates to be submitted by 31 December 2025 (31 December 2025)
Details of how to submit your December DSPT Improvement plan update.
Nominations are open for the National Health and Social Care Information Governance Annual Awards 2025/2026 (22 December 2025)
Details of how to nominate a team or individual for the National Health and Social Care Information Governance Annual Awards 2025/2026
Improvement plan updates and Interim DSPT Assessment publications required by 31 December (11 December 2025)
Reminder to organisations completing a CAF DSPT that an Interim DSPT Assessment publication by 31 December and a reminder to organisations who have agreed to provide an Improvement plan update.
