The Data Security and Protection Toolkit is an online self-assessment tool that allows organisations to measure their performance against the National Data Guardian’s 10 data security standards.
All organisations that have access to NHS patient data and systems must use this toolkit to provide assurance that they are practising good data security and that personal information is handled correctly.
This system is subject to ongoing development.
What's new?
Toolkit webinar slides (Updated 13 October 2026)
Including video and presentation slides from recent Webinar sessions including DSPT 2026-27 v9 launch.
System changes and release notes (updated 13 October 2026)
A high-level summary of recent changes (including the release of the functionality to upload audits) is provided here for reference.
Outcomes, Assertions and Evidence items for the Data Security and Protection Toolkit 2026-27 version 9 (2 October 2026)
Data Security and Protection Toolkit 2026-27 version 9 in spreadsheet format.
DSPT Audit 26-27 Areas of Mandatory Audit NHS Trusts, ICBs, ALBs, CSUs, OES, Genomics and IT Suppliers (01 October 2026)
The outcomes and assertions of the DSPT which must be included in a 26-27 DSPT Audit for NHS Trusts, ICBs, ALBs, CSU, OES and Genomics.
DSPT webinars for 2026-7
Schedule of DSPT webinars for 2026-7
Improvement Plans - Instructions for 2025-2026 (7 May 2026)
This applies to NHS Trusts, Integrated Care Boards (ICBs), Commissioning Support Units (CSUs), Independent Providers who are Operators of Essential Services under NIS, Genomics organisations, Key IT Suppliers, Local Authorities and Department of Health and Social Care (DHSC) Arm's Length Bodies (ALBs). Including example Improvement plan.
