Data Security and Protection Toolkit (Version 3) launched for 2020-21.

Data Security and Protection Toolkit (Version 3) launched for 2020-21.

 

Version 3 of the Data Security and Protection Toolkit is now live.

The evidence items have been updated for the 20-21 DSP Toolkit year.

The Data security and Protection Toolkit is an annual self-assessment and the deadline for the 20-21 publication is 30th June 2021.

NHS Trusts, CCGs, CSUs and DHSC ALB’s are required to submit a baseline (interim) submission by 28th February 2021.

Now that the 20-21 version of the DSP Toolkit has been published organisations will no longer be able to publish a 19-20 DSP Toolkit, organisations should continue to work on their 20-21 Toolkit.

Where evidence items are unchanged details recorded are carried forward from the 19-20 Data Security and Protection Toolkit.

The 20-21 requirements are also provided in a spreadsheet, together with details of changes.  Please note some changes have been made since their publication in April in to reflect the current policy position and in response to user research feedback.

Updated Big Picture guides are also now available along with updated Audit guides.

Key updates

NHS Trusts - Category 1

Evidence items rationalised where they are now considered “business as usual” or where there is overlap between evidence items.

Extra evidence items on Backups and Technical requirements

Technical evidence items move to Mandatory from Non mandatory particularly items covering Cyber Essentials.

CE+ On site assessment is a non-mandatory requirement for 20-21.

 

CCGs, CSUs and DHSC ALBS - Category 2

Evidence items rationalised where they are now considered “business as usual” or where there is overlap between evidence items.

Additional evidence items have been added relating to Backups and Technical requirements

CE+ On site assessment is a non-mandatory requirement for 20-21.

CCGs who are merging before 30 June 2021, should complete and publish their assessment before the merger. The newly merged CCG would not be expected to publish a further assessment during 20-21.

 

Primary Care (excluding GPs), Social care, Companies, Charity/Hospice, Researchers/Universities, Companies, Local Authorities, NHS Business Partners - Category 3

Evidence items updated to aid understanding with additional information provided to support completion.

Evidence items rationalised where there is overlap between evidence items.

Additional evidence items have been added relating to mobile devices and paper records

 

GP - Category 4

Evidence items updated to aid understanding with additional information provided to support completion.

 

 

Supporting Documents