HELP WITH DSPT
READ THE
FAQs
below
Debbie
Janice
All care providers need to store and share information securely, whether these are paper records or digital files.
​
The Data Security and Protection Toolkit (DSPT) is an annual online self-assessment tool for health and care providers that should be completed each year, by 30 June, which helps providers to assess data security compliance.
​
The DSPT helps adult social care providers in England to check and improve how they keep people’s information safe. It is the official self-assessment tool for the care sector and is widely recognised by CQC, local authorities and the NHS.​
​
Why do providers need to do this?
-
It helps providers to keep confidential information safe.
-
It helps to protect providers from risks of being fined for data breaches.
-
It helps providers protect themselves from cyber attacks.
-
Meeting the standards in the DSPT will demonstrate compliance with legal and CQC requirements.​
​
In completing the DSPT each year – and meeting ‘standards met’ providers will be able to:
-
reassure people who use services, their families and staff teams that information is being managed safely.
-
answer the Care Quality Commission’s Key Lines of Enquiry questions about how services are managed and led.
-
demonstrate that they are meeting legal requirements including Data Protection Legislation and the Data Security Standards
-
access key services such as NHS.net emails and shared care records.
​
Better Security, Better Care is the national and local support programme to help care providers to understand their responsibilities and to complete the DSPT.
The national Better Security, Better Care team provides a range of free guidance, tools and advice services to help providers to understand and improve their data protection and cyber security arrangements.
​
​​
​
​
iCG CAN HELP
The Independent Care Group (iCG) is supporting providers across York and North Yorkshire to complete and publish their DSPT annual assessment.
​​
If you've not registered to complete the Digital Hub data security and protection tool kit (DSPT) self-assessment, or have not published your annual assessment outcome (due June each year)
iCG members have priority access to support for this from the team here at iCG.
​
GET IN TOUCH TODAY
​
​
​
Debbie and Janice can support you in getting registered and through the necessary standards.
Email Debbie at: businessmanager@independentcaregroup.co.uk
or Janice at: memberservices@independentcaregroup.co.uk
and we will support you in getting registered and through the necessary standards.​
Act now, and make sure you are part of the
Better Security, Better Care programme today.
WATCH THE VIDEO
The Digital Care Hub have produced this animated film to tell you all you need to know about the DSPT.
​
In less than four minutes, the film looks at how the Data Security and Protection Toolkit helps you to check your data and cyber security policies, procedures and practices – and demonstrate that you have good systems in place.
​
The film explains the standards that you can reach on the DSPT, and how this opens up access to shared information systems, and provides reassurance to people who draw on services, families, staff, funders and professional partners. .
Data Security and Protection Tool Kit -
Frequently Asked Questions
What is the DSPT and why do we have to do it?
The DSPT is an online self-assessment tool that is used to measure implantation of data protection and information security against National Data Guardian standards.
Do I need to complete it?
If you answer yes to any of these questions, then you must complete it each year and publish the findings by 30 June.
• Are you an adult social care provider registered with the CQC?
• Do you have a contract with a Local Authority that has a specific clause mandating that you complete the DSPT?
• Do you have a standard NHS contract and receive NHS contract funding?
• Do you use NHSmail as a portal for access to and delivery of NHS patient data?
How long does it take to complete it?
If you have completed it in a previous year this should be relatively simple to update. You can also speed up the process by reviewing and updating it throughout the year.
If the person who completes it leaves the organisation, make sure they have a succession plan and handover in place so that the person who picks this up is aware of the requirements.
What evidence do I need to provide for the DSPT?
The DSPT has some mandatory requirements and there are guidance notes for each question to help and support you. Much of the DSPT is open for you to self-assess and demonstrate your organisation’s solutions meet the requirements of the criteria.
My organisation is part of a larger company, what happens in these circumstances?
A larger multi-site organisation can opt to complete the DSPT centrally for all sites or can ask individual locations to complete their own DSPT. This is dependent upon the organisation’s stance and how they run their business.
My organisation is dual registered, do I complete one or two DSPTs?
If the services are registered with CQC then they will be inspected on a service basis rather than a location basis so you will need to complete the DSPT for each registered service.
What happens if I don’t have the DSPT in place?
If you have not submitted your DSPT by the deadline and published the certificate you will not be able to use this as evidence that you are compliant with commissioners, regulators, partners and people drawing on your services. This limits your ability to show you uphold high standards for data protection.
How can I get support?
There is a range of support, information and recorded webinars on the Digital Hub’s website, which can be found here:-
www.digitalcarehub.co.uk/digital-skills-and-training/elearning/
Or alternatively, contact Debbie at iCG:
