Your organisation needs to complete and publish its Data Security and Protection Toolkit (DSPT) self-assessment by 30th June 2022.
Publishing an annual DSTP self-assessment will also help your organisation demonstrate its GDPR and cyber maturity. This is required for you to meet your NHS contractual obligations.
Health and care organisations that have access to NHS Patient Data and Systems should complete and publish a DSPT self-assessment every year. These organisations will publish against the standard to provide assurance that they are practising good data security. The standard also requires proof that they are handling personal information correctly. This includes maintaining the security of patient information.
What should I do now?
Please log in to your DSPT account and complete your assessment for 2021-2022. If you completed an assessment for 2020-2021 but have not had any evidential change for 2021-22, then this is good news. Your existing responses will be carried forward to your new toolkit. However, you should review and confirm these as well as working on any new or changed evidence items.
It is important that you actually have the evidence at this stage as auditing is likely. Simply saying you have evidence is no longer enough.
Don’t forget to complete and publish your self-assessment by 30th June 2022.
If you need help, we have helped many care providers with their assessment. This includes compiling or producing documentary evidence and we can help you.
You can call us on 03333 22 1011 or contact us here.
