What is the NHS Data Security and Protection Toolkit (DSPT)?

The DSPT is an online self-assessment tool used by organisations that process NHS patient data. It helps demonstrate compliance with the National Data Guardian’s 10 data security standards. Completion is mandatory for NHS suppliers and care providers.

Who is this service designed for?

This service is designed for NHS organisations; NHS contractors and suppliers; GP practices, dental clinics and pharmacies; care homes and domiciliary care providers; charities and third-sector organisations handling NHS data; and any organisation required to complete the DSPT annually.

How long does it take to complete the DSPT?

Completion times vary depending on the organisation and its starting point. Iniver typically recommends allowing at least four weeks, with many non-NHS organisations taking between four and twelve weeks.

Will this help us meet the National Data Guardian’s standards?

Yes. The DSPT is built around the National Data Guardian’s 10 data security standards, including leadership commitment, staff training and awareness, secure systems and processes, and effective breach response and reporting.

How long does a formal Independent DSPT Assessment take?

Where an Independent DSPT Assessment is required, Iniver recommends engaging at least three months in advance to allow sufficient time before the submission deadline.

What happens after we complete the DSPT?

After submission, you receive confirmation of compliance which can be shared with NHS partners. Iniver can also provide post-submission reviews and ongoing support for future audits or re-submissions.

DATA SECURITY & PROTECTION TOOLKIT

Data Security & Protection Toolkit (DSPT) Support and Audit Services

For organisations working in the health and care sector, the NHS Data Security and Protection Toolkit (DSPT) is a mandatory annual assessment. Your DSPT submission demonstrates how well you meet national data security, cyber security and information governance standards, but completing it accurately and on time can be challenging.

At Iniver, we provide expert DSPT support, consultancy and independent DSPT audit services to help health and care organisations complete their submission with confidence. With over a decade of experience supporting DSPT and IG Toolkit returns, including supporting clients through NHS England audit requirements, we help organisations of all sizes meet their obligations efficiently and correctly.

Whether this is your first DSPT submission, you are looking for full DSPT support, or you require a formal independent DSPT assessment, we offer flexible, tailored packages that match your assurance needs.

Why the DSPT Matters

The DSPT assigns every organisation to a specific category, each with its own evidence obligations and audit requirements. Being correctly classified and submitting accurate evidence is essential. Incorrect categorisation or missing evidence can lead to unnecessary work, delays, or compliance issues.

For organisations in categories requiring an independent DSPT audit, Iniver delivers this through our Validate and Assure package, ensuring your submission meets every required standard.

Whatever level of support you need, we begin with an initial conversation to understand your organisation, your DSPT history, and the level of assistance required. From there, we guide you through each step of your DSPT journey.

Our DSPT Support Packages

We offer clear, structured services designed to meet different levels of DSPT readiness, from quick reviews to full DSPT consultancy and formal audits.

Service	Double-check	First Time or Full Support	Validate and Assure
Support with DSPT Registration where needed
Initial Gap Analysis
DSPT portal management by Iniver
Support completing assertions where areas are missing
Pre-submission Gap Analysis
Final review by Iniver before submission
Formal DSPT Independent Assurance and Audit

faq

DATA SECURITY & PROTECTION TOOLKIT

Data Security & Protection Toolkit (DSPT) Support and Audit Services

Why the DSPT Matters

Our DSPT Support Packages

GET IN TOUCH