What is the DSPT

The DSPT is a really helpful annual self-assessment for health and care organisations. It shows you what you need to do to keep people's information safe, and to protect your business from the risk of a data breach or a cyber-attack. Once you've completed the DSPT, it will help you demonstrate, to the people you support, your commissioners, GPs and other NHS services, that you are handling information securely.

Who needs to complete the DSPT?

  • All adult social care services in England, including residential and nursing homes, supported living, homecare, extra care, shared lives and day services, are strongly recommended to complete the DSPT. It's increasingly what local authorities and CCGs will expect to see.
  • If you use NHSmail, there is a requirement for you to register with the DSPT now. If you don't register with the DSPT, then at some point in the future, you may no longer be able to use NHSmail.
  • You'll need to complete the DSPT before your service can be part of any of the projects and initiatives that allow care services to directly access NHS patient information systems, for example, GP records and shared care records.
  • If you have services funded by the NHS, for example under continuing healthcare, there is a legal requirement to complete the DSPT every year

What do I need to do now?

Partners in Care will be releasing a programme of support in the next few months so please join our mailing list to be notified of these via