The DSPT is the online self-assessment that CQC-registered adult social care providers must complete each year to demonstrate good data protection and cyber security practice.
GET FREE DSPT SUPPORT
What is the Data Security Protection Toolkit (DSPT)?
The DSPT lets your organisation demonstrate good data protection and cyber security practice through a structured, online self-assessment.
Completion is a legal requirement for every CQC-regulated adult social care provider in England under the Health and Social Care Act 2012, and the Health and Care Act 2022 has since raised the bar further, reinforcing expectations around information sharing, digital transformation and cyber resilience across the sector.
Why it's a legal requirement, not an option
CQC-regulated adult social care providers must complete the DSPT annually. It's not just good practice. It is set out in legislation and reinforced by more recent digital and information-sharing expectations.
What the toolkit covers
Four areas make up the annual assessment, from who's responsible to the systems you rely on every day.
| Staff roles & responsibilities
Who owns data protection and cyber security in your organisation, and how that's assigned. | Policies & procedures
The written policies that guide how your team handles information day to day. |
| Data security & information governance
How personal and organisational data is kept accurate, confidential and available. | IT systems & cyber security
The technical safeguards protecting your systems from cyber threats. |
What achieving "Standards Met" gives you
| Safe, secure information handling
Demonstrates that personal information is managed safely and securely across your organisation. |
| Legal & contractual compliance
Meets legal and contractual requirements, including the National Data Guardian's 10 Data Security Standards. |
| Evidence for CQC inspections
Provides clear evidence of good information governance and cyber security to support inspections. |
| Confidence across the board
Builds trust with the people you support, their families and your own workforce. |
Free One-to-One Support to Complete Your DSPT
Hampshire Care Association has partnered with Better Security, Better Care to help care providers in Hampshire and on the Isle of Wight complete their Data Security and Protection Toolkit (DSPT).
We are offering free, one-to-one support sessions to help guide providers through the process of completing their DSPT, which can take place in person, online or over the phone.
Click this link to book a support session
Digital Health Checks
Funded through the Better Security, Better Care programme and delivered by Hampshire Care Association's dedicated Care Sector Assurance Lead, these Digital Health Checks are FREE and available to care providers in Hampshire, Southampton, Portsmouth and the Isle of Wight, either in person or online.
The Health Check provides a practical review of your organisation's cyber readiness, helping you identify strengths, address potential risks, and improve your resilience. It covers staff awareness, incident response, backup and recovery, and business continuity, with tailored recommendations to strengthen your cyber security.
The review can also provide valuable evidence to support CQC requirements, demonstrating effective cyber security, risk management, leadership oversight, and workforce awareness.
To find out more or to book your free Cyber Security Health Check, please email our Care Sector Assurance Lead.
Contact Our Care Sector Assurance Lead
DIGITAL HEALTH CHECK INFO FROM CARE HUB
Online Resources
You can access free information, guides and films about the DSPT on the Digital Care Hub website, where you can also register for regular national updates.
Visit the Digital Care Hub website for free resources, templates and guidance about all things DSPT
Contact us
If you require support, advice, guidance, or wish to arrange a meeting to discuss the Data Security and Protection Toolkit, please do not hesitate to contact us.
