Data Security and Protection Toolkit Guide

The Data Security and Protection (DSP) Toolkit (Version 3) 2020-21 is an annual self-assessment, usually submitted by 31 March each year, but the deadline for submitting the 2020-21 publication is 30 June 2021. Some changes have been made since the last DSP Toolkit publication. For Dental Practices, which are classed as Category 3, the evidence information has been explained much better with additional information provided to support the completion of the Toolkit.

Providers who can evidence compliance with the DSP Toolkit will be able to demonstrate to the Information Commissioner’s Office (ICO) that they are also compliant with the key elements of GDPR when dealing with medical records and other sensitive patient and service user data.

Health and Social Care Act 2008 (Regulated Activities) Regulations 2014: Regulation 17

The intention of this regulation is to make sure that providers have systems and processes that ensure that they are able to meet other requirements in this part of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 (Regulations 4 to 20A). To meet this regulation; providers must have effective governance, including assurance and auditing systems or processes.

These must assess, monitor, and drive improvement in the quality and safety of the services provided, including the quality of the experience for people using the service. The systems and processes must also assess, monitor and mitigate any risks relating to the health, safety and welfare of people using services and others. Providers must continually evaluate and seek to improve their governance and auditing practice.