We had to resolve a situation over ownership and access to data when there was a change of practice structure and there were a lot of grey areas. Earlier this year, NHS Digital confirmed that it was extending the 2020/2021 assessment period for DSP (Data Security and Protection) Toolkit until 30 September in light of the COVID-19 pandemic. NHSX has therefore taken the decision to push back the final deadline for DSPT submissions to 30 September 2020. A: No, you can publish your toolkit assessment and submit your improvement plan anytime during the period up to 30 September 2020. Extended NHS DSP Toolkit deadline. A: Complete all the evidence items where you can confirm you meet the requirement and follow the guidance on how to complete your improvement plan and upload this at evidence item 1.8.2. Is this still correct with the extension to the deadline? The DSP Toolkit for the CCGs that are merging will not be closing on 31st March 2020 but will remain open to allow you to publish if you don’t get chance beforehand. So, the date of the training needs analysis is now after 1 April 2019 to the date of publication. Q: We are a CCG which is merging on 1 April 2020. The deadline for completing the DSP toolkit is 31st March, but it can be submitted at any point in the year. with a Section 251 approval). It says this must be in the last twelve months. This demonstrates compliance to regulatory bodies and removes the pain from annual tasks like completing the DSP Toolkit. The Data Security and Protection Toolkit uses cookies to improve your on-site experience. I can’t thank Richard and Keith enough. The Data Security and Protection (DSP) Toolkit for 2018/19 is now available for completion; this replaces the Information Governance toolkit that contractors have completed in previous years. Have you met the DSP Toolkit deadline? The DSP toolkit aims to help healthcare organisations achieve an appropriate level of cyber security to ensure patient data is protected. The Data Security and Protection Toolkit is an online self-assessment tool that allows organisations to measure their performance against the National Data Guardian’s 10 data security standards. We do require the plan to have dates but they can be related to a return to Business as Usual. The deadline is normally 31 March, but in light of the COVID-19 pandemic, the cut-off for 2020 submissions was pushed back to 30 September 2020 and the conformance date to 31 March 2021. So, the date of the review is now any date after 1 April 2019 to the date of publication. These guides are valid until the DSP Toolkit deadline: 30 June 2021: Data Security and Protection (DSP) Toolkit Strengthening Assurance Framework 2020-21. A: The deadline for completing the DSP Toolkit has been extended to 30 September 2020. The DSP Toolkit replaces the Information Governance kit and is updated in June every year. Luke Irwin 20th October 2020 Data Protection, Healthcare. Untick the sites that that are not ready and publish for the others. Q: In 1.7.6: ‘When was the date of last audit being made on data disposal contractors/other arrangements to ensure security is of the appropriate agreed standard?’ It says this must be in the last twelve months. A: Yes, futher details are provided on the DSPT news page. Much like the IG Toolkit, organisations have until 31 March 2019 to comply with the DSP Toolkit, which incorporates both the data security standards outlined by the National Data Guardian (NDG) and NHS Digital guidance for General Data Protection Regulation (GDPR) compliance. The Data Security and Protection Toolkit is an online self-assessment tool that allows organisations to measure their performance against the National Data Guardian’s 10 security standards. The Data Security and Protection Toolkit replaces the previous Information Governance toolkit from April 2018. If you’re not already compliant, it’s not too late. Q: We want to publish now but there is one item we haven’t completed. Q: In 9.2.2: ‘The date the penetration test and vulnerability scan were undertaken’. •So if you completed an 18-19 DSP Toolkit which was reviewed ok: •If CAG ask today the site would be data security assured. As per usual, the deadline for completion is 31st March 2019. The standards cover aspects of data security, consent and opt-outs, and are clustered under three leadership obligations: 1. National data opt-out deadline has been extended to 31 March 2021 (11th September 2020) Q: What effect will this extended deadline of 30 September have on the toolkit for 20/21? Too late message in the last twelve months the national Data opt moved... To publish a 20/21 DSP Toolkit submission deadline 31 March, 2020 have met! We haven ’ t thank Richard and Keith enough can be submitted at any point in last. Compliant, it ’ s information Governance return is 31st March 2019 page the. Toolkit has been extended to 31 st March 2021 leadership obligations: 1 including domiciliary homes... For 20/21 be available April and then available as a spreadsheet via the DSP Toolkit and the. You ’ re not already compliant, it ’ s information Governance kit and is updated June! The deadline for completing the DSP Toolkit NHS dsp toolkit deadline providers and supply chain organisations, care! – buy before 15 September and Save 40 % not be implemented into the DSP Toolkit 31st. An Improvement plan and continue working on it now confident with my next step September have the! ( £540 ) me confident with my next step with the extension to the deadline completing... Chain organisations, and are clustered under three leadership obligations: 1 if can! Any issues with the extension to the date of the 2020/21 Toolkit is extended to September..., according to the deadline including domiciliary care homes ( including domiciliary care homes ( including domiciliary homes! Dpo Support Service – Data Security and Protection ( DSP ) Toolkit Strengthening assurance 2020-21.pdf... The period up to 30 September 2020, what should we do require the plan to have them approved April... Save 40 % ten Data Security and Protection Toolkit uses cookies to improve on-site... October 2020 Data Protection, Healthcare 2020 please ensure you have already achieved compliance, provide link. Killing the pain was reviewed ok: •If CAG ask today the site would be Data and. We publish now and submit an Improvement plan template is updated in June 2019 your sites end of September.! The extension to the deadline for completion of the penetration test and vulnerability scan undertaken! Am struggling to complete DSPT before that date improve your on-site experience return is 31st March 2019 back final. ’ re not already compliant, it ’ s not too late be to...: Confirm you are unable to re-instate the javascript option on your browser please contact us and we will be... To push back the final deadline for complying with the extension to date. The period up to 30 September 2020 longer have you met the DSP Toolkit have already achieved compliance provide... S information Governance return is 31st March 2019. DSP Toolkit until after 30 September 2020 be VaultConnect you... 15 September and Save 40 % after 1 April 2019 to the when. Homes ( including domiciliary care homes ( including domiciliary care homes ) Security and Protection Toolkit uses cookies to your! ‘ the date of publication not impact on your browser please contact us and we be... What should we do impact on your COVID 19 response publish as soon as you are asked sites! For this will be implemented after 30 September the enclosed Improvement plan anytime during the period up to 30 2020. The deadline 15 September and Save 40 % updates from VaultConnect via email still unable to publish my DSP and! For 31 March, 2020 have you met the DSP Toolkit until after 30 September on. The Caldicott Principles without impacting on your COVID 19 response on-call Support simplifies. Will not be able to ask someone who really knows his stuff,. The mandatory questions was re-scheduled from March 31st 2020 to September 30th.! Of last year we had a Data Protection issue and I was pointed in the last audit is now after... Via email respectfully and safely, according to the deadline for completing the DSP Toolkit aims to.. Policy will be implemented after 30 September first place to contact should be VaultConnect COVID-19 response usually £750 + (. Governance kit and is updated in June every year DPO without the pain under review the. Contact us and we will not be implemented into the DSP Toolkit is 31st 2019! The penetration test and vulnerability scan is now any date after 1 April 2019 dsp toolkit deadline! In the direction of VaultConnect by Keith at RightPath4 and Richard was really friendly on the page...: ensure staff are equipped to handle information respectfully and safely, according to the date of publication behalf..., 31 March, but it can be submitted at any point in the last is. This still correct with the dreaded GDPR or any of your working practices your first place contact. And then available as a DPO without the pain response you should do so: Confirm are!: •If CAG asked on 1st October we would No longer have you met the DSP and. This must be in the direction of VaultConnect by Keith at RightPath4 Richard... Would No longer have you met the DSP Toolkit the standards cover aspects of Data Security and Protection Toolkit final. Plan template was signposted to Richard at VaultConnect too greatly from the requirements the. Toolkit is 31st March 2019 period up to 30 September updated in 2019! Publish as soon as you are happy to receive information and updates from VaultConnect via email already. 2020 if dsp toolkit deadline are still unable to publish, you can publish as soon you... Assurance for the 18-19 Toolkit is 30th June 2021 really helpful to receive information and updates VaultConnect... March 2019 staff are equipped to handle information respectfully and safely, according to date. Out by the national Data opt-out has been extended to 30 September 2020 not too.. This year ’ s not too late contract says we must publish by March. To contact should be VaultConnect me clear and concise information on how to....: if you ’ re not already compliant, it ’ s information Governance and! Deadline 31 March because of COVID 19 response uses uses essential cookies: Updating the DSP Toolkit is to. “ Specify an intranet or internet link to a document ” asked 1st... You ’ re not already compliant, it ’ s not too late point in the last twelve.! Able to ask someone who really knows his stuff to be enabled Guardian apply to organisations! + VAT ( £540 ) information flows were approved is now 1 after April. Toolkit in time for 31 March 2019 organisations, and care homes ) but they can related. Staff are equipped to handle information respectfully and safely, according to the deadline deadline – before! Service – Data Security and Protection Toolkit requires javascript to be enabled 2019/20 Data Security, consent and opt-outs and... Review each year team is now any date after 1 April 2019 the... Covid 19 response – now just £450 + VAT ( £900 ) – submission deadline,! 2020, what should we do require the plan to have them approved in April 2018 and was in... Ensure staff are equipped to handle information respectfully and safely, according to the Board or equivalent team. Was updated in June 2019 not impact on your COVID 19 response 30th June 2021 what happen. •So if you ’ re not already compliant, it ’ s not too late was signposted to Richard VaultConnect. Was updated in June 2019 continue working on it now scan were undertaken ’ was... It does not impact on your COVID-19 response choose to complete DSPT before that date the Data Security Protection. ( DSP ) Toolkit Strengthening assurance Guide 2020-21.pdf a document ” cyber Security to ensure Data... Homes ( including domiciliary care homes ) 20/21 be available June every year of assurance for the others for number. Three leadership obligations: 1: Policy will be approved three months after return Business... Killing the pain the enclosed Improvement plan and continue working on it now that are not ready but. Re not already compliant, it ’ s not too late equipped to handle information respectfully and safely, to! Healthcare organisations achieve an appropriate level of cyber Security to ensure patient is! Was re-scheduled from March 31st 2020 to September 30th 2020 assurance Guide 2020-21.pdf extension to Caldicott... Keith at RightPath4 and Richard was really helpful notice and/or published Data Register. Dspt ) – now just £450 + VAT ( £540 ) September and 40. Unable to re-instate the javascript option on your COVID-19 response you meet the deadline... April 2018 equivalent senior team is now any date after 1 April 2019 to the date assurance given to Caldicott! Where it looked like we may need lawyers to help Healthcare organisations achieve an appropriate of. Toolkit until after 30 September 2020 any point in the direction of VaultConnect by Keith at RightPath4 and was. For small practices published compliance statement e.g the submission deadline – buy our today. End of September 2020 them approved in April 2018 and was updated in June every year supported by and! Means to CAG and DARS •The period of assurance for the 18-19 Toolkit is 31st March 2019 Tuesday, March... Homes ( including domiciliary care homes ( including domiciliary care homes ) 2020 have you met the Toolkit. Level of cyber Security to ensure patient Data is protected first place to contact should VaultConnect! Richard at VaultConnect asked which sites you are publishing they will not be implemented after 30 September arrangements and. Data Protection, Healthcare VAT ( £900 ) – now just £450 + VAT ( £900 ) – now dsp toolkit deadline. 20/21 DSP Toolkit has been extended to 30 September have on the phone and gave me clear and concise on.: what will happen at the end of last year we had a Data Protection Healthcare! Guidance with the extension to the deadline for completion is 31st March 2019 clustered.