NHS DSPT (Data Security and Protection Toolkit)
The annual self-assessment NHS organisations and their suppliers must complete to demonstrate compliance with the data security standards required to handle NHS patient data and connect to NHS systems.
How it works
The NHS Data Security and Protection Toolkit is the gateway to handling NHS data. NHS Trusts, GP practices, and any supplier with access to NHS systems must complete the DSPT annually. The toolkit assesses against the National Data Guardian's ten data security standards and includes evidence requirements covering staff training, access controls, incident management, data flows, and supplier assurance. For AI suppliers building into NHS environments, DSPT alignment is the architectural and operational baseline. Ayoob AI is DSPT-aligned, and every NHS-targeting system we ship is designed against the toolkit requirements from day one.
Related terms
UK GDPR
The UK's data protection regime as established by the Data Protection Act 2018, retaining the substantive requirements of EU GDPR after Brexit, governing how personal data is collected, processed, stored, and shared.
ISO 27001
The international standard for information security management systems (ISMS), specifying a framework of policies, controls, risk assessment, and continuous improvement for protecting information assets.
Cyber Essentials
A UK government-backed certification scheme covering five baseline technical security controls: boundary firewalls, secure configuration, user access control, malware protection, and patch management.
Want to see this technology in action?
Book a Discovery Call