The Data Security and Protection Toolkit (DSPT) is the NHS’s online self-assessment for organisations that access or process NHS patient data. It ensures you meet the National Data Guardian’s 10 Data Security Standards, showing the NHS, regulators, and patients that you handle sensitive health data safely.
Whether you’re a GP practice, care provider, or supplier working with NHS data, DSPT compliance demonstrates your commitment to protecting personal health information and meeting data protection legislation.
AvISO helps you navigate, evidence, and submit DSPT with confidence — while embedding practical data security and governance processes into your operations.
We guide you through the process of preparing, evidencing, and submitting your DSPT self-assessment — with practical templates, expert consultancy, and fixed-cost support.
Whether you’re working towards your first DSPT, renewing your submission, or aiming for higher compliance levels, our support is tailored to your operations.
We help you build a system that not only meets DSPT but also strengthens your overall data protection practices.
Expert consultancy and project delivery
System development and documentation
Internal training and team engagement
Annual submission and ongoing support
DSPT aligns closely with other standards and certifications. We help integrate them to reduce duplication, strengthen assurance, and add business value.
We design integrated systems where documents, evidence, and audits serve multiple standards — all supported through ISOvA.
ISOvA is our Microsoft 365-based platform that keeps DSPT evidence, risks, and actions in one place.
With ISOvA, you can:
Clients and auditors consistently tell us ISOvA reduces stress and keeps DSPT compliance clear and manageable.
Book a call to discuss your scope, timelines, and how ISOvA can simplify your DSPT journey.
Kent: 01892 800476 | London: 02037 458 476 | info@avisoconsultancy.co.uk
The NHS’s Data Security and Protection Toolkit — an annual self-assessment to show you meet national data security standards.
Any organisation accessing or processing NHS patient data, including GPs, care providers, and suppliers.
Guidelines set by the National Data Guardian covering leadership, staff training, incident reporting, secure data handling, and technical controls.
No — but ISO 27001 strengthens your evidence base and demonstrates a higher level of information security maturity.
Annually — with updates and evidence refresh required each year.
Most organisations complete DSPT in 1–3 months depending on size, readiness, and evidence gaps.
Yes — it’s often a prerequisite for working with NHS organisations or handling NHS data.
What Standard are you looking to obtain:
