How to complete your DSPT before the 30 June deadline – and why it matters

The 30 June 2025 deadline for completing the Data Security and Protection Toolkit (DSPT) is fast approaching and it applies to all care providers, whether you’re fully digital or not.

Even if you use a secure digital care system like Care Control, your organisation must submit or renew your DSPT every year to remain compliant. And if you’re still using paper records, the DSPT is even more vital because you’re handling personal and sensitive data daily.

What is the DSPT?

The DSPT is an annual self-assessment that helps you check and improve how your service handles data and cyber security. It’s designed to show that you’re taking the right steps to protect client and staff information – and that you’re meeting the legal requirements expected of care providers.

Why it matters – for every provider

By completing the DSPT and reaching ‘Standards Met’, you’ll:

• Give families, clients and staff confidence that their information is handled safely and securely
• Meet expectations from the Care Quality Commission, particularly around governance and data handling
• Prove that you comply with Data Protection laws and meet national Data Security Standards
• Access critical services such as NHSmail and Shared Care Records, which help improve joined-up care

Even if you’re not using digital systems yet, this still applies. Just handling paper files or emailing client information is enough to trigger these responsibilities.

How to complete your DSPT

Completing the DSPT is easier than you might think, especially with the free templates and step-by-step guidance available via Digital Care Hub. Here’s how to get started:

1. Register or log in at www.dspt.online.nhs.uk

2. Choose the right entry level – usually ‘Approaching Standards’ or ‘Standards Met’

3. Work through the toolkit sections, covering everything from policies and staff training to access controls and secure storage

4. Use the free support available via the Better Security, Better Care programme

5. Submit your self-assessment before the 30 June 2025 deadline

Don’t leave it too late

If you don’t complete the DSPT, you could lose access to key services like NHSmail – and it may affect your compliance status with commissioners and regulators. It’s also a missed opportunity to strengthen trust, improve data processes, and be recognised for doing things properly.

Need help going digital?
If you’re still on paper and thinking about making the switch, we’re here to help. At Care Control, we support care providers at every stage – from digital transformation to compliance and beyond. Book a demo today and see how we make secure, person-centred care simple.