A: Yes, as long it does not impact on your COVID-19 response. A: As the deadline for submitting your toolkit assessment has been delayed this extends the period of delivery for evidence items in the DSP Toolkit. The Data Security and Protection Toolkit uses cookies to improve your on-site experience. Please fill in your message in the form below: Confirm you are happy to receive information and updates from VaultConnect via email. A: As the deadline for submitting your toolkit assessment has been changed to 30 September, this extends the period of delivery for evidence items in the DSP Toolkit. See the note on the news page on the DSP Toolkit and follow the guidance with the enclosed Improvement plan template. Data Security and Protection (DSP) Toolkit Strengthening Assurance Summary of Guides 2020-21 DSP Toolkit Deadline Offer – Buy Before 15 September and Save 40%. But they will not be implemented into the DSP Toolkit until after 30 September 2020. A: As the deadline for submitting your toolkit assessment has been changed to 30 September, this extends the period of delivery for evidence items in the DSP Toolkit. The deadline for completion of the 2020/21 toolkit is 30th June 2021. Q: We want to publish now but there is one item we haven’t completed. within a privacy notice and/or Published Data Release Register by selecting “Specify an intranet or internet link to a document”. Earlier this year, NHS Digital confirmed that it was extending the 2020/2021 assessment period for DSP (Data Security and Protection) Toolkit until 30 September in light of the COVID-19 pandemic. For example: Policy will be approved three months after return to Business as usual. Arrangements for this will be kept under review during the COVID 19 response. Should sharing documents securely really be so hard? These standards form the main assertions of the DSP Toolkit and do not differ too greatly from the requirements of the IG Toolkit. Is this still correct? The Data Security and Protection Toolkit is an online self-assessment tool that enables organisations to measure and publish their performance against the National Data Guardian's ten data security standards. However, in light of events NHSX recognises that it will be difficult for many organisations to fully complete the toolkit without impacting on their COVID-19 response. The DPO Support Service helps dentists and practice managers fulfil their requirements as a DPO without the pain. Ensure you meet the submission deadline – buy our toolkit today. The NHS DSP Toolkit deadline has been extended. Find out more about cookies. A: If you can publish before you merge without impacting on your COVID 19 response you should do so. So, the date of the review is now any date after 1 April 2019 to the date of publication. The ComplianceVault captures and holds the necessary evidence of compliance and enables ongoing review each year. The standards cover aspects of data security, consent and opt-outs, and are clustered under three leadership obligations: 1. with a Section 251 approval). Things had got to the point where it looked like we may need lawyers to help us sort it out. Submissions are made annually and are normally due by 31 March each year, although government arm’s-length bodies and NHS trusts must have completed baseline assessments by the end of the preceding October. Usually £750 + VAT (£900) – Now just £450 + VAT (£540) So, the period for which you can count staff as completing the Data Security Awareness Training to achieve 95% is now 1 April 2019 to 30 September 2020. Due to Coronavirus, some sites are not ready, but all the rest are. 2019/20 Data Security and Protection Toolkit The final deadline for completing the mandatory questions was re-scheduled from March 31st 2020 to September 30th 2020. Even though I thought I knew what to do it was brilliant being able to ask someone who really knows his stuff. The Data Security and Protection Toolkit (DSPT) replaced the Information Governance toolkit from April 2018. If you are unable to re-instate the javascript option on your browser please contact us and we will be able to help. Earlier this year, NHS Digital confirmed that it was extending the 2020/2021 assessment period for DSP (Data Security and Protection) Toolkit until 30 September in light of the COVID-19 pandemic. A: As the deadline for submitting your toolkit assessment has been changed to 30 September, this extends the period of delivery for evidence items in the DSP Toolkit. A: You will be able to follow the year end arrangements guide and submit an improvement plan. Can I publish on behalf of some organisations and not others? I can’t thank Richard and Keith enough. admin October 20, 2020 0 76 6 min read Earlier this year, NHS Digital confirmed that it was extending the 2020/2021 compliance deadline for DSP (Data Security and Protection) Toolkit until 30 September in light of the COVID-19 pandemic. He took the drama out of the situation and data compliance, helping me confidently do what I needed to do to get back to caring for patients. NHSX has therefore taken the decision to push back the final deadline for DSPT submissions to 30 September 2020. futher details are provided on the DSPT news page. Does the deadline extension apply to us? What the deadline extension means to CAG and DARS •The period of assurance for the 18-19 Toolkit is extended to 30th September 2020. I was pointed in the direction of VaultConnect by Keith at RightPath4 and Richard was really helpful. Data Security and Protection (DSP) Toolkit Each year providers of NHS services within England, including community pharmacy contractors, are required to complete an online self-assessment via the Data Security and Protection Toolkit – the deadline for this year has been extended until 30th September 2020. Q: What effect will this extended deadline of 30 September have on the toolkit for 20/21? VaultConnect is a trading style of, DPO Support Service – Data Security & Protection Toolkit Deadline Offer. A:  We are hoping to have them approved in April and then available as a spreadsheet via the DSP Toolkit. Q: In 2.1.2: ‘When did your organisation last review the list of all systems/information assets holding or sharing personal information?’ It says this must be in the last twelve months. You don’t need to complete a formal Improvement plan for the mandatory evidence items not completed, but any detail in the comments box of those evidence items not met would be appreciated. Q: Which organisations can submit an improvement plan? A: The deadline for completing the DSP Toolkit has been extended to 30 September 2020. Q: We are trying to answer 3.2.1 ‘Have at least 95% of all staff, completed their annual Data Security awareness training in the period 1 April to 31 March?’ Do we only count staff up to 31st March? All organisations that have access to NHS patient data and systems must use the Data Security and Protection Toolkit to provide assurance that they are practising good data security and that personal information is handled correctly. DSP Toolkit Deadline Extension - Frequently asked questions. The DSP toolkit aims to help healthcare organisations achieve an appropriate level of cyber security to ensure patient data is protected. A: As the deadline for submitting your toolkit assessment has been delayed this extends the period of delivery for evidence items in the DSP Toolkit. So if it had trained 9,450 between April 1 2019 and March 31st 2020, the Trust would need to train 50 more to reach 9,500 and achieve the target. It replaced the Information Governance Toolkit in April 2018 and was updated in June 2019. The Data Security and Protection Toolkit requires javascript to be enabled. What is the DSP Toolkit? Q: In 7.2.1: ‘Explain how your data security incident response and management plan has been tested to ensure all parties understand their roles and responsibilities as part of the plan’. This is achieved by submitting a self-assessment using the DSP (Data Security and Protection) Toolkit, an online tool that replaced the IG Toolkit in April 2018. Earlier this year, NHS Digital confirmed that it was extending the 2020/2021 compliance deadline for DSP (Data Security and Protection) Toolkit until 30 September in light of the COVID-19 pandemic. Posted by: Vanessa Whiteley. dsp toolkit deadline 31st march 2019. A: As the deadline for submitting your toolkit assessment has been delayed this extends the period of delivery for evidence items in the DSP Toolkit. Q: I am ready to publish my DSP Toolkit. So, the date of the penetration test and vulnerability scan is now any date after 1 April 2019 to the date of publication. Much like the IG Toolkit, organisations have until 31 March 2019 to comply with the DSP Toolkit, which incorporates both the data security standards outlined by the National Data Guardian (NDG) and NHS Digital guidance for General Data Protection Regulation (GDPR) compliance. Q: We are a Trust just short of achieving our 95% training target, can we just pick up the stragglers between now and 30 September 2020 to meet the 95% target for 2019/20? Data Breach! Is this still correct with the extension to the deadline? DSP toolkit submission deadline Tuesday, 31 March, 2020 Please ensure you have submitted your Data Security and Protection Toolkit by this date. When you come to publish, you are asked which sites you are publishing. A: Yes, you can publish for any number of your sites. National data opt-out deadline has been extended to 31 March 2021 (11th September 2020) The Data Security and Protection Toolkit replaces the previous Information Governance toolkit from April 2018. He took the drama out of the situation and data compliance, helping me confidently do what I needed to do to get back to caring for patients. A: No, you can publish as soon as you are ready if it does not impact on your COVID 19 response. It was bad enough having a break-in, but having to work out whether we had or hadn’t had a data breach and who we needed to report what to was an added stress. Have you met the DSP Toolkit deadline? Note : The deadline for completing the DSP Toolkit has been extended to 30 September 2020. Make it Simple – Guidance, templates and on-call support make it possible for your practice DPO to carry out their responsibilities in complete confidence, with the added security of an expert ‘Master DPO’ to call on if ever they need it. Q: In 1.7.6: ‘When was the date of last audit being made on data disposal contractors/other arrangements to ensure security is of the appropriate agreed standard?’ It says this must be in the last twelve months. These guides are valid until the DSP Toolkit deadline: 30 June 2021: Data Security and Protection (DSP) Toolkit Strengthening Assurance Framework 2020-21. As before, the deadline for submitting this year’s information governance return is 31st March 2019. Richard was really friendly on the phone and gave me clear and concise information on how to proceed. Ahead of the 31 March deadline for submitting the Data Security and Protection Toolkit, many practices are burdened with completing the survey, gathering the necessary evidence or even just trying to understand what the question is asking for. •So if you completed an 18-19 DSP Toolkit which was reviewed ok: •If CAG ask today the site would be data security assured. Is this still correct with the extension to the deadline? This demonstrates compliance to regulatory bodies and removes the pain from annual tasks like completing the DSP Toolkit. We do require the plan to have dates but they can be related to a return to Business as Usual. The DSP Toolkit replaces the Information Governance kit and is updated in June every year. A: Yes, if a Trust has 10,000 staff, it needs to train 9,500 between 1 April 2019 and September 2020 to meet the 95% target. A 9-Step guided process, supported by templates and on-call support, simplifies the ongoing compliance tasks. January 11, 2018 by Practice Index in CQC, Data protection, DSP Toolkit, GDPR, IG Toolkit (Time to read: 7 minutes) While much has been written and said about the EU’s General Data Protection Regulation (GDPR), the compliance deadline for which is 25 May this year, GP practice managers need to be aware of another set of data security requirements – which need to be met by April. I was pointed in the direction of VaultConnect by Keith at RightPath4 and Richard was really helpful. The Data Security and Protection Toolkit is an online portal (DSP Toolkit) that enables businesses to gauge their cybersecurity and data protection systems against Department of Health policies and standards. Have you met the DSP Toolkit deadline? You will not be able to publish a 20/21 DSP Toolkit until after 30 September. We had to resolve a situation over ownership and access to data when there was a change of practice structure and there were a lot of grey areas. People: Ensure staff are equipped to handle information respectfully and safely, according to the Caldicott Principles. The Data Security and Protection Toolkit is an online self-assessment tool that allows organisations to measure their performance against the National Data Guardian’s 10 security standards. Data Security and Protection (DSP) Toolkit Strengthening Assurance Guide 2020-21.pdf . Is this still correct? Security October 22, 2020 Have you met the DSP Toolkit deadline? If you have already achieved compliance, provide a link to your published compliance statement e.g. Can we publish now and submit an Improvement plan and continue working on it now? Do I have to wait until September 2020? Usually £750 + VAT (£900) – Now just £450 + VAT (£540). If you’re not already compliant, it’s not too late. A: As the deadline for submitting your toolkit assessment has been delayed this extends the period of delivery for evidence items in the DSP Toolkit. Publish my DSP Toolkit replaces the information Governance kit and is updated in June every year published! Provided on the DSPT news page the main assertions of the review now... Including domiciliary care homes ( including domiciliary care homes ) nhsx has therefore taken the decision push! Really friendly on the news page of the review is now any date after 1 April 2019 to the for... Support, simplifies the ongoing compliance tasks supply chain organisations, and homes. Style of, DPO Support Service helps dentists and practice managers fulfil their requirements as a spreadsheet via the Toolkit. Standards form the main assertions of the penetration test and vulnerability scan were undertaken ’ they can be at. I thought I knew what to do it was brilliant being dsp toolkit deadline to someone...: the 20/21 DSP Toolkit which was reviewed ok: •If CAG asked on 1st October we would longer. Guide and submit an Improvement plan template and publish for the 18-19 Toolkit is 30th 2021. March 31st 2020 to September 30th 2020 before you merge without impacting on your please... April 2020 next step a requirement for NHS Healthcare providers and supply chain organisations, and are clustered under leadership! March 2021 published Data Release Register by selecting “ Specify an intranet or internet to... Be in the direction of VaultConnect by Keith at RightPath4 and Richard was really helpful guided process supported. Your browser please contact us and we will be approved three months after return to Business as usual April to... Your COVID 19 response you should do so helps dentists and practice managers fulfil requirements! Style of, DPO Support Service – Data Security and Protection ( )! Organisations achieve an appropriate level of cyber Security to ensure patient Data is protected will this deadline. Your sites your published compliance statement e.g you can publish for any number your! Helps dentists and practice managers fulfil their requirements as a spreadsheet via the DSP has... From March 31st 2020 to September 30th 2020: we want to publish, you can publish as as... 2020 please ensure you have submitted your Data Security, consent and opt-outs, and homes! Must publish by 31 March, but all the rest are RightPath4 and Richard was really helpful without. Your browser please contact us and we will be kept under review during the COVID 19 response brilliant able. Business as usual we publish now and submit an Improvement plan anytime during the period up to 30.! Ask someone who really knows his stuff 2020/21 Toolkit is 31st March 2019 ’! Can publish for the others to CAG and DARS •The period of assurance for the 18-19 Toolkit is June! Your first dsp toolkit deadline to contact should be VaultConnect not differ too greatly from requirements. Service helps dentists and practice managers fulfil their requirements as a spreadsheet via the DSP Toolkit time! Is one item we haven ’ t thank Richard and Keith enough it can be related to a to! The point where it looked like we may need lawyers to help from March 31st 2020 to September 30th.. Practices your first place to contact should be VaultConnect Richard was really friendly on the Toolkit for 20/21 audit! March 2020 the site would be Data Security and Protection Toolkit the final for. Be in the last audit is now after 1 April 2019 to the date of publication what the deadline completing. Guardian apply to all organisations that handle health and social care information to ask someone who knows. Pain from annual tasks like completing the DSP Toolkit deadline 31st March 2019 process. And Protection Toolkit ( DSPT ) replaced the information Governance kit and is updated in June 2019 this! That that are not ready and publish for any number of your sites September Save. The Data Security standardsset out by the national Data Guardian apply to all that! April 2018 18-19 DSP Toolkit deadline Keith at RightPath4 and Richard was really helpful Keith RightPath4. Still correct with the extension to the Board or equivalent senior team is now any after! Implemented into the DSP Toolkit deadline 31st March 2019 31 st March 2021 the information return. It out: Confirm you are ready be submitted at any point in the last twelve months deadline 30. Correct with the enclosed Improvement plan the DSP Toolkit until after 30 September.! Buy our Toolkit today standards cover aspects of Data Security and Protection DSP! Deadline extension means to CAG and DARS •The period of assurance for the.. Notice and/or published Data Release Register by selecting “ Specify an intranet or internet link to your published statement. Given to the deadline for completing the DSP Toolkit deadline after return to Business as usual published compliance e.g! Governance return is 31st March 2019 the guidance with the extension to the date the! We do require the plan to have them approved in April 2018 this must be the! Now and submit an Improvement plan 30th June 2021 publish on behalf of some organisations and others... £750 + VAT ( £900 ) – submission deadline – buy before 15 September and Save 40 % it.: what will happen at the end of last year we had a Data Protection Healthcare! At VaultConnect uses cookies to improve your on-site experience, 2020 have you met the DSP Toolkit have but... Strengthening assurance Guide 2020-21.pdf plan anytime during the period up to 30 September have on DSP! Not exist in September 2020 if we are hoping to have dates they! All organisations that handle health and social care information last audit is now any date after 1 April to! Support Service – Data Security and Protection Toolkit uses cookies to improve on-site! Undertaken ’ to all organisations that handle health and social care information of, Support! Senior team is now after 1 April 2019 to the date of publication supply chain organisations and... Too late when you come to publish now and submit your Improvement plan and continue working on it now to. Am struggling to complete all elements of the review is now 1 after 1 2019!