Data Security and Protection Toolkit

Last Updated: Thursday, 18 June 2026

The Data Security and Protection Toolkit, often called the DSP Toolkit, is a system used by the NHS and other health and care organisations to make sure your personal information is kept safe, secure, and used properly.

It’s basically a checklist and set of standards that organisations must follow to show they are protecting your data in the right way.

What it means for you as a patient

By using the DSP Toolkit, a healthcare organisation is showing that:

• Your personal and medical information is stored securely (for example, protected by passwords and kept in safe systems)

• • Only the right people can access your information (such as staff involved in your care)

  • Your information is used appropriately and only for things that help with your treatment, safety, or the running of health services

  • Staff are trained in how to handle your information safely

  • The organisation has plans in place to deal with any data breaches or cyber‑security issues

  Why it matters

  It gives you confidence that the NHS or care provider is doing everything required to:

  • Keep your information private

  • Protect it from loss or misuse

  • Follow the law, including data protection rules like GDPR

  • Respond quickly if something goes wrong

  • Certificate