Understand the Data Security and Protection Toolkit for Better Cybersecurity

The Data Security and Protection Toolkit Karen Holley 17th November 2021

The Data Security and Protection Toolkit what is it and why use it? Practical issues How much do you already know about the DSPT? How much do you already know about keeping your business cyber secure? Have local authorities or CCGs ever asked if you have completed DSPT? How do you feel about the Toolkit? Is DSPT one more thing to do? Where does the DSPT fit in your business priorities? How useful is NHSmail to your operation? How useful would access to the shared care record be? 2

What is the Data Security and Protection Toolkit? An online self assessment of your organisation s data security Demonstrates compliance with data protection legislation Reviewed annually Gives advice and is a checklist of good practice 3

Why do I need to pay attention to this? Data and cyber security is important for safe sharing of records especially with increased use of digital technology during the pandemic It will help you keep people s confidential information safe It will help protect your business from the risk of being fined for a data breach and from the disruption of a cyberattack The DSPT will demonstrate compliance with legal and CQC requirements 4

How will the Toolkit help you? You can use the DSPT as evidence for: CQC Key Lines of Enquiry (KLOEs): C3.3 How are people assured that information about them is treated confidentially in a way that complies with the Data Protection Act, and that staff respect their privacy? W2.8 How does the service assure itself that it has robust arrangements (including appropriate internal and external validation) to ensure the security, availability, sharing and integrity of confidential data, and records and data management systems, in line with data security standards? re lessons learned when there are data security breaches? GDPR/Data Protection Act 2018 The 10 Data Security Standards for NHS and council contracts https://www.digitalsocialcare.co.uk/data-security-protecting-my- information/national-policy/ 5

How will the Toolkit help you? The DSPT opens up opportunities for data sharing: You can use the DSPT as evidence for: CQC Key Lines of Enquiry (KLOEs) GDPR/DPA 2018 10 Data Standards - NHS and council contracts 2. These digital products can save you and your staff time and improve the quality of care for the people you support. 1. Gain access to digital tools such as: NHSmail, GP Connect and Summary Care Records. 3. For examples of the benefits of NHSMail, see https://digital.nhs.uk/services/nhsmail/nhsmail-case-studies 6

How will the Toolkit help you? Builds trust Keeps data safe Reduces risk Gives guidance 7

How we can help you. Care & Support West is part of a Nationwide program called Better Security Better Care funded by NHSX and organised to support you to register and complete the DSPT We are holding DSPT webinars, 1-2-1 sessions, weekly support desk We can help you register on the DSPT We can offer guidance when completing the toolkit We can help you find your ODS Code For more information please ook at our dedicated page on our web site https://www.careandsupportwest.com/dspt 8

Find your ODS codes - what is an ODS code? ODS stands for Organisation Data Service and is part of NHS Digital Your ODS Code is a unique code created by NHS Digital s Organisation Data Service The unique ODS Code is used to identify organisations across health and social care You can search for an ODS code by name, type of business, address or post code All CQC-registered services will have an ODS code If you don t have a code you can ask for one to be set up for you 9

Find your ODS codes To find your HQ code go to https://odsportal.hscic.gov.uk/Organisation/Search Or, search for ODS Portal and choose Organisation/Practitioner search https://odsportal.digital.nhs.uk/Organisation/Search If you cannot find your code, or aren t sure which one/s to use, contact the Exeter helpdesk on 0300 303 4034, or email exeter.helpdesk@nhs.net 10

Register go to the right page Go to https://www.dsptoolkit.nhs.uk/Account/Register Or, search for DSPT and choose the first link, then choose Register 11

There is help The Toolkit has a help section https://www.dsptoolkit.nhs.uk/Help including a Quick Start Guide and Big Picture Guides, and FAQs Specifically for social care, there is comprehensive guidance on how to complete the toolkit https://www.digitalsocialcare.co.uk/protecting-my- information/data-security-and-protection-toolkit/ Digital Social Care also has a guide on how to register on the DSPT and start here webinars to help you prepare for registering on, and completing, the Toolkit: no technical knowledge is needed. Digital Social Care also has off the shelf template policies, guidance for providers staff and advice on how to document what you do with your data 12

You can contact actual people For help with registration on the Data Security and Protection Toolkit (DSPT) NHS Digital DSPT Helpdesk in Exeter For further information about data and cyber security in social care Digital Social Care www.digitalsocialcare.co.uk Local help and support Website DSPT Care & Support West (careandsupportwest.com) Telephone 0300 303 4034 Karen Holley 07540 458119 Email karen.holley@careandsuppo rtwest.com Email exeter.helpdesk@nhs.net 13 13