DSP Toolkit Support - Meet Your Compliance Deadlines With Confidence
Navigating the Data Security and Protection Toolkit can be time-consuming and complex. Highway Business Services provides hands-on support to help NHS and care organisations complete their annual submission accurately, on time, and without the stress.
The DSP Toolkit assesses your organisation against 10 National Data Guardian standards. These span everything from data storage and access controls to staff training and incident response. Most organisations find the evidence-gathering process more straightforward than expected with the right guidance.
- Standard 1: Personal confidential data handled appropriately
- Standard 2: Staff equipped with knowledge and skills to handle data correctly
- Standard 3: Data shared safely and appropriately for direct care
- Standards 4-10: Cover infrastructure security, cyber controls, incident management and more
What Is the DSP Toolkit and Why Does It Matter?
The Data Security and Protection (DSP) Toolkit is a mandatory annual self-assessment for all organisations that access NHS systems or handle NHS patient data. It requires you to demonstrate that your organisation meets the National Data Guardian's ten data security standards - covering everything from staff training and data handling policies to technical controls and incident management. Failure to complete a satisfactory submission can put your access to NHS systems and funding at risk. Yet for many small and medium-sized care providers, GP practices, and NHS suppliers, the Toolkit is a significant administrative burden - particularly when internal IT resource is limited. That's where we come in. At Highway Business Services, we work alongside your team to assess your current position, identify gaps, gather the required evidence, and help you build a credible, compliant submission. We don't hand you a checklist and walk away - we guide you through the process from start to finish, in plain English, at a pace that works for your organisation.
The Plain-English DSP Toolkit Handbook
We've written a free, no-jargon guide to the DSP Toolkit - what each of the 10 standards actually wants from you, the evidence that will and won't satisfy an assessor, and the quickest path to your annual submission. Print it, share it with your team, or just keep it on your phone for when an auditor asks an awkward question.
- All 10 NDG Data Security Standards explained in plain English
- What 'evidence' actually means for each standard
- Common reasons submissions get bounced back
- A submission checklist you can work through in a day
Need a Hand With Your DSP Toolkit Submission?
Whether you're staring at it for the first time or you've been wrestling with it for years, we'll get you to a clean, signed-off submission - and keep you there. No long-tail contract required to get started.
Frequently Asked Questions
Who needs to complete the DSP Toolkit?
Any organisation that has access to NHS patient data or NHS systems is required to complete the DSP Toolkit annually. This includes GP practices, dental and optometry providers, community care and social care organisations, independent healthcare providers, and third-party IT suppliers with access to NHS infrastructure. If you're unsure whether your organisation is required to submit, we're happy to advise.
When is the DSP Toolkit submission deadline?
The standard submission deadline is 30 June each year. However, we recommend beginning the process well in advance - ideally three to four months before the deadline - to allow time to gather evidence, address any gaps in your practices, and avoid a last-minute rush. We can work with you whatever your starting point, but the earlier we begin, the smoother the process.
What does your DSP Toolkit support service include?
Our support service covers a full review of your current compliance position against all ten NDG data security standards, identification of gaps and risks, practical guidance on how to address them, assistance with gathering and uploading evidence, review of your policies and procedures, and final checks before submission. We work directly within the Toolkit platform and communicate with your team in plain, jargon-free language throughout.
We're a small care provider with no dedicated IT staff - can you still help?
Absolutely. In fact, smaller organisations with limited internal resource are exactly who we designed this service for. We take on the technical and administrative heavy lifting so your team can focus on delivering care. You don't need any prior knowledge of data protection frameworks or IT systems to work with us - we'll explain everything clearly and guide you step by step.
Can you help us if we've already started our submission but got stuck?
Yes, we can pick up part-completed submissions at any stage. Whether you're struggling with a specific assertion, unsure what evidence is required, or have received a low score and need to understand how to improve it, we'll assess where you are and help you move forward. There's no need to start from scratch - we work with what you have.
Do you help with the technical controls required by the Toolkit?
Yes. Many DSP Toolkit requirements relate directly to technical controls - such as network security, access management, software patching, and encryption. As a managed IT services provider, we're well placed to not only advise on what's required but to implement the necessary controls on your behalf where needed. This makes us a practical, end-to-end partner rather than just a paperwork service.
Will you help us improve our score year on year?
Yes. We aim to build a long-term relationship with our clients rather than just completing a one-off submission. After your current submission is complete, we'll provide a clear action plan outlining what you should work on over the coming year to strengthen your data security posture and achieve a higher standard in your next assessment. Many of our clients retain us on an ongoing basis to manage this continuously.
How do we get started?
Simply get in touch via our contact page or give us a call. We'll arrange a free initial consultation to understand your organisation, your current position, and your timeline. From there, we'll put together a clear proposal outlining exactly how we can help and what's involved. There's no obligation and no jargon - just a straightforward conversation about your needs.
Don't Leave Your DSP Toolkit Submission to the Last Minute
Whether your deadline is looming or you're planning ahead for next year, our team is ready to help you achieve a compliant, confident submission. Reach out today for a free initial consultation.