Your Data Security and Protection Toolkit, completed for you. £450, fixed.
Every dental practice, optician and pharmacy that uses NHSmail, the Spine or the Electronic Prescription Service has to publish a completed DSPT each year. It is checked at CQC inspection, and the register showing who has and hasn't published is public. We complete it for you: you give us about half an hour, we do the rest, and it goes in at Standards Met.
What you get
The whole submission, not a template. We register or re-register your practice on the toolkit if needed and confirm you are in the right category; write the policy set the toolkit asks for — data protection, information security, acceptable use, incident and breach handling — in your practice's name and reflecting how it actually works; build the staff data-security training log and give you the short module your team completes; assemble the evidence folder so that every assertion has something behind it if anyone ever asks; and submit. You are copied on everything and nothing is published without your say-so.
What it costs
£450 plus VAT for a single-site practice, whatever state it's in now — never published, lapsed, or just behind. £150 plus VAT per additional site under the same owner. Then £300 plus VAT each year for the renewal, done before the 30 June deadline so the practice never shows as lapsed again. One invoice, no hourly rates, no second bill.
Why the register matters
The DSPT register is public and searchable. Commissioners, CQC inspectors and any patient who cares to look can see a practice's status. A practice showing Not Published, or a year that isn't the current one, is visible to all of them. Getting to Standards Met closes that, and keeping it there each June keeps it closed.
Who does the work
The work is led by a chartered management accountant, which is an unusual thing to say about a data-protection service and the reason it's worth saying: evidence is built to survive an audit, not just to tick a box. We also prepare Cyber Essentials submissions, so if your toolkit answers show gaps in the technical controls — MFA, patching, unsupported devices — we tell you plainly what needs fixing rather than papering over it.
How it works
Book a fifteen-minute call. We check your practice's current status on the register together and confirm the price. You then answer a short questionnaire — about half an hour — and give us toolkit access. We draft, you approve, we submit. Most practices are at Standards Met within two weeks of the call.
Book the fifteen-minute call
Email with your practice name and postcode and we'll come back with a time. If you received a letter from us, quote the reference on it.
PassCyber is a trading name of Edwards Bros (Spaldwick) Ltd