All policies

NHS Data Security & Protection Toolkit Alignment

How Consenta aligns with the NHS DSPT data-security standards.

Last updated: 1 July 2026

1. About the DSPT

The NHS Data Security and Protection Toolkit (DSPT) is an annual self-assessment that organisations handling NHS data use to demonstrate they meet the National Data Guardian’s data-security standards. This statement describes how Consenta’s platform is designed to support those standards.

2. Alignment highlights

  • Personal confidential data — raw identifiable data never leaves the providing organisation; only anonymised outputs reach the platform.
  • Staff responsibilities and access — role-based access control enforces least privilege across all portals.
  • Managing data access — every sensitive action is recorded in a tamper-evident audit trail.
  • Process reviews and incident response — privacy risks are assessed via our DPIA and reviewed regularly.
  • Technical security — encryption in transit and at rest, sign-in rate limiting and automatic account lockout.
This is a plain-English alignment statement for the platform and does not itself constitute a completed DSPT submission, which each organisation completes for its own environment.

3. Contact

For information-governance queries, or to request our latest security documentation, contact [email protected].