Social care and health leaders share their views on the value of the Data Security and Protection Toolkit and the Better Security, Better Care Programme.

And care providers who have used the Better Security, Better Care programme and the DSPT share their experiences.


Sector leaders’ positions

CQC regulation and data protection

David James, Head of Adult Social Care Policy at the Care Quality Commission discusses current and future plans for regulation and data protection and technology. “Our inspectors do encourage care providers to use the officially recognised Data Security and Protection Toolkit to assess their own data and cyber security arrangements – and provide evidence that they are complying with legal and regulatory requirements.”

Read CQC’s blog


Care providers’ experiences

Love In Care: Improving home care workers’ knowledge of data protection

Initially unsure about using the Data Security and Protection Toolkit, home care provider Love In Care now sees data security as a core element of their work. As a provider under an NHS Continuing Healthcare, they needed to meet this basic level to be compliant with their contract. And having NHSmail is enabling them to liaise directly and securely with their NHS colleagues. They are ensuring that data security is a key element of their recruitment, induction and ongoing employee support and management requirements. Based on the Data Security and Protection Toolkit, they developed their own presentation materials based on real life scenarios that their own staff face.

Read Love in Care’s story


Maria Mallaband: Data protection for large care providers

Naheem Shan, MMCG’s Data Protection Officer and Head of Information Governance explains how tech and data protection is ingrained in the group’s work. “The updated Data Security and Protection Toolkit is really clear and much more relevant to the care sector,” says Naheem. “And the huge benefit is that, as a large care group with almost 30 legal entities and still growing, I can submit one DSPT entry for all our businesses. We use the same policies and procedures across the group – so one DSPT submission works for all. That saves our care home managers – and me – a lot of time.”

Read Maria Mallaband Care Groups’ story


Havering Care Homes: Reaping the benefits of the Data Security and Protection Toolkit

Mike Armstrong, Managing Director explains: “The revamped Data Security and Protection Toolkit is so much better. It feeds you information in bite-sized pieces and it’s supported by really clear guidance – all in a language that makes sense to social care providers.”

Read Havering Care Homes’ story


Resolve Care: Don’t forget human input in data and cyber security

Graeme Stark, Service Development Lead, at Resolve Care says “Get on board with the DSPT. But don’t treat it as a tick-box exercise. Make it meaningful and consider not just your technical solutions, but the human input as well. And don’t be put off by the number of questions on the toolkit. It’s a comprehensive self-assessment – so you would expect it to be detailed. But you can work through it over time, save your responses and go back to it. The freely available guidance on Digital Social Care is really clear, and of course there is direct support available from the Better Security, Better Care local support partners.”

Read Resolve Care’s story


Impact of a cyber breach on care services

A care home explains the devastating impact of a cyber breach on their service. In 2019, the company experienced a cyber breach which caused significant disruption across the whole organisation’s operations and service delivery. Employee rosters were deleted affecting care arrangements across several service locations. Passwords to senior managers’ emails and service users’ digital records were changed and the company’s website was removed.

Read the impact of a cyber breach