We have set up a helpline for the duration of the Covid-19 crisis. Call us on 0208 133 3430 (Mon-Fri 9-5) or email [email protected] for free support.

ODS Codes for multisite social care organisations

As a multisite organisation, you need to consider if you will publish one or more Data Security and Protection Toolkit (DSPT) submissions to cover all of your branches.

To do this, you first need to identify your ODS codes. We have guidance on How to find your ODS codes which also explains what the codes are and why they are important.

Multisite organisations can have lots of ODS codes. As ODS codes are linked to individual legal entities, this means that your organisation could have one HQ (parent) code with multiple site/branch (child codes) underneath. e.g.

Or, you might have multiple HQ (parent) codes, each with different site/branch (child) codes underneath. e.g.

If you need support with identifying your ODS codes, please contact us. Our large provider support team will be able to help you with your DSPT submission.

Publishing a DSPT submission for multisite providers

Multisite providers have 2 options when it comes to completing the DSPT:

  1. Complete one Headquarters DSPT assessment and publish for all branches
  2. Complete two or more Headquarters DSPT assessments to cover all branches

To decide which is right for your organisation, you need to consider these questions:

Do all your branches –

  1. Have the same staff induction and training arrangements for data and cyber security?
  2. Have the same data protection policies and procedures?
  3. Have the same data security and data breach arrangements?
  4. Have the same IT arrangements?

If you answered “Yes” to all of these then you can complete one Headquarters Assessment on the DSPT to cover all your branches.

If you answered “No” to any of these questions, you should complete more than one DSPT submission to cover your branches.