NHS Data Security & Protection Toolkit

The demand curve

Notices demanding it per 10,000 published, by year — rate-normalised so corpus growth never masquerades as demand. Complete years only.

The pale bars are 2025 onward. The Procurement Act went live on 24 February 2025 and changed how notices are written, so the step across that date is partly a change in convention and not only a change in demand. We have not measured how much of it is which, so please do not read this as a trend.

The receipts

Notices that demand it, and the sentence each demand was found in. Nothing is counted here without one.

• Finance Systemmandatory

  Locala Community Partnerships

  It must comply with UK public sector financial, regulatory, and data protection standards, including DSPT Toolkit, Cyber Security, IFRS, UK GDPR and Data must be held in the EU.

• Internal Audit servicesmandatory

  NHS SOUTH, CENTRAL AND WEST COMMISSIONING SUPPORT UNIT

  Any organisation accessing NHS patient data is required to complete the DSPT on an annual basis and therefore demonstrate an acceptable level of compliance on an ongoing basis.

• Patient experience platform

  Hampshire and Isle of Wight Healthcare NHS Foundation Trust

  The Trust is only interested in market engagement with suppliers who have extensive NHS experience in managing patient engagement on behalf of large NHS Trusts, who can evidence implementations within the last 3 years, and integrations with Rio and or SystemOne, DSPT standards, ISO27001 and Cyber essentials plus.

• Data Protection Officer Management and GP Information Governance Management Services to GP Practices for NHS Northamptonshire and NHS Leicester, Leicestershire and Rutland ICBs

  NHS Leicester, Leicestershire and Rutland Integrated Care Board

  Advice and Support for the Data Security and Protection Toolkit (DSPT)

• TODW - Apple Mac secure design and build

  UK Health Security Agency

  …Digital Workplace (TODW) programme, UKHSA is implementing a secure and standardised macOS operating system build to ensure Apple Mac devices are compliant with DSPT Cyber Assessment Framework (CAF) requirements and aligned with UKHSA's wider cyber security and endpoint management strategy.…

• Provision of IT Health Check

  NHS SHARED BUSINESS SERVICES LIMITED

  Provision of annual IT Health Check (ITHC) services for NHS Counter Fraud Authority, including penetration testing, security reviews, and compliance reporting to enhance cyber resilience and meet PSN/NHS DSPT standards.

• DSPT IT Health Check 2026

  The Queen Elizabeth Hospital King's Lynn NHS Foundation Trust

  DSPT IT Health Check 2026

• NHSE DSPT/CAF - Independent Audit

  NHS England

  NHSE DSPT/CAF - Independent Audit

• Respiratory Solutions

  SUPPLY CHAIN COORDINATION LIMITED

  Data Security Protection Toolkit (DSPT): if you process patient data further details about the cyber security

• 1975 GP DPO & IG Service for NHS Bedfordshire, Luton & Milton Keynes Integrated Care Board

  NHS Bedfordshire, Luton and Milton Keynes Integrated Care Board

  …ices in connection with required Information Governance policies, processes, procedures, templates and patient information to comply with GDPR, DPA2018 and the DSPT toolkit requirements Support to GP practices with the preparation, completion, review and sign off of DPIA’s e.g.…

• Information Governance Services

  IMPERIAL COLLEGE HEALTH PARTNERS LIMITED

  Annual Data Security and Protection Toolkit

• ITHealth Dashboard Renewal

  MEDWAY NHS FOUNDATION TRUST

  includes Cyber Alerts, DSPT module, vulnerability management

See it live

No open tenders demand it at this moment — the list updates continuously.