Last Updated on July 3, 2026

A record number of care services now have the Data Security and Protection Toolkit (DSPT) in place, according to new Digital Care Hub figures. By the 30th June 2026 deadline, almost 76.5% of CQC-registered adult social care services across England had an up-to-date DSPT in place.

In total, 22,429 services are now DSPT-compliant, including 12,887 care homes and 9,562 home care services. That is an increase of 600 services since June 2025 – and a jump from just 15% back in 2021. Almost 14,500 of those published have used the DSPT for at least three years in a row.

Commenting on the figures, Michelle Corrigan, Chief Executive at Digital Care Hub, said, 'It is brilliant to see record numbers of care services with the DSPT in place – and we are particularly pleased to see that almost 14,500 services have published their DSPT for at least three years in a row. This tells us that the toolkit is now embedded in many providers' regular processes for checking their data protection and cyber security arrangements.

'The consistency is just as important as the overall numbers. When providers republish year after year, it shows that they are reviewing what they do, keeping their arrangements up to date and building trust with the people they support, their families, staff and partners.

'The next step is helping services turn their DSPT commitments into everyday practice. We are supporting that too. Following a successful pilot, we are rolling out free Digital Health Checks through our Local Support Organisations to help providers understand what is working well, where there may be gaps and what practical steps they can take next.'

Chris Badger, Chief Inspector of Adult Social Care at the Care Quality Commission (CQC), said, 'CQC supports the move towards greater digitisation and integration in health and social care. Sharing and storing information safely remains a top priority and good data governance underpins safe, effective and person-centred care.

 'We strongly recommend that all care providers use the DSPT to improve how they manage personal data. It offers clear evidence of good practice. Providers should also use the free expert support from the Digital Care Hub to help embed strong data protection into daily care.'

Care services that started their DSPT but did not manage to complete it by 30th June are encouraged to keep going. Digital Care Hub is holding a webinar on 7th July specifically for services who have almost completed their DSPT.

In other news, The Care Workers' Charity has published updated guidance to support decision-makers engaging in co-production with care workers.