In order to complete the Data Security and Protection Toolkit (DSPT), care providers need to demonstrate that their staff have been trained and are competent in data security and protection.
The Institute of Public Care (IPC) at Oxford Brookes University in collaboration with the Better Security, Better Care programme researched the data security and protection training needs of small and medium sized care providers, including how well current training provision meets those needs, and how the training market could be developed. They explored what DSPT compliant training looks like, reviewed existing free training resources, developed a skills assessment for frontline staff, and explored how the Caldicott Guardian role is represented in the sector.
There is no compulsory or formal training course that frontline staff or specialist staff within social care providers must complete.
We know that training and measuring competency in relation to data protection is one of the most challenging issues for care providers. The Better Security, Better Care programme is continuing to work on this, but in the meantime, together with IPC we have developed, tested and published two learning tools:
These tools can be used flexibly to help care providers to meet the DSPT requirement for 95% of frontline staff with access to personal data to be competent in data security and protection.
This discussion tool is designed to help managers to have discussions with frontline staff to check their knowledge and provide evidence of their competence in data security and protection to meet requirement 3.2.1 of the DSPT.
The tool is broken down into four sections covering the data security and protection learning outcomes for frontline social care staff:
i. being alert to social engineering
ii. safe use of digital devices
iii. safe keeping of physical records
Each section includes guidance notes to help managers to understand the topic, links to further resources (where they exist), questions for you to ask to prompt discussion with staff, and a multiple choice quiz that can be given to staff to test their knowledge or assess their learning needs.
This is a multiple-choice quiz for frontline staff. It can provide evidence that staff are competent in data security and protection and meet requirement 3.2.1 of the Data Security and Protection Toolkit by undertaking an assessment and gaining an 80% pass mark. Staff can complete and return the quiz to their manager who can then use it as evidence for the DSPT.
Please note: Using these resources can support meeting the DSPT training requirements, but it does not guarantee it.
The Better Security, Better Care programme provides free, expert support to care providers to enable them to complete the DSPT. Access national guidance and helpline, and local support from 28 partners across England. Find out more about the programme.
Digital Social Care also provides guidance on training, including sources of free online data and cyber security training.