Data Security & Protection Toolkit 2021/22

The Toolkit is used to make a pharmacy’s NHS information governance (IG) declaration and must be completed by 30th June 2022. 

The key differences in this year’s Toolkit include:

• The ‘tool tips’ contain pharmacy specific information
• New mandatory questions
• The Toolkit now displays the answers submitted by the pharmacy in the previous submission for many questions, allowing pharmacies to simply confirm the information remains accurate or adjust.

The NHS Parent Organisation Code (POC) headquarters (HQ) batch submission feature has also been improved to enable contractors that own three or more pharmacies to complete a single submission for all their premises.

Pharmacies who have updated their template in the PSNC General Data Protection Regulation (GDPR) Workbook, should confirm this on the Toolkit’s Organisation Profile webpage as this will auto-complete approximately half the questions.

PSNC guidance

• Toolkit completion: Overview: Five steps for completing the Data Security and Protection Toolkit 2021/22– this is a step-by-step guide to completing the Toolkit and contains references to other useful materials.
• Toolkit completion: Question-by-question guidance (mandatory questions)– this guidance has been designed to help contractors complete the mandatory questions within the Toolkit.
• Toolkit completion: Using the NHS Parent Org Code (HQ) batch submission (for pharmacy contractors with three or more pharmacies)

Next steps

• Log in to the Toolkit as soon as possible
• Read PSNC guidance documents
• Note the mandatory questions required to meet the minimum IG requirements.
• Some PMR suppliers may provide additional guidance to help contractors with completing the updated technical questions in the 2021/22 Toolkit.

Don’t leave it until the last week of June!