include a valid organisation code (referred to as ‘ODS codes’) for the organisation the DSP toolkit is for.When demonstrating an organisation has in place DSPT, the application must: current ISO 27001:2013 certification issued by an UKAS accredited certification bodyĢ.Data Security and Protection Toolkit ( DSPT) to ‘Standards Met’ or ‘Standards Exceeded’.UKHSA recognises 2 types of assurance, at least one of which must be demonstrated for each applicant and data processor: All applications must demonstrate that each applicant and engaged data processor has in place appropriate technical and organisational measures to protect the confidentiality, integrity and availability of the data requested. This standard must be met for all applications to access UKHSA data classified as ‘Protected’. Approval standard: data security When must this standard be met
