Data Protection

Most community services in England, such as MECS, are based on the ‘NHS standard contract’, and practices which participate in these services may be asked to complete the Data Security and Protection Toolkit (DSPT). The AOP has advised us that practices which only hold a GOS contract are not required to complete the DSPT.


Individuals may also be asked to complete a shorter version of the DSPT if they have an NHSmail account.


Where can I get help when completing the DSPT?

Quality in Optometry provides useful guidance and a checklist for individuals and practice owners, to help them meet each requirement.

AOP members can also read their GDPR advice for further information