Skip to main content
Liverpool John Moores University

Liverpool John Moores University

NHS Data Security and Protection Toolkit compliance for a university school of nursing and allied health

Strongest proof

Full DSPT compliance · commissioned annually

Sector
Higher Education / Research · Healthcare / NHS
Capability
Information Governance · NHS & HealthTech
Geography
Liverpool, United Kingdom
Engagement model
Retained / managed service
Period
Initial compliance, then commissioned annually
Evidence
Named client · Public evidence
Nursing researcher and academic reviewing research records in a Liverpool university clinical skills lab, representing NHS DSPT compliance for Liverpool John Moores University.
Conceptual case-study artwork · not documentary photography

At a glance

Who
Liverpool John Moores University · Higher Education / Research · Healthcare / NHS
Why it mattered
A university school needed NHS DSPT compliance before it could undertake research involving patient data.
IG-Smart's role
NHS DSPT compliance and annual Information Governance support

01The exposure

Liverpool John Moores University's School of Nursing and Allied Health undertakes research that involves processing patient data.

Research involving patient data required compliance with the NHS Data Security and Protection Toolkit — a set of stringent requirements that can be challenging to meet without the right advice and support.

02The mandate

Practical NHS Information Governance expertise to achieve DSPT compliance, improve information governance processes and respond to new challenges over time.

Commissioned scope

  • NHS Data Security and Protection Toolkit compliance support
  • Information governance process improvement
  • Annual support to maintain compliance with NHS-mandated Information Governance practice
  • Advice on new information governance challenges as they arise

03Environment

Organisation context

Describes the client organisation — not the size of IG-Smart's work.

  • UK university

Frameworks in scope

  • NHS Data Security and Protection Toolkit

Scope boundary

  • Number of standards, staff or research studies in scope is not stated.
  • Compliance relates to the School's Toolkit submissions, not a university-wide certification.

04IG-Smart's approach

  1. 01

    Assess

    Reviewed the School's research activity and existing governance arrangements against DSPT requirements.

  2. 02

    Build

    Improved information governance processes and evidence so the School could meet the Toolkit's requirements.

  3. 03

    Assure

    Supported the School to full DSPT compliance.

  4. 04

    Manage

    Commissioned annually to help maintain compliance and respond to new challenges.

Engagement phases: Assess · Build · Assure · Manage

05Engagement scale

What IG-Smart's work covered

  • School of Nursing and Allied Health
  • Annual DSPT support

06What we delivered

  • DSPT compliance evidence and submission support
  • Improved information governance processes
  • Annual compliance-maintenance support

07Outcome

Engagement result

The School achieved full compliance with the NHS Data Security and Protection Toolkit.

Follow-on engagement

IG-Smart is commissioned by the University each year to help maintain compliance.

08Client perspective

“We found the experience of working with IG Smart very reassuring. From the get-go we were confident you could support the work we do in the University and improve our information governance processes when faced with new challenges. You were always responsive, easy to work with, and proactive, I would certainly recommend your services.”
Lorraine Shaw, Head for Nursing, School of Nursing and Allied Health, Liverpool John Moores University

09What this demonstrates

Relevant to universities, research groups and other non-NHS organisations that need DSPT compliance to access or process NHS patient data.

10What buyers can verify

Public

  • Named client
  • Engagement scope
  • Named client quotation
  • Engagement period stated
  • Deliverable types described

Further evidence can be discussed subject to confidentiality and client permissions.

Related services

Facing a comparable requirement?

This case reference is passed to the form so you don't need to re-enter it.

Submit a Requirement