Liverpool John Moores University
NHS Data Security and Protection Toolkit compliance for a university school of nursing and allied health
Strongest proof
Full DSPT compliance · commissioned annually
- Sector
- Higher Education / Research · Healthcare / NHS
- Capability
- Information Governance · NHS & HealthTech
- Geography
- Liverpool, United Kingdom
- Engagement model
- Retained / managed service
- Period
- Initial compliance, then commissioned annually
- Evidence
- Named client · Public evidence

At a glance
- Who
- Liverpool John Moores University · Higher Education / Research · Healthcare / NHS
- Why it mattered
- A university school needed NHS DSPT compliance before it could undertake research involving patient data.
- IG-Smart's role
- NHS DSPT compliance and annual Information Governance support
01The exposure
Liverpool John Moores University's School of Nursing and Allied Health undertakes research that involves processing patient data.
Research involving patient data required compliance with the NHS Data Security and Protection Toolkit — a set of stringent requirements that can be challenging to meet without the right advice and support.
02The mandate
Practical NHS Information Governance expertise to achieve DSPT compliance, improve information governance processes and respond to new challenges over time.
Commissioned scope
- NHS Data Security and Protection Toolkit compliance support
- Information governance process improvement
- Annual support to maintain compliance with NHS-mandated Information Governance practice
- Advice on new information governance challenges as they arise
03Environment
Organisation context
Describes the client organisation — not the size of IG-Smart's work.
- UK university
Frameworks in scope
- NHS Data Security and Protection Toolkit
Scope boundary
- Number of standards, staff or research studies in scope is not stated.
- Compliance relates to the School's Toolkit submissions, not a university-wide certification.
04IG-Smart's approach
- 01
Assess
Reviewed the School's research activity and existing governance arrangements against DSPT requirements.
- 02
Build
Improved information governance processes and evidence so the School could meet the Toolkit's requirements.
- 03
Assure
Supported the School to full DSPT compliance.
- 04
Manage
Commissioned annually to help maintain compliance and respond to new challenges.
Engagement phases: Assess · Build · Assure · Manage
05Engagement scale
What IG-Smart's work covered
- School of Nursing and Allied Health
- Annual DSPT support
06What we delivered
- DSPT compliance evidence and submission support
- Improved information governance processes
- Annual compliance-maintenance support
07Outcome
Engagement result
The School achieved full compliance with the NHS Data Security and Protection Toolkit.
Follow-on engagement
IG-Smart is commissioned by the University each year to help maintain compliance.
08Client perspective
“We found the experience of working with IG Smart very reassuring. From the get-go we were confident you could support the work we do in the University and improve our information governance processes when faced with new challenges. You were always responsive, easy to work with, and proactive, I would certainly recommend your services.”
09What this demonstrates
Relevant to universities, research groups and other non-NHS organisations that need DSPT compliance to access or process NHS patient data.
10What buyers can verify
Public
- Named client
- Engagement scope
- Named client quotation
- Engagement period stated
- Deliverable types described
Further evidence can be discussed subject to confidentiality and client permissions.
Related services
Related evidence
Higher Education / Research, Information Governance · NHS & HealthTech
UCL
Information-governance audit and DSPT readiness for a leading research university
A research-intensive school handling sensitive health data needed to understand its readiness for the NHS Data Security and Protection Toolkit.
The client reports the audit report helped shape and focus its final DSPT submission.
Read the case studyCharity / Social Enterprise, Information Governance · NHS & HealthTech
The Myton Hospices
NHS Information Governance Toolkit compliance in under two months for a hospice charity
A hospice charity faced completing the NHS Information Governance Toolkit for the first time.
Level 2 compliance achieved in under two months; retained annually for advice, support and training.
Read the case studyHealthcare / NHS, Information Governance · Data Privacy & DPO
The Centre for Reproductive & Genetic Health (CRGH)
NHS IG Toolkit and DSPT-aligned Information Governance for CRGH
A provider of NHS and private reproductive and genetic services needed Information Governance aligned with the NHS IG Toolkit, and later the DSPT.
The client reported successful submission of its 2015–2016 NHS IG Toolkit with IG-Smart's assistance.
Read the case study
Facing a comparable requirement?
This case reference is passed to the form so you don't need to re-enter it.
Submit a Requirement