Skip to content
8foldgovernance master
  • Services
    • AI Governance
    • Medical Devices
      • Regulatory Roadmap
      • ISO 13485 Design & Build your QMS
      • Quality Management as a Service
      • Technical File Creation & Registration
      • UK Responsible Person
      • Post Market Surveillance
    • International Standards
      • ISO 13485 Certification
      • ISO 42001 Certification
      • ISO 9001 Certification
      • ISO 27001 Certification
    • DTAC
      • DTAC Management
    • Information Governance
      • Data Security & Protection (DSPT)
      • DSPT Audit
      • HIPAA Compliance
    • Clinical Safety and Risk Management
      • DCB0129
      • DCB0160
      • Clinical Safety Officers (CSO)
    • CQC Services
      • CQC Compliance Assessment
      • CQC Registration Support
      • CQC-as-a-Service
      • CQC Regulatory Review & Strategy
    • Cyber Security
    • Governance, Risk & Compliance Advisory
    • 8foldTraining
  • About
    • Meet the Team
    • Partnerships
    • Join Us
  • Blog
  • Case Studies
  • Contact
  • Services
    • AI Governance
    • Medical Devices
      • Regulatory Roadmap
      • ISO 13485 Design & Build your QMS
      • Quality Management as a Service
      • Technical File Creation & Registration
      • UK Responsible Person
      • Post Market Surveillance
    • International Standards
      • ISO 13485 Certification
      • ISO 42001 Certification
      • ISO 9001 Certification
      • ISO 27001 Certification
    • DTAC
      • DTAC Management
    • Information Governance
      • Data Security & Protection (DSPT)
      • DSPT Audit
      • HIPAA Compliance
    • Clinical Safety and Risk Management
      • DCB0129
      • DCB0160
      • Clinical Safety Officers (CSO)
    • CQC Services
      • CQC Compliance Assessment
      • CQC Registration Support
      • CQC-as-a-Service
      • CQC Regulatory Review & Strategy
    • Cyber Security
    • Governance, Risk & Compliance Advisory
    • 8foldTraining
  • About
    • Meet the Team
    • Partnerships
    • Join Us
  • Blog
  • Case Studies
  • Contact
  • +44 (0)1273 569172
Book a Call

← From our blog

8foldGovernance approved as DSPT Auditor for IT Suppliers to the NHS

  • Published: March 6, 2026
  • Category: DSPT

Share this post

Headshot of a man with reddish-blonde hair and a beard, wearing a checkered shirt
Ryan Palmer

Share this post

We’re excited to announce that we have been approved as an auditor for Version 8 of the Data Security and Protection Toolkit (DSPT), for Category 2 IT Suppliers who provide services, software, or hardware to organisations across the National Health Service (NHS) in England.

Compliance with the DSPT is mandatory for all organisations, including third-party suppliers, that handle NHS patient and staff data or provide critical operating systems to frontline staff. 

Our role as an approved auditor is integral to this compliance ecosystem, providing the essential third-party validation for Category 2 IT suppliers now required as part of Version 8 of the DSPT criteria. 

You can read more about the latest changes to the DSPT in our latest blog.

Read the Blog
DSPT Category 2 badge

This approval comes at a critical time for healthcare assurance and cybersecurity, following numerous ransomware attacks and cyber incidents over the last 12-months.

Teal opening quotation marks graphic

We remain committed to supporting the NHS to realise its ambitions in the 10 Year Plan through working closely with suppliers to embed ‘good governance’ as a strategic priority,

By being able to provide expert assurance of a critical supplier’s controls and help them embrace governance best practices, we know we can help the healthcare system strengthen its defences against cyber threats.

Kasia Kaczmarek,
Managing Director of 8fold.

Teal closing quotation marks graphic
NHS DSPT Auditor 8foldGovernance approved as DSPT Auditor for IT Suppliers to the NHS NHS DSPT Auditor

Our Audit approach has been designed to be pragmatic and proportionate whilst ensuring compliance with the rigorous expectations set by the DSPT criteria and its mandatory assertions. With a team of seasoned Data Protection and Information Security professionals, experienced in working with the NHS, we provide a complete package of support that goes beyond just ticking boxes, helping organisations to improve their governance and strengthen their controls.

Learn More

We’re the experts that have your back.

If your organisation is unsure of your DSPT Category submission, needs an approved Auditor to complete the Annual Audit or simply needs help to submit for the first time, get in touch, we would be happy to help. 

Speak to an Expert

Other Articles​

Loading...
DSPT Audit

Preparing for the Category 2 DSPT Audit: What you need to know.

Read More →

March 23, 2026
DSPT for Category 2 Organisations

DSPT for Category 2 Organisations

Read More →

December 13, 2025
Stay ahead with NHS DSPT V8. Discover essential changes, compliance tips, and expert support for seamless 2025/26 submissions.

DSPT Version 8: Preparing for the latest version

Read More →

November 6, 2025
8foldgovernance master

+44 (0) 1273 569172

info@8foldgovernance.com

SERVICES

  • AI Governance
  • Medical Device Registration
  • ISO Compliance
  • Full DTAC Support
  • Information Governance
  • Clinical Safety
  • Data Security & Protection
  • CQC Services
  • Cyber Security
  • 8foldTraining

LINKS

  • Contact
  • About
  • Meet The Team
  • Blog
  • Join Us
  • Case Studies
  • Charity Work
  • Partnerships
  • FAQs
DSPT Data Security And protection Toolkit 8Fold
Information Governance Badge 8 Fold
NPSORE
ABHI Member

 © 2026 8fold | Privacy Policy | Cookie Policy | Terms & Conditions

X We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies. However you may visit Cookie Settings to provide a controlled consent.
Read More ACCEPT Cookie settings
Manage consent

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
CookieDurationDescription
cookielawinfo-checkbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Others
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
Save & Accept