Fully digitised: FAQs for care providers
What does 'fully digitised' mean?
A fully digitised care provider is one that:
- Uses an assured digital social care record (DSCR) solution to record and manage care information
- Complies with the Data Security and Protection Toolkit (DSPT) at 'Standards Met' level
Being fully digitised means you have the digital foundations in place to keep information safe and share it securely with health services when needed.
Why is the government aiming for all care providers to be 'fully digitised' by the end of this Parliament?
Four out of five care providers (80%) have already moved from paper to digital systems. The next step is making sure these systems have core capabilities and meet data and security standards that protect the people you care for.
The government is aiming for all care providers to be fully digitised so that:
- Service user data is recorded and stored safely
- Systems meet national standards and evolve with the sector's needs
- People choosing care services can be confident their information will be protected
- Care providers can share information securely with healthcare professionals when needed
Am I already fully digitised?
Quick check:
- Do you use a digital social care record solution that's on the Assured Solutions List?
- Have you completed your Data Security and Protection Toolkit assessment and achieved 'Standards Met'?
If you are able to answer yes to these questions, then you meet the government’s current definition of being fully digitised.
But you can still go further:
- Integrate additional digital tools such as eMAR, remote monitoring and falls prevention technologies to enhance efficiency and outcomes
- Invest in staff digital skills to maximise the benefits of technology
When do care providers need to be fully digitised?
The government announced in January 2025 its ambition for all care providers to become fully digitised by the end of this parliament (currently June 2029). This gives providers time to make the transition with support.
What are the benefits of being fully digitised?
If you’re a CQC-registered adult social care provider in England, being fully digitised will help you to:
- Securely view key information from a person’s GP record in real time using GP Connect, helping people get the right care more quickly without people needing to repeat their medical history
- Access other NHS services like NHS Mail and shared care records
- Be reassured that your solution is verified against national standards and incorporates robust data protection, privacy and cybersecurity
- Demonstrate your commitment to data security to commissioners and the public
In the future, assured DSCR solutions will be able to connect to other systems across health and social care. In January 2025, we announced that we will be investing in the development of national data infrastructure for adult social care. Care providers using unassured digital social care record solutions may not be able to access data in this way.
Assured digital social care records are also an essential part of the vision for the Single Patient Record. This will give people a single, secure and authoritative account of their data and a single record across health and care settings to enable more co-ordinated, personalised and predictive care.
Key information about an individual’s care contained in an assured digital social care record would be shared through the Single Patient Record, with appropriate governance and controls. This means appropriate care professionals would have real-time access to essential information, enabling better assessment and planning for individuals.
This is in addition to the wider benefits of using a digitised social care record solution, which include:
- Improving care quality and safety – staff have up-to-date information at their fingertips, they can spot patterns and changes in someone's care needs more easily, and there are fewer errors from illegible handwriting or missing information
- Saving time and reducing administration – digital records can release over 20 minutes per care worker per shift with faster shift handovers and less time searching for information, generating reports or demonstrating compliance
- Meeting regulatory standards – you can more easily evidence that you meet CQC quality standards
- Supporting your staff – digital records enable remote access for home care workers and clear digital information helps all staff provide better, more personalised care
How do I access GP connect?
GP Connect is free to use, and already available via all of the Assured DSCRs. Once set up there’s no extra work needed from the GP practice, it’s seamless.
In order to access a GP record care providers must have an assured DSCR solution, achieved ‘standards met’ on the Data Security Protection Toolkit and sign the National Data Sharing Agreement.
To get connected, care providers just need to contact their DSCR supplier, who will guide them through the process of enabling GP Connect at the location.
For more information, including videos, case studies and a step-by-step guide, visit the GP Connect Resource Pack.
Understanding your requirements
How will the Department of Health and Social Care know if I'm fully digitised?
We'll use information you already provide:
- Monthly Capacity Tracker – this tells us which digital social care record solution you use for care planning
- Annual Data Security and Protection Toolkit (DSPT) – this confirms whether you've achieved 'Standards Met'
You don't need to do anything extra beyond these existing requirements.
What happens if I'm not fully digitised?
We want to support all care providers to make this transition. There are no immediate penalties for not being fully digitised.
However, we expect that people will increasingly look for care providers to be fully digitised, including:
- Commissioners when awarding contracts
- The Care Quality Commission during inspections
- People choosing care services
Support available now:
Your Integrated Care Board or local authority may have specific support available. You can also access free support through the Better Security, Better Care (BSBC) programme, which provides:
- Expert guidance and templates
- Webinars and online resources
- One-to-one support sessions
- Help completing your DSPT assessment
Contact: Better Security Better Care
You can get more information about how to adopt an assured digital social care record solution at: Digitising Social Care
More advice, resources and detailed information will be made available in the coming months to help you become fully digitised.
Will not being fully digitised affect my CQC rating?
Not being fully digitised won't automatically lower your CQC rating. However, digital systems help you evidence how you meet CQC's key quality standards, particularly:
- Safe – Having accurate, up-to-date records helps prevent errors and keep people safe
- Effective – Digital systems support better information sharing with healthcare professionals
- Well-led – Demonstrating good data security and using technology effectively shows strong governance
- Responsive – Quick access to information helps you respond to people's changing needs
The CQC recognises that digital social care records represent best practice. If paper-based systems limit your ability to deliver safe, effective care, this could affect your inspection outcomes.
We use digital systems for rotas and medication. Are we fully digitised?
Not quite. While these digital tools are valuable, being fully digitised specifically means:
- Having an assured digital social care record (DSCR) for recording care planning and delivery
- Meeting Data Security and Protection Toolkit (DSPT) standards
Your rostering and medication systems complement your DSCR but don't replace it.
We're a home care provider – how does being fully digitised work for us?
Fully digitised home care means your staff can access your digital social care record solution securely while working in people's homes. This allows them to:
- Record visits and care provided in real-time
- See up-to-date information about the people they support
- Access care plans and risk assessments on the go
- Communicate with colleagues and managers more effectively
Modern DSCR solutions work on mobile devices, so your staff can access information wherever they're providing care. This ensures consistency and accuracy, making sure people receive the care they need even when different staff visit.
Will we have to share more data once we're fully digitised?
No, you remain in control of what information you share and with whom. In future, being fully digitised will make it easier to share information securely when you need to, but it doesn't change your responsibilities or create new requirements to share.
Information should only be shared when:
- There's a clear reason (for example, to coordinate someone's care with their GP)
- The right permissions are in place
- It complies with data protection law
Digital social care records (DSCRs)
What is the Assured Solutions List and why should I use a solution on it?
The Assured Solutions List (ASL) contains digital social care record solutions that have been checked and approved by NHS England.
Every solution on the list:
- Offers the essential features care providers need, such as care planning, recording, reporting and audit trails
- Meets national standards for quality and security
- Helps you comply with CQC regulations on good governance
- Can connect with GP records and will be able to connect with more NHS systems in the future
NHS England regularly reviews these standards based on what care providers need. Solutions that don't continue to meet the standards may be removed from the list.
Why is it important to use an assured DSCR?
You can trust that assured solutions have all the core capabilities and meet national standards for safety, security and interoperability. For example, through assured DSCRs, appropriate staff can access core patient information for the people in their care via GP Connect.
But the key benefit is future-proofing. As announced in January 2025, building a new national data infrastructure to join up health and care services is a priority for the Digitising Social Care Programme. Following an open and competitive procurement, a contract has been awarded to SoftCat PLC working in partnership with Synanetics to carry out research with the sector to identify the best approach for building the infrastructure. Once the infrastructure is developed, assured solutions will be able to connect with other systems across health and social care.
Assured digital social care records are also an essential part of the vision for the Single Patient Record. This will give people a single, secure and authoritative account of their data and a single record across health and care settings to enable more co-ordinated, personalised and predictive care.
Key information about an individual’s care contained in an assured digital social care record would be shared through the Single Patient Record, with appropriate governance and controls. This means care professionals would have real-time access to essential information, enabling better assessment and planning for the people you support.
Non-assured solutions may not be able to share data in this way, which could put you at a disadvantage and make it harder to coordinate care effectively.
You can view the Assured Solutions List at: www.digitisingsocialcare.co.uk
Our current supplier is not yet on the Assured Solutions List. What should we do?
If your current supplier's solution isn't on the Assured Solutions List:
- Contact your supplier to find out if they're working towards getting their solution assured, and what their timescale is
- Review your contract to understand renewal dates and any relevant clauses
- Plan ahead for future assurance requirements, so you're ready when your contract allows
- Find out if support is available from your Integrated Care Board, local authority or Better Security, Better Care team
Starting this conversation now means you won't be caught out when the contract renewal comes around.
What if my DSCR supplier is removed from the Assured Solutions List?
If your solution is removed from the list:
- Contact your supplier to understand:
- Whether they plan to work towards regaining compliance and returning to the assured list
- The expected timescale for this
- Your options if they're not intending pursuing compliance
- If your supplier is actively working towards compliance:
- Consider remaining with them to avoid unnecessary disruption – prioritise continuity where possible
- Confirm their roadmap and how they will support you during this process
- If compliance is not being pursued, review your contract terms to understand:
- Exit clauses and notice periods
- Any costs involved in leaving
- When your contract is due for renewal
- When necessary, plan your transition to an assured solution by:
- Exploring alternative assured solutions
- Factoring in data migration requirements and staff training time
- Seek support from your Integrated Care Board, local authority or Better Security, Better Care programme
You can check the current Assured Solutions List at any time at: www.digitisingsocialcare.co.uk
Is there funding to help us switch DSCR suppliers?
Currently, there is no central funding specifically for switching from a non-assured to an assured DSCR supplier.
However:
- Your Integrated Care Board or local authority may have local funding or support schemes available
- Some assured DSCR suppliers may offer support with data migration or phased payment options
We recommend planning this transition as part of your digital strategy and exploring what support is available in your area.
We're a small provider and assured solutions are too expensive or unsuitable. What can we do?
We understand that smaller providers face unique challenges with cost and finding solutions that fit their needs.
If you're in this position:
- Talk to assured DSCR suppliers about:
- Pricing for smaller providers
- Flexible payment options
- Scaled-down packages that meet your specific needs
- Contact your local support organisations, as they may know about local solutions or funding options:
- Your Integrated Care Board
- Your local authority commissioning team
- Better Security, Better Care Local Support Organisation
- Share your concerns with NHS England by contacting the Digitising Social Care team. Your feedback helps shape future procurement and support models for smaller providers.
- Consider collaboration with other small providers in your area – bulk purchasing or shared solutions may reduce costs.
We've developed our own in-house digital social care record solution. What do we need to do?
If you're a provider with an in-house DSCR: currently, there's no requirement for your solution to be on the Assured Solutions List. However, as we move towards universal digital working, it's strongly recommended that in-house solutions meet the same standards as assured solutions.
Next steps: ask your in-house digital team to start the assurance process with NHS England. This ensures your solution:
- Meets national standards for quality and security
- Is able to connect with GP records and will be able to connect with more NHS systems in the future
- Is recognised by commissioners and regulators
Find out more about the assurance process at: www.digitisingsocialcare.co.uk
Data Security and Protection Toolkit (DSPT)
What is the Data Security and Protection Toolkit?
The Data Security and Protection Toolkit (DSPT) is a free online self-assessment that helps you check and improve how you keep people's information safe.
It's not just about digital records. The DSPT covers any information you hold about anyone – including paper records – relating to:
- The people who use your services
- Your staff
- Funders and partners
- Visitors
The DSPT helps you assess your data security and protection policies, procedures and processes. It's widely recognised by the CQC, local authorities and the NHS as evidence of your commitment to information security.
Who needs to complete the DSPT?
Must complete: All CQC-regulated adult social care providers in England must complete the DSPT. This is a legal requirement under the Health and Social Care Act 2012, as amended by the Health and Care Act 2022.
Strongly recommended: Providers not regulated by the CQC should also complete the DSPT to:
- Better understand your own data security
- Protect the information of people using your services
- Demonstrate good practice to commissioners
How often do I need to complete the DSPT?
You must review, update and republish your DSPT assessment once every year. If you don't update it annually, your assessment goes out of date and you'll lose your compliant status.
What are the benefits of completing the DSPT?
Access to NHS services Once you've achieved 'Standards Met', you become eligible to access:
- NHS Mail (NHSmail)
- GP Connect
- Proxy Access
- Shared Care Records
Demonstrate your commitment The DSPT shows commissioners, regulators and the public that you take data security seriously.
Identify and address risks the self-assessment process helps you spot gaps in your data security and take action before problems occur.
Meet regulatory expectations The CQC and local authorities recognise the DSPT as evidence of good governance and data protection practices.
What happens if my DSPT lapses?
If your DSPT certificate expires, several things happen:
- Loss of compliant status
- You're no longer considered compliant with NHS Data Security and Protection standards.
- Loss of access to NHS systems You may lose access to:
- NHS Mail
- GP Connect
- Shared Care Records
- Other NHS digital services
- Contract and funding implications Many commissioners and Integrated Care Boards require a valid DSPT as part of contracts. A lapsed DSPT could affect:
- Contract renewals
- Ongoing funding
- Tender applications
- Regulatory and reputational risk
- Operating without a current DSPT could expose you to regulatory issues with NHS England or the Information Commissioner's Office (ICO)
- It may damage trust with partners, commissioners and the people using your services
- Could affect CQC inspection outcomes
Getting back on track: You don't need to start from scratch. Log back into the DSPT portal and complete the required assertions for the current year.
Where can I get help with the DSPT?
Free support is available through the Better Security, Better Care (BSBC) programme, funded by the Department of Health and Social Care.
Through their website you can:
- Access online guides and step-by-step instructions
- Book webinars and training sessions
- Contact the national helpdesk
- Get direct support from one of 32 local support organisations across England
Visit Better Security, Better Care. | Digital Care Hub
The BSBC programme provides:
- Expert guidance and templates
- One-to-one support sessions
- Help understanding what evidence you need
- Advice on addressing gaps in your data security
Getting support
Where can I get help becoming fully digitised?
Better Security, Better Care (BSBC) Programme Free, tailored support for completing your DSPT and improving data security.
- Website: www.digitalcarehub.co.uk
- National helpdesk available
- 32 local support organisations across England
- Webinars, guides and one-to-one sessions
Your local area
- Integrated Care Board (ICB) – may have specific digitisation support programmes
- Local authority commissioning team – can advise on local requirements and support
- Local BSBC organisation – dedicated support in your area
Digitising Social Care programme Information about assured digital social care records and the fully digitised commitment.
- Website: www.digitisingsocialcare.co.uk
Who can I contact if I have questions?
For questions about:
- The fully digitised commitment and DSCRs: Visit: www.digitisingsocialcare.co.uk
- The Data Security and Protection Toolkit: Better Security, Better Care helpdesk Visit: www.digitalcarehub.co.uk
- Local support and requirements: Contact your Integrated Care Board or local authority commissioning team
- Technical issues with your current DSCR: Contact your DSCR supplier's support team
Glossary
- Assured Solutions List (ASL): The list of digital social care record solutions approved by NHS England as meeting national quality and security standards.
- Capacity Tracker: A monthly data collection completed by care providers with information about capacity, vacancies and workforce.
- CQC (Care Quality Commission): The independent regulator of health and adult social care in England.
- Data Security and Protection Toolkit (DSPT): A free online self-assessment that helps organisations check and improve how they keep information safe and secure.
- Digital social care record (DSCR): A digital solution for recording, storing and managing information about people's care and support needs.
- Integrated Care Board (ICB): NHS organisations that bring together health and care services in a local area.
- Standards Met: The level of compliance required in the DSPT to demonstrate you're keeping information safe and secure.