DSPT 2026-27 · Standard 1: Personal Confidential Data
How does your practice securely destroy records and equipment containing personal data or other data needed to deliver care?
Why it matters for your practice
When you dispose of old patient records, computers, phones, USB sticks, or paper documents, you need to do it securely. This typically means: cross-cut shredding for paper, using a certified destruction company for hard drives/equipment, and wiping devices before disposal. Describe your process, or say 'Not applicable' if you use a third party for all destruction.
Is it mandatory?
No. 1.4.3 is optional for GP practices in the 2026-27 DSPT, but answering it shows good practice.
What changed since 2025-26
Question wording and tooltip updated. See all 2026-27 changes.
Official wording from NHS England
Assertion 1.4: Records are maintained appropriately
If your organisation destroys any records or equipment that hold personal data or other data important to the delivery of care, how does it make sure that this is done securely?
It is important that, when there is no longer a valid reason to keep data, it is disposed of securely. This applies to paper documents, electronic records and equipment, such as old computers, mobile phones, CDs and memory sticks. If anyone in your organisation destroys any records or equipment themselves, such as shredding documents, briefly describe how the organisation makes sure that this is done securely. Advice on the safe destruction of personal data is available from Digital Care Hub (https://www.digitalcarehub.co.uk/data-protection-and-cyber-security/records-management-abbreviated-code-of-practice-and-guidance-for-adult-social-care-providers). If you only use third parties to destroy records or equipment and do not do this yourselves write "Not applicable" in the text box.
Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.
ClinicShield templates that help
- Records Retention Schedule
Ready-to-edit templates are included in paid plans.