DSPT 2026-27 · Standard 6: Responding to Incidents
Have you had any repeat data security incidents in the last 12 months?
Why it matters for your practice
A 'repeat incident' means the same type of breach happening again within 3 months — for example, two separate cases of patient records being emailed to the wrong address. If yes, describe what happened and what you've done to prevent further occurrences. If no, simply state that.
Is it mandatory?
No. 6.3.5 is optional for GP practices in the 2026-27 DSPT, but answering it shows good practice.
Official wording from NHS England
Assertion 6.3: Known vulnerabilities are acted on based on advice from NHS Digital, and lessons are learned from previous incidents and near misses
Have you had any repeat data security incidents within the organisation during the past twelve months?
A repeat incident is defined as an exploitation of the same vulnerability on the same systems or different ones, that occurs within three calendar months of a previous occurrence. Provide details.
Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.
ClinicShield templates that help
- Incident Response Plan
Ready-to-edit templates are included in paid plans.