DSPT 2026-27 · Standard 7: Continuity Planning
Do you have working backups of all important data, and have you tested that they can be restored?
Why it matters for your practice
Your clinical data, documents, and other important files need to be backed up regularly. You should know: How often are backups done? Where are they stored (on-site, cloud, or both)? Are they protected from ransomware (i.e. not always connected)? Have you actually tested restoring from a backup? Ask your IT support company about this if unsure.
Is it mandatory?
Yes. GP practices must meet 7.3.4 to reach "Standards Met" in the 2026-27 DSPT.
Official wording from NHS England
Assertion 7.3: You have the capability to enact your incident response plan, including effective limitation of impact on your essential service
How does your organisation make sure that there are working backups of all important data and information?
It is important to make sure that backups are being done regularly, that they are successful and that they include the right files and systems. Briefly explain how your organisation's backup systems work, how you protect them from unauthorised access, and how you have tested them. Your plan to restore from backup should include which systems need to be recovered, and in what order. You may need to ask your IT supplier to assist with answering this question.
Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.
ClinicShield templates that help
- Business Continuity Plan
Ready-to-edit templates are included in paid plans.