From April 2018, the Data Security and Protection Toolkit replaced the Information Governance (IG) Toolkit as the standard for cyber, data security and data protection for healthcare organisations. This applies not just to NHS providers such as Trusts and GPs but to their suppliers and industry partners too. So, if you are producing an App for telehealth, you will need to publish your assessment using an online tool.

Submissions are made annually and are normally due by 31 March each year, although government arm’s-length bodies and NHS trusts must have completed baseline assessments by the end of the preceding October.