All organisations that access NHS patient data must use this tool to provide assurance that they are practising good data security and that personal information is handled correctly.

This allows organisations to measure their performance against the National Data Guardian’s data security standards.