Are You Compliant? Secure Mail Requirements for Adult Social Care

This event will explain and clarify the requirements for secure email communication for adult social care providers in England and what organisations must do to comply with national standards.

Across health and social care, any email containing health and care information (which is often personal, sensitive or confidential) sent to and from health and social care organisations must meet the national Secure Email Standard (DCB1596). This standard ensures that email systems are capable of keeping sensitive information secure and can safely exchange information with NHS organisations and other accredited services.

Attendees will learn:

• What the Secure Email Standard (DCB1596) requires and why it applies to social care providers sharing care or health-related information.
• Which secure email systems are recognised as compliant, including NHSmail, Microsoft Office 365 and Google Workspace (formerly G Suite), where these are configured to conform to the Secure Email Standard (DCB1596).
• How to demonstrate compliance — whether by using an accredited service or completing the accreditation process for your own email system.
• What this means for care providers commissioned to deliver publicly funded care and the importance of maintaining secure communications to protect service users’ information and meet contractual expectations.

In addition, the session will cover associated data security expectations, including the role of the Data Security and Protection Toolkit (DSPT) and how certifications like Cyber Essentials/Cyber Essentials Plus support your organisation’s information governance and cyber resilience. The DSPT is the national tool for assessing and assuring data security practices and is routinely required where organisations access or handle NHS patient data. Digital Care Hub guidance explains the distinction and overlap between DSPT and Cyber Essentials — both help adult social care providers assess and improve their security arrangements.

This event is essential for social care senior staff and managers responsible for data governance, IT infrastructure, contracts and quality assurance, helping ensure that your organisation meets regulatory obligations, protects service user data and avoids breaches arising from insecure communication channels.

This event is part of the Better Security, Better Care programme, funded by NHS Transformation Directorate to support data and cyber security across the adult social care provider sector.