NHS requirements
GP Connect provides access to highly sensitive patient information, including:
Complete medical histories.
Current medications and allergies.
Mental health records.
Test results and diagnoses.
The NHS must verify that every organisation accessing this data:
Has robust data security measures in place (DSPT).
Commits to using patient data only for direct care purposes (NDSA).
Can be uniquely identified and audited (ODS code).
These safeguards protect patients and ensure their most personal health information is only accessed by legitimate care providers for appropriate care-related reasons. Without these checks, there would be no way to prevent misuse of patient data.
Before you start
You need:
Admin access to your Access Care Planning account.
Authority to sign agreements for your organisation.
About 20 minutes to complete the process.
Step 1: Check your DSPT status
The Data Security and Protection Toolkit (DSPT) proves your organisation handles patient data safely.
Go to DSPT website
Search for your organisation
Check your assessment is active. This expires 30 June annually.
Need to complete your DSPT? Start at DSPT Overview
Step 2: Sign the National Data Sharing Agreement
The NDSA gives you legal permission to access GP records.
Go to NDSA portal.
Read the agreement.
Have your Caldicott Guardian or Information Governance Lead sign.
Wait for confirmation email. This usually arrives from NHS England within 24 hours.
Note: This is a one-time agreement that doesn't expire.
Step 3: Find your ODS code
Your Organisation Data Service code identifies your organisation to the NHS.
Go to ODS search.
Search by your postcode or organisation name.
Note your code, format: A12345.
Can't find your code? See this ODS help guide or email [email protected] for support.
Step 4: Register with Access
Complete our online form to request GP Connect activation.
Open the GP Connect Enablement Form
Enter:
Your tenant name:
Go to Configuration
Click Tenant
Search for your tenant name
Your organisation details.
Confirmation of DSPT and NDSA completion.
Your ODS code.
Contact email for updates.
What happens next
We aim to respond to all activation requests within 10 days.
As part of this process, we must request a unique identifer (Accredited System Identifier - ASID) from NHS England, which we must then apply to your Access Care Planning Tenant.
We will notify the primary and secondary email addresses you have provided in the form above (Step 4).
Once we confirm that GP Connect has been enabled on your Access Care Planning Tenant, get started by following the information in this help article.
Need help?
GP Connect features: User Guide.
Technical support: Use our Digital Assistant.
NHS requirements: Contact your Information Governance Lead.