Why do these requirements exist?
GP Connect provides access to highly sensitive patient information, including:
Complete medical histories
Current medications and allergies
Mental health records
Test results and diagnoses
The NHS must verify that every organisation accessing this data:
Has robust data security measures in place (DSPT)
Commits to using patient data only for direct care purposes (NDSA)
Can be uniquely identified and audited (ODS code)
These safeguards protect patients and ensure their most personal health information is only accessed by legitimate care providers for appropriate care-related reasons. Without these checks, there would be no way to prevent misuse of patient data.
Before you start
You need:
Admin access to your Access Care Planning account
Authority to sign agreements for your organisation
About 20 minutes to complete the process
Step 1: Check your DSPT status
The Data Security and Protection Toolkit (DSPT) proves your organisation handles patient data safely.
Go to DSPT website
Search for your organisation
Check your assessment is active (expires 30 June annually)
Need to complete your DSPT? Start at DSPT Overview
Step 2: Sign the National Data Sharing Agreement
The NDSA gives you legal permission to access GP records.
Go to NDSA portal
Read the agreement
Have your Caldicott Guardian or Information Governance Lead sign
Wait for confirmation email (usually arrives from NHS England within 24 hours)
Note: This is a one-time agreement that doesn't expire.
Step 3: Find your ODS code
Your Organisation Data Service code identifies your organisation to the NHS.
Go to ODS search
Search by your postcode or organisation name
Note your code (format: A12345)
Can't find your code? See this ODS help guide or email [email protected] for support.
Step 4: Register with Access
Complete our online form to request GP Connect activation.
Open the GP Connect Enablement Form
Enter:
Your tenant name (find in Configuration > Tenant > Tenant Name)
Your organisation details
Confirmation of DSPT and NDSA completion
Your ODS code
Contact email for updates
What happens next
We aim to respond to all activation requests within 10 days.
As part of this process, we must request a unique identifer (ASID) from NHS England, which we must then apply to your Access Care Planning Tenant.
We will notify the primary and secondary email addresses you have provided in the form above (Step 4).
Once we confirm that GP Connect has been enabled on your Access Care Planning Tenant, get started by following the information in this help article.
Need help?
GP Connect features: User Guide
Technical support: Contact Access Support
NHS requirements: Contact your Information Governance Lead