Free interactive tool from Digital Care Hub guides providers through creating tailored, Data Security and Protection Toolkit-compliant policies — starting with Bring Your Own Device.
The Data Policy Builder helps adult social care providers understand key data protection and cyber security issues and create policies that genuinely reflect their organisation’s systems, processes, and ways of working.
While it may be tempting to copy and paste policies from elsewhere, generic policies can leave providers exposed, as they often fail to reflect day-to-day practice and could lead to non-compliance with data protection law or Data Security and Protection Toolkit (DSPT).
The Data Policy Builder makes policy creation simple and supportive. It is hosted on the Digital Care Hub website and can be used on both desktop and mobile. It:
· Explains each topic, key risks and issues to consider before users start to develop their policy.
· Asks short, practical questions about what organisations currently do – and what they plan to do or achieve.
· Provides tailored advice and recommended actions to strengthen security further.
· Generates a complete policy and action plan — ready to download, brand, and share (PDF or Word).
When answering questions about their approach, users will be prompted to choose from a list of options. These options are rated Gold, Silver or Bronze, depending on how securely they protect data. This will help care providers to understand how well
they are managing the issue at present, and how they can strengthen their approach in future.
The first policy available focuses on Bring Your Own Device (BYOD) — a high-risk area where many providers allow staff to use their own mobile phones for work purposes. Research by Digital Care Hub found that while half of care providers allow personal device use, only half of those have a policy in place, and many underestimate the associated risks.
The Data Policy Builder brings care providers through a series of questions about their Bring Your Own Device policy which will help them to learn about the issue – as well as create the actual policy. For example, it pushes care providers to consider if they will allow staff to use public Wi-Fi on their device for work purposes and if they do not, how will they manage this.
Michelle Corrigan, Programme Director at Digital Care Hub, said:
“Copying a policy from elsewhere may feel like a quick fix, but it can leave dangerous gaps. The Data Policy Builder takes the stress out of the process — guiding you step-by-step to understand the risks, choose practical mitigations, and build a policy that truly fits your service. We are delighted to launch this new product during Cyber Security Awareness Month.”
The BYOD policy is the first in a series of policies to be added to the Data Policy Builder over the coming months. The tool will include:
· Bring Your Own Device (BYOD)
· Data Quality
· Data Protection
· Data Security
· Information Asset Register
· Record of Processing Activity
· Digital Asset Register
· Record Retention
· Audit Checklist
· Acceptable Use Policy
· Third Party Suppliers
Dr Jane Townson OBE, Chief Executive of the Homecare Association, said:
“The Data Policy Builder is a really welcome development for the sector. Homecare services increasingly rely on mobile technology, and many staff use their own devices for work. This tool will help providers create tailored, DSPT-compliant policies that reflect real-world practice — improving safety and confidence for staff and the people they support.”
The Data Policy Builder is free to use, available on desktop and mobile, and has been co-produced with care providers and cyber security experts to ensure it is practical, accessible, and easy to use. Find out more about the Data Policy Builder www.digitalcarehub.co.uk/data-policy-builder Or start to use the tool at policy.digitalcarehub.co.uk/
