The Digital Technology Assessment Criteria (DTAC) are the supplier's homework on five areas. Your job is to read it and check the answers stand up.
- Whose job
- The supplier completes it. You review it.
- Who usually leads
- Practice manager, with your CSO and DPO
- How often
- Before you buy or switch on a tool
What it is
NHS England describes DTAC as an assessment framework for health and care providers to use when buying or deploying digital products. The supplier completes the form and you use it as part of your checks.1
A shorter, updated form was published in March 2026, with about a quarter fewer questions and less overlap with other NHS checks such as the DSPT.2
The five areas
Pick an area to see what it covers and what you should do with it.
Has the supplier done its DCB0129 safety work, with a named CSO?
Your part: Ask for their hazard log and safety case report. More
Do they meet data protection law, with DSPT and the right agreements?
Your part: Use their answers to help write your DPIA. More
Is the product secure, with Cyber Essentials Plus and security testing?
Your part: Check the certificate is current. More
Does it connect to other systems using recognised standards?
Your part: Ask how it links to your clinical system. More
Is it easy to use, and does it meet accessibility standards?
Your part: Ask how it works for patients and staff with disabilities. More
Worth knowing
- It isn’t a certificateDTAC sits alongside other approvals and doesn’t replace them. NHS England doesn’t endorse third-party DTAC certification schemes.1
- It doesn’t replace your own workYou still need your own clinical safety assessment and DPIA. DTAC answers help you write them.
- Check the dateAsk for the current version. A form from years ago may not reflect the product you’re buying.
- ICB-bought toolsIf your ICB has bought the tool, ask whether it already holds the supplier’s DTAC.
References
- Digital Technology Assessment Criteria (DTAC). NHS England
- Updated NHS England DTAC form and guidance. NHS Innovation Service, March 2026
Sources on this page last checked 6 November 2026.