GDPR & Information Governance Spot Check
A practical 25-question knowledge check for staff working in GP practices in England. It is designed to support local Data Security and Protection Toolkit assurance and identify areas where refresher learning or practical checking may be needed.
Version 1.0 | September 202625scenario-based questions
5core IG areas
1printable evidence record
Before you start
Choose the answer that best reflects what you should do in practice. Questions are presented in a different order each time. Once all 25 questions are complete, you will receive your score, learning points and an evidence record.
For practices. This spot check is intended as one part of your wider information governance assurance. It can help demonstrate that staff knowledge is being checked, but it should sit alongside practical monitoring that staff are following local policies and procedures.
Scoring. The quiz uses an 80% local review threshold. This is not a mandatory DSPT pass mark. A result of 80% or more will only be marked satisfactory where no critical confidentiality or security questions are missed.
Please choose an answer before continuing.
overall score
correct answers
questionnaire outcome
Results by area
Learning and follow-up actions
Review answers and explanations
GDPR & Information Governance Spot Check
Staff knowledge assurance record
Practice:
Date:
Staff member / identifier:
Role:
Score:
Outcome:
Critical knowledge questions missed:
Areas identified for review:
DSPT evidence note. This record demonstrates completion of a knowledge and behaviour-based spot check. It should be retained alongside evidence of practical monitoring that staff are following relevant data protection, confidentiality and security procedures.
Howbeck Healthcare GDPR & Information Governance Spot Check. Version 1.0, September 2026. Local review threshold: 80%. This threshold is not prescribed by the DSPT.
