Learn from our compliance experts

From DSPT to CAF: Navigating NHS Data Security Compliance in 2025

In 2025, the NHS Data Security and Protection Toolkit (DSPT) is evolving into a new CAF-aligned framework. Discover what this transition means for NHS organisations and digital health innovators, how to prepare for the Cyber Assessment Framework (CAF), and how compliance platforms like Naq can support a smooth shift.

Prescription for Protection: Managing Security & Compliance In Online Pharmacies

One platform to manage pharmacy compliance across DSPT, DTAC, ISO 27001 and more - with real-time oversight and zero duplication.

Scaling Responsibly: Managing Risk & Compliance in Technology-Enabled Care

As digital care scales, Naq enables continuous, cross-framework compliance - turning complex risk management into a streamlined, scalable process.

Securing Trust: Building Cyber Resilience in FemTech

Trust is built on security - operationalising resilience is no longer optional, it’s the foundation for growth and credibility in a high-stakes, data-driven landscape.

The Cyber Security and Resilience Bill: A Look at the UK’s New Cyber Framework

What the new bills means for your organisation - and healthcare in particular.

Digital Health Compliance Trends: Top Standards for 2025

Explore the top compliance standards driving digital health in 2025, including ISO 27001, HIPAA, and Cyber Essentials Plus, and learn why innovators are focusing on these frameworks.

A Look Ahead: Key Compliance Updates for 2025

We've put together a list of key compliance updates you can expect to see in 2025.

AI and Digital Health: Navigating Regulatory Requirements

The Growing Importance of ISO 27001 in Digital Health

Discover why 50% of digital health innovators have made ISO 27001 a top priority for 2025. Explore the benefits of the certification, whether it’s required for NHS contracts, how it can help your organisation expand internationally and whether you really need to be UKAS certified.

The Comprehensive Guide to Key Compliance Standards for Digital Health

As a digital health innovator, the compliance standards you’ll need to meet are numerous, with many overlapping requirements. Dive into our comprehensive guide to key digital health standards, including GDPR, NHS DSPT, DTAC, ISO 27001 and more, so you can navigate them confidently and keep your solution compliant.

ISO 9001 and Digital Health: Why Innovators Are Opting In To The Standard

ISO 9001 isn't often a regulatory requirement for digital health innovators, so why are 40% planning to meet the standard next year? Learn what ISO 9001 is, what it entails, and the key benefits it can bring to your digital health organisation.

Introducing Clinical Projects: The Future of DCB 0129 Compliance

Naq's Clinical Projects feature streamlines DCB 0129 compliance, making it easier for digital health innovators to manage and update documentation efficiently.

An Initial Look at the EU AI Act

Four years after its initial proposal, the EU AI Act is now in force, marking the world's first AI legislation. This landmark ruling will govern the development, use, and application of AI systems and applications across the European Union. Join us as we explore the new legislation and its implications for AI-enabled solutions within the EU and non-EU organisations with EU customers.

Ready for Anything: Your Guide to Business Continuity and Incident Response Planning

With cyber threats becoming increasingly sophisticated, robust business continuity and incident response plans are no longer optional - they're essential. In this guide, we'll outline their roles, similarities, and differences, what each covers, and how to implement them across your organisation.

Our Compliance Therapy Webinar Series

Announcing our complete Compliance Therapy webinar schedule for 2024! Join digital health leaders, industry experts, and the Naq team as we break down some of the biggest compliance challenges facing health innovators today. From building a robust security foundation to making your solution as procurable as possible, and exploring how digital health can help solve some of healthcare’s biggest challenges

Supply Chain Security and the new Cyber Resilience Bill

The King’s Speech calls for urgent cybersecurity measures to protect the UK's critical infrastructure, focusing on the NHS's rising cyber threats. But what can organisations do to keep up with changes?

5 Minutes With Dr Julian

Regulatory compliance has been named as one of the biggest challenges to digital health innovation. To cut through the complexity and provide practical guidance, we're gathering leading health entrepreneurs to share their proven strategies.

5 Minutes with Isla Health

Regulatory compliance has been named as one of the biggest challenges to digital health innovation. To cut through the complexity and provide practical guidance, we're gathering leading health entrepreneurs to share their proven strategies.

The Next Step In DSPT Compliance: A Look At Version 7 Of The Toolkit

The annual DSPT deadline is fast approaching, and with it comes Version 7 of the Data Security and Protection Toolkit. Dive into our latest blog to discover everything we know about one of the most significant updates to the toolkit yet.

NHS Innovation Accelerator uses Naq to automate NHS DTAC readiness evaluation for its  2024 Cohort

12 innovators to achieve DTAC compliance efficiently with Naq

DCB 0129: Navigating your solution's clinical safety requirements

Developers wishing to get their solutions adopted by the NHS will need to ensure their innovations meet compliance with DCB 0129, the standard setting out the clinical safety criteria for digital solutions and IT systems across the NHS. In this blog, we'll dive into some of the essential steps digital health developers will need to meet to achieve the standard.

What is An EU Representative, And Do I Need One?

What exactly do these 'EU Representative' services entail, and which businesses need a representative to achieve compliance? In this month's blog, we'll take you through exactly what you need to know.

Why all businesses must start taking supply chain security seriously

Why all businesses must take their supply chain security seriously

Closing Deals Faster: Tips to ace your supplier due diligence

Closing Deals Faster: Tips to ace your supplier due diligence

The NHS DSPT 2023/24 is here - What's new in Version 6?

The NHS DSPT 2023/24 is here. Discover what is new in the latest version of the NHS Data Security & Protection Toolkit and how to ensure your organisation meets compliance with next year's submission requirements.

The role of GDPR in NHS DSPT and DTAC compliance

Learn how the General Data Protection Regulation (GDPR) impacts compliance with the NHS Data Security and Protection Toolkit (DSPT) and Digital Technology Assessment Criteria (DTAC).

The Role of Cyber Essentials in Achieving NHS DSPT Compliance

Compliance with the NHS Data Security & Protection Toolkit is crucial for organisations aspiring to become suppliers for the NHS. A key element of achieving this compliance involves becoming certified with the Cyber Essentials scheme.

The GDPR Guide for Small Businesses

Naq's easy guide on how to make your business secure and data compliant.

Ransomware: what is it, do I need to worry and what do I need to do?

Your 5 step action plan to protect your business against malware

Navigating DART for SMEs: Tips to become a successful MoD supplier

Navigating DART for SMEs: Tips to become a successful MoD supplier

UK New cyber security requirements for managed service providers

New cyber security requirements announced for MSPs

What is the NHS Data Security & Protection Toolkit, and how to comply?

The NHS Data Security Protection Toolkit (DSPT) is a mandatory security measure for organisations processing NHS data. Find out what it is, why you must comply, and how Naq can help.

Naq Partners with Hiscox Benelux for 360 Cyber Protection & Compliance

Naq Partners with Hiscox Benelux

Naq's 2020 in review

Since Naq was established in 2019, we couldn�t have predicted the year we�ve had � here are some of our highlights.

Press Release: Forbes ‘30 under 30’ female founder raises $1.5m Seed Round to disrupt the European compliance market

Naq raises $1.5 Million Seed Round to disrupt European compliance market

Naq raises €3M (£2.6M) to revolutionise healthcare compliance across the UK and EU

Naq successfully raises €3M (£2.6M) in seed funding to revolutionise healthcare and MedTech compliance across the UK and EU.

ISO 27001 Explained: Understanding the Fundamentals of Compliance

In this blog, we delve into what ISO 27001 entails and the crucial components of achieving compliance. Discover how ISO 27001 certification can safeguard your organisation's sensitive data, boost customer trust, and ensure legal and regulatory compliance.

May Monthly Roundup

Our round-up of news and updates for May

Naq partners with IPSE

IPSE, the Association of Independent Professionals and Self-Employed is the newest member of the Naq partner network.

ICO calls on accountants to help SMEs with data compliance

Accountants have long held the position of trusted advisors for their clients, offering expert guidance on financial matters. Now, the ICO is urging accountants to leverage this trusted role and assist their SME clients in navigating the intricate landscape of data compliance. Learn what the new ICO guidance entails and you can do to help your clients meet compliance and secure their data.

Why Data Compliance Doesn't Work Without Cyber Security

The introduction of the EU & UK GDPR means that in order to achieve compliance, businesses must also evaluate the effectiveness of their cyber security measures.

Navigating Healthcare Compliance in 2024: Key Developments and Emerging Requirements

Join us for a comprehensive look at the major regulatory updates and compliance requirements shaping the healthcare sector in 2024. From the UK's transition to UKCA marking and NHS' Net Zero strategy to the EU's 'European Health Data Space' and Google's new health app policies, stay informed on the essential changes impacting healthcare organisations and the companies that supply them.

Government Launches NHS Cyber Security Strategy: What This Means for NHS Suppliers

Government Launches NHS Cyber Security Strategy: What This Means for NHS Suppliers

Navigating NHS DTAC: Creating a User Journey for your Digital Health Solution

A key requirement under the NHS Digital Technology Assessment Criteria is to create a user-centric user journey map which aligns with NHS standards for clinical safety, data protection, and usability. This blog provides a step-by-step roadmap to crafting user journeys through your solution that meet DTAC's usability and accessibility requirements.

GDPR after Brexit: 6 things you need to understand now

The impact of brexit on the UK's GDPR regulations

7 Cyber Security Best Practices For Law Firms

Protect your law firms sensitive data and client information with our easy to implement 7 step cybersecurity guide.

What is a Data Protection Impact Assessment (DPIA)?

Conducting a Data Protection Impact Assessment (DPIA) is not only a legal obligation under the GDPR and UK-GDPR, but it is now becoming an essential requirement in securing contracts with enterprises, governments, and organisations operating in heavily regulated sectors. In this guide, we'll delve into the world of DPIAs: what they are, when they need to be carried out, and the vital information you'll need to perform them effectively.

Getting consent: 7 steps to asking the right questions

The ultimate guide to GDPR consent management for small businesses

Cyberattacks on the rise for accountancy firms | Naq

As cybercrime becomes more sophisticated, accountants are increasingly at risk. In this blog post, we review the most pressing cyber security risks and how to keep your firm safe.

Crossing Borders: The UK-US Data Bridge and Its Implications On EU Compliance

In this month's blog post, we delve into this new data bridge, its potential implications on the UK adequacy decision and practical steps businesses can take to ensure they remain compliant in light of these legislative developments.

April Monthly Roundup

Our round-up of news and updates for April

The Brexit Freedoms Bill: How will it impact the UK-GDPR?

What is the UK government's new "Brexit Freedoms" Bill and what could it mean for the UK-GDPR and the EU's adequacy decision?

Answering Data Subject Access Requests (DSARs): A Step-by-Step Guide

Data subject access requests (SARs) can be overwhelming for startups and smaller businesses. This step-by-step guide will make the process easier to understand.

The cost of cyber security breaches on small businesses

Breaking down the cost of security breaches on SMEs

7 cybersecurity best practises small businesses need now

The complete cybersecurity guide for SMEs

The 7 Step Guide To Mastering GDPR Compliance Across Your SME

Master GDPR compliance across your SME with our easy to implement guide on achieving data compliance.

What does 2023 have in store for EU data compliance?

What does 2023 have in store for EU data compliance?

2023 Compliance Unwrapped: Hits, Misses, and what’s coming up in 2024

From the UK's Data Protection and Digital Information Bill to the EU's Cyber Resilience Act and AI governance, we'll explore some of 2023's key developments in data protection and cybersecurity legislation and what's on the horizon for 2024.

A Guide to the NHS Digital Technology Assessment Criteria (DTAC)

As digital health solutions become integral to healthcare, compliance with DTAC's safety, security, usability, and accessibility standards is essential. Discover the ins and outs of the NHS Digital Technology Assessment Criteria in our comprehensive guide.

Working from home securely: stop sofa hackers now with these 6 steps

Protecting your business wherever you work from

Citizen Care Health Fast-Tracks UK Compliance with Naq

Here's how Citizen Care Health streamlined their compliance with Naq

General Practice.AI Ensures Compliance with Naq, Building a Safer, Market-Ready Product

Naq is an Automatic Choice for Oxford Dynamics

Oxford Dynamics achieve GDPR and Cyber Essentials with the Naq platform.

Digital Health Company Saves £250k with Naq

Digital health innovators achieve Cyber Essentials, NHS DSPT and NHS DTAC by streamlining their compliance with Naq.

RareCan uses Naq to safeguard vulnerable patient data.

Digital health innovator forgets compliance worries with Naq platform.

COGS AI use Naq to navigate DTAC

Digital health startup values practical tool to build positive compliance habits.

Streamlining Global Data Compliance for VL Media

How VL Media Leveraged Naq's Platform to Simplify Compliance Across 180 Countries

Naq helps Incision enter UK market by simplifying NHS security requirements

Incision expands into UK healthcare market with compliance support from Naq

Melo Achieves DTAC with Naq's Simplified Compliance Platform

An automated platform is a better decision for Decently.

Doctors dispense with £10,000 compliance consultancy fees

NHS entrepreneurs achieve GDPR, Cyber Essentials and DSPT with automated platform

TMA world meets Enterprise compliance demands with Naq platform

Streamlining GDPR Compliance for SaaS Innovators

Vormats quickly achieves globally recognised ISO27001 standard with Naq

Accelerating security compliance for enterprise success

The Ultimate DTAC Guide for Digital Health Innovators

Building Cyber Resilience in Women’s Health: A Guide for Digital Care Platforms

The Online Pharmacy’s Guide to Managing Compliance at Scale

Security & Compliance Management for Telehealth Providers

The Comprehensive 2025 NHS DSPT Guide

Our NHS Data Security and Protection Toolkit (DSPT) guide is designed to help NHS suppliers and organisations with access to NHS data navigate the complexities of compliance with this year's NHS DSPT requirements.

Integrating AI in Your Health Solution, Compliantly

The Comprehensive Guide to ISO 27001

The State of Digital Health Compliance 2024

Our first Digital Health Compliance Survey reveals innovators' biggest challenges in meeting NHS frameworks.

The Guide to GDPR Compliant Email

Discover the essentials of GDPR compliance and elevate your marketing efforts with our expert guide!

NHS Innovation Accelerator announces 12 new fellows

NHS Innovation Accelerator Welcomes 12 New Fellows: Driving Healthcare Innovation Forward.

Navigating Cyber and Compliance with Naq

Naq Cyber simplifies compliance for UK and European SMEs. Their platform automates evidence collection, ensuring GDPR, Cyber Essentials, ISO27001, and more.

Naq raises £2.6m to aid compliance in UK and EU

Naq, an automated digital health compliance platform, has raised £2.6 million to revolutionize healthcare and medical compliance across the UK and EU. The funding round gained investment from No Such Ventures and existing investors.

Dutch-UK startup Naq secures €3M for its digital health compliance platform

Naq Raises €2.5M: Revolutionizing Healthcare Decision-Making with AI

#MIWIC2022: Nadia Kadhim, Naq Cyber

Nadia Kadhim, Co-founder and CEO of Naq Cyber, simplifies compliance and security for SMEs in Europe

Naq Cyber CEO: health businesses need to do more to protect patient data

Naq Cyber CEO, Nadia Kadhim, warns health businesses need to do more to protect patient data.

Forbes 30 Under 30: Victory for Cyber Runway Leaders Behind NAQ Cyber and Quantum Dice

Nadia Kadhim, founder of Naq Cyber, simplifies compliance and security for SMEs in Europe

Diverse cybersecurity solution aims to protect small business vulnerabilities

Nadia Kadhim, CEO of Naq Cyber, created a solution to help small businesses reduce the threat posed by hackers online.

Elliott Atkins joins Naq Cyber as non-executive director

Elliott Atkins, a seasoned professional in cyber security, joins Naq Cyber as a non-executive director. His extensive experience will be invaluable to Naq.

Inspirational Woman: Nadia Kadhim | CEO, Naq Cyber

Nadia Kadhim, CEO of Naq Cyber, supports small businesses with cybersecurity tools. Named a TechRound BAME 50 Under 50 Entrepreneur, she’s a relatable role model for young women.

NHS Innovation Accelerator announces 12 new fellows

NHS Innovation Accelerator Welcomes 12 New Fellows: Driving Healthcare Innovation Forward.

Navigating Cyber and Compliance with Naq

Naq Cyber simplifies compliance for UK and European SMEs. Their platform automates evidence collection, ensuring GDPR, Cyber Essentials, ISO27001, and more.

Naq raises £2.6m to aid compliance in UK and EU

Naq, an automated digital health compliance platform, has raised £2.6 million to revolutionize healthcare and medical compliance across the UK and EU. The funding round gained investment from No Such Ventures and existing investors.

Dutch-UK startup Naq secures €3M for its digital health compliance platform

Naq Raises €2.5M: Revolutionizing Healthcare Decision-Making with AI

#MIWIC2022: Nadia Kadhim, Naq Cyber

Nadia Kadhim, Co-founder and CEO of Naq Cyber, simplifies compliance and security for SMEs in Europe

Naq Cyber CEO: health businesses need to do more to protect patient data

Naq Cyber CEO, Nadia Kadhim, warns health businesses need to do more to protect patient data.

Forbes 30 Under 30: Victory for Cyber Runway Leaders Behind NAQ Cyber and Quantum Dice

Nadia Kadhim, founder of Naq Cyber, simplifies compliance and security for SMEs in Europe

Diverse cybersecurity solution aims to protect small business vulnerabilities

Nadia Kadhim, CEO of Naq Cyber, created a solution to help small businesses reduce the threat posed by hackers online.

Elliott Atkins joins Naq Cyber as non-executive director

Elliott Atkins, a seasoned professional in cyber security, joins Naq Cyber as a non-executive director. His extensive experience will be invaluable to Naq.

Inspirational Woman: Nadia Kadhim | CEO, Naq Cyber

Nadia Kadhim, CEO of Naq Cyber, supports small businesses with cybersecurity tools. Named a TechRound BAME 50 Under 50 Entrepreneur, she’s a relatable role model for young women.