Unavoidably Secure

Blog

Practical, plain-English guidance on cyber security and data protection compliance for dental practices, care providers and regulated small organisations.

17 October 2026 · 6 min read UK GDPR

Do you need to pay the ICO data protection fee? A guide for small organisations

Who has to pay the ICO fee, the 2026 tiers from £52, the exemptions and how to pay or renew, for dental practices, care providers and small charities.

Read the guide
16 October 2026 · 5 min read DSPT

DSPT deadline 2027: when the 2026-27 toolkit is due, and a month-by-month plan

When is the 2026-27 DSPT deadline? What is confirmed, why to plan for 30 June 2027, and a month-by-month plan for dental practices and care providers.

Read the guide
16 October 2026 · 4 min read Care providers

DSPT for care homes: a plain-English guide for 2026-27

What the DSPT means for care homes and home care providers in 2026-27: who needs it, the 26 and 45 question levels, what to have ready, common gaps and free help.

Read the guide
16 October 2026 · 4 min read DSPT

DSPT statuses explained: Standards Met, Approaching Standards and Standards Exceeded

What each DSPT status means, what it takes to reach Standards Met, when Approaching Standards is allowed, how to get Standards Exceeded and how to check any organisation.

Read the guide
16 October 2026 · 6 min read Benchmark

91% of Yorkshire dental practices can be impersonated by email

We checked 243 dental practice websites across Yorkshire and the Humber. Only 9% tell receivers to block fake emails. What that means for patients and the DSPT.

Read the guide
16 October 2026 · 6 min read Care providers

Care homes and home care: how a fake email in your name reaches families

73% of care homes and 83% of home care agencies we checked could be impersonated by email. How fake fee emails reach families, and the free fix.

Read the guide
16 October 2026 · 8 min read Email security

What is DMARC? A plain-English guide for practices and care providers

SPF, DKIM and DMARC explained without jargon, with the steps for Microsoft 365 and Google Workspace and a safe route from monitor to reject.

Read the guide
16 October 2026 · 6 min read Fraud

Invoice redirection fraud: how fake bank-detail emails work and how to stop them

The "we have changed our bank details" email, why an unprotected domain makes it convincing, and the simple process and technical fixes that stop it.

Read the guide
16 October 2026 · 6 min read Email delivery

Why your appointment reminders end up in spam, and how to fix it

Gmail, Yahoo and Microsoft have tightened their rules. Why genuine practice and care emails land in spam, and the three records that fix it.

Read the guide
15 October 2026 · 7 min read PECR

PECR explained for charities, dental practices and care providers

When you need consent for marketing emails and texts, the two soft opt-ins including the new one for charities, the 2026 cookie exceptions and the higher fines.

Read the guide
13 October 2026 · 7 min read UK GDPR

How to handle a subject access request in a dental practice, care home or charity

The one-month deadline, when you can charge or extend, ID checks, what to send back and a simple seven-step process a small team can follow every time.

Read the guide
10 October 2026 · 7 min read Cyber Essentials

Cyber Essentials requirements in 2026: the Danzell question set explained

What changed in April 2026, from MFA on every cloud service to 14-day patching as an automatic fail, and what it means for dental practices, care providers and charities.

Read the guide
8 October 2026 · 6 min read DSPT

DSPT 2026-27 version 9: what has changed for small organisations

What the version 9 release notes say, what they mean for dental practices, care providers and small charities, the deadline position and what to do now.

Read the guide
3 October 2026 · 6 min read Cyber Essentials

Cyber Essentials for dental practices: do you need it alongside the DSPT?

Whether a dental practice needs Cyber Essentials, how it differs from the DSPT, where the two overlap, and a practical order to tackle them in.

Read the guide
1 October 2026 · 7 min read DSPT

DSPT and Cyber Essentials for charities: what small charities need to know

When a charity needs the DSPT, what Cyber Essentials covers, where the two overlap, and a practical order for small charities working with the NHS.

Read the guide
30 September 2026 · 7 min read DSPT

DSPT and Cyber Essentials for care providers: what you need and how they fit together

What the DSPT and Cyber Essentials each ask of a care provider in England, where they overlap, and a sensible order to tackle them in for 2026-27.

Read the guide
25 September 2026 · 7 min read DSPT

How to complete the DSPT: a step-by-step guide for small organisations

Register, name the people responsible, gather your policies, train staff, check the technical controls and publish before the deadline. A practical walk-through for dental practices, care providers and other small organisations.

Read the guide
22 September 2026 · 6 min read Cyber Essentials

Cyber Essentials vs Cyber Essentials Plus: which does your organisation need?

Both certify against the same five controls. The difference is how you are assessed. Here is how the self-assessment and the hands-on audit compare, and how to choose between them.

Read the guide
21 September 2026 · 6 min read Cyber Essentials

Cyber Essentials explained: a plain-English guide for small UK organisations

What Cyber Essentials actually covers, the five technical controls assessors check, and how it fits alongside the DSPT for regulated small organisations.

Read the guide
10 August 2026 · 8 min read Cyber Essentials

What does Cyber Essentials cost in 2026, the full breakdown

Honest cost breakdown for Cyber Essentials certification in 2026, including published fees, remediation costs, consultant options, and realistic total-cost estimates for a sole trader and a team of ten.

Read the guide
10 August 2026 · 9 min read Security basics

Multi-factor authentication for small teams, a practical rollout guide

Six-step MFA rollout plan for teams of two to fifty. Which factor types to use where, how to avoid locking yourself out, and how to handle the exceptions that always come up.

Read the guide
9 August 2026 · 8 min read Cyber Essentials

Cyber Essentials for the one-person business, everything you need to know

Plain-English guide to Cyber Essentials certification for sole traders and one-person limited companies. The five controls, three routes, 2026 costs, and the common first-attempt mistakes.

Read the guide
DSPT

The DSPT for dental practices, in plain English

What the Data Security and Protection Toolkit asks for, what changed in version 8, and the evidence a dental practice needs before the 30 June deadline.

Read the guide
Free tool

Could someone send email pretending to be your practice?

Run our free instant check on your SPF, DKIM and DMARC records. Plain-English results in a few seconds, and nothing touches your systems.

Run the check