Organisations that are only using NHSmail as their email solution are not required to submit spam/ phishing evidence for the Data Security and Protection Toolkit (DSPT). Further information provided.