TL;DR: Want to work with the NHS? Cyber Essentials is no longer optional. Any company supplying digital tech or services to the NHS must pass through a set of cybersecurity and compliance frameworks — CE, DSPT, and DTAC. Cyber Essentials certification is explicitly required inside DTAC, the NHS's assessment framework for digital health products. Without CE, you cannot complete DTAC — and without DTAC, the NHS won't buy your product. Getting CE certified first makes the rest of your NHS compliance journey significantly easier. The NHS is one of the largest buyers of t...