diff --git a/config/locales/en.yml b/config/locales/en.yml
index 71fb99454..deec6bc74 100644
--- a/config/locales/en.yml
+++ b/config/locales/en.yml
@@ -44,7 +44,7 @@ en:
         scheme:
           attributes:
             organisation:
-              required: "Enter the organisation’s name"
+              required: "Enter the existing organisation’s name"
 
   validations:
     organisation:
diff --git a/spec/requests/schemes_controller_spec.rb b/spec/requests/schemes_controller_spec.rb
index d40a313bb..88742f85c 100644
--- a/spec/requests/schemes_controller_spec.rb
+++ b/spec/requests/schemes_controller_spec.rb
@@ -599,4 +599,27 @@ RSpec.describe SchemesController, type: :request do
       end
     end
   end
+
+  describe "#update" do
+    context "when not signed in" do
+      it "redirects to the sign in page" do
+        patch "/schemes"
+        expect(response).to redirect_to("/account/sign-in")
+      end
+    end
+
+    context "when signed in as a data provider" do
+      let(:user) { FactoryBot.create(:user) }
+
+      before do
+        sign_in user
+        patch "/schemes"
+      end
+
+      it "returns 401 unauthorized" do
+        request
+        expect(response).to have_http_status(:unauthorized)
+      end
+    end
+  end
 end