Advice on Sanepid inspections, RPWDL registration, GDPR and documentation for physiotherapy clinic owners.
CCTV monitoring isn't just a GDPR issue toward patients - the Labour Code imposes extra duties toward employees: two weeks' notice, work regulations or a notice, a ban on performance tracking, and the risk of evidence being thrown out in a labour court dispute.
Police demand footage, a patient wants proof of a fall, an insurer wants the parking-lot recording - learn who a physiotherapy practice can actually disclose CCTV footage to, and how to document it without breaching GDPR.
Fainting during treatment, burns from physiotherapy modalities, a fall from the table - how to document adverse events in a physiotherapy practice under the no-blame culture of Poland's quality act, so the record protects rather than harms.
Poland's 2023 Healthcare Quality Act requires an internal quality and safety management system from every healthcare entity - even a solo physiotherapy practice. Here's what it means in proportion to your practice's size.
When and why the Polish DPA inspects a physiotherapy practice, how the inspection unfolds, and which GDPR documents the inspector will ask for - plus the realistic scale of fines for small entities.
A complete map of the 7 GDPR documents every physiotherapy practice needs - policy, ROPA, information clause, authorizations, processing agreement, breach procedure. Ready-made templates instead of PLN 2-5k for a lawyer.
A lost laptop, an email sent to the wrong patient, a ransomware attack - when it counts as a data breach, when you must report it to UODO within 72 hours, and when a register entry is enough.
Who at a physiotherapy practice needs written authorization to process personal data, how it differs from a data processing agreement, and how to keep a register of authorized persons under GDPR Article 29.
The 11 mandatory elements of a GDPR information notice under Art. 13, the layered model, and whether patients need to sign it (spoiler: they don't).
Even a small physiotherapy practice must keep a ROPA - the exemption for entities under 250 employees doesn't cover health data. See what to include in the register and check out sample completed rows.
Who a physiotherapist must sign a data processing agreement with - booking software, accounting firm, hosting, IT - and what it must contain under GDPR Article 28.
Who can request medical records, in what form to release them, within what deadline, and how much it costs. A full step-by-step procedure for handling a patient's request, covering the free first copy rule and grounds for refusal.
Who has the right to a patient's health information and records, how authorization for information differs from authorization for records, and what to do when no one was authorized - while alive and after death. A practical template for the statement.
Just one child patient is enough to trigger the SOM duty. See what the document must include and how to implement it at your practice.
Krzysztof runs a physiotherapy practice and considers himself a solid therapist -- patients praise him, and his waiting list keeps growing.
Magda is growing her practice and is hiring a physiotherapist on an employment contract for the first time.
Oksana completed a physiotherapy degree at a university in Ukraine and worked in the profession for several years before moving to Poland.
Rafał has completed a dry needling course and wants to add it to his practice's offer. But before he inserts the first needle, he has doubts: can a…
Ewa runs a physiotherapy practice with a contract with the National Health Fund (NFZ). She bills outpatient physiotherapy sessions, keeps a waiting list, and…
Karolina has worked as an employed physiotherapist for five years and dreams of running her own practice.
Michał has been running a physiotherapy practice in Kraków for four years. He has a full patient roster, a three-week waiting list, and an idea to open a second…
Ms Agnieszka runs a sole-trader physiotherapy practice near Warsaw. Her physiotherapy services are VAT-exempt, so up to now she's issued patients plain receipts…
Mr. Tomasz has run a physiotherapy practice in Poznan for seven years. Until now, patient records lived in binders and the treatment log was a notebook.
After five years of running his practice, Piotr had a cabinet full of patient records and no idea what to do with them.
An insurance company called Anna's practice asking for a patient's records after an injury. Anna emailed a copy of the file, thinking "the patient wants the…
Michał built a nice website for his practice with a "Book an appointment online" form. Patients entered their name, phone number, email, and sometimes a…
Grzegorz opened his practice and launched with a bang: an Instagram ad promising "We'll cure any back pain -- guaranteed!", before-and-after photos of patients,…
Overnight, a pipe burst above Beata's practice. Water flooded the shockwave therapy machine, the laser, and two electric treatment couches.
Mrs Ewa paid for a package of ten treatments, and after four of them decided that "nothing was helping", demanding a full refund.
Tomek decided his physiotherapy practice "doesn't produce any medical waste" - after all, he doesn't give injections.
During an inspection at Kate's practice, the Sanitary Inspectorate (Sanepid) inspector walked up to the treatment couch, ran a finger over the surface, and asked:…
Mark has run a physiotherapy practice for three years. When he hired a second physiotherapist and a receptionist, he received a letter from the National Labour…
Michael received two job offers at the same practice. The owner told him: "I can hire you on an employment contract for a set take-home amount, or on a B2B…
Ewa is growing her practice and can no longer keep up with the number of patients. She decides to hire a second physiotherapist.
A patient with shoulder pain walks into Mr Rafał's practice and asks outright: "Do I need a referral from a doctor for you to see me?" Mr Rafał knows that under…
Ms Monika is opening a physiotherapy practice, and while buying equipment the salesperson asked her: "Do you have a fiscal cash register already?
Mr Tomasz is opening a physiotherapy practice and faces a decision that will shape his entire business model: go for a contract with NFZ (Poland's National Health…
Ms Aleksandra runs a practice in a small town, and some of her patients are people who moved abroad for work but want to keep following her exercise programme…
A patient, after a series of manual treatments, complains of pain that wasn't there before. He claims nobody warned him about possible side effects, and threatens…
A mother brings her 8-year-old son to Mr Marcin's practice after a sprained ankle. She fills in the consent form, everything seems fine.
Ms Katarzyna runs a physiotherapy practice in Kraków, but half her patients are seniors recovering from strokes and hip surgery who can't make it to the practice.
Every year, hundreds of physiotherapy practices get penalised for compliance mistakes. Sometimes it's a fine (500-5,000 PLN), sometimes it's removal from the…
A plain checklist, no fluff. 23 points you need to tick off before opening your practice. Print this page, bring it to the practice, and check each box as you…
As a physiotherapist, you don't just perform treatments. You also keep medical documentation -- and that's a legal requirement, not an option.
Before you register with RPWDL and start working, you need to make a key decision: which legal form should you choose for your practice?
Opening a physiotherapy practice is an exciting career step, but also an administrative challenge.
A patient record isn't just paper to fill in -- it's medical documentation that protects both you and the patient.
If you're a physiotherapist running a professional practice or working in a clinic, sooner or later you'll face a KIF inspection.
A conversation with a colleague who works in healthcare always ends the same way: "We had a sanitary inspection recently.
You want to open your own physiotherapy practice, but you don't know how much money to prepare?
If you were about to register a new physiotherapy practice, the first path would be registration with the RPWDL (the Register of Healthcare Entities -- Rejestr…
RODO is the Polish name for GDPR (the General Data Protection Regulation) -- the EU tells you how to safely store your patients' data.
A new physiotherapist arrives to register. They ask about the requirements. The receptionist says: "You need liability insurance." The response: "But why?
Planning to open a physiotherapy practice? Think it's enough to rent a room, put in a treatment table, and you're done? Unfortunately, it's not that simple.
20 yes/no questions that show in 30 minutes whether your practice is ready for a KIF, Sanepid, or UODO inspection - no download required, fully usable right in the article.
GDPR notice, patient record, procedure consent, authorization and additional consents - the order to collect documents at a first visit, and why combining them into one form is a common mistake.
An employment contract defines the type of work in general terms - a job scope is a separate, detailed document that protects the practice during labor and sanitary inspections and patient claims. See what it should include for physiotherapists and receptionists.
When your EMR system goes down mid-day, the law still requires you to document every visit. Learn how to keep paper backup records and safely transfer the data back once the outage is over.
The minimum IT security measures a physiotherapy practice must implement without an IT specialist: named accounts, passwords, disk encryption, 3-2-1 backups, and separate patient Wi-Fi.
The complete checklist of boards and posters required at a physiotherapy practice - patient rights, price list, GDPR, CCTV and sanitary instructions, with the legal basis and tips on where to post them.
A patient file on the desk, a monitor visible from the waiting room, a phone call about results overheard by others - the most common data leaks at a practice are analog. A practical clean desk checklist.
An internal data protection policy is not the same as a website privacy policy - without this document a practice cannot demonstrate GDPR compliance to UODO, even if it actually follows the rules in practice.
When a standard verbal treatment consent isn't enough and the law requires written form - shockwave therapy, dry needling, HVLA manipulations. How to word risk so consent actually protects you.
Organizational regulations are mandatory for every physiotherapy practice under Article 24 of the Act on Healthcare Activity - see what they must include and when you need an extended version.
Is CCTV at a physiotherapy practice legal? Where you may install cameras, where it's forbidden, the legal basis, retention limits and required signage.
Regulatory changes and practical tips for physiotherapy practices. No spam.