Business & Compliance
CCTV and Clinic Staff
CCTV monitoring isn't just a GDPR issue toward patients - the Labour Code imposes extra duties toward employees: two weeks' notice.
Blog
Advice on Sanepid inspections, RPWDL registration, GDPR and documentation for physiotherapy clinic owners.
Homepage
Categories
GDPR & Data Protection
Sharing CCTV Footage: Who Can Receive It
Police demand footage, a patient wants proof of a fall, an insurer wants the parking-lot recording - learn who a physiotherapy practice can actually disclose.
Medical Documentation
Adverse Events in Physiotherapy
Fainting during treatment or a burn from a modality: how to log an adverse event so the entry documents the facts instead of reading as an admission.
All articles
Business & Compliance
The Healthcare Quality Act
Poland's 2023 Healthcare Quality Act requires an internal quality and safety management system from every healthcare entity - even a solo physiotherapy.
GDPR & Data Protection
A UODO Inspection at Your Physiotherapy
When the UODO inspects a small physiotherapy practice, how the inspection unfolds, which documents the inspector asks for and the realistic scale of fines.
GDPR & Data Protection
GDPR Without a Lawyer: a 7-Document System
A complete map of the 7 GDPR documents every physiotherapy practice needs - policy, ROPA, information clause, authorizations, processing agreement.
GDPR & Data Protection
A Data Breach at Your Practice
A lost laptop, an email sent to the wrong patient, a ransomware attack - when it counts as a data breach, when you must report it to UODO within 72 hours.
GDPR & Data Protection
Staff Authorization to Process Personal
Who at a physiotherapy practice needs written authorization to process personal data, how it differs from a data processing agreement.
Medical Documentation
The Patient Health Interview
PESEL, conditions, medications, occupation: which data in a health questionnaire is legally required, which is clinically justified and which is excess.
Business & Compliance
What the Labour Inspector (PIP) Checks
Contracts, working time records, OSH training, medical certificates and B2B contracts under scrutiny - what the PIP labour inspector checks at a physiotherapy.
GDPR & Data Protection
GDPR Information Notice for Patients
The 11 mandatory elements of a GDPR information notice under Art. 13, the layered model, and whether patients need to sign it (spoiler: they don't).
Clinic Registration
Closing or Suspending a Physiotherapy
Closing or suspending your practice? Medical records must survive for years after the business ends. RPWDL, patients mid-therapy, GDPR and liability cover.
GDPR & Data Protection
SMS and Email to Patients under GDPR
An appointment reminder needs no marketing consent, but one extra sentence can turn it into one. What may go into an SMS and how to email records safely.
GDPR & Data Protection
Records of Processing Activities (ROPA)
Even a small physiotherapy practice must keep a ROPA - the exemption for entities under 250 employees doesn't cover health data.
GDPR & Data Protection
GDPR Training for Practice Staff
Where the GDPR training duty comes from, who at a physiotherapy practice has to be trained, what scope makes sense and how to document that it took place.
Business & Compliance
A Student Intern at Your Physiotherapy
Taking on a physiotherapy student for a placement? See what to sign with the university, which GDPR documents to prepare.
GDPR & Data Protection
Data Processing Agreement
Who a physiotherapist must sign a data processing agreement with - booking software, accounting firm, hosting.
Medical Documentation
A Patient Requests Their Medical Records
Who can request medical records, in what form to release them, within what deadline and how much it costs. When you may refuse and which mistakes to avoid.
Medical Documentation
Authorization to Access Medical Records
Who has the right to a patient's health information and records, how authorization for information differs from authorization for records.
Business & Compliance
Child Safeguarding Standards: a Legal Duty
Just one child patient is enough to trigger the SOM duty. See what the document must include and how to implement it at your practice.
Sanepid & Premises Requirements
Mistakes during KIF and Sanepid
Krzysztof runs a physiotherapy practice and considers himself a solid therapist -- patients praise him, and his waiting list keeps growing.
Business & Compliance
Onboarding at a physiotherapy practice
Hiring your first physiotherapist? Verify the PWZFz, collect HR documents, issue a GDPR authorisation and run health and safety training, in the right order.
Clinic Registration
A physiotherapist from Ukraine
Oksana completed a physiotherapy degree at a university in Ukraine and worked in the profession for several years before moving to Poland.
Medical Documentation
Dry needling and manual therapy
Can a physiotherapist perform dry needling and manual therapy? Required courses, informed consent, procedure records, liability insurance and adverse events.
Business & Compliance
NFZ inspection in a physiotherapy practice
What an NFZ inspection checks in a physiotherapy practice with a contract: records versus billing, referrals, waiting list, staff, and how to prepare.
Clinic Registration
Taking Over a Physiotherapy Practice
Karolina dreams of her own practice and is offered a ready-made one. What you actually take over: assets or a company, RPWDL status, patient records.
Clinic Registration
Opening a second physiotherapy practice
Is a second location a new business? What to update in RPWDL, which documents to duplicate, and how staffing and liability insurance change with a second site.
Business & Compliance
KSeF in a physiotherapy practice in 2026
KSeF in a physiotherapy practice: the rollout schedule, what the VAT exemption changes, when you issue an invoice rather than a receipt and what to set up.
Medical Documentation
Electronic medical documentation (EDM)
Mr. Tomasz has run a physiotherapy practice in Poznan for seven years. Until now, patient records lived in binders and the treatment log was a notebook.
Medical Documentation
Archiving medical records in physiotherapy
After five years of running his practice, Piotr had a cabinet full of patient records and no idea what to do with them.
GDPR & Data Protection
Register of Medical Records Disclosures
Who can access a patient's medical records, in what form and by when, plus a template for the mandatory disclosure register in a physiotherapy practice.
GDPR & Data Protection
Your Practice Website and GDPR
How to make a physiotherapy practice website GDPR-compliant: privacy policy, cookie banner, booking forms, newsletter, processor agreements and analytics.
Business & Compliance
Physiotherapy Marketing and the Law
Grzegorz opened his practice and launched with a bang: an Instagram ad promising "We'll cure any back pain -- guaranteed!
Insurance
Insuring a Physiotherapy Practice
Overnight, a pipe burst above Beata's practice. Water flooded the shockwave therapy machine, the laser, and two electric treatment couches.
Business & Compliance
Complaints About Physiotherapy Services
Mrs Ewa paid for a package of ten treatments, and after four of them decided that "nothing was helping", demanding a full refund.
Sanepid & Premises Requirements
Medical Waste in a Physiotherapy Practice
Tomek decided his physiotherapy practice "doesn't produce any medical waste" - after all, he doesn't give injections.
Sanepid & Premises Requirements
Disinfecting Equipment and Treatment
During an inspection at Kate's practice, the Sanitary Inspectorate (Sanepid) inspector walked up to the treatment couch, ran a finger over the surface.
Sanepid & Premises Requirements
OSH in a Physiotherapy Practice
Occupational risk assessment, OSH documents, training and medical checks in a physiotherapy practice: what the Labour Code requires once you hire staff.
Business & Compliance
Physiotherapist Contract vs. Full-Time
B2B contract or employment contract for a physiotherapist? We compare tax, social security (ZUS), liability, paid leave and the risk of forced B2B.
Business & Compliance
Hiring a Physiotherapist
Ewa is growing her practice and can no longer keep up with the number of patients. She decides to hire a second physiotherapist.
Medical Documentation
Working with doctors
A patient with shoulder pain walks into Mr Rafał's practice and asks outright: "Do I need a referral from a doctor for you to see me?
Business & Compliance
Fiscal cash registers in a physiotherapy
Ms Monika is opening a physiotherapy practice, and while buying equipment the salesperson asked her: "Do you have a fiscal cash register already?
Business & Compliance
NFZ vs private billing in physiotherapy
Mr Tomasz is opening a physiotherapy practice and faces a decision that will shape his entire business model: go for a contract with NFZ (Poland's National.
Business & Compliance
Physiotherapy teleconsultations
Are physiotherapy teleconsultations legal? Limits of telerehabilitation, documenting a tele-visit, GDPR, OC insurance, billing and when not to run one.
Medical Documentation
Patient consent to a physiotherapy
When verbal consent is enough and when you need it in writing, what a valid consent must contain and why information about risk is the element that decides.
GDPR & Data Protection
Paediatric physiotherapy
A mother brings her 8-year-old son to Mr Marcin's practice after a sprained ankle. She fills in the consent form, everything seems fine.
Clinic Registration
Home-visit physiotherapy
Ms Katarzyna runs a physiotherapy practice in Kraków, but half her patients are seniors recovering from strokes and hip surgery who can't make it to the.
Business & Compliance
7 Compliance Mistakes in Physiotherapy
The 7 most common compliance mistakes in physiotherapy practices: RPWDL entry, medical records, GDPR, OC insurance, hygiene plan. Penalties and fixes.
Clinic Registration
Opening a Practice: a 23-Point Checklist
A printable 23-point checklist for opening a physiotherapy practice: legal formalities, registration, premises, medical records, GDPR and Sanepid hygiene.
Medical Documentation
Medical Documentation in Physiotherapy
As a physiotherapist, you don't just perform treatments. You also keep medical documentation -- and that's a legal requirement, not an option.
Clinic Registration
Sole Practice or Medical Entity
Before you register with RPWDL and start working, you need to make a key decision: which legal form should you choose for your practice?
Clinic Registration
How to Open a Physiotherapy Practice 2026
Step by step from confirming your PWZ licence: legal form, premises and sanitary requirements, the RPWDL entry, insurance and documents needed before day one.
Medical Documentation
How to keep a physiotherapy patient record
A patient record isn't just paper to fill in -- it's medical documentation that protects both you and the patient.
Business & Compliance
KIF Inspection at Your Practice
If you're a physiotherapist running a professional practice or working in a clinic, sooner or later you'll face a KIF inspection.
Sanepid & Premises Requirements
Sanepid Inspection at a Physiotherapy
A conversation with a colleague who works in healthcare always ends the same way: "We had a sanitary inspection recently.
Business & Compliance
Cost of Opening a Physiotherapy Practice
One-off and recurring costs of opening a physiotherapy practice: registration, fitting out the premises, equipment, insurance and compliance documentation.
Clinic Registration
RPWDL Registration for Physiotherapists
How to register a physiotherapy practice in the RPWDL step by step: prerequisites, the application, fees, common mistakes and what happens if you don't.
GDPR & Data Protection
GDPR in a Physiotherapy Practice
RODO is the Polish name for GDPR (the General Data Protection Regulation) -- the EU tells you how to safely store your patients' data.
Insurance
Physiotherapist Liability Insurance
A new physiotherapist arrives to register. They ask about the requirements. The receptionist says: "You need liability insurance." The response: "But why?
Sanepid & Premises Requirements
Premises Requirements for a Physiotherapy
Planning to open a physiotherapy practice? Think it's enough to rent a room, put in a treatment table, and you're done? Unfortunately, it's not that simple.
Business & Compliance
Audit Your Practice's Documentation in 30
20 yes/no questions that show in 30 minutes whether your practice is ready for a KIF, Sanepid, or UODO inspection - no download required.
Medical Documentation
First Patient Visit Documents
GDPR notice, patient record, procedure consent, authorization and additional consents - the order to collect documents at a first visit.
Business & Compliance
Employee Job Scope at a Physiotherapy
What belongs in the job scope and what stays in the employment contract, plus the duties specific to a physiotherapy practice that are worth writing down.
Medical Documentation
Your EMR System Crashes Mid-Day
An EMR outage does not suspend your duty to document a visit. What to write on paper as a minimum and how to move it back into the system once it is restored.
GDPR & Data Protection
IT Security at Your Practice
The minimum IT security measures a physiotherapy practice must implement without an IT specialist: named accounts, passwords, disk encryption, 3-2-1 backups.
Sanepid & Premises Requirements
What Must Be Posted on the Practice Wall
The complete checklist of boards and posters required at a physiotherapy practice - patient rights, price list, GDPR, CCTV and sanitary instructions.
GDPR & Data Protection
Clean Desk Policy
A patient file left on the desk, a monitor visible from the waiting room: clean desk and clean screen rules that close the most common leaks at reception.
GDPR & Data Protection
Internal Data Protection Policy
An internal data protection policy is not the same as a website privacy policy - without this document a practice cannot demonstrate GDPR compliance to UODO.
Medical Documentation
Extended Informed Consent
When a standard verbal treatment consent isn't enough and the law requires written form - shockwave therapy, dry needling, HVLA manipulations.
Clinic Registration
Organizational Regulations for a Practice
Organizational regulations are mandatory for every physiotherapy practice under Article 24 of the Act on Healthcare Activity - see what they must include and.
GDPR & Data Protection
CCTV at a Physiotherapy Practice
Is CCTV at a physiotherapy practice legal? Where you may install cameras, where it's forbidden, the legal basis, retention limits and required signage.