
CCTV and Clinic Staff
CCTV monitoring isn't just a GDPR issue toward patients - the Labour Code imposes extra duties toward employees: two weeks' notice.
Advice on Sanepid inspections, RPWDL registration, GDPR and documentation for physiotherapy clinic owners.

CCTV monitoring isn't just a GDPR issue toward patients - the Labour Code imposes extra duties toward employees: two weeks' notice.

Police demand footage, a patient wants proof of a fall, an insurer wants the parking-lot recording - learn who a physiotherapy practice can actually disclose.

Fainting during treatment, burns from physiotherapy modalities.

Poland's 2023 Healthcare Quality Act requires an internal quality and safety management system from every healthcare entity - even a solo physiotherapy.

When and why the Polish DPA inspects a physiotherapy practice, how the inspection unfolds.

A complete map of the 7 GDPR documents every physiotherapy practice needs - policy, ROPA, information clause, authorizations, processing agreement.

A lost laptop, an email sent to the wrong patient, a ransomware attack - when it counts as a data breach, when you must report it to UODO within 72 hours.

Who at a physiotherapy practice needs written authorization to process personal data, how it differs from a data processing agreement.
PESEL, conditions, medications, occupation - which data in a health questionnaire is legally required.
Contracts, working time records, OSH training, medical certificates and B2B contracts under scrutiny - what the PIP labour inspector checks at a physiotherapy.

The 11 mandatory elements of a GDPR information notice under Art. 13, the layered model, and whether patients need to sign it (spoiler: they don't).
Closing or suspending your practice? Medical records must survive for years after the business ends.
Does an SMS appointment reminder require patient consent? When a message becomes marketing.

Even a small physiotherapy practice must keep a ROPA - the exemption for entities under 250 employees doesn't cover health data.
Who at a physiotherapy practice needs GDPR training, what scope makes sense.
Taking on a physiotherapy student for a placement? See what to sign with the university, which GDPR documents to prepare.

Who a physiotherapist must sign a data processing agreement with - booking software, accounting firm, hosting.

Who can request medical records, in what form to release them, within what deadline, and how much it costs.

Who has the right to a patient's health information and records, how authorization for information differs from authorization for records.

Just one child patient is enough to trigger the SOM duty. See what the document must include and how to implement it at your practice.

Krzysztof runs a physiotherapy practice and considers himself a solid therapist -- patients praise him, and his waiting list keeps growing.

Magda is growing her practice and is hiring a physiotherapist on an employment contract for the first time.

Oksana completed a physiotherapy degree at a university in Ukraine and worked in the profession for several years before moving to Poland.

Rafał has completed a dry needling course and wants to add it to his practice's offer. But before he inserts the first needle, he has doubts: can a…

Ewa runs a physiotherapy practice with a contract with the National Health Fund (NFZ). She bills outpatient physiotherapy sessions, keeps a waiting list, and…

Karolina has worked as an employed physiotherapist for five years and dreams of running her own practice.

Michał has been running a physiotherapy practice in Kraków for four years.

Ms Agnieszka runs a sole-trader physiotherapy practice near Warsaw.

Mr. Tomasz has run a physiotherapy practice in Poznan for seven years. Until now, patient records lived in binders and the treatment log was a notebook.

After five years of running his practice, Piotr had a cabinet full of patient records and no idea what to do with them.

An insurance company called Anna's practice asking for a patient's records after an injury. Anna emailed a copy of the file, thinking "the patient wants the…

Michał built a nice website for his practice with a "Book an appointment online" form. Patients entered their name, phone number, email, and sometimes a…

Grzegorz opened his practice and launched with a bang: an Instagram ad promising "We'll cure any back pain -- guaranteed!

Overnight, a pipe burst above Beata's practice. Water flooded the shockwave therapy machine, the laser, and two electric treatment couches.

Mrs Ewa paid for a package of ten treatments, and after four of them decided that "nothing was helping", demanding a full refund.

Tomek decided his physiotherapy practice "doesn't produce any medical waste" - after all, he doesn't give injections.

During an inspection at Kate's practice, the Sanitary Inspectorate (Sanepid) inspector walked up to the treatment couch, ran a finger over the surface.

Mark has run a physiotherapy practice for three years. When he hired a second physiotherapist and a receptionist, he received a letter from the National Labour…

Michael received two job offers at the same practice. The owner told him: "I can hire you on an employment contract for a set take-home amount, or on a B2B…

Ewa is growing her practice and can no longer keep up with the number of patients. She decides to hire a second physiotherapist.

A patient with shoulder pain walks into Mr Rafał's practice and asks outright: "Do I need a referral from a doctor for you to see me?

Ms Monika is opening a physiotherapy practice, and while buying equipment the salesperson asked her: "Do you have a fiscal cash register already?

Mr Tomasz is opening a physiotherapy practice and faces a decision that will shape his entire business model: go for a contract with NFZ (Poland's National.

Ms Aleksandra runs a practice in a small town, and some of her patients are people who moved abroad for work but want to keep following her exercise programme…

A patient, after a series of manual treatments, complains of pain that wasn't there before.

A mother brings her 8-year-old son to Mr Marcin's practice after a sprained ankle. She fills in the consent form, everything seems fine.

Ms Katarzyna runs a physiotherapy practice in Kraków, but half her patients are seniors recovering from strokes and hip surgery who can't make it to the.

Every year, hundreds of physiotherapy practices get penalised for compliance mistakes. Sometimes it's a fine (500-5,000 PLN), sometimes it's removal from the…

A plain checklist, no fluff. 23 points you need to tick off before opening your practice. Print this page, bring it to the practice, and check each box as you…

As a physiotherapist, you don't just perform treatments. You also keep medical documentation -- and that's a legal requirement, not an option.

Before you register with RPWDL and start working, you need to make a key decision: which legal form should you choose for your practice?

Opening a physiotherapy practice is an exciting career step, but also an administrative challenge.

A patient record isn't just paper to fill in -- it's medical documentation that protects both you and the patient.

If you're a physiotherapist running a professional practice or working in a clinic, sooner or later you'll face a KIF inspection.

A conversation with a colleague who works in healthcare always ends the same way: "We had a sanitary inspection recently.

You want to open your own physiotherapy practice, but you don't know how much money to prepare?

If you were about to register a new physiotherapy practice, the first path would be registration with the RPWDL (the Register of Healthcare Entities -- Rejestr…

RODO is the Polish name for GDPR (the General Data Protection Regulation) -- the EU tells you how to safely store your patients' data.

A new physiotherapist arrives to register. They ask about the requirements. The receptionist says: "You need liability insurance." The response: "But why?

Planning to open a physiotherapy practice? Think it's enough to rent a room, put in a treatment table, and you're done? Unfortunately, it's not that simple.

20 yes/no questions that show in 30 minutes whether your practice is ready for a KIF, Sanepid, or UODO inspection - no download required.

GDPR notice, patient record, procedure consent, authorization and additional consents - the order to collect documents at a first visit.

An employment contract defines the type of work in general terms - a job scope is a separate.

When your EMR system goes down mid-day, the law still requires you to document every visit.

The minimum IT security measures a physiotherapy practice must implement without an IT specialist: named accounts, passwords, disk encryption, 3-2-1 backups.

The complete checklist of boards and posters required at a physiotherapy practice - patient rights, price list, GDPR, CCTV and sanitary instructions.

A patient file on the desk, a monitor visible from the waiting room.

An internal data protection policy is not the same as a website privacy policy - without this document a practice cannot demonstrate GDPR compliance to UODO.

When a standard verbal treatment consent isn't enough and the law requires written form - shockwave therapy, dry needling, HVLA manipulations.

Organizational regulations are mandatory for every physiotherapy practice under Article 24 of the Act on Healthcare Activity - see what they must include and.

Is CCTV at a physiotherapy practice legal? Where you may install cameras, where it's forbidden, the legal basis, retention limits and required signage.
Regulatory changes and practical tips for physiotherapy practices. No spam.