The Healthcare Quality Act - Does Your Practice Need an Internal Quality Management System

Marek has run a solo physiotherapy practice for three years -- he rents a treatment room, sees a dozen or so patients a week, keeps his own records, and answers his own phone. When he came across an article online about an "internal quality and safety management system," his first thought was: that surely applies to hospitals and large clinics, not a one-person business. He closed the tab and went back to work.

That's a mistake most small practices in Poland make. The Act of 16 June 2023 on Quality in Healthcare and Patient Safety makes no exception for the size of the entity -- the obligation to implement an internal quality and safety management system (in Polish: WSZJiB) applies to everyone who provides healthcare services, regardless of whether they employ two hundred people or work alone in a single treatment room. The difference isn't whether the obligation exists, but how elaborate the system needs to be in practice. In this article we explain exactly who this provision applies to, what a small physiotherapy practice actually needs to do, and how to approach the topic in proportion to the scale of the business.

Who is covered by the WSZJiB obligation

The Quality Act uses the term "entity providing healthcare activities" -- and that's a very broad definition. It covers hospitals and large medical centers as well as clinics, specialist outpatient units, and individual and group professional practices, including physiotherapy practices registered in the RPWDL registry. If you run a healthcare business as a physiotherapist -- whether or not you have an NFZ contract, and even if you work purely privately -- you are formally subject to exactly the same provision as a large clinical hospital.

This distinction matters, because there's a common belief circulating in professional circles that WSZJiB is a topic "for the big players." In reality, the legislator did not introduce any staff-size or patient-volume threshold below which the obligation doesn't apply. A solo physiotherapy practice formally has exactly the same obligation to implement a system as a multi-person rehabilitation center -- only the scope and form in which that obligation is fulfilled differ.

What this actually means for a small practice

The key word in interpreting this provision is proportionality. The Act does not require a solo practice to implement the elaborate quality-management structure known from hospitals -- with a full-time quality officer, cyclical internal audits, and multi-page procedures. What it does require is that the entity -- appropriately to the scale of its business -- carries out real activities aimed at identifying risk and improving patient safety, rather than having a system on paper that no one ever actually uses.

In practice, this means that for a solo practice, WSZJiB can and should be a simple but genuinely used set of tools: a short incident register, a periodic patient satisfaction survey, and a note on what conclusions follow from those observations. For a rehabilitation center employing a dozen or so therapists, proportionality already means something more -- periodic reviews of the collected data, a designated person responsible for coordinating the system, and a documented process for implementing conclusions across the whole team.

Elements of the quality management system

Regardless of the scale of the business, WSZJiB in every healthcare entity should rest on the same handful of pillars -- only the level of formalization in which they're carried out differs.

Identifying and analyzing risks related to patient safety

This is the starting point of the whole system -- consciously considering which situations in the practice's day-to-day work could threaten patient safety. In physiotherapy this covers things like risks tied to choosing therapy intensity for a patient with contraindications, misidentification errors when several patients are scheduled the same day, or risks related to physiotherapy equipment.

Monitoring adverse events

The system must allow you to record situations where an adverse event occurred, or nearly occurred -- meaning one that could have harmed the patient. This is a separate, extensive topic that we cover in detail in the article on the adverse event register in physiotherapy -- there you'll find a concrete register template and guidance on running it in both solo and group practices.

Patient satisfaction surveys

Regularly gathering patient feedback isn't just a marketing tool -- it's a formal element of the quality system, and it lets you catch problems before they turn into a complaint to the NFZ or the Provincial Office. It doesn't need to be an elaborate online survey -- in a small practice, a simple slip of paper handed out after a series of treatments, or a short text message with a link to a form, is enough.

Corrective and preventive actions

Simply collecting data on incidents and patient satisfaction achieves little if nothing follows from that data. A key, often-overlooked element of the system is documenting the conclusions and the specific actions taken in response to reported problems -- for example, changing the patient check-in procedure after surveys revealed a recurring communication issue.

System element	Solo practice	Rehabilitation center (a dozen or more staff)
Risk identification	Short list of main risks, reviewed once a year	Formal procedure, periodic review with the team
Adverse event register	Simple spreadsheet register, updated on an ongoing basis	Register broken down by therapist, trend analysis
Satisfaction surveys	Short survey after a series of treatments	Regular surveys plus aggregate summaries
Corrective actions	Note with a conclusion and a decision	Documented process for rolling out changes across the team
System accountability	Practice owner	Designated coordinating person

How to fulfill the obligation in proportion to your scale

You don't need to wait for an inspection to get this in order -- it's worth approaching it step by step, starting with the simplest, realistically implementable elements.

1. Write down the main risks related to patient safety in your day-to-day work -- a list of a few to a dozen points is enough, not an elaborate document.
2. Set up a simple adverse event register -- even if nothing serious has ever happened, simply having a working tool is what the Act requires.
3. Introduce a short satisfaction survey after a completed series of treatments -- paper or electronic, as long as it's applied systematically.
4. Write down the conclusions and decisions you make based on the collected data -- even a one-sentence note like "after analyzing the surveys, we changed how we inform patients about waiting times" fulfills its purpose.
5. Scale the system to the size of your practice -- if you employ a team, add a periodic review with the therapists and one person responsible for coordinating the whole thing.

[SP] Example -- Solo practice: After reading this article, Marek sets up a simple incident register in a spreadsheet and prints a short satisfaction survey that he hands to patients after their last visit in a series. Once a quarter he spends half an hour reviewing the collected data and writes down, in a single paragraph, whether anything needs to change. That's a sufficient WSZJiB, proportionate to the scale of his practice.

[GR] Example -- Group practice: A rehabilitation center employing twelve physiotherapists designates one person responsible for coordinating the quality system. Every month she collects adverse event reports from the whole team, and once a quarter she holds a short meeting where conclusions from the satisfaction surveys are discussed, with decisions about procedural changes written down and shared with all the therapists.

Connection to inspections by the Provincial Governor and the NFZ

For practices with an NFZ contract, WSZJiB isn't a purely theoretical topic -- the functioning of the quality management system can be examined as part of provider authorization and accreditation processes, and its absence, or a purely superficial version of it, is something inspectors do catch. It's worth remembering that an inspection focused on quality and patient safety is a separate matter from a typical formal-organizational inspection, which we cover in more detail in the article on NFZ inspections at a physiotherapy practice -- a well-prepared practice should have both areas in order at the same time.

It's also worth noting that WSZJiB in small physiotherapy practices is still a topic rarely covered in the available industry materials -- most publications focus on large healthcare entities. That doesn't exempt a solo practice from the obligation, though, and it also means that practices that get this topic in order earlier than others avoid the risk of documentation gaps that only surface during an inspection. We cover typical documentation gaps in a practice in more detail in the article on the most common compliance mistakes at a physiotherapy practice.

Frequently asked questions

Does a solo physiotherapy practice need a WSZJiB?

Yes. The Act on Quality in Healthcare and Patient Safety covers every entity providing healthcare activities, regardless of headcount. A solo physiotherapy practice registered in the RPWDL is subject to the same obligation as a hospital -- only the scope and degree of formalization of the system differ, and it must be proportionate to the scale of the business.

Does WSZJiB require separate paper documentation or a certificate?

The Act does not mandate a specific document format or an external certification. What matters is that the system actually functions -- an adverse event register that's kept, satisfaction surveys that are collected, and documented conclusions from those activities. In a small practice this can be a simple spreadsheet or a binder, as long as it's actually and systematically maintained.

What happens if there's no quality management system in place?

A missing, non-functioning WSZJiB can be caught during an inspection by the Provincial Governor or as part of verification processes carried out by the NFZ, especially for entities with a contract. The consequences can include post-inspection recommendations, and in more serious cases, difficulties renewing or obtaining provider authorization. The risk increases when a patient complaint arises and the practice cannot demonstrate that it carried out any safety-monitoring activities at all.

Where's the best place to start implementing WSZJiB in a small practice?

The simplest and most effective starting point is setting up an adverse event register and introducing a short patient satisfaction survey after a completed series of treatments. These two elements give you real material to analyze with minimal time investment, and only on that basis is it worth expanding the system with further procedures, in proportion to how the practice grows.

CTA: Organizing your practice's compliance documentation -- from the RPWDL registration to patient safety procedures -- is easier with a ready reference point. FizjoReady packages include a full set of documentation to support your practice's legal compliance, which you can adapt to your practice's specifics. See FizjoReady packages →

Related articles:
- NFZ inspections at a physiotherapy practice
- Most common compliance mistakes at a physiotherapy practice
- Adverse event register in physiotherapy