Skip to content
Knowledge base Updated: February 5, 2026

What is KPO and how will it change Polish health care?

How is the KPO changing Polish health care?

Grzegorz Gnych Grzegorz Gnych

The digital transformation of healthcare is one of the biggest challenges facing the Polish healthcare system. In an era when technology is changing virtually every aspect of our lives, the health sector continues to struggle with paper documentation, fragmented IT systems and inadequate protection against cyber attacks. The National Recovery Plan (NRP) - a multibillion-dollar program funded by the European Union as part of the response to the effects of the COVID-19 pandemic - presents an unprecedented opportunity to accelerate the digital revolution in Polish medical facilities.

The potential benefits are enormous: faster diagnostics aided by artificial intelligence, instant access to a patient’s full treatment history regardless of where services are provided, reduced medical errors and optimized use of resources. However, the road to digital excellence is paved with challenges - from resistance from medical staff, to problems with systems integration, to cyber security threats.

In this article, we take a look at the second phase of the KPO’s digital transformation of health care: what areas the funding covers, what real challenges medical facilities face, and what to do to make the most of this historic opportunity. We also analyze the broader context of Poland’s digitization and lessons learned from past experiences that can help in the successful implementation of digital projects in health care.

The Ministry of Health has announced the second phase of the digital transformation of health care, launching a call on April 11, 2025 for the competition “Accelerating digital transformation processes in health care through further development of digital services in health care” funded by the National Recovery Plan. It has been allocated 3.131 billion zlotys, of which the first call will cover 1.131 billion zlotys. The program is aimed at healthcare entities qualified for the hospital network, and the deadline for applications is May 15, 2025. These activities are part of Poland’s broader digital transformation strategy, for which the NTP has allocated about 21.3% of the total budget.

This initiative comes in the context of previous, not always successful attempts to digitize Polish health care. As one e-health expert notes: “Previous digitization programs have often faced implementation problems ranging from delays to staff adaptation difficulties. The KPO offers a chance to learn from past experiences, but it will not automatically solve all systemic problems.”

It is worth remembering that the National Reconstruction Plan itself has been the subject of intense political debate, and its implementation has encountered significant delays. Nonetheless, the current call represents a real opportunity for medical facilities to raise funds for necessary digital investments.

Shortcuts

What areas of funding does the NIP for the health sector cover?

The program focuses on four strategic areas to ensure comprehensive digital transformation of medical facilities:

  • Implementation of AI-based solutions and integration with the Central Medical Data Repository. This includes AI tools for optimizing hospital processes and clinical decision support. According to the European Association for AI in Medicine, AI systems for analyzing radiological images can reduce diagnosis time by 30-40%, while increasing lesion detection by about 15-20%.

  • Digitization of medical records, especially documents crucial to the continuity of treatment. A 2023 NIK report showed that only 47% of medical records in Polish hospitals are in electronic form, which significantly hinders the exchange of information between facilities.

  • Integration and expansion of hospital IT systems, including integration with new types of EDM. A survey conducted by the Center for e-Health 2024 found that only 23% of Polish hospitals have fully integrated HIS, LIS and RIS systems.

  • Increasing the level of cyber security. According to a report by CERT Poland, there were more than 300 attempted attacks on medical facility systems in 2024, of which 15% were successful, causing system downtime.

In support of the digital transformation, on April 9, 2025, the Ministry of Health signed a strategic agreement with the e-Health Center (CeZ), according to which CeZ will receive more than PLN 1.25 billion from the KPO to prepare central tools and services to support hospitals in the digitization process. Projects implemented by CeZ will include further development of the e-Health system, digitization of medical records, construction of a central medical data repository, and creation of a dedicated Security Operations Center for the health sector.

The amount of funding varies depending on the level of the hospital:

  • Level I hospitals: from PLN 1.025 million to PLN 6 million

  • Level II hospitals: from PLN 1.6 million to PLN 9 million

  • Level III hospitals, nationwide, pulmonology, oncology, pediatrics: from PLN 2.325 million to PLN 12 million

KPO funding priorities in health care:

  • AI and Central Repository - Potential to reduce diagnosis time by 30-40%

  • Digitization of documentation - Currently only 47% of documentation in electronic form

  • Systems integration - Only 23% of hospitals with fully integrated systems

  • Cyber security - 300+ attempted attacks on medical facilities in 2024

📚 Read the complete guide: SOC: Security Operations Center - czym jest, jak działa, jak wybrać

What are the real challenges in implementing projects with KPO?

While the potential of KPO in health care transformation is significant, real-world implementation faces a number of challenges that are rarely discussed in official communications:

Absorption capacity of medical facilities

A 2023 report by the Supreme Audit Office found that only 35% of county hospitals have the competence to effectively manage advanced IT projects. “The problem lies not in a lack of willingness to digitize, but in limited staff and competence resources,” points out one healthcare management expert. “Hospitals often lack staff with experience in managing complex technology projects, which can lead to inefficient use of resources.”

Bureaucratic and bidding barriers

Public procurement procedures often prolong the implementation process. According to data from the Public Procurement Office, the average duration of tender proceedings in the health sector is 4.8 months, and can extend up to 9 months for complex IT systems. Additionally, in 30% of cases, proceedings are canceled or protested by bidders.

Resistance to change

A survey conducted by the University of Lodz Medical School in 2024 found that 42% of medical personnel over the age of 50 show significant resistance to implementing new IT systems. “The issue of organizational change is often overlooked, focusing solely on the technical aspects,” notes an organizational psychologist from one of the research centers. “Meanwhile, the biggest challenge is to change the habits and routines of staff.”

Interoperability issues

Despite attempts at standardization, many systems in Polish medical facilities remain incompatible. Data from the Center for e-Health indicate that only 56% of HIS systems in Polish hospitals fully support the HL7 FHIR standard, which significantly hinders integration.

Key implementation challenges:

  • Project competence - Only 35% of district hospitals have the right competence

  • Tender procedures - An average of 4.8 months to conduct proceedings

  • Staff resistance - 42% of 50+ employees show significant resistance to digitization

  • Interoperability issues - Only 56% of systems fully support the HL7 FHIR standard

Is cyber security in medical facilities a real problem?

The challenges of cybersecurity in health care are much more serious than is generally recognized. The medical sector has become one of the main targets of cybercriminals because of the value of medical data on the black market and often inadequate security measures.

In 2023, a hospital in Zielona Gora experienced a ransomware attack that paralyzed the facility’s work for more than a week, forcing the cancellation of scheduled procedures and the postponement of consultations. The direct and indirect costs of the incident were estimated at more than 3 million zlotys.

“The problem is that many medical devices are running on outdated operating systems that cannot be easily updated,” - explains one healthcare cyber security specialist. “Cyber attacks on hospitals are no longer a theoretical threat - they have become an everyday occurrence.”

Research conducted by CERT Polska found that:

  • 68% of medical facilities in Poland have not conducted a security audit in the last two years

  • 43% do not have procedures for responding to security incidents

  • 76% of medical workers use the same passwords for multiple systems

  • Only 12% of hospitals have multi-factor authentication implemented for key systems

The government is taking increasingly decisive action in this area. In April 2025, plans were announced to establish a Security and Defense Fund (FBiO), to be endowed with PLN 26 billion reallocated from other areas of the NIP. One of the key goals of the FBiO will be to fund cyber security activities, including the development of secure communication systems and strengthening cyber security for local governments and public institutions.

The NIP had already earmarked some PLN 66 million in November 2024 for the development of sectoral incident response teams (CSIRTs) in key areas, including the health sector. These activities, along with newly created projects like the Security Operations Center for the health sector, show a growing awareness of the importance of cyber security in Poland’s digitization strategy.

The KPO program offers an opportunity to comprehensively strengthen cybersecurity, but this requires a strategic approach beyond hardware and software purchases - procedural changes and staff education are needed.

Cyber security in Polish medical facilities:

  • 68% of facilities without a security audit in the last 2 years

  • 43% do not have incident response procedures in place

  • 76% of employees use the same passwords across multiple systems

  • Only 12% of hospitals use multi-factor authentication

How do integrated systems affect the quality of health care?

Fragmentation of IT systems is one of the most acute problems in Polish health care. A 2024 Digital Healthcare Foundation study found that a doctor in a Polish hospital spends an average of 1.8 hours a day on data duplication activities between different systems.

An example of successful implementation of an integrated system is the Olsztyn Regional Specialized Hospital, which in 2022 completed a project to integrate HIS, LIS and RIS systems. As a result of this integration:

  • Access time to test results reduced from 72 to 12 hours

  • Number of repeat tests due to lack of access to previous results decreased by 32%

  • Patient length of stay in hospital reduced by an average of 0.8 days

  • Medical staff satisfaction with IT systems increased from 42% to 76%

“Integration of systems is not only a matter of convenience, but directly translates into patient safety,” - emphasizes the medical director of a leading provincial hospital. “An on-call doctor with immediate access to a patient’s full medical history makes more accurate clinical decisions.”

At the same time, a representative of the Polish Medical Informatics Society notes, “The real challenge is not the implementation of integrated systems themselves, but ensuring their effective use by staff. Even the best system will not be beneficial if users bypass it or use it minimally.”

What are the real possibilities of using AI in Polish health care?

Artificial intelligence offers great potential in medicine, but the reality of its implementation in the Polish health care system requires a sober assessment. According to a 2024 study by the Polish Agency for Enterprise Development, only 8% of Polish hospitals have technical infrastructure ready to implement advanced AI solutions.

An example of a successful pilot implementation is the radiology diagnostic support system at the University Clinical Center in Gdansk. In a 12-month pilot project:

  • Accuracy of lung cancer detection increased by 18%

  • Time required for analysis of chest CT scan reduced by 24%

  • The number of overlooked lesions decreased by 31%

The head of the radiology department at a university clinical center emphasizes: “AI does not replace the radiologist, but it is a powerful supporting tool. In our case, the AI system acts as a ‘second pair of eyes’ that draws attention to potentially worrisome areas of the image.”

At the same time, one scientist from the Polish Academy of Sciences warns: “There is a risk that in the pursuit of modernity, we will implement AI solutions where the basic digital infrastructure is still lacking. It’s like building a house from the roof up. First we need a solid foundation - efficient HIS systems, a working network infrastructure and competent IT teams.”

Available data indicate that the most promising areas of AI applications in the Polish reality are:

  • Support for diagnostic imaging (detection of lesions +15-20%)

  • Optimization of hospital resources (reduction of waiting time in the ED by 21%)

  • Forecasting of ward occupancy (forecast accuracy of 83%)

  • Supporting therapeutic decisions (reducing medical errors by 14%)

The potential of AI in Polish health care:

  • Only 8% of hospitals have infrastructure ready for AI implementation

  • Imaging diagnostics: +18% accuracy, -24% analysis time

  • Resource optimization: -21% waiting time in the ED

  • Decision support: -14% of medical errors

How to prepare an effective application for KPO funding?

Successfully applying for NIP funds requires a strategic approach, especially since support is expected to go to up to 325 hospitals nationwide. An experienced consultant specializing in obtaining EU funds for the health sector, who has supported the preparation of more than 50 applications in previous programs, shares practical tips:

  • Conduct a digital readiness audit. “Before you start planning advanced AI or big data solutions, make sure you have a solid underlying infrastructure. As many as 70% of applications that did not receive funding in previous programs presented solutions that were inadequate to the actual state of digitization of the facility.”

  • Focus on measurable results. “The evaluation committee is looking for projects with specific, measurable indicators. Instead of writing in vague terms about ‘quality improvement,’ specify exactly how much the waiting time for test results will be reduced by, or how much the number of medical errors will drop.”

  • Engage end users. “Projects developed without consulting medical staff are often disconnected from real needs. Hold workshops with doctors, nurses and technicians to identify key issues to be addressed.”

  • Remember the implementation plan. “30% of the scoring in project evaluation is about sustainability and implementation plan. Describe in detail how you will conduct training, how you will minimize resistance to change, and how you will ensure continuity of funding after the project ends.”

  • Include risks and a plan B. “Projects that honestly identify potential risks and present strategies to mitigate them are rated higher than those that ignore potential problems.”

The director of implementation at a company specializing in medical IT adds, “The most common mistake is overestimating the organizational capabilities of a facility. It’s a good idea to include additional time in the schedule for bidding procedures and unforeseen delays. A realistic schedule is one that adds 50% time to the original estimate.”

Practical tips for the KPO application:

  • Digital Readiness Audit - Identify the actual status and gaps in digitization

  • Specific result indicators - Specify precisely the planned results (%, days, hours)

  • Include end users - Consult with medical staff on the project

  • Detailed implementation plan - Include training and change management

  • Risk management strategy - Identify risks and ways to mitigate them

What social and ethical issues are associated with the digitization of health care?

Discussions about the digitization of health care often focus on technical and economic aspects, overlooking important social and ethical issues. Meanwhile, digital transformation can exacerbate inequalities in access to health care and generate new ethical dilemmas.

Digital exclusion

A 2023 CSO study shows that 27% of Poles over 65 do not use the Internet, and 42% report low digital competence. A health sociologist from one academic center warns: “There is a real risk that the digitization of health care will create a two-class system - for the digitally proficient and those excluded. Facilities must plan alternative access paths for the elderly, disabled or those with lower education.”

An example of good practice is the “Digital Patient Assistant” program implemented by several provincial hospitals, where trained volunteers help patients use eHealth services. At the facilities covered by the program, the use of e-registration among seniors has increased from 12% to 43%.

Dehumanization of medical care

Technology can lead to depersonalization of the doctor-patient relationship. “In the pursuit of efficiency, it is easy to forget that medicine is not only about procedures and data, but first and foremost about the human relationship.” - reminds a medical ethicist from one medical school. “Studies show that empathy and interpersonal communication have a measurable impact on medical outcomes.”

Data privacy issues

Despite RODO regulations, digitization poses new privacy risks. A survey conducted by the Patient Ombudsman 2023 found that 78% of patients express concerns about the security of their medical data in digital systems, and 54% do not know how to check who has accessed their records.

A lawyer specializing in medical data protection points out: “The problem is not the technology itself, but the lack of transparency in data processing. Patients must have easy access to information about who accessed their records, when and why.”

How to maximize the benefits of KPO for patients?

The ultimate goal of health care digitization should be to improve patient experience and outcomes. Experts point to several key aspects that should be included in NTP-funded projects to maximize patient benefits:

  • Accessibility and inclusiveness of solutions. A patient rights advocate at a Warsaw hospital stresses: “Any digital solution that is implemented should be tested for accessibility for the elderly, people with disabilities or the digitally excluded. Interfaces should be intuitive, and there should always be an alternative access path.”

  • Patient education. “Simply implementing the technology is not enough - educational programs are needed to teach patients how to use the new solutions effectively.” - notes a public health specialist from one of the research institutes. An example of a successful initiative is the e-Health for Seniors program implemented by the e-Health Center, which has trained more than 10,000 seniors in the use of IKP, e-prescribing and e-recording.

  • Co-create solutions with patients. Studies show that solutions created with active patient participation achieve 35% higher adoption rates. A user experience expert in medicine advises: “Involve patients at every stage of design - from concept to prototyping to testing. It’s an investment that pays off in the form of better tailored solutions.”

  • Measuring real effects. “Every project should have clearly defined indicators of success from the patient’s perspective - not just technical or organizational parameters.” - The expert from the National Institute of Public Health stresses. Examples of indicators include reduced waiting times, increased accessibility of medical records or improved coordination of care as measured by a reduction in unnecessary hospitalizations.

Maximizing the benefits of KPO for patients:

  • Accessibility for all - Designing for the digitally excluded

  • Educational programs - Learning to use new digital tools

  • Co-design - Involve patients in creating solutions (+35% adoption)

  • Measuring outcomes - Indicators important from the patient’s perspective

What is the broader context of digitization under the KPO?

The digitization of health care is just one element of a broader strategy for Poland’s digital transformation being implemented under the NTP. In early April, 2025 was also announced as the last opportunity to subsidize the construction of broadband networks, with nearly PLN 2.5 billion earmarked for this purpose. The goal is to cover more than 421,000 address points in areas of so-called “white spots” where modern infrastructure is lacking.

The Deputy Minister of Digitization stressed that the investment is crucial to the country’s social and economic development and lays the foundation for many other digital initiatives, including telemedicine and remote health services.

During the same period, on April 14, 2025, the call for proposals ended for the “E-competence” investment, with a budget of PLN 626 million, aimed at improving the digital skills of various social groups, including teachers, civil servants and citizens. The program is particularly relevant to the challenges of digital exclusion.

Strengthening cyber security is also an important aspect of the KPO’s overall strategy. In addition to the already-mentioned initiatives in the health sector, in early April calls continued under the “Cyber Security - CyberPL” investment, and work was announced to establish a Security and Defense Fund, under which cyber security will be one of the priority areas.

These parallel initiatives show that the digital transformation of health care cannot be considered in isolation, but as part of a comprehensive strategy to digitize the country, including both infrastructure, competence and security.

What lessons can be learned from the digitization experience so far?

The second stage of KPO’s digital health transformation represents a significant opportunity for Polish hospitals, but its success will depend on a realistic approach that takes into account past experiences and challenges.

A health policy expert concludes: “KPO is not a panacea for all the problems of health care digitization, but well used funds can significantly accelerate digital transformation. The key is the realization that technology is just a tool - real change requires thoughtful processes, competent people and adequate organizational structures.”

The following conclusions emerge from past experience:

  • The need for a phased approach - Digitization should proceed in stages, from a solid foundation to advanced solutions.

  • Priority for interoperability - Systems must be designed with communication and data exchange in mind.

  • E-competence investment - Training and support for personnel are as important as the technology itself. It is no coincidence that the call for proposals for the “E-competence” investment, with a budget of PLN 626 million, aimed at improving the digital skills of various social groups, also ended in April 2025.

  • Organizational change management - Successful implementation requires a change in organizational culture and work processes.

  • Central coordination with local flexibility - Central standards should be combined with local adaptability.

  • Infrastructure development as a foundation - Digitization of health care cannot proceed in isolation from the development of the country’s basic digital infrastructure. In parallel with health programs, the NTP finances, among other things, the construction of broadband networks (PLN 2.5 billion to cover more than 421,000 address points in so-called “white spots” areas), which is crucial for the availability of e-health services, especially in smaller towns.

The director of a medium-sized county hospital shares a pragmatic perspective: “In our case, we don’t rely on the most advanced technologies, but on solutions that solve real problems for our patients and staff. It is better to solidly implement basic systems than half-heartedly implement advanced ones.”

KPO can become a catalyst for positive change, but success depends on realistic planning, prioritization of patient and staff needs, and a systematic approach to implementation. Digitization is not a sprint, but a marathon - it requires consistency, patience and long-term commitment from all health system stakeholders.

Learn key terms related to this article in our cybersecurity glossary:

  • Security Operations Center (SOC) — Security Operations Center (SOC) is a central location where a team of security…
  • Shadow AI — Shadow AI refers to the unauthorized use of artificial intelligence tools and…
  • SOC as a Service — SOC as a Service (Security Operations Center as a Service), also known as…
  • Network Security — Network security is a set of practices, technologies, and strategies aimed at…
  • Cybersecurity — Cybersecurity is a collection of techniques, processes, and practices used to…

Learn More

Explore related articles in our knowledge base:

Explore Our Services

Need cybersecurity support? Check out:

Cybersecurity for Your Industry

Learn more about cybersecurity in your industry:

See also:

Tags:

Cybersecurity Network AI Compliance SOC Healthcare

Share:

Talk to an expert

Have questions about this topic? Get in touch with our specialist.

Sales Representative
Grzegorz Gnych

Grzegorz Gnych

Sales Representative

+48 664 003 003grzegorz.gnych@nflo.pl
Response within 24 hours
Free consultation
Individual approach

Providing your phone number will speed up contact.

Want to Reduce IT Risk and Costs?

Book a free consultation - we respond within 24h

Response in 24h Free quote No obligations
Book a Call +48 22 487 86 36

Or download free guide:

Download NIS2 Checklist