Skip to content
Knowledge base Updated: February 5, 2026

What is KPO and how will it change Polish health care?

How is the KPO changing Polish health care?

Grzegorz Gnych Grzegorz Gnych

The digital transformation of healthcare is one of the biggest challenges facing the Polish healthcare system. In an era when technology is changing virtually every aspect of our lives, the health sector continues to struggle with paper documentation, fragmented IT systems and inadequate protection against cyber attacks. The National Recovery Plan (NRP) - a multibillion-dollar program funded by the European Union as part of the response to the effects of the COVID-19 pandemic - presents an unprecedented opportunity to accelerate the digital revolution in Polish medical facilities.

The potential benefits are enormous: faster diagnostics aided by artificial intelligence, instant access to a patient’s full treatment history regardless of where services are provided, reduced medical errors and optimized use of resources. However, the road to digital excellence is paved with challenges - from resistance from medical staff, to problems with systems integration, to cyber security threats.

In this article, we take a look at the second phase of the KPO’s digital transformation of health care: what areas the funding covers, what real challenges medical facilities face, and what to do to make the most of this historic opportunity. We also analyze the broader context of Poland’s digitization and lessons learned from past experiences that can help in the successful implementation of digital projects in health care.

The Ministry of Health has announced the second phase of the digital transformation of health care, launching a call on April 11, 2025 for the competition “Accelerating digital transformation processes in health care through further development of digital services in health care” funded by the National Recovery Plan. The allocation for the call is 3.131 billion zlotys. The program is aimed at healthcare entities qualified for the hospital network, and the deadline for applications is May 15, 2025. These activities are part of Poland’s broader digital transformation strategy, for which the NTP has allocated about 21.3% of the total budget.

This initiative comes in the context of previous, not always successful attempts to digitize Polish health care. As one e-health expert notes: “Previous digitization programs have often faced implementation problems ranging from delays to staff adaptation difficulties. The KPO offers a chance to learn from past experiences, but it will not automatically solve all systemic problems.”

It is worth remembering that the National Reconstruction Plan itself has been the subject of intense political debate, and its implementation has encountered significant delays. Nonetheless, the current call represents a real opportunity for medical facilities to raise funds for necessary digital investments.

Shortcuts

What areas of funding does the NIP for the health sector cover?

The program focuses on four strategic areas to ensure comprehensive digital transformation of medical facilities:

  • Implementation of AI-based solutions and integration with the Central Medical Data Repository. This includes AI tools for optimizing hospital processes and clinical decision support. AI systems for analyzing radiological images can significantly reduce diagnosis time, while increasing lesion detection.

  • Digitization of medical records, especially documents crucial to the continuity of treatment. Only part of medical records in Polish hospitals are in electronic form, which significantly hinders the exchange of information between facilities.

  • Integration and expansion of hospital IT systems, including integration with new types of EDM. Few Polish hospitals have fully integrated HIS, LIS and RIS systems.

  • Increasing the level of cyber security. Medical facilities are a frequent target of attempted attacks, and some of them are successful, causing system downtime.

In support of the digital transformation, on April 9, 2025, the Ministry of Health signed a strategic agreement with the e-Health Center (CeZ), according to which CeZ will receive KPO funds to prepare central tools and services to support hospitals in the digitization process. Projects implemented by CeZ will include further development of the e-Health system, digitization of medical records, construction of a central medical data repository, and creation of a dedicated Security Operations Center for the health sector.

The amount of funding varies depending on the level of the hospital:

  • Level I hospitals: from PLN 1.025 million to PLN 6 million

  • Level II hospitals: from PLN 1.6 million to PLN 9 million

  • Level III hospitals, nationwide, pulmonology, oncology, pediatrics: from PLN 2.325 million to PLN 12 million

KPO funding priorities in health care:

  • AI and Central Repository - Potential to reduce diagnosis time significantly

  • Digitization of documentation - Currently only part of documentation in electronic form

  • Systems integration - Few hospitals with fully integrated systems

  • Cyber security - 300+ attempted attacks on medical facilities in 2024

📚 Read the complete guide: SOC: Security Operations Center - what it is, how it works, how to choose

What are the real challenges in implementing projects with KPO?

While the potential of KPO in health care transformation is significant, real-world implementation faces a number of challenges that are rarely discussed in official communications:

Absorption capacity of medical facilities

Only some county hospitals have the competence to effectively manage advanced IT projects. “The problem lies not in a lack of willingness to digitize, but in limited staff and competence resources,” points out one healthcare management expert. “Hospitals often lack staff with experience in managing complex technology projects, which can lead to inefficient use of resources.”

Bureaucratic and bidding barriers

Public procurement procedures often prolong the implementation process. Tender proceedings in the health sector often take many months, and even longer for complex IT systems. Additionally, in many cases, proceedings are canceled or protested by bidders.

Resistance to change

A survey conducted by the University of Lodz Medical School in 2024 found that 42% of medical personnel over the age of 50 show significant resistance to implementing new IT systems. “The issue of organizational change is often overlooked, focusing solely on the technical aspects,” notes an organizational psychologist from one of the research centers. “Meanwhile, the biggest challenge is to change the habits and routines of staff.”

Interoperability issues

Despite attempts at standardization, many systems in Polish medical facilities remain incompatible. Only some HIS systems in Polish hospitals fully support the HL7 FHIR standard, which significantly hinders integration.

Key implementation challenges:

  • Project competence - Only some district hospitals have the right competence

  • Tender procedures - Lengthy tender proceedings

  • Staff resistance - A large share of older employees show significant resistance to digitization

  • Interoperability issues - Only some systems fully support the HL7 FHIR standard

Is cyber security in medical facilities a real problem?

The challenges of cybersecurity in health care are much more serious than is generally recognized. The medical sector has become one of the main targets of cybercriminals because of the value of medical data on the black market and often inadequate security measures.

In 2023, a hospital in Zielona Gora experienced a ransomware attack that paralyzed the facility’s work for more than a week, forcing the cancellation of scheduled procedures and the postponement of consultations. The direct and indirect costs of the incident were substantial.

“The problem is that many medical devices are running on outdated operating systems that cannot be easily updated,” - explains one healthcare cyber security specialist. “Cyber attacks on hospitals are no longer a theoretical threat - they have become an everyday occurrence.”

Research conducted by CERT Polska found that:

  • Most medical facilities in Poland have not conducted a security audit in the last two years

  • Many do not have procedures for responding to security incidents

  • The vast majority of medical workers use the same passwords for multiple systems

  • Few hospitals have multi-factor authentication implemented for key systems

The government is taking increasingly decisive action in this area. In April 2025, plans were announced to establish a Security and Defense Fund (FBiO), to be endowed with PLN 26 billion reallocated from other areas of the NIP. One of the key goals of the FBiO will be to fund cyber security activities, including the development of secure communication systems and strengthening cyber security for local governments and public institutions.

The NIP had already earmarked funds for the development of sectoral incident response teams (CSIRTs) in key areas, including the health sector. These activities, along with newly created projects like the Security Operations Center for the health sector, show a growing awareness of the importance of cyber security in Poland’s digitization strategy.

The KPO program offers an opportunity to comprehensively strengthen cybersecurity, but this requires a strategic approach beyond hardware and software purchases - procedural changes and staff education are needed.

Cyber security in Polish medical facilities:

  • Most facilities without a security audit in recent years

  • Many facilities do not have incident response procedures in place

  • The vast majority of employees use the same passwords across multiple systems

  • Few hospitals use multi-factor authentication

How do integrated systems affect the quality of health care?

Fragmentation of IT systems is one of the most acute problems in Polish health care. Doctors in Polish hospitals spend a lot of time on data duplication activities between different systems.

An example of successful implementation of an integrated system is the Olsztyn Regional Specialized Hospital, which in 2022 completed a project to integrate HIS, LIS and RIS systems. As a result of this integration:

  • Access time to test results was reduced

  • Fewer tests had to be repeated due to lack of access to previous results

  • Patient length of stay in hospital was reduced

  • Medical staff satisfaction with IT systems increased

“Integration of systems is not only a matter of convenience, but directly translates into patient safety,” - emphasizes the medical director of a leading provincial hospital. “An on-call doctor with immediate access to a patient’s full medical history makes more accurate clinical decisions.”

At the same time, a representative of the Polish Medical Informatics Society notes, “The real challenge is not the implementation of integrated systems themselves, but ensuring their effective use by staff. Even the best system will not be beneficial if users bypass it or use it minimally.”

What are the real possibilities of using AI in Polish health care?

Artificial intelligence offers great potential in medicine, but the reality of its implementation in the Polish health care system requires a sober assessment. Few Polish hospitals have technical infrastructure ready to implement advanced AI solutions.

An example of a successful pilot implementation is the radiology diagnostic support system at the University Clinical Center in Gdansk. In a 12-month pilot project:

  • Accuracy of lung cancer detection increased

  • Time required for analysis of chest CT scans was reduced

  • The number of overlooked lesions decreased

The head of the radiology department at a university clinical center emphasizes: “AI does not replace the radiologist, but it is a powerful supporting tool. In our case, the AI system acts as a ‘second pair of eyes’ that draws attention to potentially worrisome areas of the image.”

At the same time, one scientist from the Polish Academy of Sciences warns: “There is a risk that in the pursuit of modernity, we will implement AI solutions where the basic digital infrastructure is still lacking. It’s like building a house from the roof up. First we need a solid foundation - efficient HIS systems, a working network infrastructure and competent IT teams.”

The most promising areas of AI applications in the Polish reality are:

  • Support for diagnostic imaging (higher lesion detection)

  • Optimization of hospital resources (shorter waiting time in the ED)

  • Forecasting of ward occupancy (high forecast accuracy)

  • Supporting therapeutic decisions (fewer medical errors)

The potential of AI in Polish health care:

  • Few hospitals have infrastructure ready for AI implementation

  • Imaging diagnostics: higher accuracy, shorter analysis time

  • Resource optimization: shorter waiting time in the ED

  • Decision support: fewer medical errors

How to prepare an effective application for KPO funding?

Successfully applying for NIP funds requires a strategic approach, especially since support is expected to go to up to 325 hospitals nationwide. An experienced consultant specializing in obtaining EU funds for the health sector shares practical tips:

  • Conduct a digital readiness audit. “Before you start planning advanced AI or big data solutions, make sure you have a solid underlying infrastructure. The vast majority of applications that did not receive funding in previous programs presented solutions that were inadequate to the actual state of digitization of the facility.”

  • Focus on measurable results. “The evaluation committee is looking for projects with specific, measurable indicators. Instead of writing in vague terms about ‘quality improvement,’ specify exactly how much the waiting time for test results will be reduced by, or how much the number of medical errors will drop.”

  • Engage end users. “Projects developed without consulting medical staff are often disconnected from real needs. Hold workshops with doctors, nurses and technicians to identify key issues to be addressed.”

  • Remember the implementation plan. “Project evaluation takes sustainability and the implementation plan into account. Describe in detail how you will conduct training, how you will minimize resistance to change, and how you will ensure continuity of funding after the project ends.”

  • Include risks and a plan B. “Projects that honestly identify potential risks and present strategies to mitigate them are rated higher than those that ignore potential problems.”

The director of implementation at a company specializing in medical IT adds, “The most common mistake is overestimating the organizational capabilities of a facility. It’s a good idea to include additional time in the schedule for bidding procedures and unforeseen delays. A realistic schedule includes a clear time buffer over the original estimate.”

Practical tips for the KPO application:

  • Digital Readiness Audit - Identify the actual status and gaps in digitization

  • Specific result indicators - Specify precisely the planned results (%, days, hours)

  • Include end users - Consult with medical staff on the project

  • Detailed implementation plan - Include training and change management

  • Risk management strategy - Identify risks and ways to mitigate them

What social and ethical issues are associated with the digitization of health care?

Discussions about the digitization of health care often focus on technical and economic aspects, overlooking important social and ethical issues. Meanwhile, digital transformation can exacerbate inequalities in access to health care and generate new ethical dilemmas.

Digital exclusion

A significant share of seniors do not use the Internet, and many report low digital competence. A health sociologist from one academic center warns: “There is a real risk that the digitization of health care will create a two-class system - for the digitally proficient and those excluded. Facilities must plan alternative access paths for the elderly, disabled or those with lower education.”

An example of good practice is the “Digital Patient Assistant” program implemented by several provincial hospitals, where trained volunteers help patients use eHealth services. At the facilities covered by the program, the use of e-registration among seniors has increased markedly.

Dehumanization of medical care

Technology can lead to depersonalization of the doctor-patient relationship. “In the pursuit of efficiency, it is easy to forget that medicine is not only about procedures and data, but first and foremost about the human relationship.” - reminds a medical ethicist from one medical school. “Studies show that empathy and interpersonal communication have a measurable impact on medical outcomes.”

Data privacy issues

Despite RODO regulations, digitization poses new privacy risks. The vast majority of patients express concerns about the security of their medical data in digital systems, and many do not know how to check who has accessed their records.

A lawyer specializing in medical data protection points out: “The problem is not the technology itself, but the lack of transparency in data processing. Patients must have easy access to information about who accessed their records, when and why.”

How to maximize the benefits of KPO for patients?

The ultimate goal of health care digitization should be to improve patient experience and outcomes. Several key aspects should be included in NTP-funded projects to maximize patient benefits:

  • Accessibility and inclusiveness of solutions. A patient rights advocate at a Warsaw hospital stresses: “Any digital solution that is implemented should be tested for accessibility for the elderly, people with disabilities or the digitally excluded. Interfaces should be intuitive, and there should always be an alternative access path.”

  • Patient education. “Simply implementing the technology is not enough - educational programs are needed to teach patients how to use the new solutions effectively.” - notes a public health specialist from one of the research institutes. An example of a successful initiative is the e-Health for Seniors program implemented by the e-Health Center, which has trained many seniors in the use of IKP, e-prescribing and e-recording.

  • Co-create solutions with patients. Solutions created with active patient participation achieve higher adoption rates. A user experience expert in medicine advises: “Involve patients at every stage of design - from concept to prototyping to testing. It’s an investment that pays off in the form of better tailored solutions.”

  • Measuring real effects. “Every project should have clearly defined indicators of success from the patient’s perspective - not just technical or organizational parameters.” - The expert from the National Institute of Public Health stresses. Examples of indicators include reduced waiting times, increased accessibility of medical records or improved coordination of care as measured by a reduction in unnecessary hospitalizations.

Maximizing the benefits of KPO for patients:

  • Accessibility for all - Designing for the digitally excluded

  • Educational programs - Learning to use new digital tools

  • Co-design - Involve patients in creating solutions (higher adoption)

  • Measuring outcomes - Indicators important from the patient’s perspective

What is the broader context of digitization under the KPO?

The digitization of health care is just one element of a broader strategy for Poland’s digital transformation being implemented under the NTP. The NTP also finances the construction of broadband networks. The goal is to cover address points in areas of so-called “white spots” where modern infrastructure is lacking.

The Deputy Minister of Digitization stressed that the investment is crucial to the country’s social and economic development and lays the foundation for many other digital initiatives, including telemedicine and remote health services.

The NTP also finances the “E-competence” investment, aimed at improving the digital skills of various social groups, including teachers, civil servants and citizens. The program is particularly relevant to the challenges of digital exclusion.

Strengthening cyber security is also an important aspect of the KPO’s overall strategy. In addition to the already-mentioned initiatives in the health sector, in early April calls continued under the “Cyber Security - CyberPL” investment, and work was announced to establish a Security and Defense Fund, under which cyber security will be one of the priority areas.

These parallel initiatives show that the digital transformation of health care cannot be considered in isolation, but as part of a comprehensive strategy to digitize the country, including both infrastructure, competence and security.

What lessons can be learned from the digitization experience so far?

The second stage of KPO’s digital health transformation represents a significant opportunity for Polish hospitals, but its success will depend on a realistic approach that takes into account past experiences and challenges.

A health policy expert concludes: “KPO is not a panacea for all the problems of health care digitization, but well used funds can significantly accelerate digital transformation. The key is the realization that technology is just a tool - real change requires thoughtful processes, competent people and adequate organizational structures.”

The following conclusions emerge from past experience:

  • The need for a phased approach - Digitization should proceed in stages, from a solid foundation to advanced solutions.

  • Priority for interoperability - Systems must be designed with communication and data exchange in mind.

  • E-competence investment - Training and support for personnel are as important as the technology itself. It is no coincidence that the NTP also finances the “E-competence” investment, aimed at improving the digital skills of various social groups.

  • Organizational change management - Successful implementation requires a change in organizational culture and work processes.

  • Central coordination with local flexibility - Central standards should be combined with local adaptability.

  • Infrastructure development as a foundation - Digitization of health care cannot proceed in isolation from the development of the country’s basic digital infrastructure. In parallel with health programs, the NTP finances, among other things, the construction of broadband networks in so-called “white spots” areas, which is crucial for the availability of e-health services, especially in smaller towns.

The director of a medium-sized county hospital shares a pragmatic perspective: “In our case, we don’t rely on the most advanced technologies, but on solutions that solve real problems for our patients and staff. It is better to solidly implement basic systems than half-heartedly implement advanced ones.”

KPO can become a catalyst for positive change, but success depends on realistic planning, prioritization of patient and staff needs, and a systematic approach to implementation. Digitization is not a sprint, but a marathon - it requires consistency, patience and long-term commitment from all health system stakeholders.

Learn key terms related to this article in our cybersecurity glossary:

  • Security Operations Center (SOC) — Security Operations Center (SOC) is a central location where a team of security…
  • Shadow AI — Shadow AI refers to the unauthorized use of artificial intelligence tools and…
  • SOC as a Service — SOC as a Service (Security Operations Center as a Service), also known as…
  • Network Security — Network security is a set of practices, technologies, and strategies aimed at…
  • Cybersecurity — Cybersecurity is a collection of techniques, processes, and practices used to…

Learn More

Explore related articles in our knowledge base:

Explore Our Services

Need cybersecurity support? Check out:

Cybersecurity for Your Industry

Learn more about cybersecurity in your industry:

See also:

Tags:

Cybersecurity Network AI Compliance SOC Healthcare

Share:

Talk to an expert

Have questions about this topic? Get in touch with our specialist.

Sales Representative
Grzegorz Gnych

Grzegorz Gnych

Sales Representative

+48 664 003 003grzegorz.gnych@nflo.pl
Response within 24 hours
Free consultation
Individual approach

Providing your phone number will speed up contact.

Want to Reduce IT Risk and Costs?

Book a free consultation - we respond within 24h

Response in 24h Free quote No obligations
Book a Call +48 22 487 86 36

Or download free guide:

E-book: Digital Resilience Strategy 2026