The Health Information Act (HIA) is framed around a simple goal: “One Patient, One Health Summary, One Care Journey.” Enacted on 3 February 2026, it creates a unified legal framework for collecting, contributing, accessing, sharing, and protecting health information across Singapore’s healthcare ecosystem. The Act builds on the National Electronic Health Record (NEHR) and positions NEHR as a central infrastructure to support safer, higher-quality care and more coordinated continuity of care. It also responds to a care landscape that increasingly needs sustained coordination across multiple providers and settings, where fragmented records can contribute to medication errors, duplicate procedures, and delayed treatments.
Under the HIA, licensed healthcare service providers will be required to have access to NEHR, contribute key health information to NEHR, and comply with applicable cybersecurity and data protection requirements. Implementation will be phased, with the Ministry of Health providing guidance, implementation resources, training, and funding support. The law also formalises NEHR as a national health information repository designed to collect and maintain a consolidated copy of selected health records for Singapore citizens, Permanent Residents, and patients holding long-term immigration passes. This matters because the Health Information Bill passed in Parliament on 12 January 2026 highlighted that some segments were still not fully on NEHR, such as private specialist clinics, clinical and radiological laboratories, and dental clinics.
What “One Record” Changes for Providers and Patients
The Act requires licensed healthcare providers to use HIA-compliant Health Information Management Systems (HIMS) to contribute key patient health information to NEHR. Depending on the licence held, this includes (but is not limited to) allergies, immunisations or vaccinations, diagnoses, medications, laboratory results or test results, radiological images, and discharge summaries. It also sets quality standards for contribution so that submitted data is timely, compliant, complete, attributable, accurate, and correct. The intent is explicit: enable coordinated and continuous care across settings, enhance care quality and safety, and support greater system efficiency and cost-effectiveness. In parallel, authorised healthcare professionals can securely access key health information across care settings to support safer, more coordinated care.
The framework is not limited to NEHR. The HIA also creates a legal basis for sharing non-NEHR health information when community partners and providers need it to support care, including coordination under national initiatives such as Healthier SG and Age Well SG. For that sharing to occur, the organisations that share and receive the data must be prescribed under the HIA, the purposes must be prescribed, and only the prescribed types of information required for that purpose may be shared. This is designed to support care delivery shifting from acute hospitals to the community, while still placing structure and governance around how data moves beyond the national record system.
Safeguards are central to the Singapore Health Information Act 2026 story. The Act outlines appropriate versus inappropriate access, supported by guidance such as the “Guidelines on Appropriate Contribution, Use and Access to National Electronic Health Record (NEHR).” In general, NEHR access is for patient care purposes only, and access for employment or insurance purposes is prohibited, except for a specified list of medical examinations required or permitted under written law. The law also introduces provisions allowing patients to place restrictions on access to their records, balanced against patient safety. A subset of critical information—specifically allergies and vaccination records—remains accessible regardless of restrictions, and a “break glass” provision allows access to a complete NEHR record in medical emergencies despite restrictions.
When was the Health Information Act enacted, and when is it expected to take effect?
What key information must providers contribute to NEHR under the Act?
How does the Singapore Health Information Act 2026 limit access to NEHR?
Can patients restrict access to their records, and are there exceptions?
