The HIA requires your clinic to contribute records to the National Electronic Health Record (NEHR) and meet cybersecurity standards on a deadline that depends on your service type. This page helps you act on it: find your exact deadline, check whether your current system is HIA-ready, and see which grants cover the cost. Sourced from MOH’s official guide.
The 30-second version:
The HIA requires licensed providers to contribute key records to the NEHR and to meet cybersecurity & data security (CS/DS) standards - phased by service type from 2027 to 2030. Government grants help cover both the system and the security costs.
Want the full legal detail? Read the source: MOH HIA Implementation Guide ↗
What the HIA actually means for your clinic
Strip away the legal language and the Act asks three practical things of a clinic:
- Contribute to NEHR. Your clinic must send defined patient records to the national record system, which means your clinic software has to be capable of doing it, in the right format.
- Secure your data. You must meet the cybersecurity & data security (CS/DS) Essentials - access controls, backups, incident handling, staff awareness, and more. These overlap heavily with the PDPA’s obligations, which already apply to your clinic today.
- Do it on time. Deadlines are phased by service type. Miss the window and grant applications close too.
The third framework in the Act - sharing of non-NEHR health information - currently applies only to public institutions, so most private clinics can set it aside for now.
Find your deadline
The single most useful thing to know is when you must be ready - it varies by service type. Find your clinic in the table below.
| Your service type | Batch | Contribute to NEHR by | NCG opens | NCG deadline | NEHR Connect Grant (NCG) |
|---|---|---|---|---|---|
| GP / Outpatient Medical | 1 | 1 Sep 2027 | 1 Jul 2026 | 31 Aug 2027 | S$8,400 (fixed) |
| Private / Acute Hospital | 1 | 1 Sep 2027 | 1 Nov 2026 | 31 Aug 2027 | Up to 40%, cap S$200,000 |
| Clinical Laboratory | 1 | 1 Sep 2027 | 1 Nov 2026 | 31 Aug 2027 | Up to 40%, cap S$140,000 |
| Radiology Laboratory | 1 | 1 Sep 2027 | 1 Nov 2026 | 31 Aug 2027 | S$12,000 (fixed) |
| Nuclear Medicine | 1 | 1 Sep 2027 | 1 Nov 2026 | 31 Aug 2027 | S$8,400 (fixed) |
| Specialist / Outpatient Medical | 2 | 1 Sep 2028 | 1 Aug 2027 | 31 Aug 2028 | S$8,400 (fixed) |
| Nursing Home | 2 | 1 Sep 2028 | 1 Aug 2027 | 31 Aug 2028 | S$14,400 (fixed) |
| Outpatient Renal Dialysis | 2 | 1 Sep 2028 | 1 Aug 2027 | 31 Aug 2028 | Up to 40%, cap S$29,300 |
| Contingency Care | 2 | 1 Sep 2028 | 1 Aug 2027 | 31 Aug 2028 | S$8,400 (fixed) |
| Outpatient Dental | 3 | 1 Mar 2030 | 1 May 2029 | 28 Feb 2030 | S$8,400 (fixed) |
| Ambulatory Surgical Centre | 3 | 1 Mar 2030 | 1 May 2029 | 28 Feb 2030 | S$8,400 (fixed) |
| Assisted Reproduction | 3 | 1 Mar 2030 | 1 May 2029 | 28 Feb 2030 | S$8,400 (fixed) |
| Retail Pharmacy | 3 | 1 Mar 2030 | 1 May 2029 | 28 Feb 2030 | Up to 40%, cap S$16,900 |
Other HCSA licensees not listed above (e.g. cord blood banking, human tissue banking, emergency ambulance, medical transport) are not required to contribute to NEHR, but must still implement CS/DS measures by September 2028. Providers offering multiple service types follow each service’s own timeline. For a visual timeline of all three batches, see HIA deadline by clinic type.
Dates & grant amounts per MOH HIA Implementation Guide, Tables 1, 3 & 4. Subject to change - verify on healthinfo.gov.sg ↗.
Is your current system HIA-ready, or do you need to switch?
This is the decision most clinics get stuck on. A clinic system (HIMS) can contribute to NEHR only if it’s certified HIA-compliant by Synapxe. Your system needs all three of these:
- ✓ NEHR Connectivity certification — completed
- ✓ Cyber Essentials (CE) Mark or equivalent — held
- ✓ Code of Practice for Data Portability — compliance declared
If you can tick all three: your system looks HIA-ready. Confirm your provider is on Synapxe’s certified HIMS list, then proceed to NEHR onboarding.
If any are missing: your system isn’t fully HIA-compliant yet. You have three options:
- Wait — ask your current provider about their certification timeline.
- Switch — move to a certified system, and insist on a written data-migration plan and transition timeline from both old and new providers. Our guide on how to choose a clinic management system walks through what to compare.
- Enhance — if you run a custom-built system, contact Synapxe’s vendor engagement team to make it compliant.
The fastest check is to see whether your provider is already on Synapxe certified HIMS list ↗.
What it costs and the grants that cover it
HIA readiness has two cost buckets, and each has its own funding. This is scattered across several government portals - here it is in one place.
| Grant | For | What it covers | Amount | When |
|---|---|---|---|---|
| NEHR Connect Grant (NCG) · MOH | The system | Adopting or enhancing a compliant HIMS (~2 years of subscription) | S$8,400 fixed (GP); varies by type | From 1 Jul 2026 |
| CISO-as-a-Service (CISOaaS) · CSA | Security advice | Qualified CS/DS consultants - apply via IMDA’s CTOaaS portal | Up to 70% | Now |
| Productivity Solutions Grant (PSG) · EnterpriseSG | Security tools | CS/DS solutions like firewalls and antivirus | 50%, cap S$30k | Now |
| TSS Part C · NCSS | Security (NCSS members only) | CISOaaS consultancy + certification fees; requires the CE Mark | 80%, cap S$40k | Now |
The first bucket is your clinic system (the NCG); the others help cover the security work. TSS Part C is only for Members of the National Council of Social Service (NCSS) - community-care organisations such as nursing homes, so for a typical GP clinic the security grants that apply are CISOaaS and PSG. PSG is for SMEs (a business in Singapore with ≤S$100m turnover or ≤200 employees), which most GP clinics are.
What this means for a GP:
The NCG gives a GP clinic a fixed S$8,400, roughly two years of clinic-system subscription. In practice, much of your first two years can be grant-covered. The thing to plan for is year 3, when the grant has been used. We break the numbers down in the NEHR Connect Grant guide and the full cost breakdown.
Your step-by-step path to readiness
- Find your deadline. Confirm your batch and contribution date (use the table above).
- Check your system. Is your HIMS Synapxe-certified? If not, decide: wait, switch, or enhance.
- Apply for the NCG. Select a compliant HIMS first, then apply before your deadline - late applications are rejected. See our step-by-step NEHR Connect Grant guide.
- Close the security gaps. Review against the CS/DS Essentials; use CISOaaS / PSG funding for the work.
- Onboard & contribute. Complete NEHR onboarding (~5 weeks) and meet the data-quality standards.
Want this as a tick-through list? Use the HIA compliance checklist.
Prefer not to manage the system and security pieces yourself? An integrated programme covers both and gets your clinic certified so it qualifies for the grants. See how that works →
What’s next
HIA guidance is still being released in parts. MOH has indicated that further chapters, including detailed CS/DS implementation steps and corporate policy templates, are still to come. Readiness is an ongoing process, not a one-off: measures should be reviewed periodically as guidance evolves.
For the authoritative source, always check MOH directly.
Official sources: healthinfo.gov.sg ↗ (MOH) · Synapxe NEHR.
This page summarises and interprets MOH’s HIA Implementation Guide for general information only; it is not legal advice and does not replace the official guidance. Dates and amounts are set by MOH and may change - verify at healthinfo.gov.sg before acting.