Most people answer “how long must a clinic keep medical records in Singapore?” with “six years”, but that’s only the rule for paper outpatient records. If your clinic charts electronically, as almost all now do, the requirement is far longer: the patient’s Lifetime plus 6 years. This guide sets out the actual retention periods a Singapore clinic must meet, where the “6 years” figure fits, and the exceptions that catch clinics out.
The 30-second version:
Retention periods for a clinic are set by the HCSA Licence Conditions on the Retention Periods of Patient Health Records (under the Healthcare Services Act). The numbers that matter for a GP or specialist clinic: paper outpatient records - 6 years from the last consultation or treatment; electronic records - Lifetime + 6 years; high-risk cases - at least 15 years. Because most clinics are now electronic, Lifetime + 6 years is usually the real obligation.
Setting up a clinic and its systems? See how to start a clinic in Singapore.
Who sets the rules, and on whom
Record retention for healthcare providers is governed by the Healthcare Services Act (HCSA). MOH imposes, under section 13(1) of the HCSA, a set of Licence Conditions on the Retention Periods of Patient Health Records - giving effect to Regulation 37(1) of the Healthcare Services (General) Regulations 2021, and in force since 19 July 2022 - that bind every HCSA licensee, which includes GP clinics, specialist clinics and dental clinics.
A “Patient Health Record” here means the record of a patient’s personal data and medical information kept in relation to a licensable healthcare service - clinical notes, teleconsultation records, and diagnostic images stored as part of the record. The retention period is the minimum time you must keep that record; you can always keep it longer, but never shorter.
Breaching these conditions is a licensing matter: under section 20 of the HCSA, MOH can direct rectification, impose a financial penalty, shorten your licence term, or in serious cases suspend or revoke the licence. Retention isn’t housekeeping, but it’s a licence condition.
The periods that matter for a clinic
Retention depends on the format of the record and the type of case. A GP or specialist clinic is almost always outpatient, so these are the rows that apply:
| Record | Retention period |
|---|---|
| Electronic / computerised records (any setting) | Lifetime + 6 years |
| Paper outpatient records (GP, specialist, dental, A&E not admitted, teleconsults) | 6 years from last consultation or treatment |
| High-risk cases (any setting) | At least 15 years |
“Lifetime” is defined as the patient’s actual lifetime, or 110 years where the time of death is unknown. The clock on any period runs from the last day of consultation or treatment, whichever is later. These are minimum periods, where more than one applies to the same record, keep it for the longest.
Hospitals and residential long-term-care institutions have separate paper-inpatient periods (adults 15 years; minors until 24; persons lacking mental capacity Lifetime + 6). For a clinic, the rows above are what apply.
The single most important line for a modern clinic: if you chart electronically, your obligation is Lifetime + 6 years, not 6. The “6 years” figure everyone repeats is the paper outpatient rule, and paper is now the exception, not the norm.
Why “6 years” is the wrong answer for most clinics
The “6-year” number comes from the paper outpatient row, and it’s been the folk-memory answer for years. But two things move most clinics onto the far longer electronic period:
- You chart in an EMR. Any record entered into an electronic system is a Computerised / Electronic Patient Health Record - kept for Lifetime + 6 years.
- You scanned your old paper. The moment you digitise a paper record by scanning or microfilming, it becomes an electronic record and inherits the Lifetime + 6 years period in its digital form. You can’t scan your way onto the shorter clock.
So for a clinic running a clinic management system, retention is effectively for the patient’s lifetime plus six years on the electronic record, which is a storage, backup and security question, not a filing-cabinet one.
The exceptions that catch clinics out
Three situations override the ordinary period, and each is easy to miss:
- High-risk patients and cases - at least 15 years. The MOH list includes patients who suffered complications during treatment, any pending complaint case, and patients who lacked or were suspected to lack mental capacity at the time of care, and isn’t necessarily limited to these. Keep these for a minimum of 15 years from the last consultation or treatment, and if you decide to keep them even longer, note the reason in the record.
- Legal, disciplinary or dispute proceedings. If a complaint has been made, or proceedings (including mediation) have started or are reasonably foreseeable, you must retain that patient’s complete records until the matter concludes or the normal period ends, whichever is later. This applies to every record type.
- Culling paper early - keep the core. You may cull original paper records after 4 years, but you must still retain a specified subset for the remainder of the retention period. The MOH list applies to all HCSA licensees and covers, among others: discharge summaries, operation reports, all consent forms, X-ray and histopathology reports, maternity, neonatal and labour records, Work Injury Compensation reports, insurance and other medico-legal forms, treatment and progress notes, inpatient medication charts, prescription orders, and blood-transfusion records. “We shredded it after four years” is only safe if you kept that core set.
Retention isn’t the whole duty; storage is the other half
Keeping a record for the right number of years only counts if it’s still intact, secure and retrievable at the end of it. That’s where retention meets your other obligations:
- Security. A record you must hold for a patient’s lifetime plus six years has to survive hardware failure, ransomware and staff turnover. That’s exactly the ground the PDPA’s Protection Obligation and the HIA’s CS/DS Essentials cover - see PDPA for healthcare.
- Don’t over-keep, either. The PDPA’s Retention Limitation duty says stop keeping personal data once you no longer need it. A statutory retention period is a valid reason to keep a record, but once it lapses and no proceedings are live, you should dispose of it securely rather than hoard it indefinitely.
- It shows up at inspection. Record-keeping is part of what MOH looks at, so retention discipline feeds directly into a smooth licence renewal and inspection.
A clinic system that stores records electronically - with automatic backups, access controls and a clear audit trail - turns a “Lifetime + 6 years” obligation from a physical-storage headache into a setting you don’t have to think about.
Next steps
The honest answer to “how long must I keep medical records?” for a Singapore clinic is: 6 years for paper outpatient records, Lifetime + 6 years for anything electronic, and at least 15 years for high-risk cases - measured from the last consultation or treatment. Because nearly every clinic now charts electronically, plan for the long period, keep the required core of any culled paper, and make sure whatever holds those records can keep them secure and retrievable for the full term.
OtterSG stores your clinical records electronically with the backups, access controls and security that long-term retention, the PDPA and the HIA all demand - so meeting a lifetime-plus-six-years obligation is built into the system rather than bolted on. See how that works →
This guide is general information for Singapore clinics; it is not legal advice. Retention periods are set by MOH under the Healthcare Services Act and may change - verify the current HCSA Licence Conditions on the Retention Periods of Patient Health Records on the official portals (hcsa.gov.sg, moh.gov.sg) before acting.