Health Information Act implementation support

The Ministry of Health's Health Information Act (HIA) implementation-support page explains how licensed healthcare providers can prepare for two linked obligations: contributing key health information to the National Electronic Health Record (NEHR) and implementing cybersecurity and data-security measures. The HIA site also announced Implementation Guide Version 2.0 on 14 August 2026, with more detailed cyber/data-security implementation steps and self-help technical guides. The implementation-support page states that its substantive content was last updated on 25 August 2026; the site footer separately shows 7 September 2026, so those dates should not be read as a new statutory deadline (MOH HIA site, accessed 8 September 2026; MOH implementation support, accessed 8 September 2026).

Provider implementation deadlines

The published batches group services by when contribution and cyber/data-security measures must begin. Batch 1 covers outpatient medical service (GP), acute and community hospitals, clinical laboratories, radiology laboratories and nuclear medicine services; the deadline is September 2027. Batch 2 covers specialist outpatient medical service, nursing homes, contingency care, outpatient renal dialysis and the same measures; the deadline is September 2028. Batch 3 covers outpatient dental, ambulatory surgical centres, assisted reproduction and retail pharmacies; the deadline is March 2030 (MOH, 25 August 2026).

Providers with existing NEHR access can continue using it, while providers that want access can apply. A licensee providing multiple service types follows each service's respective timeline. Other HCSA licensees not listed in the batches—including cord-blood banking, human-tissue banking, emergency ambulance and medical-transport services—do not have to contribute to NEHR under this guidance, but must implement the cyber/data-security measures by September 2028 (MOH, 25 August 2026).

NEHR Connect Grant and eligibility

The NEHR Connect Grant (NCG) supports eligible providers in adopting a HIA-compliant health information management system (HIMS) or enhancing an existing HIMS. The published quantum varies by service: for example, acute and community hospitals receive 40% of cost capped at S$200,000, clinical laboratories 40% capped at S$140,000, outpatient medical services a fixed S$8,400, and retail pharmacies 40% capped at S$16,900. These are grant ceilings or fixed quanta per licensee, not universal cash payments (MOH, 25 August 2026).

NCG eligibility requires a valid HCSA licence for a licensable healthcare service or a valid retail-pharmacy licence under the Health Products Act; a requirement to contribute to NEHR under the HIA; and no government-agency or MOH-owned-entity status, except Vanguard Nursing Homes. The applicant must also not have received specified similar MOH funding under the same Healthcare Institution code. Applications are submitted through the OurSG Grants portal when the relevant application window opens (MOH, 25 August 2026).

Grant opening schedule and post-award steps

The NCG application opening date depends on the provider’s service group. GP outpatient medical services can apply from 1 July 2026 until 31 August 2027; acute and community hospitals, clinical laboratories, radiology laboratories and nuclear medicine services open on 1 November 2026 and share the 31 August 2027 deadline. Specialist outpatient services, nursing homes, outpatient renal dialysis and contingency care open on 1 August 2027; outpatient dental, ambulatory surgical centres, assisted reproduction and retail pharmacies open on 1 May 2029 and close on 28 February 2030. The grant opening date is not the same as the mandatory NEHR contribution date (MOH, 25 August 2026).

After approval, the provider receives a Letter of Award, works with its HIMS provider on implementation and NEHR contribution, and may have up to two months after the mandatory contribution date for data-quality monitoring. MOH says finance documents are required for payout, which is processed within two months after all requirements and documents are complete. This sequence means that eligibility alone is not a payment date or a substitute for meeting the applicable HIA implementation deadline (MOH, 25 August 2026).

Separate cybersecurity and data-security support

The NCG is distinct from cybersecurity support. Eligible healthcare SMEs may use the Productivity Solutions Grant for pre-approved solutions such as firewalls and antivirus software, with support of up to 50%, capped at S$30,000. Eligible SMEs that are also MOH-approved service providers may receive up to 70% co-funding for a qualified cybersecurity-consultancy package through the CSA CISO-as-a-Service route. The 70% figure is not the NCG HIMS rate (MOH, 25 August 2026).

MOH also directs providers to Synapxe and HIMS providers for integration, HIA certification and NEHR onboarding resources. The page lists qualified cyber/data-security service providers for reference, but says MOH does not endorse a particular organisation or guarantee its work; providers remain responsible for due diligence and may use other service providers (MOH, 25 August 2026).