Key Frameworks of the HIA

Three Key Frameworks of the HIA

1. National Electronic Health Record (NEHR) Contribution and Access: The HIA requires all licensed healthcare providers under the Healthcare Services Act (HCSA) and retail pharmacies under the Health Products Act to contribute key health information of Singaporeans, Permanent Residents and patients with long-term immigration passes to the NEHR system and provides for their NEHR access.

2. Sharing of Non-NEHR Health Information: The HIA enables the sharing of prescribed non-NEHR health information within the healthcare ecosystem to facilitate community-based care and outreach programmes. This is currently only applicable to public healthcare institutions, cluster HQs (i.e. National Healthcare Group Pte Ltd, National University Health System Pte Ltd and Singapore Health Services Pte Ltd), Agency for Integrated Care Pte Ltd and public agencies. 

3. Cybersecurity and Data Security (CS/DS) Measures: Licensed healthcare providers, retail pharmacies, approved users of the NEHR and Health Information Management System (HIMS) providers must implement reasonable security measures to protect health information and systems and meet cybersecurity incidents / data breach notification obligations.