Resources
Health Information Act (HIA)
-
First Schedule of the HIA - Specified Contributors & Types of Health Information to be Contributed
-
Second Schedule of the HIA - Access and Collection of Accessible Health Information
-
Third Schedule* of the HIA (Coming Soon)
*More details on statutory medical examinations allowable for NEHR access will be provided soon. In the meantime, visit the Third Schedule (linked in HIA above) for information.
Key Information for Healthcare Providers and Healthcare Professionals
Cybersecurity and Data Security Providers
In today’s digital landscape, cybersecurity and data security are paramount for organisations of all sizes. Healthcare providers will accordingly be required to comply with cyber and data security requirements under the HIA, including the Cybersecurity and Data Security (CS/DS) Essentials. For assistance with implementing the necessary security measures, healthcare organisations may wish to approach any of the CS/DS providers in the list linked below.
Note 1: Updated in February 2026
Note 2: MOH does not endorse or recommend any particular organisation, individual, product, process, or service set out above, nor can MOH assure the quality of the work of any organisation or individual. Organisations should conduct their own due diligence and exercise judgment in selecting the appropriate CS/DS provider. For avoidance of doubt, organisations are also free to approach any other CS/DS providers which are not included in the list, which has only been provided for reference.
Cybersecurity and Data Security Training Course for Healthcare Settings
This course serves as a supportive resource for healthcare providers seeking to understand and implement cybersecurity and data security practices in accordance with established guidelines. Additional training options from other providers will be made available progressively.
Note: This course is provided as an optional educational resource to support healthcare providers in their understanding of cybersecurity and data security requirements. Participation is entirely voluntary.
This course is developed by NTUC LearningHub independently. Ministry of Health (MOH) was consulted but is not responsible for the content of the training. MOH does not endorse or recommend any training organisation, individual, product, process, or service, including those referenced in the training course or related materials. MOH makes no representations or warranties as to the accuracy, completeness or quality of the work or training services of any training organisation or individual. Healthcare providers are advised conduct their own due diligence and exercise independent judgment in selecting training providers that best meet their needs.