Singapore clinic regulations in 2026, and how wai meets them

Singapore's clinics, health systems, government teams and insurers work under four rules that shape every system they choose. The Health Information Act brings every licensed clinic into the National Electronic Health Record, with GP clinics contributing by September 2027. The PDPA governs personal data, and AIHGle 2.0 sets how AI is governed in care. wai is built to meet each of them for every buyer.

The year Singapore joins up its records

Parliament passed the Health Information Bill on 12 January 2026, and MOH's implementation circular followed on 6 March 2026.¹² It requires every clinic licensed under the Healthcare Services Act to contribute key health information to the National Electronic Health Record and to put cybersecurity and data security measures in place.² As at 31 October 2025, about 70% of Singapore's more than 2,000 GP clinics had joined NEHR.¹ By September 2027 every one of them will contribute, and patients will carry one record from their GP to their specialist and back.

The rules, and how wai meets each one

Rule	What it asks	Private clinics	Health systems	Governments	Insurers
Health Information Act, NEHR contribution	GP clinics contribute key health information to NEHR by September 2027, private specialist clinics by September 2028 and dental clinics by March 2030.²	wai Clinicians writes diagnoses, medications and referral memos on the day of the visit, ready to contribute. wai is built to connect to NEHR. We set up your clinic's connection with you.	One record across every site, contributing the same key information from each.	Complete, signed records from every visit, adding to the national record.	Records finished on the day of the visit, so every claim rests on a complete history.
Health Information Act, cybersecurity and data security	Every licensee puts cybersecurity and data security measures in place on the same timeline.²	Records hosted in Singapore, with access limited to the people who care for the patient.	One security model for every site, reviewed once.	Access logs that show who opened which record.	Member data protected to the same standard as the clinic's own.
Personal Data Protection Act	Consent and a stated purpose before collection, reasonable security, no retention beyond need, transfers only at a comparable standard, and notifiable breaches reported within three calendar days.³	Consent recorded in the patient's thread, and records kept in Singapore.	One consent record that travels with the patient across the group.	Personal data that stays in Singapore, under Singapore's rules.	Member data handled under the same consent and retention rules.
AIHGle 2.0	Healthcare organisations that deploy AI govern each tool, keep a registry of every AI solution with its risk classification, and keep human oversight for all clinical use.⁴	Nothing leaves wai Clinicians until the doctor has read and signed it, and each tool is set out for the clinic's registry.	One registry entry for every site, with one named owner.	An audit trail of what the AI drafted and what the doctor signed.	A named professional behind every clinical record.

wai hosts your clinic's records in Singapore, under Singapore's rules. We set this up with your clinic.

What each buyer gains

A private clinic gains a record that is complete when the patient leaves, a front desk that answers in English and Mandarin day and night, and doctors who go home with their notes signed. A health system gains one record and one front desk across every site. A government team gains complete, signed records from every visit and a clear audit of every AI tool. An insurer gains claims that rest on a full, signed history.

Singapore guides

Questions

When must GP clinics in Singapore contribute to NEHR?

Under the Health Information Act and MOH circular MOH-MHC-0018-2026, outpatient medical services providing GP care must contribute key health information to NEHR by September 2027. Private specialist clinics follow by September 2028 and dental clinics by March 2030.

What does the PDPA require of a clinic?

Consent and a stated purpose before collecting personal data, reasonable security, no retention beyond a legal or business purpose, transfers abroad only at a comparable standard of protection, and notification of a notifiable breach to the PDPC within three calendar days of assessing it.

What is AIHGle 2.0?

The Artificial Intelligence in Healthcare Guidelines published by MOH and the Health Sciences Authority in March 2026. They ask healthcare organisations that deploy AI to govern each tool, keep a registry of AI solutions with their risk classification, and keep human oversight of clinical use.

Every regulator wai maps its evidence to, with the framework in force today, is on the regulators page. Go deeper with HCSA licensing, as it moves from MOH to HSA, each with the framework explained, a readiness checklist and guides.

Sources

Written and reviewed by the clinical team at wai. Last reviewed 14 October 2026.