Back to BlogData Management

Data Sharing Under HIB: What Information Must Be Shared and How

Understanding the mandatory data contribution requirements under HIB - what health information must be shared with NEHR, data formats, and sharing protocols.

DRT

Dr. Rachel Tan

Healthcare Compliance Specialist

26 January 202510 min read
#HIB#NEHR#Data Sharing#Health Records#Compliance

Introduction

One of the central pillars of Singapore's Health Information Bill (HIB) is mandatory data sharing. All licensed healthcare providers must contribute specific patient health information to the National Electronic Health Record (NEHR) system.

But what exactly must you share? How should it be formatted? And what happens to data once it's in NEHR?


The Data Sharing Framework

╔═════════════════════════════════════════════════════════════════╗
║               HIB Data Sharing Model                            ║
╠═════════════════════════════════════════════════════════════════╣
║                                                                 ║
║                     ┌──────────────┐                           ║
║                     │    NEHR      │                           ║
║                     │   (Central   │                           ║
║                     │  Repository) │                           ║
║                     └──────┬───────┘                           ║
║                            │                                    ║
║              ┌─────────────┼─────────────┐                     ║
║              │             │             │                     ║
║        CONTRIBUTE     CONTRIBUTE    CONTRIBUTE                 ║
║              │             │             │                     ║
║              ▼             ▼             ▼                     ║
║         ┌────────┐   ┌────────┐   ┌────────┐                 ║
║         │ Public │   │ Private│   │Community│                 ║
║         │Hospital│   │ Clinic │   │  Care   │                 ║
║         └────────┘   └────────┘   └────────┘                 ║
║                                                                 ║
║              │             │             │                     ║
║              └─────────────┼─────────────┘                     ║
║                            │                                    ║
║                         ACCESS                                  ║
║                    (For patient care)                           ║
║                                                                 ║
╚═════════════════════════════════════════════════════════════════╝

Mandatory Data Categories

What MUST Be Shared with NEHR

CategoryExamplesPurpose
AllergiesDrug allergies, food allergies, environmental allergiesPrevent adverse reactions
VaccinationsCOVID-19, flu, childhood immunizationsTrack immunization status
DiagnosesICD-10 coded conditionsUnderstand patient history
MedicationsCurrent prescriptions, dispensed medicationsPrevent drug interactions
Lab ResultsBlood tests, pathology reportsInform treatment decisions
RadiologyX-rays, MRI, CT scan reports/imagesAvoid duplicate imaging
Discharge SummariesHospital discharge notesCare continuity

Data Field Specifications

╔═════════════════════════════════════════════════════════════════╗
║               Required Data Fields Per Category                 ║
╠═════════════════════════════════════════════════════════════════╣
║                                                                 ║
║  ALLERGIES                                                      ║
║  ─────────                                                      ║
║  • Allergen type (drug/food/environmental)                      ║
║  • Allergen name (standardized)                                 ║
║  • Reaction type (mild/moderate/severe)                         ║
║  • Reaction description                                         ║
║  • Date recorded                                                ║
║  • Recording provider                                           ║
║                                                                 ║
║  MEDICATIONS                                                    ║
║  ───────────                                                    ║
║  • Drug name (generic + brand)                                  ║
║  • Dosage                                                       ║
║  • Frequency                                                    ║
║  • Route of administration                                      ║
║  • Start date                                                   ║
║  • Prescribing provider                                         ║
║  • Dispensing location (if applicable)                          ║
║                                                                 ║
║  DIAGNOSES                                                      ║
║  ─────────                                                      ║
║  • ICD-10 code                                                  ║
║  • Diagnosis description                                        ║
║  • Primary/Secondary indicator                                  ║
║  • Date of diagnosis                                            ║
║  • Diagnosing provider                                          ║
║                                                                 ║
╚═════════════════════════════════════════════════════════════════╝

Data Standards & Formats

Coding Standards

Data TypeStandardNotes
DiagnosesICD-10-CMUse latest version
ProceduresCPT/HCPCSStandard procedure codes
MedicationsSNOMED CTDrug terminology
Lab TestsLOINCLaboratory observation identifiers
AllergiesNEHR CodesetMOH-specified allergen codes

Data Quality Requirements

Your data must meet these quality standards:

  • Accuracy - Information matches the source document
  • Completeness - All mandatory fields populated
  • Timeliness - Data submitted within required timeframe
  • Consistency - Standard codes and formats used
  • Validity - Values within acceptable ranges

When Data Must Be Shared

Timing Requirements

╔═════════════════════════════════════════════════════════════════╗
║               Data Contribution Timelines                       ║
╠═════════════════════════════════════════════════════════════════╣
║                                                                 ║
║  DATA TYPE              CONTRIBUTION DEADLINE                   ║
║  ─────────              ─────────────────────                   ║
║                                                                 ║
║  Consultation notes     Within 3 working days of visit          ║
║  Lab results            Within 1 working day of availability    ║
║  Radiology reports      Within 1 working day of finalization    ║
║  Discharge summaries    Within 3 working days of discharge      ║
║  Allergies              Immediately upon identification         ║
║  Medications (new)      At time of prescription/dispensing      ║
║                                                                 ║
║  Note: "Real-time" contribution is the goal for most systems    ║
║                                                                 ║
╚═════════════════════════════════════════════════════════════════╝

Data Sharing Permissions

Who Can Access NEHR Data?

╔═════════════════════════════════════════════════════════════════╗
║               NEHR Access Framework                             ║
╠═════════════════════════════════════════════════════════════════╣
║                                                                 ║
║                 CAN ACCESS FOR:                                 ║
║                 ──────────────                                  ║
║                                                                 ║
║  ┌─────────────────────────────────────────────────────────┐   ║
║  │  ✓ Direct patient care (treatment, diagnosis)           │   ║
║  │  ✓ Care coordination between providers                  │   ║
║  │  ✓ Emergency situations (even with access restrictions) │   ║
║  └─────────────────────────────────────────────────────────┘   ║
║                                                                 ║
║                 CANNOT ACCESS FOR:                              ║
║                 ────────────────                                ║
║                                                                 ║
║  ┌─────────────────────────────────────────────────────────┐   ║
║  │  ✗ Employment decisions                                 │   ║
║  │  ✗ Insurance underwriting                               │   ║
║  │  ✗ General curiosity (even for family members)          │   ║
║  │  ✗ Research (without proper approvals)                  │   ║
║  │  ✗ Marketing purposes                                   │   ║
║  └─────────────────────────────────────────────────────────┘   ║
║                                                                 ║
╚═════════════════════════════════════════════════════════════════╝

Legitimate Purpose Requirement

Every NEHR access must be for a legitimate healthcare purpose. The system logs all access, and inappropriate access can result in:

  • Fines up to S$50,000 (first offense)
  • Fines up to S$100,000 + imprisonment (repeat offense)
  • Professional sanctions

Data That Is NOT Shared

What Stays with Your Clinic

Data TypeReason
Detailed clinical notesBeyond NEHR scope
Administrative recordsNot required for care coordination
Billing detailsFinancial, not clinical
Appointment historyOperational data
Internal communicationsPractice management

Sensitive Data Handling

Some health information requires special handling:

  • HIV/AIDS status
  • Mental health records
  • Substance abuse treatment
  • Genetic information
  • Sexual health records

These may have additional consent requirements or access restrictions.


The Data Contribution Process

╔═════════════════════════════════════════════════════════════════╗
║               How Data Flows to NEHR                            ║
╠═════════════════════════════════════════════════════════════════╣
║                                                                 ║
║  STEP 1: CAPTURE                                                ║
║  ─────────────────                                              ║
║  Provider enters data in CMS during patient encounter           ║
║            │                                                    ║
║            ▼                                                    ║
║  STEP 2: VALIDATE                                               ║
║  ────────────────                                               ║
║  CMS validates data format and completeness                     ║
║            │                                                    ║
║            ▼                                                    ║
║  STEP 3: TRANSFORM                                              ║
║  ─────────────────                                              ║
║  CMS maps data to NEHR standards (ICD-10, LOINC, etc.)         ║
║            │                                                    ║
║            ▼                                                    ║
║  STEP 4: TRANSMIT                                               ║
║  ─────────────────                                              ║
║  Encrypted transmission to NEHR gateway                         ║
║            │                                                    ║
║            ▼                                                    ║
║  STEP 5: CONFIRM                                                ║
║  ────────────────                                               ║
║  NEHR acknowledges receipt, CMS records confirmation            ║
║                                                                 ║
╚═════════════════════════════════════════════════════════════════╝

Common Data Quality Issues

IssueImpactPrevention
Missing NRIC/FINCannot link to patientMandatory field validation
Wrong ICD codesIncorrect medical historyCode lookup tools, training
Duplicate entriesConfusing recordsDeduplication processes
Outdated allergiesSafety riskRegular review protocols
Incomplete medicationsDrug interaction riskEnforce complete entry

Handling Data Correction Requests

When errors are identified in NEHR:

  1. Document the error - Record what's wrong and why
  2. Make the correction - Update in your CMS
  3. Sync with NEHR - Correction flows to NEHR
  4. Verify update - Confirm correction appears in NEHR
  5. Maintain audit trail - Keep record of correction

Important: You cannot delete data from NEHR—only correct it. The original entry and correction are both retained in the audit trail.


Key Takeaways

  1. Contribution is mandatory - All licensed providers must share specified health data.

  2. Quality matters - Poor data quality defeats the purpose of NEHR.

  3. Standards exist - Use ICD-10, LOINC, and other standard codes.

  4. Timeliness is expected - Share data promptly after capture.

  5. Access is audited - Every NEHR access is logged and reviewable.


For detailed data specifications, refer to the NEHR Data Standards Guide

Share this article

Take Free Assessment