← Back to Articles
The short answer

On 13 February 2026 HSA published findings from its public consultation on an AI-SaMD sandbox. It would exempt certain AI software as a medical device from manufacturer licensing and product registration requirements, but only for selected public healthcare entities developing solutions for use in public healthcare. It covers Class A and Class B AI-SaMD that only aim to diagnose or drive clinical patient management for non-critical medical conditions, and comes with conditions including consultant-level clinical oversight, senior leadership endorsement, annual self-attestation to ISO 13485, prior notification to HSA, and telling patients when it is used in their care.

What the sandbox does

HSA published the findings of its public consultation on 13 February 2026. The proposal exempts qualifying AI-SaMD from manufacturer's licensing and product registration requirements, which are ordinarily the gating steps before a device can be supplied in Singapore.

The rationale is familiar. Public healthcare institutions build tools for their own use, on their own populations, at a scale that does not justify a full commercial regulatory pathway. Requiring one either stops the work or pushes it into an unregulated grey zone.

The boundaries

DimensionScope
WhoSelected public healthcare entities, developing for use in public healthcare
Risk classClass A and Class B AI-SaMD
Clinical scopeDiagnosis or driving clinical patient management for non-critical conditions only
Future scopeHSA indicated it will consider extending beyond public healthcare

The conditions attached

  • A clinician at consultant level or above must oversee design and validation.
  • Senior leadership, the medical board chair or CEO, must endorse deployment.
  • Yearly self-attestation confirming compliance with ISO 13485.
  • HSA must be notified before deployment.
  • Patients must be informed when the device is used in their care.
  • Post-market obligations and accountability measures remain in place.
Our view

This is not deregulation, and reading it that way would be a mistake. HSA has traded pre-market gatekeeping for named accountability. The registration step goes away and is replaced by a consultant who owns validation and a CEO who signs off. That is arguably a higher bar for the individuals involved, because the responsibility is personal and specific rather than institutional and diffuse.

Which is the interesting part for anyone outside the public sector too. It signals the direction of travel: regulators increasingly want to know who decided, not just what was submitted.

Our practical advice for private providers, who do not qualify today: adopt the conditions anyway. Consultant-level validation oversight, executive endorsement on the record, and telling patients when AI is involved are all defensible practices regardless of whether a sandbox obliges you. If HSA does extend the scope, you will already be operating to it.

Sources

  1. Baker McKenzie, "Singapore: HSA Releases AI Medical Software Consultation Findings", 27 February 2026, on HSA findings published 13 February 2026. bakermckenzie.com
  2. Health Sciences Authority, digital health and medical device regulation. hsa.gov.sg

Working Out What Applies To You

Regulatory literacy for the leaders who have to make deployment calls.

Start a Conversation →