2 min read
With over 96% of the US population owning some sort of mobile device , it is no surprise that text messaging is one of the most, if not the most, effective tools for digital communication out there. As a result, many businesses have cropped up around bulk text messaging for communicating with potential clients and customers. In this article, we will determine whether or not Mosio is HIPAA compliant.
Mosio features
Mosio offers appointment reminders via automated messages to keep medical trial participants in the loop while also allowing for flexible rescheduling. Its CSV uploader can deliver bulk appointment reminders that relieve administrative burdens. Mosio also has data collection automation functions that help teams schedule surveys for research participants after they have taken a certain action. This workflow is delivered through Mosio’s REDcap EDC (Electronic Data Capture) software that allows data capture both online as well as offline.Mosio and healthcare
As a company that has such a heavy foothold in the clinical research space, one would believe that Mosio is heavily invested in the healthcare industry. This is one of its primary appeals to organizations looking for a text messaging solution for clinical research participants. Mosio’s mPIN verification , a method of verification that allows research organizations to assign an alphanumeric, user-based PIN to participants, is one of the reasons why it is a popular tool. During a research trial, study participants must respond with their specific mPIN code before a message or series of questions can be sent. This helps to maintain participant privacy since text messages are not encrypted. It also verifies the recipient’s identity before the message is sent. In addition to its mPIN feature, Mosio hosts its platform on HIPAA compliant servers that follow HIPAA technical and administrative guidelines .Mosio and the business associate agreement
Although some companies are quick to market themselves as HIPAA compliant, sometimes they fail to state whether or not they will sign a BAA or business associate agreement . Signing a BAA is crucial to remaining compliant. In its privacy policy , Mosio states:All data collected by the Mosio platform (PHI or non-PHI) receives the same safeguards for security, privacy and breach notification applied to our clients covered under HIPAA rules and stipulated by a client BAA.This is echoed further down in the document:
If your organization requires a BAA, please email documents to hipaa((@))mosio.com and allow up to 7-10 business days for review and completion after the project/program agreements have been confirmed.When asked to clarify this further, a representative noted that they “make the determination [to sign a BAA] based on the project type/size.” Conclusion: Mosio can be HIPAA compliant with an executed BAA.
