42 CFR § 456.413 - Confidentiality.

The UR plan must provide that the identities of individual beneficiaries in all UR records and reports are kept confidential.