The UR plan must provide that the identities of individual beneficiaries in all UR records and reports are kept confidential.