160.310(a)

Responsibilities of covered entities : Provide records and compliance reports.