Instead of requiring access reports that include names, CHIME believes that a safer alternative would be to require patients to provide a covered entity with specific names for the covered entity to determine whether those individuals have or have not accessed the patient's information.