Covered entities must report all phi breaches to the Federal Register annually. The Federal Register is the daily newspaper of the Federal government. It is a legal a legal newspaper published every business day by the National Archives and Records Administration (NARA).
