Each FEMA recipient has primary responsibility to ensure that its programs or activities are in compliance with the Act and this regulation, and shall take steps to eliminate violations of the Act. A recipient also has responsibility to maintain records, provide information, and to afford FEMA access to its records to the extent FEMA finds necessary to determine whether the recipient is in compliance with the Act and this regulation.