; (II) the duration of retention, which shall ensure that information is retained for only so long as is necessary to carry out this Act or other Federal law; and (III) the process for the return or destruction of the information, as appropriate; and (ii) access to information provided to the Commission under this Act, including— (I) limitations on access to relevant, essential individuals; and (II) additional limitations on disclosure by the individuals, including after leaving a position at the Commission. (B) Incorporation of best practices The rules shall incorporate best practices regarding— (i) data collection; (ii) data access; (iii) data retention; (iv) physical security; and (v) information security and data protection, including cybersecurity. (6) Proprietary information defined In this subsection, the term proprietary information means sensitive, non-public information of a person, including— (A) trading strategies; (B) analytical or research methodologies; (C) trading activity in asset classes and not subject to this Act; (D) physical and cyber vulnerabilities; and (E) computer hardware or software containing intellectual property. .