; (IV) the order or bid routing practices or processes, including any material exceptions to the standard practice of the brokerage; and (V) the source and nature of any compensation paid or received in connection with transactions; and (ii) in the case of a buy-side brokerage providing information to a buy-side brokerage customer— (I) all bids won by the buy-side brokerage customer, and for each bid won, the maximum allowed bid of the advertiser, if any, the uniform resource locator or other property identifier at the lowest level of granularity, date, the digital advertising exchange, the web domain associated with the advertising creative, the advertising creative size and format, the winning price, the bid submitted to the digital advertising exchange on behalf of the buy-side brokerage customer, and, if possible, whether the ad served and whether the ad rendered; (II) the order or bid routing practices or processes; and (III) the source and nature of any compensation paid or received in connection with transactions. (C) Retention of records Brokerages shall retain the applicable records specified in subparagraph (B) collected in the ordinary course of business until provided to a requesting brokerage customer but not longer than 90 days. Brokerages shall retain billing information for brokerage customers for not fewer than 12 months. (D) User privacy (i) In general When providing information to a brokerage customer in response to a request authorized by subparagraph (A), the brokerage shall, to the greatest extent possible consistent with the purpose of subparagraph (A), anonymize, hash, or otherwise render the information incapable of being tied to an individual web user. (ii) Prohibiting tracking A brokerage customer may not use data or information received in response to a request made under subparagraph (A) for any purpose other than— (I) verifying compliance of a brokerage with the obligations under paragraphs (1) and (2)