Retailers need to brush up on fresh legislation over customer data protection as new rules over breaches prepare to swing into action.