Retailers must toughen up their information security after the FTC updated its Safeguards Rule, which dictates how financial institutions protect data.