Retailers must report suspicious purchases and there will be tougher sentences for selling to under-18s.