A Law Businesses, Banks and Consumers Should Know: In 2007, Minnesota became the first state to enact legislation shifting, in certain circumstances, the costs of consumer data breaches from financial institutions to the persons or businesses that directly transacted with consumers whose data was exposed. Under the Plastic Card Security Act (“PCSA”), set out at …