In a major development affecting privacy and data-security practices of direct marketers, Minnesota has become the first state in the country to enact into law one of the key components of the credit card industry's data-security standards, the payment card industry standards.