October 29, 2025

Consumer Issues

Privacy and Identity Theft

Minnesota Consumer Data Privacy Act

Federal Privacy Rule

Federal Risk Based Pricing Rule (Credit Score Disclosure)

Federal Safeguards Rule

  • FTC Material
  • Data Breach Notifications
    • The Safeguards Rule requires financial institutions (including dealers) to provide an electronic notice to the FTC as soon as possible and no later than 30 days after discovering a notification event involving the information of at least 500 consumers. A notification event is the unauthorized acquisition of unencrypted customer information.
    • Minnesota has a separate data breach reporting statute (Minn. Stat. § 325E.61), but dealers are exempt under Minn. Stat. § 325E.61, subd. 4. 

Red Flags Rule

Damage Disclosure

Damage Disclosure and Title Branding – Minnesota Statutes

Warranty / Lemon Law

New Vehicle Repair or Replace – Minnesota Statute

Used Vehicle Warranty – Minnesota Statute

Minnesota’s Price Transparency Law (“Junk Fee Law”)

  • MN AG’s Office FAQs
  • Minnesota’s new “junk fee” law, which went into effect January 1, 2025, requires businesses to include all mandatory fees and charges—excluding taxes—in the advertised, displayed, or offered price of goods or services.
    If a dealership automatically adds a shop supply fee to customer invoices and does not give customers the option to decline it, the fee qualifies as a mandatory fee under Minnesota’s junk fee law.
    That means the dealership must include the fee in the advertised or quoted price for services. For instance, if a dealer advertises a $49.95 tire rotation but always adds a $5.99 shop supply charge, the dealer must instead advertise the service as $55.94.
    Best Practices:
    • Roll the shop supply fee into the advertised price if it’s mandatory.
    • If you want to keep the fee separate, give customers the option to decline it and disclose it clearly in advance.
    • Review all service pricing displays—digital and print—to ensure full compliance with the law’s “all-in pricing” requirement.

Less spend. Less risk. More security.

Recent News & Updates

MPCA Delays PFAS Reporting Requirement Until September 15

The MPCA has announced that they are delaying the PFAS reporting due date to September 15, 2026. While it is positive that MPCA is finally acknowledging the challenges using their PRISM reporting system, this delay doesn't resolve the primary issue being faced by the...

read more