Fair Credit Reporting Act Information
I started researching this issue about a year ago myself. It appears that any Casino with gross annual revenues over 1 million is classified by the Feds as a "financial institution" thus subjecting them to the provisions of the Gramm Leach Bliley act. Title V of the act deals with prohibitions concerning disclosure of non personal information which is so broad that it even includes prohibiting disclosure of a customers name or address. So not only can't a Casino disclose or share information from Griffin without violating the law, they can't share information with other Casino's via "flyers" as well.
The GLB Act also applies to private investigators which upset the Private Investigators Association so much that they formed a group called CAFPA (Coalition to Amend the Financial Privacy Act) and were successful in amending the Act ONLY in the cases involving the collection of Child support payments. Below, I have included a link to a letter written by the President of the Washington Association of Legal Investigators to the Federal Trade Commission regarding the restrictions, which confirms that even the use of a persons name is restricted under the Act. If you or anyone else is interested, I have links to numerous articles and the actual Federal regulations regarding the GLB.
Now to address your original question, after digesting all of the information I have obtained, I do not think it's necessary to litigate against a Casino or Griffin for violating the law. The FTC is the "gatekeeper" of this law and has establish very stiff penalties and fines for violators of the GLB. They will even pay an aggrieved party a percentage of the fine they impose. With that in mind, the easiest and least expensive way to stop Casino's and Griffin would be to report them to the FTC and let the Feds go after them. Proceeding in this fashion the hugh costs of litigation would be avoided as the government bears the expense and perhaps the biggest benefit is that even if the casino's appeal the FTC ruling, the case would be heard in a Federal Court rather than Nevada.
Logically, the first step in this process before going to the Feds would be to obtain undeniable proof that the casino's and Griffin disclose your name whether it's in a book, cd rom or a faxed flyer.
Recently, I contacted a Casino where I'm well known as a counter by site as well as by name so I had nothing to lose by asking the question. When I inquired about compliance with the GLB,I was referred to their Chief Legal Counsel which professed that they are in full compliance with the GLB and do not under any circumstances share my name or info with any other casino or company. (yeah right, and the Easter Bunny is real too) He then sounded very nervous when he asked WHY I wanted to know, which leads me to believe they KNOW they're violating the law and just hope that no one reports them. A search of some casino web sites will also contain their privacy statement.
As mentioned previously, I will be happy to share any information and/or links that I have accumulated. Also, many links and a lot of discussion including comments by legal professionals were posted on Green Chip around March 3rd.
May all the dealers blackjacks occur while you're in the bathroom!!!