Under the Gramm-Leach-Bliley Act ("GLB"), financial institutions are required to disclose their information-sharing practices to their customers and also to notify them of their right to opt out of certain practices.