Although Congress cannot designate an injury as specific and harmful enough for standing, the cause of action and damages for not providing a credit report established that Congress saw the harm as serious, and it was similar to rights recognized in the common law. The requirement of FCRA notification, though, is a bare procedural violation with no actual harm, insufficient to establish injury in fact under Article III.
http://www2.ca3.uscourts.gov/opinarch/171889p.pdf
Since 2011. An occasional commonplacing of the U.S. Circuit Courts of Appeal.
Neither an authoritative statement of the law nor legal advice. Quick work.