In the UK (and most of the EU for that matter) disclosing private information to a third party without permission is a tort; i.e. it is a form of injury to the first party, and the first party can approach the courts to seek redress. In some circumstances it can also be a criminal offence.