So, last week I made a stupid decision and tried to take a pair of $5 earrings. I was caught, no police were called etc. I've already been told I'll probably get a civil demand in the mail. Here's my question though. I work at a retail store (I know, I'm an idiot) and stole from the store one of my co-workers used to work at (I know, I'm an idiot). So, the person who caught me knew this coworker, and they are still in contact. How the person who caught me found out I knew this person is beyond me, though I suspect he Facebooked me and saw we were mutual friends or something.
I just found out today that this person told my coworker about my indiscretion. I don't believe my job is in danger because of it, however, I am concerned about the privacy law.
I'm wondering if anyone has any insight. Is this person allowed to tell people this information about me?
Also, I know that this information was not found out by the company I work for, it was definitely from one person to another.

