I own a Day Spa and Salon. I recently dismissed my General Manager. I think she may have violated a privacy law.

This is a complex question that may require additional facts to be fully understood. As a general matter, a customer of a day spa has no particular "privacy" interest in the firm's customer list. Presumably the customers are known to many employees there, and the fact that they are customers is not a secret (or a trade secret). Moreover, anyone who knows the identity of one of your customers could likely identify the customer's home address by a variety of means, including means as lowly as a telephone book. There don't seem to be any true "privacy" issues invoked by your posited facts. A more interesting question is whether your former employee is using, or intends to use, your customer list to compete with you or to harm your reputation with customers. As a former management employee, the individual in question may have some duties to you in this regard. Again, these facts are incompletely developed in your inquiry and may as yet be unknown to you. You should consult with your own attorney regarding these matters. This is not legal advice.