I just talked to the VP of HR here at my company.
she said she can not think of any privacy laws your situation would violate, however it would be bad business to even do that. She said that if your boss is going to publish everybodys contact info in outlook he should give the empolyees the option of partcipating in it or not. like the phonebook or a community listing...
sorry not the news you wanted to hear.