then yes, it is illegal under the GDPR.
Unless the spy has given you explicit permission to out him.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?