It is a close call, but if someone is your friend, you need to have one of those off the record chats to explain the delicate situation. I disagree that the job seeker as an enforceable expectation of privacy.

It would be bad for you if your friend discovers she applied with you and you failed to disclose and you will never hire her any way. There will already be hard feelings for your friend with his employee if and when she leaves.