1) You have to set this under project permissions in the Admin CP. There is an option for "Can view others' private issues/notes."

2) I'm not sure, but I don't think they are notified....