What Is Trade Secret Law and How Businesses Protect Information

What Is a Trade Secret?

A trade secret is any business information that derives economic value from not being generally known or readily ascertainable by competitors, and for which reasonable steps are taken to maintain its secrecy. Unlike patents, which require public disclosure in exchange for a limited monopoly, trade secrets protect information indefinitely as long as it remains secret and valuable. The formula for Coca-Cola, Google's search ranking algorithm, and KFC's original recipe are among the most famous examples of trade secrets.

Trade secrets can encompass an enormous range of information: manufacturing processes, formulas, recipes, software algorithms, customer lists, marketing strategies, pricing information, financial projections, supplier relationships, and know-how accumulated through years of research and development. If the information provides a competitive advantage and is kept secret through reasonable measures, it may qualify for trade secret protection.

Trade secret law serves important economic functions. It encourages investment in research and development by allowing businesses to profit from their innovations without necessarily going through the patent process. It also protects against corporate espionage and misappropriation, which can devastate a company's competitive position and the investments it has made in developing proprietary knowledge.

Federal and State Legal Framework

Trade secret protection in the United States operates under both federal and state law. The Defend Trade Secrets Act (DTSA) of 2016 created the first federal civil cause of action for trade secret misappropriation, allowing companies to sue in federal court and potentially obtain ex parte seizure orders (emergency orders to prevent destruction of evidence without first notifying the defendant). Before the DTSA, trade secret claims were purely state law matters.

Most states have adopted versions of the Uniform Trade Secrets Act (UTSA), which provides a consistent definitional and remedies framework across jurisdictions. A minority of states, including New York, retain their own common law trade secret protections. The interaction between federal DTSA claims and state UTSA claims in the same lawsuit is one of the evolving areas of trade secret litigation practice.

Internationally, trade secrets receive protection under the Agreement on Trade-Related Aspects of Intellectual Property Rights (TRIPS), which requires all World Trade Organization members to provide legal means to prevent the disclosure, acquisition, or use of undisclosed information in a manner contrary to honest commercial practices. However, the level of protection and the legal mechanisms vary significantly between countries, making international trade secret protection a complex challenge for multinational businesses.

What Qualifies as a Trade Secret

For information to qualify as a trade secret, three elements must generally be present. First, the information must be secret — not generally known or readily accessible to people in the relevant industry who could benefit from it. Information that is publicly available or easily discovered through reverse engineering or independent research typically does not qualify, though the standard is not that the information be completely unknown but rather that it not be readily ascertainable through proper means.

Second, the information must have independent economic value from its secrecy. The competitive advantage that secrecy provides is what creates value. A customer list is a classic example: if a company has invested years in developing relationships with customers and maintains a list with purchase history, preferences, and contact details that a competitor would find valuable, it has independent economic value. The fact that a competitor would benefit from obtaining the information is strong evidence of its value.

Third, the owner must take reasonable steps to maintain secrecy. This is where many companies fall short. Courts look at whether the company had confidentiality agreements with employees and contractors, physical and cybersecurity measures to protect sensitive information, need-to-know access controls, employee training on what constitutes confidential information, and markings or designations on sensitive documents. If a company fails to take reasonable protective measures, courts may find that the information was not sufficiently protected to qualify as a trade secret.

Misappropriation: When Trade Secrets Are Stolen

Misappropriation of a trade secret occurs through two main routes: improper acquisition and improper disclosure or use. Improper acquisition includes theft, bribery, misrepresentation, breach of a duty to maintain secrecy, and electronic intrusion. The Economic Espionage Act of 1996 makes it a federal crime to misappropriate trade secrets for the benefit of a foreign government, and the Theft of Trade Secrets Act criminalizes commercial trade secret theft more broadly.

Breach of confidence is the most common form of misappropriation in civil cases. It typically involves a current or former employee who took confidential information to use in a competing business or share with a new employer. The classic scenario is an engineer who downloads proprietary technical files before leaving for a competitor, or a salesperson who takes a customer database to their new employer. These cases are among the most frequently litigated in trade secret law.

Misappropriation can also occur through indirect means — when a party knows or has reason to know that trade secret information was acquired improperly and still uses it. This allows trade secret claims against downstream users of stolen information, not just the original thief. Reverse engineering and independent development, however, are entirely permissible ways to discover the same information and do not constitute misappropriation even if they result in learning a competitor's secret.

Protecting Trade Secrets: Best Practices

The cornerstone of trade secret protection is the confidentiality agreement (also called a non-disclosure agreement or NDA). Employers require employees with access to sensitive information to sign agreements acknowledging its confidential nature and committing not to disclose it during or after employment. Vendor and contractor NDAs protect information shared with external parties for business purposes. These agreements define what information is confidential, the obligations of the recipient, exceptions (such as information already in the public domain), and the duration of obligations.

Physical and cybersecurity measures are equally critical. Access to sensitive information should be limited to those with a genuine need to know. Digital files should be protected with access controls, encryption, and audit logging. Visitors to sensitive facilities should be escorted and prohibited from recording. Remote work policies must address the risks of employees working with confidential information on home networks and personal devices.

Employee onboarding and offboarding procedures are important in trade secret protection. Onboarding should include clear communication about what constitutes confidential information and the employee's obligations. Offboarding should include returning or destroying confidential materials, confirming compliance with ongoing confidentiality obligations, and — where legally permissible — enforcing non-compete agreements that prevent the employee from working for direct competitors for a reasonable time.

Legal Remedies for Misappropriation

When trade secret misappropriation occurs, courts can award several types of relief. Injunctive relief — a court order preventing the defendant from continuing to use the misappropriated information — is often the most important remedy because it can stop ongoing competitive harm. Courts can issue preliminary injunctions early in litigation, before trial, when the plaintiff shows a likely chance of success and irreparable harm.

Monetary damages can include actual losses caused by the misappropriation and unjust enrichment — the profits the defendant made from using the stolen information. If actual damages are not measurable, a reasonable royalty may be awarded. The DTSA and many state statutes also allow exemplary damages of up to twice the actual damages award in cases of willful and malicious misappropriation, as well as attorney's fees.

Civil litigation is expensive and uncertain, so prevention is vastly preferable to litigation. Companies should periodically audit their trade secret protection measures, update agreements as business needs change, train employees consistently, and consult legal counsel when employees depart for competitors. Responding quickly to suspected misappropriation is essential — delay can weaken injunctive relief claims and allow competitive harm to compound. The intersection of trade secret law with employment law, computer fraud statutes, and criminal law makes this an area where early legal guidance significantly affects outcomes.