Trade Secret Protection for Startups and Growing Businesses

For most businesses, the most valuable things they own cannot be seen on a balance sheet. Customer lists built over years, proprietary formulas, algorithms, manufacturing processes, pricing strategies, and business plans are often worth more than any physical asset — and they are also more vulnerable. Unlike patents, trade secrets require no registration and no public disclosure. But that invisibility cuts both ways: without active, affirmative steps to protect confidential information, a business can lose its trade secret protection entirely.

What Is a Trade Secret

Under the federal Defend Trade Secrets Act of 2016 (DTSA) — the primary federal trade secret statute — a trade secret is information that derives independent economic value, actual or potential, from not being generally known to or readily ascertainable by other persons who can obtain economic value from its disclosure or use, and that is the subject of reasonable measures to keep it secret. State law in nearly every jurisdiction mirrors this definition under the Uniform Trade Secrets Act (UTSA).

The range of information that qualifies is broad: formulas, patterns, compilations, programs, devices, methods, techniques, or processes. Courts have recognized trade secret protection for customer lists, supplier lists and pricing arrangements, marketing strategies, software source code, proprietary databases, recipes and formulas, financial projections, and manufacturing methods. The key is that the information must actually be secret and must provide a competitive advantage from being secret.

The Reasonable Measures Requirement

The most common reason businesses lose trade secret protection is failure to take reasonable measures to maintain secrecy. This is a legal requirement, not a best practice. If information is freely shared without any restrictions — with employees, contractors, vendors, customers, or the public — courts will generally find that the information is not a trade secret, regardless of its value.

What constitutes ‘reasonable measures’ depends on the circumstances, but the standard measures that courts look for include: limiting access to confidential information to employees who have a need to know, using non-disclosure agreements with employees, contractors, vendors, and business partners, marking confidential documents with appropriate designations, using password protection and access controls for digital information, conducting exit interviews at which departing employees are reminded of their confidentiality obligations, and training employees on what information is confidential and what they may not take or disclose when they leave.

Non-Disclosure Agreements as the Foundation of Trade Secret Protection

A well-drafted non-disclosure agreement is the cornerstone of trade secret protection. NDAs should be signed by employees at the start of employment (as part of the offer letter process), by independent contractors before beginning work, and by third parties — potential partners, investors, vendors — before receiving any confidential business information. An NDA that is too vague to give the recipient notice of what information is covered may not be enforceable, and an NDA that is never used (because no one signs it) provides no protection at all.

Employee NDAs should specify what categories of information are confidential, the employee’s obligations during and after employment, the return-of-materials obligation upon departure, and the employer’s right to seek injunctive relief in the event of a threatened or actual breach. NDAs should also include a notice provision under the DTSA that informs employees of their right to report potential violations of law to government agencies without violating the NDA — failure to include this notice limits the damages available to the employer in a DTSA case.

Misappropriation: When Trade Secrets Are Stolen

Trade secret misappropriation occurs when someone acquires a trade secret through improper means (theft, bribery, misrepresentation, espionage), discloses or uses a trade secret without consent of the owner, or acquires a trade secret knowing or having reason to know that it was obtained through improper means. The most common misappropriation scenarios in business involve departing employees who take customer lists, product formulas, or business plans to a competitor, and corporate espionage by outside actors.

Remedies for Misappropriation

The DTSA provides access to federal courts for trade secret claims — an important development, because it allows business owners to bring claims in federal court without relying on diversity jurisdiction. Available remedies include injunctive relief (a court order prohibiting continued use or disclosure), damages for the actual loss caused by the misappropriation, the unjust enrichment of the misappropriating party, or — in appropriate cases — a reasonable royalty, and exemplary damages of up to two times the compensatory damages award in cases of willful and malicious misappropriation. Attorney’s fees are also available in willful misappropriation cases.

The DTSA also provides, in extraordinary circumstances, for an ex parte seizure order — a court order allowing law enforcement to seize property containing misappropriated trade secrets before the defendant has notice of the case. This remedy is rarely granted but can be critical when a departing employee is about to disclose trade secrets to a new employer.

Building a Trade Secret Protection Program

Every business that relies on confidential information for competitive advantage should have a written trade secret protection program that includes an information classification system that identifies categories of confidential information, access control policies that limit who can access confidential information and how, employee training on confidentiality obligations and the consequences of misappropriation, an onboarding process that includes signed NDAs and confidentiality acknowledgments, an offboarding process that includes exit interviews, return-of-materials obligations, and reminders of post-employment obligations, and a response plan for suspected misappropriation that includes preserving evidence and engaging legal counsel quickly.

The Bottom Line

Trade secret protection is not self-executing. It requires affirmative steps to identify what is confidential, implement reasonable protective measures, and enforce those measures consistently. Businesses that fail to take these steps may find that their most valuable competitive assets are unprotected when a competitor — or a former employee — decides to exploit them. The investment in a trade secret protection program is modest compared to the potential cost of losing the competitive advantage that those secrets represent.