Trade Secrets and Confidential Business Information

Trade Secrets and Confidential Business Information

Businesses often possess information that is more valuable because it is not publicly known. A company may have a manufacturing process that competitors cannot easily reproduce, a customer database developed over many years, a proprietary algorithm, a pricing strategy, a product formula, or an internal business plan. Keeping such information confidential can be essential to maintaining a competitive advantage.

But not every piece of confidential business information is automatically a trade secret.

This distinction is important. A business may have many kinds of confidential, proprietary, or commercially sensitive information, but trade secret law provides a specific form of legal protection only when particular requirements are satisfied. Under federal law, information generally qualifies as a trade secret when it has independent economic value because it is not generally known or readily ascertainable through proper means, and the owner has taken reasonable measures to keep it secret.

In other words, secrecy alone is not enough. The information must have economic significance arising from its secrecy, and the business must actually behave as though the information is worth protecting.

For a broader explanation of the concept, see Cornell Law School Legal Information Institute’s explanation of trade secrets, which describes trade secrets as a form of intellectual property protecting valuable confidential information.

What Is Confidential Business Information?

Confidential business information is a broad practical category that can include information a company does not want to disclose to competitors, customers, the public, or unauthorized persons.

Examples may include:

• internal financial information;
• business plans;
• pricing information;
• customer and supplier information;
• marketing strategies;
• sales data;
• employee information;
• negotiation strategies;
• product-development plans;
• technical documentation;
• software source code;
• manufacturing information;
• research and development materials;
• internal procedures;
• unpublished designs;
• business forecasts; and
• information received from another company under a confidentiality agreement.

The important point is that confidential business information is broader than trade secrets.

A company might legitimately keep information confidential for contractual, commercial, strategic, privacy, or competitive reasons even though the information does not satisfy the legal requirements for trade secret protection.

For example, a company might keep the proposed date of a future product announcement confidential. That information may be commercially sensitive, but it does not necessarily have the continuing independent economic value required for trade secret protection.

Likewise, a company may have an internal document marked “CONFIDENTIAL” that contains useful information but is so easily ascertainable by competitors that it does not qualify as a trade secret.

Confidentiality labels can therefore be useful evidence of an organization’s efforts to protect information, but the label itself does not create a trade secret.

What Makes Information a Trade Secret?

Federal trade secret law provides a relatively broad definition.

Under 18 U.S.C. § 1839, a trade secret may consist of financial, business, scientific, technical, economic, or engineering information, including plans, compilations, programs, formulas, designs, prototypes, methods, techniques, processes, procedures, programs, or codes.

The information may exist in physical, electronic, graphical, photographic, or written form, or may be intangible.

Two central requirements are particularly important:

1. the owner must take reasonable measures to keep the information secret; and
2. the information must derive independent economic value from not being generally known or readily ascertainable through proper means.

These requirements explain why trade secret protection is fundamentally different from simply calling something “proprietary.”

A business cannot normally transform ordinary public information into a trade secret merely by declaring it confidential.

Economic Value From Secrecy

The first major concept is independent economic value.

The information must be valuable, at least potentially, because it is not generally known.

This value may arise in different ways.

A secret manufacturing technique might allow a company to produce a product more cheaply. A confidential algorithm might provide a technological advantage. A customer list might allow a company to maintain relationships that would otherwise take years for a competitor to develop. A secret pricing strategy might help a business negotiate more effectively.

The information does not necessarily have to generate money directly.

Its value may come from providing a competitive advantage, reducing costs, improving efficiency, accelerating development, protecting market position, or preventing competitors from obtaining the same advantage.

The federal definition expressly recognizes actual or potential economic value.

Thus, a newly developed technology that has not yet generated revenue may still potentially qualify if its secrecy provides meaningful economic value.

The Information Must Not Be Generally Known

Trade secret protection depends on secrecy.

Information that is already publicly available generally cannot become a trade secret simply because a company uses it.

For example, a business cannot ordinarily claim exclusive trade secret rights in:

• information published in a public database;
• generally known industry practices;
• information appearing in publicly available technical literature;
• information disclosed openly on a company’s website; or
• information that competitors can readily discover through lawful means.

The relevant question is not whether every person knows the information.

A trade secret can be known by employees, contractors, investors, licensees, or other authorized persons without losing its protected status.

The question is whether the information remains sufficiently secret from persons who could obtain economic value from it and whether it is not readily ascertainable through proper means.

Reasonable Measures to Preserve Secrecy

The second major requirement is that the owner take reasonable measures to keep the information secret.

This requirement is particularly important because trade secret law does not protect secrecy that exists only in theory.

A business must make reasonable efforts to maintain confidentiality.

Those efforts can include:

• confidentiality agreements;
• nondisclosure agreements (NDAs);
• restricted access to electronic files;
• password protection;
• encryption;
• access-control systems;
• physical security;
• confidential-information policies;
• employee training;
• confidentiality provisions in employment contracts;
• limitations on copying or downloading;
• marking documents as confidential where appropriate;
• separating sensitive information from ordinary business information;
• monitoring access to sensitive systems; and
• procedures for returning or destroying confidential materials.

Cornell’s Wex explanation of trade secrets specifically identifies NDAs, confidentiality policies, employee training, password protections, limited-access files, and physical security measures as examples of measures businesses use to maintain secrecy.

The law does not generally require a business to create an impenetrable security system.

The standard is one of reasonableness.

What is reasonable can depend on the nature and value of the information, the size of the business, the industry involved, the number of people who have access to the information, and the practical circumstances in which the information is used.

A multinational technology company and a small manufacturing business may therefore use very different security systems while both taking reasonable measures under the circumstances.

Confidentiality Is a Continuing Obligation

Trade secret protection is not something that is obtained once and then preserved automatically.

The owner must continue taking reasonable measures to protect the information.

This creates an important practical relationship between legal protection and business conduct.

A company may have a valuable secret today but undermine its own legal position tomorrow by distributing the information carelessly.

For example, a business could weaken its claim to trade secret protection by:

• placing sensitive information on an unrestricted public server;
• distributing confidential documents without controls;
• allowing unnecessary employees to access sensitive files;
• publicly revealing the substance of the information;
• failing to enforce confidentiality policies; or
• sharing information with third parties without appropriate safeguards.

The law does not expect absolute secrecy, because businesses often need to share information to operate.

Instead, the central question is whether the owner has taken reasonable steps consistent with maintaining confidentiality.

Trade Secrets Can Be Shared Without Losing Their Secret Status

A common misunderstanding is that a trade secret must be known only by its owner.

That is not correct.

Businesses frequently need to share confidential information with employees, contractors, manufacturers, investors, consultants, suppliers, licensees, or business partners.

Sharing information does not necessarily destroy trade secret status when the disclosure occurs under circumstances that preserve its confidentiality.

For example, a software company may need to give developers access to source code. A manufacturer may need to disclose a formula to a production partner. A company seeking investment may need to disclose certain business information to potential investors.

The important question becomes whether the disclosure was made under circumstances that preserve the expectation and obligation of secrecy.

Confidentiality agreements can be particularly important in these relationships.

Trade Secret Versus Proprietary Information

The expressions “proprietary information,” “confidential information,” “confidential business information,” “know-how,” and “trade secret” are often used interchangeably in ordinary business language.

Legally, however, they should not automatically be treated as synonyms.

“Proprietary information” is often a broad business expression describing information that belongs to or is controlled by an organization.

“Confidential information” generally describes information that is intended to remain undisclosed.

“Know-how” can refer broadly to practical knowledge concerning how something is done in a business. Cornell Wex notes that know-how may or may not qualify for trade secret protection depending on whether it satisfies the requirements of trade secret law.

“Trade secret,” by contrast, is a legal category with specific requirements.

This distinction becomes particularly important when drafting contracts.

A confidentiality agreement may protect information contractually even if the information does not meet every requirement for a statutory trade secret.

A contract may therefore provide broader protection than trade secret law alone.

Examples of Information That May Qualify as Trade Secrets

There is no single type of information that automatically constitutes a trade secret.

Depending on the circumstances, potentially protected information can include:

Formulas and Recipes

A secret chemical formula, manufacturing formula, or commercial recipe may qualify when it provides economic value because competitors do not know it and the owner reasonably protects it.

Manufacturing Processes

A company may possess a proprietary process that allows it to manufacture products faster, more efficiently, or at lower cost.

The process may be protected as a trade secret even though it is not patented.

Computer Source Code

Software source code can potentially constitute a trade secret when it is commercially valuable and protected against unauthorized access.

Customer Lists

Customer information can potentially qualify when the information is sufficiently valuable, non-public, and subject to reasonable confidentiality measures.

Not every customer list will qualify. If the same information is readily available from public sources, trade secret protection may be difficult to establish.

Pricing and Business Strategies

Confidential pricing models, bidding strategies, marketing plans, and strategic business information may potentially qualify when they derive economic value from secrecy.

Research and Development Information

Unreleased research, prototypes, technical methods, and development information may constitute trade secrets when the statutory requirements are satisfied.

The breadth of federal law reflects the reality that modern businesses may derive competitive advantages from information rather than from physical products alone.

Trade Secrets and Patents Protect Information in Different Ways

Trade secrets are particularly interesting because they offer an alternative to patent protection.

A patent generally requires disclosure of the invention in exchange for a time-limited exclusive right.

A trade secret works differently.

The business does not publicly disclose the information in order to obtain a government-issued monopoly. Instead, it attempts to preserve the information’s economic value by keeping it secret.

This creates a fundamental strategic choice.

A company may prefer patent protection when the invention can be effectively protected through a patent and the business needs enforceable rights against independent users.

A company may prefer trade secret protection when the information can remain secret for a long period and cannot easily be discovered through lawful means.

For example, a manufacturing process hidden within a facility may be more suitable for trade secret protection than a product whose design can easily be determined by examining the finished product.

Trade secret protection also has no fixed statutory expiration date comparable to a patent term. It can continue as long as the information remains protected and satisfies the applicable legal requirements.

But there is a major limitation: a trade secret does not generally prevent independent discovery or lawful reverse engineering.

Federal law expressly provides that “improper means” does not include reverse engineering, independent derivation, or other lawful means of acquisition.

Thus, secrecy can be powerful, but it is not the same as an exclusive patent right.

Confidentiality Agreements and NDAs

One of the most common tools for protecting confidential business information is the nondisclosure agreement, commonly called an NDA.

An NDA is a contract under which one or more parties agree to protect specified information from unauthorized disclosure or use.

A well-drafted NDA may address:

• what information is confidential;
• how the recipient may use the information;
• who may receive access;
• how long confidentiality obligations continue;
• exceptions for information already publicly known;
• information independently developed by the recipient;
• legally compelled disclosures;
• return or destruction of confidential materials; and
• remedies for breach.

An NDA does not automatically transform every piece of information into a trade secret.

Nevertheless, the existence and enforcement of confidentiality agreements can be important evidence that the owner took reasonable measures to preserve secrecy.

They can also create contractual rights that exist independently of trade secret law.

Employees and Trade Secrets

Employees frequently have access to a company’s most sensitive information.

Software engineers may access source code. Sales employees may know customer relationships and pricing. Researchers may possess unpublished technical information. Executives may know strategic plans.

Employers therefore commonly use employment agreements, confidentiality policies, access restrictions, and other measures to protect sensitive information.

An employee’s access to confidential information does not mean that the employee becomes the owner of that information.

The employee may have permission to use the information in performing the employee’s duties while simultaneously having a duty not to disclose or misuse it.

The precise scope of such obligations can depend on contracts, applicable state law, federal law, employment law, and the particular circumstances.

Trade secret law also does not automatically give an employer unlimited control over a former employee’s general knowledge, experience, or skills.

This distinction becomes particularly important when employees change jobs.

Confidential Information After an Employee Leaves

A former employee may legitimately take personal knowledge, professional experience, and general skills to a new employer.

The situation is different if the former employee takes and uses protected trade secret information.

For example, knowing how to negotiate with customers may reflect general professional experience. Taking an employer’s confidential customer database and using it for a competing business may present a very different legal issue.

This distinction is one reason why trade secret litigation involving former employees can become fact-intensive.

Courts may need to determine what information actually constituted a trade secret, what the employee knew independently, what was confidential, what was taken, and how the information was subsequently used.

The existence of a confidentiality agreement may also become relevant, although contractual restrictions must be evaluated under applicable law.

What Happens When Confidential Information Is Misused?

When protected information is acquired, used, or disclosed improperly, the issue may become one of trade secret misappropriation.

Under the federal Defend Trade Secrets Act, misappropriation can include acquiring another person’s trade secret through improper means, as well as certain unauthorized uses or disclosures when the person knew or had reason to know that the information was obtained under circumstances creating a duty of secrecy or restricting its use.

Improper means can include theft, bribery, misrepresentation, breach of a duty to maintain secrecy, or electronic espionage.

Lawful independent development and reverse engineering, by contrast, are not generally considered improper means under the federal definition.

This distinction is crucial because trade secret law protects secrecy against wrongful acquisition and use, not against every form of competition.

Federal and State Trade Secret Protection

Trade secrets in the United States are protected by both federal and state law.

The federal Defend Trade Secrets Act (DTSA) provides a federal civil cause of action for qualifying misappropriation involving a trade secret related to a product or service used in, or intended for use in, interstate or foreign commerce.

At the state level, many jurisdictions have enacted laws based on the Uniform Trade Secrets Act (UTSA), although the exact statutory language and interpretation can vary.

The DTSA does not completely replace state trade secret law. Federal law expressly provides that its provisions generally do not preempt or displace other federal or state remedies for trade secret misappropriation.

Therefore, a trade secret dispute may involve both federal and state legal principles.

Remedies for Trade Secret Misappropriation

The legal consequences of misappropriation can be substantial.

Under the DTSA, a federal court may grant injunctive relief to prevent actual or threatened misappropriation under the statutory requirements.

A court may also award damages for actual loss and certain unjust enrichment, or in appropriate circumstances use a reasonable royalty as a measure of damages.

Where misappropriation is willful and malicious, exemplary damages may be available in an amount of up to twice the damages awarded under the statute. Attorney’s fees may also be available in specified circumstances, including certain willful and malicious misappropriation or bad-faith claims.

The statute also contains an extraordinary procedure permitting a court, under strict conditions, to order the seizure of property necessary to prevent the propagation or dissemination of a trade secret. Such seizure is reserved for extraordinary circumstances and is subject to detailed statutory safeguards.

These remedies illustrate why trade secret disputes are not merely contractual disagreements. In appropriate cases, they can become significant intellectual property litigation.

The Importance of Information Classification

One practical lesson of trade secret law is that businesses should know what information they are actually trying to protect.

A company that treats every document as equally confidential may make its confidentiality system less meaningful.

A stronger approach is often to classify information according to its sensitivity.

For example, a company might distinguish among:

• public information;
• internal business information;
• confidential information;
• highly confidential information; and
• designated trade secret information.

The exact categories will vary by organization.

The purpose is not simply administrative. A consistent classification system can help demonstrate that the company understands what information has competitive value and has established procedures designed to protect it.

Digital Security and Trade Secrets

Modern trade secret protection increasingly involves cybersecurity.

A trade secret may exist entirely in digital form. Source code, databases, engineering files, financial models, research data, and business strategies can be stored on computers or cloud platforms and accessed from multiple locations.

Accordingly, reasonable secrecy measures may involve:

• authentication controls;
• role-based access;
• encryption;
• multi-factor authentication;
• logging and monitoring;
• restrictions on downloads;
• controlled external sharing;
• secure cloud storage;
• employee security training; and
• procedures for departing employees.

The existence of sophisticated technology does not eliminate the legal requirement of reasonableness.

Security measures should correspond to the nature and value of the information being protected.

When Confidential Information Is Not a Trade Secret

It is equally important to understand what trade secret law does not protect.

Information may fail to qualify because:

• it is publicly known;
• it is readily ascertainable through proper means;
• it has no independent economic value arising from secrecy;
• the owner failed to take reasonable measures to preserve secrecy;
• the information was independently developed by another person;
• the information was lawfully reverse engineered; or
• the information does not otherwise satisfy the governing statutory requirements.

A business should therefore avoid assuming that every valuable internal document is legally a trade secret.

The legal analysis focuses on the characteristics of the information and the conduct surrounding it.

Trade Secrets and the Broader Intellectual Property System

Trade secrets occupy a distinctive position within intellectual property law.

Copyright generally protects qualifying original expression.

Patents protect qualifying inventions after satisfying statutory requirements and obtaining patent rights.

Trademarks protect identifiers of source and help distinguish goods and services.

Trade secrets protect qualifying valuable information through secrecy.

This means that trade secret protection depends heavily on behavior.

The owner must protect the secret.

Employees and business partners may have duties concerning the information.

Competitors may attempt to discover information through lawful means.

And once secrecy is destroyed, the legal position can change dramatically.

Trade secret law therefore connects intellectual property law with contracts, employment relationships, cybersecurity, commercial transactions, unfair competition, and business operations.

Why Confidentiality Is the Foundation of Trade Secret Protection

The central lesson is simple: a trade secret exists because secrecy has economic value and the law recognizes that value when the owner reasonably protects it.

Businesses do not need to hide every piece of information they possess. But when information gives them a competitive advantage precisely because competitors do not know it, protecting that information can become an important legal and commercial priority.

Confidentiality agreements, employee policies, access controls, cybersecurity, physical safeguards, and disciplined information management are therefore not merely administrative precautions. They can become part of the factual foundation for demonstrating that valuable information was genuinely treated as a trade secret.

At the same time, businesses should distinguish carefully between information that is merely confidential and information that meets the legal definition of a trade secret.

That distinction becomes especially important when a company believes that someone has taken, disclosed, or used its confidential information.

---

Key Takeaways

• Confidential business information is broader than trade secrets.
• Not every confidential document or proprietary business fact qualifies as a trade secret.
• Federal law protects information that derives independent economic value from remaining secret and is not generally known or readily ascertainable through proper means.
• The owner must take reasonable measures to maintain secrecy.
• Trade secrets can include formulas, processes, source code, customer information, pricing strategies, business plans, technical information, and other commercially valuable information.
• NDAs and confidentiality agreements can help protect information contractually and can also support evidence that reasonable secrecy measures were taken.
• Trade secrets can be shared with employees, contractors, and business partners without necessarily losing protection, provided confidentiality is appropriately maintained.
• Lawful independent development and reverse engineering are generally not improper means under the federal trade secret statute.
• Trade secrets are protected under both federal and state law.
• The Defend Trade Secrets Act provides a federal civil cause of action for qualifying misappropriation.
• Maintaining secrecy is a continuing responsibility rather than a one-time legal step.

Frequently Asked Questions

Is all confidential business information a trade secret?

No. Confidentiality alone is not enough. To qualify as a trade secret under federal law, the information must derive independent economic value from not being generally known or readily ascertainable through proper means, and the owner must take reasonable measures to keep it secret.

Can a customer list be a trade secret?

Yes, potentially. A customer list may qualify if it has independent economic value because it is not generally known or readily ascertainable and the business takes reasonable measures to protect it. A list assembled entirely from publicly available information may present a different case.

Does a confidentiality agreement create a trade secret?

Not automatically. An NDA can create contractual confidentiality obligations and may support the argument that reasonable secrecy measures were taken, but a contract cannot by itself make information satisfy the statutory definition of a trade secret.

Can employees know a trade secret without destroying it?

Yes. Trade secrets can be disclosed to employees and other authorized persons while remaining protected, provided the owner maintains appropriate confidentiality measures.

Can a competitor independently discover a trade secret?

Yes. Trade secret law generally does not prohibit lawful independent development or reverse engineering. Federal law expressly excludes independent derivation and reverse engineering from the definition of improper means.

Does a trade secret expire?

There is no fixed statutory expiration period comparable to a patent term. Trade secret protection can continue as long as the information remains secret and continues to satisfy the applicable legal requirements.

What happens if a trade secret becomes public?

Once information becomes generally known or loses the secrecy on which its economic value depends, trade secret protection may be lost. The consequences depend on how and why the information became public and on the applicable law.

Are trade secrets protected by federal law?

Yes. The Defend Trade Secrets Act provides a federal civil cause of action for qualifying trade secret misappropriation involving interstate or foreign commerce. State trade secret laws may also apply.

Conclusion

Trade secret law protects a form of intellectual property that is fundamentally different from patents, copyrights, and trademarks. Its value lies not in public registration or disclosure, but in maintaining commercially meaningful secrecy.

The most important distinction is between information that a business wants to keep confidential and information that legally qualifies as a trade secret. The latter requires both economic value arising from secrecy and reasonable efforts to preserve that secrecy.

For modern businesses, trade secret protection therefore begins long before litigation. It begins with identifying valuable information, limiting access, establishing confidentiality obligations, training personnel, securing digital systems, and consistently treating sensitive information as something worth protecting.

When those measures fail and protected information is improperly acquired, used, or disclosed, the dispute moves from confidentiality management into the law of trade secret misappropriation—the subject of the next stage of this Intellectual Property series.