Introduction

Most people are familiar with patents and copyrights when it comes to protecting intellectual property. But there is another form of IP that often goes unnoticed yet is arguably just as important, trade secrets. From the formula of a popular soft drink to the algorithm behind a search engine, trade secrets silently power some of the world’s most successful businesses.

What makes trade secrets different from other forms of IP is that their protection does not depend on registration or formal disclosure to any government authority. Protection exists only as long as the information remains secret. The moment it enters the public domain , whether through a leak, a breach of contract, or carelessness, the legal protection is gone, and it cannot be recovered. This makes trade secret law both uniquely powerful and uniquely fragile.

This article looks at what trade secrets are, how the law protects them in India and abroad, the ways in which they are typically stolen or misused, and what steps businesses can practically take to keep their confidential information safe. The topic is especially relevant today, given the rise of remote work, employee mobility, and cyber threats all of which have significantly increased the risk of trade secret misappropriation.

What Counts as a Trade Secret?

There is no single definition of a trade secret that is universally accepted, but most legal systems  including international trade agreements agree on three basic requirements. The information must not be publicly known or easily accessible. It must have commercial value because it is secret. And the owner must have made reasonable efforts to keep it confidential.

These three requirements seem simple enough, but in practice they involve a lot of grey area. For instance, what counts as “reasonable efforts” to maintain secrecy? Would a single NDA with an employee be sufficient, or does the business also need to restrict digital access, mark documents as confidential, and train staff on data handling? Courts across different jurisdictions have answered this question differently depending on the facts of each case.

As for the types of information that can be protected, the scope is genuinely wide. It can include technical information like manufacturing processes, chemical formulas, software source code, or engineering designs. It can also include business information like customer lists, supplier pricing, marketing strategies, or internal financial data. The Coca-Cola formula is the textbook example, but equally common are less glamorous things like a logistics company’s optimized routing algorithm or a law firm’s client database.

Interestingly, even negative information such as research results showing that a particular approach does not work can qualify as a trade secret. A competitor who knows what dead ends to avoid benefits just as much as one who knows the right answer.

Legal Framework: India and the World

The International Picture

At the international level, trade secret protection is addressed in Article 39 of the TRIPS Agreement (Trade-Related Aspects of Intellectual Property Rights), which is binding on all WTO member countries including India. TRIPS does not define a universal law but requires member states to provide legal mechanisms to protect undisclosed information that meets the three criteria mentioned above.

The United States has perhaps the most developed trade secret regime. The Economic Espionage Act of 1996 made trade secret theft a federal crime, and the Defend Trade Secrets Act of 2016 created a federal civil cause of action meaning companies could sue in federal court for the first time without depending on state laws. Before 2016, most American trade secret cases were litigated under state-level laws based on the Uniform Trade Secrets Act.

The European Union passed the Trade Secrets Directive in 2016 to harmonize protection across member states. Previously, countries like Germany had strong trade secret protections while others had relatively weaker ones, creating inconsistency across the single market. The Directive tried to fix that, though implementation varied.

The Indian Legal Position

India, surprisingly for an economy of its size, does not have a dedicated trade secret statute. Protection instead comes from a patchwork of existing laws and principles, primarily the law of contract and common law equity.

The most important tool is the confidentiality agreement or non-disclosure agreement (NDA). Under the Indian Contract Act, 1872, parties are free to contract on terms of confidentiality, and breach of such an agreement gives rise to a civil claim for damages or an injunction. Courts have generally enforced these agreements where they are reasonable in scope that is, where the confidentiality obligation is limited to genuinely confidential information and not used as a blanket tool to prevent an employee from working in their field.

Section 27 of the Contract Act is often raised in this context. It renders void any agreement in restraint of trade. But Indian courts have consistently distinguished between a pure non-compete clause (which is restraint of trade and unenforceable) and a specific obligation not to disclose particular confidential information (which is enforceable). This distinction is important because it means employers cannot prevent former employees from using their general skills and industry knowledge, but they can prevent them from misusing specific confidential information.

Beyond contract, Indian courts have applied the equitable doctrine of breach of confidence. Even without a formal written agreement, if confidential information is shared in circumstances that clearly imply confidentiality  such as between employer and employee, or during business negotiations the receiving party may be restrained from misusing it. The Delhi High Court applied this principle in Desiccant Rotors International Pvt. Ltd. v. Bappaditya Sarkar, where it granted an injunction against a former employee who had taken technical drawings belonging to his employer.

The Information Technology Act, 2000 is also relevant where trade secrets are stored in digital form. Unauthorized access to computer systems to obtain confidential data can attract criminal liability under this legislation. Similarly, criminal provisions under the BNS particularly Section 316 (criminal breach of trust) and Section 303 (theft) can apply in cases of deliberate misappropriation of physical documents or data.

The Indian government’s National IPR Policy of 2016 acknowledged the gaps in India’s trade secret regime and recommended the enactment of dedicated legislation. So far, no such law has been passed, leaving businesses to rely on the existing framework.

How Trade Secrets Get Stolen

The Departing Employee Problem

The most common scenario in trade secret disputes is the departing employee. An employee who has worked in a company for years naturally builds up a detailed knowledge of its operations, clients, suppliers, and processes. When that employee leaves, especially to join a competitor or start their own venture, the boundary between what they legitimately know and what belongs to the employer becomes the central legal question.

In many real cases, misappropriation is not dramatic. It does not always involve someone printing out files or hacking into servers. It can be as simple as an employee emailing a client list to their personal email account the week before resigning, or copying product specifications onto a USB drive. Sometimes it is done with full awareness that it is wrong; other times, the employee genuinely does not realize that what they are taking is legally protected information.

This is one reason why exit procedures, where departing employees are reminded of their confidentiality obligations and required to return or delete company data are considered best practice. A well-documented off-boarding process can serve as evidence that the company took its secrecy obligations seriously, which matters a great deal if litigation follows.

Cyber Attacks and Digital Theft

With most valuable business information now stored digitally, cyber-enabled theft of trade secrets has become a serious and growing problem. Competitors, organized criminal groups, and even state actors have been known to target corporate networks specifically to steal proprietary information. The pharmaceutical sector, for instance, has been a frequent target developing a new drug takes years and billions of rupees; stealing the formula takes a few minutes if security is poor.

Indian companies are not immune to this threat. As more businesses digitize their operations and store sensitive information on cloud servers, the attack surface grows. Data breaches that were once purely financial, targeting payment information or personal data increasingly also result in the exposure of commercially valuable confidential information.

Reverse Engineering: The Legal Exception

Not every discovery of a trade secret constitutes misappropriation. Reverse engineering taking a legitimately obtained product and working backwards to understand how it works or what it contains — is generally lawful. If a company buys a competitor’s product from the open market and analyses it in a laboratory to figure out its composition, that is not theft, even if the composition was a closely guarded secret.

This exception reflects an important policy judgment: trade secret protection should not give owners a monopoly on information that could be independently discovered through legitimate means. It is different from a patent, which does give such a monopoly. The price of not registering and not disclosing is that the information must remain genuinely secret  once someone figures it out legitimately, the protection ends.

Notable Cases Worth Knowing

Waymo LLC v. Uber Technologies Inc. (USA, 2018)

This case became one of the most high-profile trade secret disputes of the decade. Anthony Levandowski, an engineer at Google’s self-driving car project, allegedly downloaded tens of thousands of confidential files before leaving to found his own company, which was subsequently acquired by Uber. Waymo (Google’s self-driving subsidiary) sued, claiming these files contained core technical secrets about lidar technology. The case settled for approximately $245 million in Uber equity, without Uber admitting wrongdoing. Levandowski was later separately convicted on criminal charges. The case illustrated how even the most sophisticated technology companies remain vulnerable when a trusted senior employee decides to walk out the door with their most sensitive files.

Desiccant Rotors International Pvt. Ltd. v. Bappaditya Sarkar (India, 2009)

This Delhi High Court decision is frequently cited as one of the leading Indian cases on trade secret protection. The plaintiff company made industrial rotors and alleged that a former employee had used confidential technical information, including drawings and manufacturing processes, to set up a competing business. The court granted an interim injunction and importantly held that the absence of a formal written confidentiality agreement did not defeat the claim — the circumstances of employment themselves implied a duty of confidence. This ruling is significant because it extends protection even to smaller businesses that may not have watertight contractual documentation.

American Air Filter v. McNichol (USA)

This older but instructive case dealt with the line between an employee’s personal skills and knowledge versus specific confidential information belonging to the employer. The court had to decide whether the employee’s knowledge of customer preferences and buying patterns was general professional knowledge or a protectable trade secret. It is the kind of case that comes up frequently in sales and client-facing roles, and it remains relevant today in disputes involving client relationship managers, sales executives, and account managers who move between competing firms.

Remedies Available Under the Law

When a trade secret is misappropriated, the affected party has several legal options, though the effectiveness of each depends on how quickly action is taken.

The most urgent remedy is an injunction. Courts can issue temporary or interim injunctions on short notice to stop the defendant from using or disclosing the stolen information while the full case is being heard. In cases where disclosure is imminent , for example, where a former employee is about to present a business plan based on stolen data to investors , speed is critical. Delay can make the injunction pointless if the information has already entered the public domain.

Damages are available but difficult to calculate. The plaintiff must show what economic loss was caused by the misappropriation, which typically requires expert evidence on the commercial value of the information and the extent to which the defendant benefited from it. Courts may also grant an account of profits, requiring the defendant to surrender whatever gains they made through the misuse of the information, this remedy focuses on preventing unjust enrichment rather than compensating the victim’s loss.

Criminal remedies should not be overlooked. A complaint under Section 316 and 303, or under the IT Act, can run in parallel with civil proceedings. The threat of criminal action sometimes brings defendants to the negotiating table more effectively than civil suits alone.

What Businesses Should Actually Do

Reading through trade secret case law, one pattern stands out: companies that lose these cases almost always failed to take basic protective measures. Courts are reluctant to protect information that the owner did not bother to protect themselves. The following practical steps are not just good corporate hygiene they are legally necessary to establish and maintain trade secret status.

The starting point is documentation. Every business should identify what its actual trade secrets are. This sounds obvious, but many companies have never sat down and made a list. Without knowing what you are protecting, you cannot protect it effectively, and you will struggle to convince a court that specific information was treated as confidential if you cannot clearly identify it as such.

Confidentiality agreements must cover all relevant parties employees at all levels, contractors, vendors, joint venture partners, and anyone else who may be exposed to confidential information. The agreements should be specific about what information is covered and should not be so broad as to be unenforceable. A blanket clause saying “all information is confidential” is weaker than one identifying specific categories.

Access control is another basic but frequently neglected measure. Not everyone in an organization needs access to all confidential information. Restricting access on a need-to-know basis reduces risk and also creates a clearer record of who had access to what, which is useful evidence in litigation.

Digital security deserves particular attention. Encryption, strong password policies, monitoring of data downloads and email attachments, and regular security audits are all part of a responsible trade secret protection program. When an employee resigns, access should be revoked promptly ideally on the day of resignation, not weeks later.

Finally, exit procedures should be taken seriously. When employees leave, they should be reminded in writing of their continuing confidentiality obligations. Their devices should be reviewed for unauthorized data transfers. These steps take time, but they are far cheaper than litigation.

Conclusion

Trade secrets occupy an interesting space in intellectual property law powerful in theory but entirely dependent on the owner’s own diligence in practice. Unlike a patent, which the state actively enforces once granted, a trade secret is only as strong as the measures taken to maintain it. This puts the burden squarely on businesses to be proactive, which many are not until after something goes wrong.

India’s legal framework, while workable, would benefit enormously from dedicated legislation that clearly defines trade secrets, sets out the circumstances of misappropriation, and provides specific remedies. The absence of such a law creates unnecessary uncertainty, particularly for foreign companies investing in India who expect a clear legal standard.

For law students and practitioners, trade secret law is worth understanding deeply because it comes up in a surprisingly wide range of matters  employment disputes, commercial litigation, technology transactions, and even criminal cases. As India’s economy continues to grow and more businesses compete on the basis of proprietary knowledge and innovation, the importance of this area of law is only going to increase.

References and Sources

1. TRIPS Agreement, 1994 — Article 39 (Undisclosed Information).
2. The Indian Contract Act, 1872 — Section 27 (Agreements in Restraint of Trade).
3. The Information Technology Act, 2000 (as amended by the IT Amendment Act, 2008).
4. The Indian Penal Code, 1860 — Sections 378 (Theft) and 406 (Criminal Breach of Trust).
5. Desiccant Rotors International Pvt. Ltd. v. Bappaditya Sarkar, 2009 (40) PTC 446 (Del HC).
6. Bombay Dyeing & Mfg. Co. Ltd. v. Mehar Karan Singh, 2010 (112) Bom LR 3040.
7. Defend Trade Secrets Act (DTSA), 18 U.S.C. § 1836 (USA, 2016).
8. Economic Espionage Act, 18 U.S.C. § 1831 (USA, 1996).
9. EU Directive 2016/943 on the Protection of Trade Secrets.
10. National Intellectual Property Rights Policy, Government of India, 2016.
11. Waymo LLC v. Uber Technologies Inc., No. 3:17-cv-00939 (N.D. Cal., settled 2018).
12. Cornish, W.R. and Llewelyn, D., “Intellectual Property: Patents, Copyright, Trade Marks and Allied Rights”, Sweet & Maxwell, 8th ed., 2013.

13. Narayan, P., “Intellectual Property Law”, Eastern Law House,2012.