Trade secret misappropriation claims can hinge on whether your “confidential information” is a legally protectable trade secret. This guide explains trade secret law in plain language, including business value and reasonable secrecy measures courts look for. ReferU.AI can help you find an attorney to assess your confidential information, strengthen secrecy practices, and protect trade secrets.

Type

Grandchild

Status

Approved

Caption

Title (YouTube)

Caption X

Trade Secrets Explained: Confidential Information, Reasonable Secrecy Measures, and Business Value

Trade secrets sound mysterious, but the legal idea is surprisingly practical. A trade secret is not just “confidential information.” It is information that has business value because it is not generally known and is protected with reasonable measures to keep it secret. Under federal law, those two ideas sit at the center of the definition. The Defend Trade Secrets Act and related law focus on whether the owner took reasonable steps to preserve secrecy and whether the information derives independent economic value from not being generally known or readily ascertainable through proper means (18 U.S.C. § 1839; LII overview).

That distinction matters. Businesses often label documents “confidential” and assume that settles the issue. In real disputes, the harder questions usually involve what the information actually is, why it matters economically, and what the company did in practice to protect it. In this post you’ll learn how trade secret law generally approaches confidential business information, what “reasonable secrecy measures” often look like, and why business value is the difference between ordinary internal know-how and legally protectable trade secrets.

If you want the broader IP context first, it may help to start with this overview of the main intellectual property categories. If you want a more introductory walkthrough focused only on trade secrets, this plain-language guide to protecting sensitive business information adds useful background.

💡

Scroll to the bottom for every post in this series.

What Counts As A Trade Secret Under U.S. Law?

Under the federal trade secret definition, a trade secret can include many kinds of information: financial, business, scientific, technical, economic, or engineering information. The statute gives examples such as patterns, plans, compilations, formulas, designs, methods, processes, programs, and codes. The form does not matter much. It can be tangible or intangible, and it can be stored physically, electronically, graphically, photographically, or in writing (18 U.S.C. § 1839).

In general terms, three ideas do most of the work:

The information is not generally known

The information has independent economic value because it is not generally known

The owner took reasonable measures to keep it secret

State law often tracks similar concepts because most U.S. jurisdictions adopted some version of the Uniform Trade Secrets Act, and federal law now provides a civil cause of action for qualifying trade secret misappropriation involving interstate or foreign commerce (LII overview; 18 U.S.C. § 1836).

That framework can sound simple, but almost every trade secret dispute turns into a fact-heavy argument about one or more of those elements.

Is All Confidential Information A Trade Secret?

No. That is one of the most common points of confusion.

A business may have many categories of information it treats as private: customer contacts, pricing, vendor terms, internal forecasts, employee training materials, marketing plans, source code, prototypes, manufacturing processes, and research data. Some of that information may qualify as a trade secret. Some may be merely confidential. Some may be sensitive but too widely shared, too easy to recreate, or too weakly protected to receive trade secret treatment.

Here’s what this often means in practice:

Confidentiality alone is not enough

Secrecy without value is not enough

Value without meaningful protection is not enough

For example, an employee handbook marked “confidential” may not be a trade secret if the contents are generic and easy to find elsewhere. On the other hand, a customer-pricing model built from nonpublic data, limited internal access, and years of testing may look very different.

If your question is less “what are trade secrets?” and more “does this specific information qualify?,” this breakdown of how businesses evaluate whether information fits the legal definition may be the more useful next read.

What Does “Not Generally Known” Really Mean?

“Not generally known” does not mean that absolutely nobody else knows the information. A trade secret can still exist even if it has been shared with a limited group of employees, vendors, consultants, or business partners. The larger issue is whether the information is publicly available or readily ascertainable through proper means.

Federal law also draws an important line between improper means and lawful ways of acquiring information. Theft, bribery, misrepresentation, breach of a duty to maintain secrecy, and espionage can qualify as improper means. By contrast, the statute says improper means does not include reverse engineering, independent derivation, or other lawful means of acquisition (18 U.S.C. § 1839).

That distinction often shapes how businesses think about protection strategy. If a competitor could lawfully figure out the same information quickly by examining a publicly sold product, a trade secret claim may be harder to maintain. If the information exists only behind controlled internal systems, access restrictions, and confidentiality obligations, the trade secret argument may be much stronger.

Why Business Value Matters So Much

A trade secret is not protected because it is merely private. It is protected because the secrecy itself gives the information independent economic value.

That value may be actual or potential. A company does not necessarily need to prove it is already selling the information directly. In many disputes, the economic value comes from:

saving research and development time

preserving a competitive advantage

preventing rivals from shortcutting years of work

protecting margins, customer relationships, or market timing

keeping manufacturing methods or technical processes from being copied

The U.S. Patent and Trademark Office describes trade secrets as information with actual or potential independent economic value because it is not generally known, has value to others who cannot legitimately obtain it, and is subject to reasonable efforts to maintain secrecy (USPTO IP Toolkit).

This is one reason trade secret cases can involve far more than “secret formulas.” A pricing algorithm, sourcing strategy, machine settings, or confidential roadmap may have major business value even if it never appears in a patent filing or public-facing document.

For a practical inventory of the kinds of records and know-how that often lead to disputes, this guide to the business information that frequently sparks trade secret fights can help frame the issue.

What Are “Reasonable Secrecy Measures”?

This is where many businesses get surprised.

The law typically does not require perfect secrecy. It asks whether the owner took reasonable measures under the circumstances to keep the information secret (18 U.S.C. § 1839; LII overview). “Reasonable” is flexible, but it is not empty. Courts tend to look at what the business actually did, not what it says it cares about in policy documents.

Reasonable measures often include a mix of legal, technical, and operational controls, such as:

confidentiality agreements with employees, contractors, and vendors

access restrictions based on role or job function

password protection and multi-factor authentication

document labeling and data classification

segmented storage locations for highly sensitive material

limits on downloading, forwarding, printing, or external sharing

onboarding and exit procedures tied to confidential information

training on handling sensitive business data

monitoring and audit trails

secure offboarding of departing employees

vendor controls and contractual confidentiality obligations

For small and midsize companies, these measures increasingly overlap with cybersecurity basics. The National Institute of Standards and Technology notes that its small business cybersecurity quick-start materials are designed to help organizations begin managing cybersecurity risk, including protections around information systems and sensitive data (NIST Small Business Quick-Start Guides).

That does not mean every trade secret program has to look like a defense contractor’s security architecture. It does suggest that a business claiming valuable secrecy may face difficult questions if it stores key information in open shared drives, allows unrestricted personal-device downloads, or has no meaningful access controls at all.

If you’re looking at this from an operations angle, this article on strengthening trade secret protection through internal controls goes deeper on how companies often translate legal standards into day-to-day procedures.

Are NDAs Enough By Themselves?

Usually not.

Non-disclosure agreements can be very important, but they are often just one piece of the puzzle. A signed NDA helps show that the company communicated secrecy expectations. But if the business then shares the same information widely, stores it carelessly, leaves access unmanaged, or never distinguishes ordinary materials from truly sensitive assets, the NDA may not carry the whole case.

Courts and litigants often look for consistency between the paperwork and the real-world handling of the information. If the company says something is secret, the business record often works better when the company also treated it that way.

That is why a trade secret strategy often depends on habits, not just documents:

who had access

when they had access

what they were told

what systems recorded access

what happened when they left

whether external parties were contractually restricted

whether the company limited disclosure to what was actually necessary

Can A Customer List Be A Trade Secret?

Sometimes yes, sometimes no.

Customer information is one of the most litigated categories because the answer depends heavily on the facts. A simple list of publicly known companies may be hard to protect as a trade secret. But a deeper data set may look very different if it includes nonpublic contacts, buying patterns, pricing history, preferences, margins, lead scoring, contract timing, renewal risks, or sales strategy developed through substantial effort.

The same pattern appears across many categories of business information. Broad labels like “customer list,” “source code,” “formula,” or “financial data” do not settle the issue. The actual content, secrecy measures, and economic value do.

That is also why businesses sometimes lose disputes before they begin: they use broad labels for large pools of information without identifying what is truly sensitive and why. This discussion of early mistakes that often weaken trade secret protection explores how over-labeling, under-protecting, and inconsistent internal practices can create problems later.

How Are Trade Secrets Different From Patents, Copyrights, And Trademarks?

Trade secrets are part of the broader intellectual property landscape, but they work very differently.

According to the USPTO, patents protect inventions for a limited time in exchange for public disclosure, trademarks identify the source of goods or services, and copyrights protect original works of authorship fixed in a tangible medium. Trade secrets, by contrast, are not registered with the USPTO and depend on secrecy rather than disclosure (USPTO IP Toolkit).

A helpful way to think about it is this:

Patent: disclose the invention publicly in exchange for exclusive rights for a limited time

Trade secret: keep the information secret and preserve protection as long as secrecy and value remain

Copyright: protect expression, not secret business know-how as such

Trademark: protect source identifiers like names and logos, not confidential operations or technical information

Some businesses hold overlapping forms of protection. For example, software may involve copyright in the code, patent issues in certain inventions, trademark rights in branding, and trade secret protection for nonpublic methods, architecture, training data, or deployment processes.

What Happens If A Trade Secret Is Stolen Or Misused?

Federal law allows a civil action when an owner’s trade secret is misappropriated and the trade secret relates to a product or service used in, or intended for use in, interstate or foreign commerce (18 U.S.C. § 1836). Remedies can include injunctions, damages for actual loss, unjust enrichment, reasonable royalties in some circumstances, and in cases of willful and malicious misappropriation, exemplary damages and attorney’s fees (18 U.S.C. § 1836).

The statute also includes a seizure mechanism in extraordinary circumstances, though that is not the ordinary path in every case (18 U.S.C. § 1836).

On the criminal side, trade secret theft can also attract federal attention. The FBI publishes a checklist for reporting suspected economic espionage or trade secret theft, which gives a sense of how seriously these matters can be treated when the facts point toward criminal conduct (FBI reporting checklist). The Department of Justice has also continued to emphasize trade secret theft as a significant enforcement issue, especially where sensitive technology or foreign economic espionage concerns are involved (DOJ trade secret reports; DOJ press release example).

In practical terms, trade secret disputes often emerge around:

employee departures

startup spinouts

vendor or contractor access

failed deals or diligence exchanges

source code access

manufacturing partners

cybersecurity incidents

shared research and development

Why “Reasonable” Often Depends On The Business Context

A two-person startup and a multinational manufacturer may both own trade secrets, but “reasonable measures” may look different in each setting. Courts often assess reasonableness in context, including the sensitivity of the information, the size of the company, the cost of safeguards, industry practices, and the ways information is shared internally and externally.

That said, context is not a free pass. A smaller company may still face credibility issues if it claims a document was mission-critical secret information while storing it in broadly accessible folders, sending it to personal email accounts, or never using confidentiality agreements with the people who handled it.

NIST’s small business materials are useful here because they reflect a modern reality: trade secret protection and basic cybersecurity now overlap more than many organizations expect. Access control, authentication, device management, and data handling are not just IT concerns. In many disputes, they become evidence about whether the business genuinely treated its information as secret (NIST Small Business Quick-Start Guides).

What Questions Often Matter Most In A Trade Secret Fight?

When attorneys evaluate a potential trade secret matter, the recurring questions often include:

What Is The Information, Specifically?

Vague descriptions often create problems. “Our confidential business data” is usually less persuasive than a defined category of nonpublic pricing logic, manufacturing tolerances, algorithmic weights, source code modules, supplier formulas, or strategic market-entry documents.

Why Does It Have Economic Value?

The value story matters. Was the information costly to create? Does it save time? Does it reveal margins, customer behavior, or technical solutions competitors could use?

Who Knew It Was Secret?

Was there training? Were there agreements? Did employees, vendors, and consultants understand the restrictions?

Who Had Access?

Was access limited by role? Logged? Revoked when relationships ended?

Was The Information Shared Outside The Company?

If so, under what controls? Confidentiality terms? Limited-purpose use? Secure portals? Need-to-know limitations?

Could Someone Have Obtained It Lawfully?

If the same result could be reached quickly through reverse engineering, public sources, or independent development, that may affect the analysis.

What Happened When Things Went Wrong?

Exit interviews, device return procedures, forensic preservation, contract terms, and communication records often become important very quickly once misuse is suspected.

A Short Summary

A trade secret is more than private information. In general terms, it is information that derives economic value from not being generally known and is protected through reasonable secrecy measures. Those two elements often define the entire dispute. Businesses with the strongest trade secret positions usually do more than label data “confidential.” They identify what matters, limit access, document expectations, maintain practical controls, and connect secrecy to real business value.

If your company is facing a dispute over confidential business information, employee movement, vendor access, source code, customer data, or internal know-how, an attorney can often help assess whether the facts line up with trade secret protection and what evidence may matter most. Visit ReferU.AI to get matched with an attorney who has demonstrable experience in cases like yours — for free.

Trade Secrets Explained: Confidential Information, Reasonable Secrecy Measures, and Business Value

Trade Secrets Explained: Confidential Information, Reasonable Secrecy Measures, and Business Value

What Counts As A Trade Secret Under U.S. Law?

Is All Confidential Information A Trade Secret?