Trade Secret

The protection with no expiration date: what qualifies, how to keep it, and what happens when someone steals it.

Updated March 21, 2026

A trade secret is any business information that gives you a competitive advantage, isn’t publicly known, and is kept secret through active, reasonable measures. Unlike a patent, there’s no application, no filing fee, and no government approval process. Protection exists from the moment you have the information and start protecting it. Unlike a patent, it doesn’t expire. Coca-Cola’s formula is over 130 years old and still protected. A patent on that same formula would have expired in 1913.

The tradeoff is control. A patent protects you even if a competitor independently invents the same thing. A trade secret doesn’t. If someone arrives at the same formula through their own research without stealing yours, they can use it freely. Your protection only holds as long as the secret does.

What Qualifies as a Trade Secret

The legal standard comes from two overlapping layers of law. The federal Defend Trade Secrets Act (DTSA), passed in 2016, applies nationwide. The Uniform Trade Secrets Act (UTSA), adopted by 48 states, provides a second layer at the state level. Both use roughly the same three-part test.

To qualify as a trade secret, information must:

Have actual or potential economic value because it’s not generally known or readily discoverable by competitors. If any skilled person in your industry could figure it out from public information, it doesn’t qualify.
Not be publicly known or readily ascertainable. This doesn’t mean no one outside your company can know it, but the circle of people with access must be controlled.
Be subject to reasonable measures to keep it secret. Courts have ruled that information loses trade secret status if the owner didn’t take adequate steps to protect it. Good intentions aren’t protection. Documented measures are.

The categories of information that qualify are broad: formulas, product specifications, manufacturing processes, software algorithms, customer lists, pricing strategies, supplier relationships, marketing plans, financial projections, and business methods. If it’s not public, it gives you an edge, and you’re actively protecting it, it’s likely a trade secret.

For a beauty or skincare brand, the categories that tend to matter most are the formula itself (specific ingredient percentages, the supplier producing a key active, the manufacturing parameters that keep batches consistent), supplier relationships and pricing that make your margins defensible, and any customer insight you’ve built on years of purchase behavior. A formula that delivers a specific texture or effect isn’t just valuable because it works. It’s valuable because competitors can’t see it, which means they can’t easily copy it. For a subscription brand or DTC operation, the purchase patterns and predictive models built on top of years of customer data can be worth more than any single product line. That’s a trade secret too.

Trade Secret vs. Patent

Before deciding to rely on trade secret protection, understand what you’re giving up and what you’re gaining.

Choose a patent when:

The invention is something a competitor could independently develop or reverse-engineer from your product.
You need protection that holds even if someone independently arrives at the same solution.
The patent will last long enough to matter (a product with a 5-year market window probably doesn’t need 20 years of patent protection, but one you’re building a long-term business around might).
You’re in a field where patents signal credibility to investors.

Choose trade secret protection when:

The information is something you can realistically keep secret long-term.
The competitive advantage doesn’t expire at the same time a patent would.
You want indefinite protection without the cost or disclosure requirement of a patent.
The information is the kind of thing that becomes more valuable the longer competitors can’t see it.

The formula that makes your product work is often a stronger trade secret than a patent. A patent tells competitors exactly what you developed and how. It blocks them for 20 years, but after that, it’s an instruction manual. If you can keep the formula genuinely secret, you keep the advantage permanently. That’s why Coca-Cola, KFC’s 11 herbs and spices, and Google’s search algorithm are all trade secrets rather than patents.

Sara Blakely spent nearly a year protecting the Spanx concept before filing a patent application. Every manufacturer she approached signed an NDA before seeing her specs. She was building production infrastructure while competitors didn’t even know what she was building. By the time the product launched, she had a first-mover advantage that secrecy made possible. The trade secret protection wasn’t a placeholder while she waited to file. For that year, it was the entire strategy.

How to Actually Protect a Trade Secret

This is where most founders fail. Calling something proprietary in your head is not protection. A court looking at a trade secret case will ask one question above all others: what concrete steps did you take to keep it secret? Here’s how to answer that question correctly.

Step 1: Identify what you’re protecting

You can’t protect what you haven’t defined. Make a list of the specific information you consider trade secrets: the formula, the manufacturing parameters, the supplier pricing, the customer acquisition data, whatever it is. This list doesn’t need to be filed anywhere, but having it documented internally matters if you ever need to prove what you were protecting and when.

Every employee, contractor, supplier, manufacturer, or partner who needs access to trade secret information should sign a non-disclosure agreement before seeing it. Generic template NDAs from legal sites are better than nothing. A properly drafted NDA from an attorney is better still, especially for key employees, co-founders, and manufacturing partners.

For employees, this belongs in the employment agreement, not a separate document they might not read. The NDA should specify what constitutes confidential information, the duration of the obligation (often indefinitely for trade secrets, rather than the standard 2-year term), and the employee’s obligations after leaving the company.

For manufacturing partners, especially overseas ones, the NDA should explicitly cover formulas, production processes, and any specifications shared during the relationship. This is also where you consider whether a single manufacturer is a single point of failure for your secrecy.

Step 3: Implement access controls

Not everyone needs to know everything. The fewer people with access, the smaller the attack surface. Practical controls include:

System access restrictions: Formula files, pricing databases, and customer lists should be in systems with role-based access. Log who accesses what and when.
Physical controls: Samples, prototypes, and physical documents with proprietary formulas or processes should be in locked storage.
Compartmentalization: Your contract manufacturer doesn’t need to know your supplier pricing. Your marketing team doesn’t need to know the formula. Structure access by role.
Watermarking: For documents shared outside the company, consider watermarking copies so you can trace which copy was shared if something leaks.

Step 4: Create a written confidentiality policy

Document your internal standards for handling confidential information. What counts as confidential, how it should be stored, who can share it with whom, and what employees should do if they’re approached by competitors. This doesn’t need to be a 50-page handbook. A one-page internal policy, acknowledged in writing by employees, creates the paper trail that establishes reasonable measures in a legal dispute.

Step 5: Handle departures carefully

When employees leave, especially ones with access to trade secrets, conduct exit interviews that explicitly remind them of their confidentiality obligations. Have them sign an exit acknowledgment confirming they understand their ongoing obligations and have returned all company materials. Revoke system access immediately. Document all of this. Most trade secret theft happens at departure, and companies that don’t have departure procedures documented are the ones that struggle to prove their case afterward.

Step 6: Audit regularly

A trade secret protection program that existed at founding but was never updated doesn’t cover new trade secrets developed later. Review your list of protected information annually, update your NDAs when the scope changes, and document when new employees or partners receive access.

Federal Law: The Defend Trade Secrets Act

Before 2016, trade secret law was entirely a state-level matter. The Defend Trade Secrets Act changed that by creating a federal civil cause of action. If someone steals your trade secret, you can now sue in federal court without needing to establish diversity jurisdiction or rely solely on state law.

What the DTSA gives you: the ability to seek an injunction to stop the misappropriation immediately, damages for actual losses plus any unjust enrichment the thief gained, and in cases of willful misappropriation, exemplary damages up to twice the actual damages. Attorney fees are available in cases of bad faith or willful misappropriation.

The DTSA also includes an ex parte seizure provision: if there’s an immediate risk that evidence will be destroyed or stolen property will disappear, a court can order seizure before the other side even gets notice. This is rare and reserved for genuinely urgent situations, but it exists.

One thing the DTSA requires: when you hire employees, your employment agreements and NDAs need to include a notice that whistleblowing to government officials is not covered by the NDA. This is mandatory under the DTSA. An attorney can add this clause, or you can reference the immunity provision directly using the statutory language.

State Law: UTSA

Forty-eight states have adopted the Uniform Trade Secrets Act. (New York and North Carolina use different standards, though both protect trade secrets.) State law matters because many trade secret claims are brought in state court, especially when the parties are in the same state or the theft happened locally. State law may also provide different remedies or shorter statutes of limitations than federal law.

If you’re operating across state lines, which most online businesses do, having both federal and state law available as options gives your attorney more flexibility when litigation becomes necessary.

When Trade Secret Protection Ends

Trade secret protection doesn’t expire on a schedule, but it does end in two situations.

If the information becomes publicly known: Once a trade secret enters the public domain, protection is gone. This can happen through independent discovery, reverse engineering of a product you’ve sold, a leak, or your own disclosure. There is no clawing it back. This is why product security against reverse engineering matters for physical products: if competitors can analyze what you’re selling and reproduce the formula, the formula isn’t a secret anymore.

If you stop taking reasonable measures: Courts have found that information loses trade secret status when the owner becomes lax about protection. If you stop enforcing NDAs, stop restricting access, or treat the information as if it’s not particularly sensitive, a court may find that you abandoned the protection. Trade secret status requires ongoing effort.

What to Do if Someone Steals Your Trade Secret

If you believe a trade secret has been misappropriated, act fast. Trade secret cases often hinge on how quickly you identified the theft and what you did about it.

Document the theft immediately. What information was taken, by whom, when you discovered it, and how. Preserve all evidence: emails, system logs, device records, communications.
Consult an attorney before contacting the person who took it. A demand letter can be powerful, but it can also tip off the thief to destroy evidence or create a legal record that works against you if drafted poorly.
Consider an emergency injunction. If the stolen information is about to be used in a product launch, shared with a competitor, or disclosed publicly, an emergency injunction can stop it before the damage is done. This requires moving quickly. Courts look unfavorably on trade secret plaintiffs who waited to file.
File suit under DTSA in federal court or under your state’s UTSA. Your attorney will advise which forum is strategically better given the facts.

Most trade secret cases settle before trial. The economics of litigation are brutal: attorney fees for a trade secret case through trial run $500,000 to several million dollars. Settlement is common and often the right outcome. What matters is having the documented protection measures and the legal standing to make the threat credible.

Frequently Asked Questions

Do I need to register a trade secret?

No. There’s no registration process. Protection exists as long as you have information that meets the three-part test and you’re actively protecting it. The downside of no registration is that there’s also no official record of what you claimed or when. That’s why internal documentation of your trade secrets, combined with signed NDAs, matters: it creates your own record.

Can competitors reverse engineer my product and legally replicate it?

Generally yes, if they do it from a product you’ve sold publicly. Reverse engineering of a legitimately acquired product is not trade secret misappropriation. This is one of the key differences from a patent: a patent blocks independent development and reverse engineering. A trade secret only blocks theft. If your formula can be reverse engineered from your product, trade secret law won’t protect it from competitors who buy what you sell.

How long do trade secrets last?

Indefinitely, as long as the information stays secret and you continue taking reasonable measures to protect it. The Coca-Cola formula has been protected for over 130 years. There’s no statutory limit on how long protection can last.

What’s the difference between an NDA and a trade secret?

An NDA is a contract that creates a legal obligation to keep specific information confidential. A trade secret is the information itself. You use NDAs to protect trade secrets. The NDA is the tool; the trade secret is what you’re protecting. Without an NDA, a person who receives your trade secret voluntarily may not be legally obligated to keep it secret unless they received it under circumstances that would create an implied duty of confidentiality.

If an employee leaves and takes my formula to a competitor, what can I do?

If they signed an NDA that covers the formula, you can sue both the employee and the competitor under DTSA and applicable state law. Remedies include injunctions, damages, and potentially attorney fees. The strength of your case depends on whether the formula qualifies as a trade secret (valuable, not public, actively protected) and whether the NDA was properly executed. This is why exit procedures and access controls matter: companies that can document exactly who had access to what, and when access was revoked, have a much cleaner path to relief.

Does trade secret protection work in other countries?

The DTSA applies to misappropriation within the US or with a US nexus. Most developed countries have their own trade secret protections under the TRIPS Agreement, which requires WTO member countries to provide trade secret protection. In the EU, the Trade Secrets Directive creates harmonized protections across member states. But the specifics vary significantly by country, and if your manufacturing or key employees are overseas, your attorney should advise on local law.

Sources

U.S. Congress, “Defend Trade Secrets Act of 2016,” 18 U.S.C. § 1836. Federal civil cause of action for trade secret misappropriation.
Uniform Law Commission, “Trade Secrets Act,” 1985 (amended 1986). Model act adopted by 48 states.
USPTO, “Trade Secret Policy,” 2024. Overview of federal trade secret framework and resources.
World Intellectual Property Organization, “Trade Secrets,” 2024. International trade secret protection standards and TRIPS Agreement context.
Foley & Lardner, “Navigating Trade Secret Litigation in a High-Stakes Landscape,” 2024. Current practices in trade secret protection and litigation trends.
Fish & Richardson, “Best Practices: How to Protect Trade Secrets From Loss Through Departing Employees,” 2024. Employee departure procedures and internal security best practices.