Understanding Confidentiality Agreements: What Counts as Trade Secrets?

Introduction

When you sign a confidentiality agreement—also known as a non-disclosure agreement (NDA)—you're legally committing to protect sensitive information. But what exactly are you protecting? And more importantly, what qualifies as a trade secret under the law? These aren’t just theoretical questions. Whether you’re an employee reviewing your onboarding documents, a freelancer negotiating project terms, or a startup founder sharing business plans with investors, understanding the scope and boundaries of confidentiality is critical.

Many people assume that any private company information falls under the umbrella of trade secrets. That’s not true. Courts don’t automatically protect all confidential data—only specific types that meet strict legal criteria. Misunderstanding this distinction can lead to unintended breaches, costly litigation, or even losing protection altogether if the information isn't handled properly.

In this article, we’ll break down what actually constitutes a trade secret, how confidentiality agreements enforce those protections, and what practical steps individuals and businesses should take to preserve their value—without overreaching or creating unenforceable clauses.

What Is a Confidentiality Agreement?

A confidentiality agreement (CA) is a legally binding contract in which one or more parties agree not to disclose certain information shared during a business relationship. These agreements are common across industries and roles:

• Employees may sign NDAs on their first day of work.
• Freelancers often must accept confidentiality terms before accessing client systems.
• Startups use them when pitching ideas to potential investors.
• Companies entering joint ventures restrict data sharing between teams.

While these contracts vary in length and complexity, they typically define three core elements:

1. What information is protected (e.g., technical specs, customer lists, pricing models).
2. Who can access it and under what conditions.
3. How long the obligation lasts, sometimes extending years after employment or engagement ends.

But here’s where things get nuanced: not all “confidential” information qualifies as a trade secret—a narrower legal category with greater protections (and higher burdens).

Defining Trade Secrets: Legal Criteria

Unlike general confidential information, trade secrets receive special treatment under both state laws and federal statute—the Defend Trade Secrets Act (DTSA) of 2016. To qualify as a trade secret, the information must meet three key requirements:

1. It Must Derive Independent Economic Value from Not Being Generally Known

This means the information provides a competitive advantage because others don’t know it—and you wouldn't want them to.

Examples include:

• Source code for proprietary software
• Customer databases with purchasing behavior patterns
• Manufacturing processes that reduce costs or improve quality
• Algorithms used in machine learning models
• Formulas, like Coca-Cola’s recipe

If the same information could be easily reverse-engineered, found through public research, or replicated without significant effort, it likely doesn’t meet this threshold.

2. It Must Not Be Readily Ascertainable to Proper Means

“Readily ascertainable” refers to whether someone outside the company could reasonably discover the information using legal methods—such as market observation, independent R&D, or studying publicly available products.

For instance:

• The ingredients listed on a food label are not trade secrets because they’re disclosed by law.
• A mobile app’s user interface might be observable—but the backend logic powering its recommendation engine may remain hidden and protectable.

Courts examine whether competitors would need to invest substantial time, money, or effort to replicate the information without access to internal data. If so, it strengthens the claim that it's a trade secret.

3. The Owner Must Take Reasonable Steps to Keep It Secret

This is often the most overlooked requirement—and where companies (and individuals) fail.

Having an NDA alone isn’t enough. You must also demonstrate active secrecy measures, such as:

• Limiting access to need-to-know personnel
• Using password protection and encryption
• Marking documents “Confidential”
• Requiring secure logins for internal tools
• Conducting employee training on data handling

If a company stores sensitive algorithms in an unsecured Google Drive folder accessible to dozens of people, courts may rule that it didn’t take "reasonable steps"—and thus forfeits trade secret status.

Common Misconceptions About Trade Secrets

Let’s clear up some widespread myths:

Myth #1: “Everything Marked ‘Confidential’ Is a Trade Secret”

Just labeling something confidential doesn't make it one. Courts look at substance, not labels. Random internal memos or routine meeting notes without unique value won’t qualify—even if stamped "TOP SECRET."

Only information that meets the three legal criteria outlined above earns trade secret protection.

Myth #2: “Trade Secrets Last Forever”

They can—but only as long as secrecy is maintained. Once a trade secret becomes public—whether through a breach, accidental disclosure, or independent discovery—it loses protection permanently.

Unlike patents (which last 20 years), trade secrets have no expiration date if kept secure. However, the moment they’re exposed via improper means (e.g., hacking) or legitimate ones (e.g., reverse engineering), the legal shield vanishes.

Myth #3: “Ideas Are Protected as Trade Secrets”

No. Abstract ideas, concepts, or theories aren’t protectable unless they’re fully developed and applied in a way that creates measurable economic value.

You can’t copyright an idea; similarly, you can’t claim trade secret protection for a vague startup concept like “Uber but for dogs.” But if you’ve built a matching algorithm, gathered user data, established pricing logic, and integrated payment flows—that system could qualify as a protected trade secret.

What Doesn’t Count as a Trade Secret?

To avoid overreach in confidentiality agreements (which can render them unenforceable), it’s important to know what falls outside the definition:

| Information Type | Why It’s Not a Trade Secret | |------------------|----------------------------| | Publicly available data | If anyone can find it via Google, SEC filings, or product manuals, it's not secret. | | Employee skills and general knowledge ("know-how") | Workers carry experience from job to job; you can’t stop someone from using learned abilities. | | Industry standards or best practices | Widely adopted methods (e.g., agile development workflows) aren't unique enough. | | Information independently developed elsewhere | If another company creates the same thing without copying, no violation occurred. |

Additionally, post-employment restrictions like non-compete clauses cannot be used solely to suppress competition—they must be tied to legitimate trade secret protection.

How Confidentiality Agreements Protect Trade Secrets

While trade secrets exist under law independently, NDAs serve as essential enforcement tools by:

• Clearly identifying what information is protected
• Establishing timelines for confidentiality (e.g., 2 or 5 years post-termination)
• Outlining remedies in case of breach (injunctions, damages)

Well-drafted agreements distinguish between general confidential information and true trade secrets. For example:

“The term ‘Confidential Information’ includes, but is not limited to: product roadmaps, pricing strategies, technical documentation, software codebases, customer lists, marketing plans, and any other non-public data that constitutes a trade secret under applicable law.”

This language ties internal policies directly to statutory standards.

However, overly broad NDAs—such as those claiming all work output belongs to the employer or restricting future employment—are increasingly challenged in court, especially in states like California that limit non-competes.

Real-World Breach Scenarios

Understanding trade secrets becomes crucial when disputes arise. Here are two illustrative examples:

Case 1: The Departing Engineer Who Took Code

An engineer at a fintech startup downloads proprietary trading algorithms before resigning to join a competitor. Even without signing an NDA, the company may still sue under DTSA if it can prove:

• The code was a trade secret
• It took reasonable steps to protect it
• The former employee misappropriated it

Result: A federal injunction halts product launch at the new firm; damages awarded.

Case 2: The Freelancer Who Published Client Data

A freelance developer writes a blog post analyzing performance bottlenecks in an app they worked on, revealing internal API response times and database structures. Though meant as educational content, this exposes potentially protectable architecture details.

Even if no NDA exists, the client could argue that publishing operational metrics constitutes misuse of confidential information—especially if those numbers reveal scalability advantages over competitors.

Practical Tips for Protecting Trade Secrets

Whether you're an employer or a worker, follow these best practices:

For Employers:

• Conduct regular audits of what qualifies as a trade secret.
• Use tiered access controls: not every employee needs full system visibility.
• Train staff annually on data handling and NDA obligations.
• Include clear definitions in employment and contractor agreements.

For Employees & Freelancers:

• Read NDAs carefully before signing—ask for clarification if language is vague.
• Don’t retain copies of source code, customer lists, or internal tools after project completion.
• Avoid discussing specific technical details publicly unless approved.
• When in doubt, seek permission before reusing any material developed during engagement.

Conclusion

Confidentiality agreements are more than routine paperwork—they’re the frontline defense for a company’s most valuable intangible assets. But not every piece of private information rises to the level of a trade secret. Legal protection depends on economic value, secrecy efforts, and non-availability through proper channels.

As remote work, freelancing, and cross-company collaborations grow, so does the risk of accidental disclosure. By understanding what truly qualifies as a trade secret—and how confidentiality agreements uphold those rights—both individuals and organizations can navigate professional relationships with clarity, compliance, and confidence.

If you're unsure whether something in your contract constitutes a protectable trade secret—or if you’re being asked to sign an overbroad NDA—it’s worth consulting legal counsel. Because once information goes public, there’s no getting it back.