Article · Intellectual Property and Technology

Guarding Trade Secrets Without a Perimeter: Remote Work and the Cloud

Type
Article
Jurisdiction
National
Date
2024-10-24
Topic
Intellectual Property and Technology

Trade secret protection has always turned on a single question—did the owner take "reasonable measures" to keep the information secret—and distributed work has made that question far harder to answer well. This article explains how courts apply the reasonable-measures requirement under the Defend Trade Secrets Act and the Uniform Trade Secrets Act when employees reach proprietary data from personal devices, home networks, and cloud platforms the employer cannot see. It maps the controlling authority from PepsiCo v. Redmond and Yellowfin Yachts through a wave of 2022–2025 remote-work decisions, then translates the doctrine into a working program: layered access controls, data-loss prevention, modernized contracts, disciplined onboarding and offboarding, departing-employee forensics, and incident response. It covers the DTSA's whistleblower-immunity notice, its civil-seizure remedy, the inevitable-disclosure doctrine, and the 2025 collapse of the FTC's non-compete rule. Written as a research resource for in-house counsel, IP and employment practitioners, and the executives who own the risk. It is informational and not legal advice.

Guarding Trade Secrets Without a Perimeter: Remote Work and the Cloud

Intellectual Property and Technology > Trade Secret | Published 24 October 2024 - Updated 10 November 2024 | UpLaw - uplaw.us

Abstract. The legal standard for trade secret protection has not moved: an owner must take reasonable measures to keep information secret, and the law demands no impenetrable fortress but does demand a fortress. What has moved is the ground the standard stands on. When a workforce reaches proprietary data from kitchen tables, personal phones, and collaboration tools built to make sharing effortless, the measures a company once relied on stop working, and defendants increasingly win not by denying the taking but by dismantling the plaintiff's protection. This article explains the doctrine, maps the recent case law, and builds both into a program a court will recognize—access controls and multifactor authentication, data-loss prevention, contracts with real definitions, onboarding and offboarding, forensic readiness, monitoring, and enforcement—before turning to inevitable disclosure, the DTSA's seizure and immunity provisions, and the aftermath of the FTC non-compete rule's collapse.

The full text of this document is available to Executive subscribers and above. See plans.