How to Protect a Trade Secret in California (CUTSA Basics)
Learn how to protect a trade secret in California under CUTSA: what qualifies, the reasonable-measures requirement, misappropriation, remedies, and a checklist.
Quick answer: To protect a trade secret in California, you rely on the California Uniform Trade Secrets Act (CUTSA), found at Civil Code section 3426 and following. There is no registration. Protection exists only if the information has economic value from being secret and you take reasonable measures to keep it secret, such as NDAs, access controls, and confidentiality marking. If someone improperly acquires, uses, or discloses it (misappropriation), a court can order an injunction, award damages, add exemplary damages up to twice that amount for willful and malicious conduct, and in some cases award attorney's fees. Because California voids most non-competes, trade secret law is one of the most important tools a business has.
A trade secret is one of the few forms of intellectual property you can lose simply by being careless with it. Unlike a patent or a registered trademark, there is no government office that grants you the right and no certificate you can point to. In California, protection depends entirely on two things: the information genuinely being valuable because it is secret, and you taking real steps to keep it that way.
This guide explains, in plain English, how trade secret protection works under California law so you can have an informed conversation with a professional. It is general education, not legal advice. For the bigger picture of how trade secrets fit alongside patents, trademarks, and copyrights in the state, start with our California IP pillar guide.
What qualifies as a trade secret under CUTSA
California’s trade secret law is the California Uniform Trade Secrets Act (CUTSA), codified at Civil Code section 3426 and following. Under section 3426.1, a “trade secret” means information, including a formula, pattern, compilation, program, device, method, technique, or process, that meets two requirements:
- It derives independent economic value (actual or potential) from not being generally known to the public or to other people who could obtain economic value from its disclosure or use; and
- It is the subject of efforts that are reasonable under the circumstances to maintain its secrecy.
That definition is broad. It can cover a chemical formula, a manufacturing process, source code, a customer list compiled through real effort, pricing models, supplier terms, marketing strategies, and internal know-how. What matters is not the label you put on it but whether the information is actually secret, actually valuable because it is secret, and actually protected.
The second requirement is the one businesses most often fail. Information does not become a trade secret just because it is important or because you would prefer it stay private. If you never took reasonable steps to keep it confidential, a court can find it was never a protectable trade secret in the first place, no matter how valuable it was.
A separate federal law, the Defend Trade Secrets Act (DTSA) of 2016, uses a similar definition and is also available. The DTSA lets you bring a trade secret claim in federal court when the secret relates to a product or service used in interstate or foreign commerce. Many California plaintiffs plead both CUTSA and the DTSA together. For how secrecy compares with patenting as a strategy, see patent vs. trade secret.
The all-important “reasonable measures” requirement
If there is one concept to take away from this guide, it is this: trade secret protection is earned by the steps you take, not by the value of the information. CUTSA requires “efforts that are reasonable under the circumstances to maintain its secrecy.” Courts look at what you actually did, and these are the kinds of measures that build the record:
- Access controls. Limit access to the information to people who genuinely need it. Use passwords, encryption, restricted network folders, locked storage, and the principle of least privilege. The fewer people who can reach a secret, the more defensible it is.
- Confidentiality agreements (NDAs). Have employees, contractors, vendors, and potential business partners sign non-disclosure or confidentiality agreements before they see sensitive information. These create a clear duty to maintain secrecy and are powerful evidence of reasonable efforts.
- Marking and labeling. Mark confidential documents and files as “Confidential” or “Trade Secret.” Marking is not magic, and over-marking everything dilutes the signal, but consistent, sensible labeling shows you treated the information as secret.
- Employee training and policies. Maintain a written confidentiality policy, train staff on what is confidential and how to handle it, and remind them periodically. A policy no one knows about does little good.
- Disciplined offboarding. When an employee or contractor leaves, conduct an exit interview, remind them in writing of their continuing confidentiality obligations, recover laptops, badges, and documents, and promptly cut off system access. Departures are when secrets most often walk out the door.
“Reasonable” is a flexible, fact-specific standard. A small startup is not expected to run security like a defense contractor, but it is expected to do something sensible and consistent. The goal is a clear paper trail showing that you treated the information as a secret all along.
Why trade secrets matter even more in California
California has an unusual rule that makes trade secret protection especially important: it generally voids non-compete agreements. Under Business and Professions Code section 16600, contracts that restrain someone from engaging in a lawful profession, trade, or business are void, with only narrow statutory exceptions. Recent legislation has reinforced this, and California even lets employees challenge non-competes that were signed elsewhere.
The practical consequence is that, in most cases, a California employer cannot stop a departing employee from going to work for a competitor, even a direct one. In states that enforce non-competes, employers lean on them to protect confidential information. California employers cannot. That leaves trade secret law as one of the primary legal tools for protecting confidential business information when people leave.
So in California, the question is rarely “can I stop them from working for a rival?” It is “have I protected my actual secrets well enough that the law will step in if those secrets are taken or used?” That shifts the entire burden onto your confidentiality practices. For more detail on the non-compete rule itself, see are non-competes enforceable in California.
What counts as misappropriation
CUTSA does not punish people for being smart or for competing. It targets misappropriation, which section 3426.1 defines in two broad ways:
- Improper acquisition. Acquiring a trade secret when you know or have reason to know it was obtained by improper means. CUTSA lists improper means as including “theft, bribery, misrepresentation, breach or inducement of a breach of a duty to maintain secrecy, or espionage through electronic or other means.”
- Improper use or disclosure. Using or disclosing a trade secret without consent when you used improper means to learn it, knew it was acquired improperly, or knew you owed a duty to keep it secret (for example, under an NDA or employment relationship).
What is not misappropriation matters just as much. Reverse engineering a lawfully obtained product and independent development are generally legitimate. If a competitor buys your product on the open market and figures out how it works, or invents the same thing on its own without touching your secret, that is not misappropriation. Trade secret law protects against improper conduct, not against honest discovery, which is one reason some inventions are better protected by a patent.
Remedies under CUTSA
When misappropriation is proven, CUTSA gives California courts a strong set of remedies:
- Injunctions (§3426.2). A court can order the wrongdoer to stop actual or threatened misappropriation. An injunction generally lasts as long as the trade secret exists, and a court may extend it briefly to eliminate any commercial advantage the wrongdoer gained. In some cases, a court may instead order payment of a reasonable royalty for the period use could have been prohibited.
- Damages (§3426.3). You can recover both your actual loss and the wrongdoer’s unjust enrichment that is not already counted in your loss. Where neither is provable, the court may award a reasonable royalty for the unauthorized use.
- Exemplary (punitive) damages (§3426.3). If the misappropriation was willful and malicious, the court may award exemplary damages of up to twice the amount of the actual and unjust-enrichment award.
- Attorney’s fees (§3426.4). The court may award reasonable attorney’s fees and costs to the prevailing party in certain situations, including where a claim of misappropriation was made in bad faith or where the misappropriation was willful and malicious. Note that fees can run in either direction, which discourages weak or retaliatory claims.
Trade secret claims are also subject to a limitations period, so acting promptly after you discover a problem matters. Because deadlines and procedure are technical, this is a place to get advice quickly.
A practical protection checklist
Use these steps to frame your own program. They do not replace professional advice, but they map closely to what CUTSA’s “reasonable measures” standard rewards.
- Identify your secrets. Make an internal inventory of the specific information that is valuable because it is secret. You cannot protect what you have not defined.
- Limit access. Restrict each secret to the people who truly need it, and use technical controls like passwords, encryption, and access logs.
- Get agreements in place. Use NDAs and confidentiality clauses with employees, contractors, vendors, and prospective partners before disclosure.
- Mark consistently. Label genuinely confidential materials, without marking everything so heavily that the label loses meaning.
- Train your team. Maintain a written confidentiality policy and make sure people actually know it.
- Tighten onboarding and offboarding. Confirm new hires are not bringing others’ secrets, and on departure recover devices and documents, cut access, and remind people in writing of their duties.
- Document your efforts. Keep records of the steps you take. If you ever need to prove “reasonable measures” in court, that paper trail is your case.
For more background and related topics, see our trade secrets topic hub.
The bottom line
Protecting a trade secret in California comes down to CUTSA (Civil Code section 3426 and following) and one core idea: the law protects information that is valuable because it is secret only if you take reasonable measures to keep it secret. There is no registration to rely on, so your confidentiality practices, NDAs, access controls, marking, training, and disciplined offboarding are the whole ballgame. If someone misappropriates a protected secret, California courts can issue injunctions, award damages, add exemplary damages of up to twice the award for willful and malicious conduct, and grant attorney’s fees in certain cases, with the federal DTSA available as an additional path. And because California voids most non-competes, trade secret protection carries extra weight here as one of the main ways to safeguard confidential information.
This article is general legal education, not legal advice, and reading it does not create an attorney-client relationship. Trade secret protection is fact-specific, and the right steps depend on your information, your industry, and your situation. Before you rely on, enforce, or litigate a trade secret, consult an intellectual property attorney licensed in your jurisdiction.
Frequently asked questions
What law protects trade secrets in California?
California's main trade secret law is the California Uniform Trade Secrets Act (CUTSA), found at Civil Code section 3426 and following. It defines what counts as a trade secret, what counts as misappropriation, and the remedies a court can award, including injunctions, damages, exemplary damages up to twice the award for willful and malicious misappropriation, and attorney's fees in certain cases. A federal law, the Defend Trade Secrets Act (DTSA), is also available and can let you sue in federal court.
Do I have to register a trade secret in California?
No. Unlike a patent or a federal trademark, there is no application, filing, or registration for a trade secret. Protection arises automatically when commercially valuable information is kept secret and you take reasonable measures to maintain that secrecy. The flip side is that there is no certificate to rely on, so if you fail to take reasonable steps to protect the information, it may not qualify as a trade secret at all.
Why are trade secrets so important for California businesses?
Because California generally voids non-compete agreements under Business and Professions Code section 16600, employers usually cannot stop a departing employee from working for a competitor. That makes trade secret protection one of the main legal tools California businesses have to guard confidential information when employees leave. Strong confidentiality practices, not non-competes, do the heavy lifting here.