Does India have a dedicated trade secrets law?

No - India currently does not have a dedicated trade secrets statute. Trade secret protection in India relies on a combination of the Indian Contract Act 1872 (for contractual confidentiality obligations), equity principles (breach of confidence as a cause of action), Section 43A of the IT Act 2000 (for electronic data protection), and common law. A draft Trade Secrets Bill has been under consideration by the government, and if enacted, would create a dedicated statutory framework for trade secret protection more aligned with international standards including the TRIPS Agreement Article 39. Until such a statute is enacted, the primary protection mechanism for trade secrets remains contractual.

What is the difference between a patent and a trade secret for protecting a startup's core technology?

A patent provides a statutory monopoly for 20 years in exchange for public disclosure of the technology. A trade secret provides indefinite protection as long as the information remains confidential - but it requires no disclosure and cannot be legally enforced against someone who independently develops the same technology. The patent vs trade secret decision depends on several factors: how long the technology needs protection (patents expire; trade secrets can last forever); whether competitors could reverse-engineer the technology from the product (if yes, a patent is better); whether the innovation meets patentability requirements; and the cost and time investment required for patent prosecution. For technologies that can be kept genuinely secret - internal processes, formulas, algorithms not exposed in the product - trade secret protection may be more commercially valuable than a 20-year patent.

How do I protect trade secrets when employees leave the company?

Protecting trade secrets against departing employees requires a layered approach. During employment: execute a comprehensive employment agreement with IP assignment and confidentiality clauses before the employee joins; restrict access to sensitive information on a need-to-know basis; use access controls and audit logs for confidential systems. At departure: conduct an exit interview specifically covering confidential information and IP obligations; require the departing employee to return all company materials and devices; revoke access to all systems immediately; and send a formal reminder of ongoing confidentiality obligations. Post-departure: monitor for any evidence of misuse of confidential information including by following the employee's work at their new employer.

Are non-compete clauses enforceable in India?

Non-compete clauses that restrict an employee from working for competitors after leaving a company are generally not enforceable in India. Section 27 of the Indian Contract Act 1872 renders void any agreement that restrains a person from exercising a lawful profession, trade, or business. Indian courts have consistently held that post-employment non-compete clauses are void as they restrain trade. However, confidentiality obligations and non-solicitation clauses (preventing solicitation of customers or employees) are enforceable and provide meaningful protection for trade secrets and business relationships even if non-compete restrictions cannot be sustained.

Trade Secret Protection for Startups India 2026

Trade Secrets — The IP Right That Requires No Registration and Lasts Forever

Trade secrets are paradoxically both the most flexible and the most fragile form of IP protection available to startups. Flexible because there is no registration requirement, no disclosure obligation, no filing fee, and no fixed term - a trade secret can protect any type of confidential business information indefinitely as long as it remains secret. Fragile because the moment confidential information is disclosed without appropriate contractual protections, or is independently developed by a competitor through legitimate means, the protection evaporates permanently.

What Qualifies as a Trade Secret

For information to qualify for trade secret protection in India, three conditions must generally be satisfied. The information must be secret - not generally known or readily accessible to persons in the relevant circles. The information must have commercial value because of its secrecy - being kept confidential must provide a competitive advantage. And the holder must have taken reasonable steps to keep the information secret - by implementing confidentiality agreements, access controls, and security measures.

Category	Examples	Protection Priority
Technical Information	Source algorithms, manufacturing processes, chemical formulas, engineering drawings	High
Business Information	Customer lists, pricing models, supplier relationships, marketing strategies	High
Financial Information	Unit economics, margins, cost structures, revenue forecasts	High
Product Roadmaps	Unreleased feature plans, R&D pipeline, product strategy	Medium-High
HR Information	Compensation structures, talent acquisition strategies	Medium

The Patent vs Trade Secret Decision

For any novel technical innovation, a startup must decide whether to seek patent protection (public disclosure in exchange for 20-year monopoly) or trade secret protection (indefinite protection through confidentiality). This decision is among the most strategically significant IP choices a founder makes.

Choose patent protection when: the innovation can be reverse-engineered from the marketed product; competitors are likely to independently develop the same technology; the innovation needs market-visible protection to deter entry; or the startup intends to license the technology to third parties on commercial terms. Choose trade secret protection when: the innovation cannot be reverse-engineered from the marketed product; the competitive advantage is expected to last longer than 20 years; the innovation does not meet patentability criteria; or the cost and disclosure of patent prosecution is not justified. The classic example is the Coca-Cola formula - never patented, maintained as a trade secret for over 130 years.

NDA Strategy — The Primary Legal Protection

Non-Disclosure Agreements (NDAs) are the primary legal mechanism for trade secret protection in India. An effective NDA must clearly define what constitutes confidential information; specify the permitted uses of the confidential information; establish the duration of the confidentiality obligation; identify the remedies available for breach (injunction and damages); and be executed before any confidential information is shared. For startups, NDAs are required in investor conversations, partner discussions, vendor negotiations, employee relationships, and any external collaboration where sensitive business information will be disclosed.

Confidentiality Systems and Access Controls

Contracts are necessary but insufficient for trade secret protection. Reasonable security measures must supplement legal agreements. For digital information - which is how virtually all trade secrets are held in modern startups - this means: role-based access controls that limit access to sensitive systems on a need-to-know basis; two-factor authentication for all sensitive systems; audit logs tracking who accessed what information and when; data classification policies that identify which information is confidential and requires special handling; encrypted storage for confidential data; and secure communication channels for discussing sensitive matters. Courts assessing trade secret misappropriation will consider whether the holder took reasonable steps to protect the information - weak security undermines the trade secret claim even if an NDA was in place.

Cybersecurity and Trade Secrets

Data breaches are the most common way trade secrets are lost in the modern startup environment - not through employee misconduct, but through external cyberattacks. A startup whose servers are compromised and whose confidential customer database, proprietary algorithms, or business plans are accessed by an external attacker has had its trade secrets misappropriated regardless of how good its internal access controls were. Section 43A of the IT Act 2000 imposes liability on companies that fail to implement reasonable security practices and procedures to protect sensitive personal information - but the broader principle applies to all confidential commercial information.

Trade Secret Red Flag

Sharing your algorithm, pricing model, or customer database with a potential business partner, acquirer, or investor without a signed NDA in place first. Once confidential information is shared without contractual protections, there is no legal basis to prevent its use. The NDA must be signed before the meeting or conversation where sensitive information is discussed - not after. A verbal promise of confidentiality is not enforceable in India.

For how to structure employee and contractor agreements to protect trade secrets, read the Employee and Contractor IP Issues guide.

India's Trade Secrets Bill — What Founders Must Know

India's lack of a dedicated trade secrets statute has long been identified as a gap in the IP framework. The government has been working on a Trade Secrets Bill that would create a standalone statute specifically protecting confidential business information. Key anticipated provisions include: a statutory definition of trade secrets; explicit protection against misappropriation; enhanced civil and criminal remedies; and a clearer framework for trade secret obligations in employment and commercial relationships. Until the Bill is enacted, the current framework based on contract law and equity principles applies. Founders should build their trade secret protection on robust contractual foundations now - a future statute will complement but not replace good contractual practice. For the latest developments on the Trade Secrets Bill, read the dedicated guide on the India Trade Secrets Bill at the Startup IP Hub.

Responding to Trade Secret Misappropriation

When a startup discovers that its confidential information has been misappropriated - an employee has taken customer lists to a competitor, a former partner has disclosed proprietary processes, or a cyberattack has exposed confidential data - the response must be immediate and structured. Document the evidence of misappropriation carefully before taking any action. Consult a qualified IP advocate immediately about available remedies including injunction (urgent interim relief from a court to prevent further use or disclosure), damages, and criminal complaints under the IT Act for electronic data theft. Secure all remaining confidential information to prevent further disclosure. Send formal legal notices to the misappropriating party and any recipient of the confidential information. Time is critical in trade secret misappropriation cases - the faster the response, the more effective the legal remedies available. For complete guidance, explore the Startup IP Hub.

Trade Secret Protection for Indian Startups — NDAs, Confidentiality Systems, Patent vs Trade Secret, and Cybersecurity