Trade Secrets and Confidential Brand AssetsIntroductionBrand value is often associated with visible assets—names, logos, packaging, and advertising. Yet many of the capabilities that make a brand distinctive are invisible. A launch calendar, customer segmentation model, product formula, influencer fee schedule, retail margin policy, crisis-response playbook, or unreleased campaign can create substantial competitive advantage. These assets may not qualify for patent, copyright, or trademark protection, but they can be protected as trade secrets when the organization treats them as confidential and takes reasonable measures to preserve that confidentiality. Trade-secret law is therefore both a legal doctrine and a management discipline. Legal protection generally depends not merely on the intrinsic value of information, but also on whether the owner has behaved as though the information is secret. A company that leaves sensitive files publicly accessible, distributes them without controls, or fails to impose appropriate contractual and technical safeguards may find that its claim is weakened or defeated. This chapter examines how brand managers identify protectable confidential information, design secrecy systems, govern employee and agency access, distinguish lawful competitive intelligence from misappropriation, and respond to incidents. Because trade-secret rules vary by jurisdiction, the chapter presents widely used principles and identifies important jurisdictional differences. Specific legal advice should be obtained for the relevant country, state, or territory. Learning ObjectivesBy the end of this chapter, students should be able to: - Explain the legal characteristics of a trade secret and distinguish trade secrets from patents, copyright, trademarks, and ordinary confidential information.
- Identify confidential brand assets that may have economic value because they are not generally known.
- Design proportionate secrecy measures involving classification, access, contracts, technology, training, and physical controls.
- Develop employee, supplier, agency, and partner protocols for nondisclosure and controlled use.
- Distinguish lawful competitive intelligence, reverse engineering, and independent development from misappropriation.
- Construct an incident-response plan that preserves evidence, limits harm, and supports legal and managerial decision-making.
- Evaluate ethical, governance, technological, and cross-border issues affecting confidential brand assets.
1. The Strategic Nature of Confidential Brand AssetsA confidential brand asset is information used in creating, positioning, delivering, defending, or monetizing a brand that is not intended for public disclosure. Examples include: - product formulas, recipes, flavor systems, and manufacturing tolerances;
- unreleased brand names, packaging, campaign concepts, and launch dates;
- customer research, propensity models, loyalty data, and segmentation logic;
- pricing architecture, discount thresholds, channel margins, and negotiation limits;
- influencer selection criteria, compensation schedules, and media-buying tactics;
- crisis plans, authentication methods, fraud-detection rules, and vendor-risk assessments;
- internal creative briefs, market-entry plans, and acquisition or partnership strategies.
The strategic value of secrecy often comes from timing. A campaign may lose value when disclosed before launch. A pricing model may weaken a firm’s negotiating position if retailers obtain it. A formula may enable imitation if competitors learn its composition or manufacturing process. Confidentiality can thus function as a competitive moat even where formal registration is unavailable. A useful managerial distinction is between information value and legal secrecy. Information may be commercially important but not legally protected as a trade secret if it is readily available, independently discoverable, or insufficiently safeguarded. Conversely, information may be legally protectable even if it is not revolutionary, provided it has value because it is secret and the owner takes reasonable measures to keep it secret. 2. Legal Foundations and Comparative Perspective2.1 Core elementsAlthough terminology differs, a trade-secret claim commonly requires three elements: - Secret status: The information is not generally known or readily accessible to persons who normally deal with that type of information.
- Economic value: The information has actual or potential commercial value because it is secret.
- Reasonable secrecy measures: The lawful holder takes steps reasonably suited to maintain confidentiality.
A fourth issue concerns the defendant’s conduct. Misappropriation may involve acquisition through improper means, or unauthorized use or disclosure by a person who knew—or should have known—that the information was confidential. Trade-secret protection does not create ownership over an idea in the abstract. It protects confidential information against specified forms of acquisition, use, or disclosure. It normally does not prevent independent development, lawful discovery, or use of information that becomes public without wrongdoing. 2.2 Major legal instrumentsIn the United States, the Uniform Trade Secrets Act has influenced state law, while the federal Defend Trade Secrets Act provides a federal civil cause of action for qualifying trade secrets connected with interstate or foreign commerce. Remedies can include injunctions, damages, unjust-enrichment recovery, exemplary damages in cases of willful and malicious misappropriation, and attorney’s fees in specified circumstances. The statute also contains special rules concerning immunity for certain confidential disclosures by employees reporting suspected legal violations. In the European Union, Directive (EU) 2016/943 harmonizes protection against unlawful acquisition, use, and disclosure of undisclosed know-how and business information. Member-state implementation remains relevant because procedure and remedies can differ. The United Kingdom operates under its own legal framework after Brexit, including principles associated with breach of confidence and implementation of retained or domestic rules. At the international level, the Agreement on Trade-Related Aspects of Intellectual Property Rights requires protection of undisclosed information when it is secret, commercially valuable because it is secret, and subject to reasonable steps to keep it secret. Enforcement, evidence, employment restraints, and available remedies remain substantially jurisdiction-specific. 2.3 Trade secrets compared with other intellectual property| Asset or right | What it protects | Registration | Duration | Main limitation |
|---|
| Trade secret | Confidential commercially valuable information | Usually no | Potentially indefinite | Protection can be lost through disclosure | | Patent | New, non-obvious, useful invention | Generally required | Limited statutory term | Public disclosure and strict patentability requirements | | Copyright | Original expression fixed in a medium | Usually not required | Long, jurisdiction-dependent term | Does not protect ideas or facts as such | | Trademark | Source-identifying signs | Often advantageous, sometimes not essential | Renewable while requirements are met | Does not protect confidential business information | | Design right | Appearance of a product or graphic design | Varies | Limited term | Requires novelty or other statutory criteria |
The choice is not always either-or. A company may patent a product architecture while keeping manufacturing tolerances secret, copyright the creative expression of a campaign while protecting its media strategy as confidential, and trademark the public brand name while keeping its future naming pipeline secret. 3. Identifying Protectable Information3.1 Information inventory and classificationAn effective program begins with an information inventory. Brand managers should ask: - What information gives us a cost, speed, quality, relationship, or market-position advantage?
- Who creates, receives, modifies, and approves it?
- Where is it stored and transmitted?
- What would happen if a competitor, supplier, journalist, or customer obtained it prematurely?
- Is it publicly available, readily reverse-engineered, or independently generated elsewhere?
- What evidence shows that the organization treats it as confidential?
A practical classification scheme may contain four levels: | Classification | Typical examples | Minimum controls |
|---|
| Public | Published campaign, public price list | Accuracy and approval controls | | Internal | Routine operating guidance | Employee access and ordinary authentication | | Confidential | Research, launch plans, supplier terms | Need-to-know access, contractual controls, labeling | | Highly restricted | Formula, strategic acquisition plan, crisis credentials | Named access, encryption, logging, enhanced approval and monitoring |
Classification must be usable. If every document is marked “top secret,” employees may ignore the labels. Classification should be tied to consequences, handling rules, retention periods, and accountable owners. 3.2 Brand-specific assessmentThe following questions help distinguish potentially protectable information from ordinary business knowledge: Formulas and processes. Does the formula or process provide quality, cost, sensory, or manufacturing advantage? Is it difficult to discover without access to internal records? Could reverse engineering reveal the relevant information? Launch plans. Would disclosure enable competitors to pre-empt the campaign, secure media inventory, imitate creative work, or manipulate channel partners? Customer insights. Is the insight derived from non-public research, a proprietary analytical method, or a valuable combination of otherwise public data? Personal-data rules must also be considered; privacy compliance and trade-secret protection are separate obligations. Pricing strategies. Does the information concern internal floors, discount rules, retailer-specific terms, or a planned market-entry price? Managers must distinguish lawful confidentiality from conduct that could raise competition-law concerns, such as unlawful coordination with competitors. Creative assets. An unpublished campaign may receive copyright protection once fixed, but its strategic brief, audience hypothesis, testing results, and media sequence may be protected primarily through confidentiality. 3.3 Information that may not qualifyProtection is uncertain or unavailable for information that is widely known, easily accessible, trivial, purely personal knowledge, or independently developed. General professional skill and experience acquired by an employee are not automatically the employer’s trade secrets. A customer list may be protected in one setting and unprotected in another, depending on compilation effort, accessibility, industry practice, and contractual arrangements. A company should therefore avoid assuming that a label alone creates legal protection. 4. Designing a Reasonable Secrecy Architecture“Reasonable measures” are context-dependent. Courts generally do not demand perfect security, but they expect controls proportionate to the information’s value, sensitivity, and risk. The strongest programs combine governance, people, contracts, process, and technology. 4.1 Governance and accountabilityA trade-secret program should identify: - an executive sponsor;
- information owners for major assets;
- legal, security, human-resources, procurement, and brand-management responsibilities;
- approval rules for disclosure outside the organization;
- review and deletion schedules; and
- an incident-escalation route.
A register need not disclose the secret itself in every system. It can record an asset identifier, owner, classification, location, authorized users, applicable agreements, review date, and incident history. 4.2 Access controlAccess should follow the need-to-know and least-privilege principles. A person may need access to a launch date without needing the formula, or to campaign creative without seeing retailer negotiation limits. Appropriate controls include role-based permissions, multi-factor authentication, separate credentials, periodic access reviews, and rapid removal of access after transfer or departure. Shared accounts are especially damaging because they weaken accountability. Logs should record access, downloads, edits, external sharing, and unusual activity, subject to employment, privacy, and labor-law requirements. 4.3 Contractual controlsNondisclosure agreements (NDAs) should define confidential information carefully, state permitted purposes, restrict copying and onward disclosure, require reasonable security, address compelled disclosure, establish return or deletion obligations, and identify the duration of obligations. A good NDA does not attempt to make all information secret forever without justification. Employee agreements should be coordinated with local law. Some jurisdictions restrict post-employment non-compete clauses, but confidentiality obligations may remain enforceable when properly drafted. Agreements should not unlawfully prevent whistleblowing, reporting to regulators, discussing legally protected workplace matters, or using general skills and experience. Supplier, agency, influencer, research, and technology-provider agreements require particular attention. They should address subcontractors, data locations, model training, security incidents, audit rights, ownership of deliverables, residual knowledge, publicity rights, and return or destruction of materials. 4.4 Human and physical controlsTraining should explain not only that information is confidential, but why it matters and how to handle it. Employees should know how to label documents, verify recipients, use approved storage, avoid discussing sensitive matters in public places, report misdirected emails, and respond to suspicious requests. Physical measures remain relevant: visitor controls, secure meeting rooms, clean-desk practices, locked storage, controlled prototypes, and disposal through shredding or approved destruction. Meetings involving highly restricted information should use agendas, attendance records, and documented decisions. 4.5 Technical controls and AIEncryption in transit and at rest, data-loss-prevention tools, digital rights management, watermarking, endpoint controls, and anomaly detection can reduce risk. Technology is not a substitute for governance: an encrypted file sent to the wrong recipient is still a disclosure event. Generative AI introduces additional concerns. Employees may paste formulas, customer research, launch plans, or unpublished copy into public or poorly governed tools. Organizations should define approved tools, prohibit sensitive inputs where appropriate, configure retention and training settings, review vendor terms, and require human review of generated outputs. AI systems can also reproduce confidential information through prompts, retrieval systems, logs, or model-connected applications. Confidentiality assessments must therefore cover both inputs and outputs. 5. Nondisclosure and Employee ProtocolsA mature protocol follows the information lifecycle: - Creation: classify the information, identify its owner, and store it in an approved location.
- Access: approve users based on role and purpose; apply stronger controls to highly restricted assets.
- Use: limit copying, prohibit unauthorized forwarding, and document external disclosures.
- Sharing: verify the recipient, confirm an NDA or equivalent duty, disclose only what is necessary, and use secure transfer methods.
- Review: remove obsolete permissions and reassess whether secrecy remains valuable.
- Departure: conduct an exit interview, recover devices and credentials, remind the individual of continuing duties, and preserve relevant evidence.
- Disposition: return or securely destroy materials according to retention and legal-hold requirements.
Managers should avoid informal practices such as sending a complete strategic folder to every project participant. Segmentation reduces both accidental and intentional disclosure. A “clean team” may be used in sensitive transactions, where a limited group reviews information and provides aggregated analysis without exposing competitively sensitive details to operational teams. 6. Lawful Competitive Intelligence and MisappropriationCompetitive intelligence supports legitimate strategy when it relies on lawful, ethical, and transparent methods. Examples include studying public websites, regulatory filings, published prices, public advertisements, trade-show materials openly distributed to attendees, customer interviews conducted without deception, and products lawfully purchased and examined where reverse engineering is permitted. Misappropriation may occur when information is obtained through theft, deception, unauthorized access, bribery, breach of a confidentiality duty, inducement of another person’s breach, or use of information known to have been improperly acquired. Merely calling an activity “research” does not make it lawful. | Activity | General assessment | Caution |
|---|
| Reading public campaign materials | Lawful | Preserve source and date | | Purchasing a product and analyzing it | Often lawful | Check patent, contract, license, and sector restrictions | | Hiring a competitor’s employee for general expertise | Often lawful | Do not request or accept former employer secrets | | Asking a supplier for a competitor’s confidential quotation | High risk | Supplier may owe duties to the competitor | | Accessing a private portal using another person’s credentials | Unlawful or high risk | May violate computer-access and confidentiality laws | | Recruiting an employee specifically to obtain a formula | Misappropriation risk | Evidence of purpose is significant | | Using leaked launch plans sent by mistake | High risk | Stop use, preserve evidence, notify counsel and sender |
A practical decision test asks: Is the source authorized? Is the information publicly or lawfully available? Is there a duty of confidence? Was deception, unauthorized access, or inducement involved? Would the method be defensible if documented and disclosed to a regulator or court? 7. Incident Response and RemediesA suspected disclosure should trigger a coordinated response rather than immediate informal confrontation. The first objectives are containment, evidence preservation, legal assessment, and business continuity. Incident-response sequence1. Triage. Identify what was exposed, when, by whom, through which channel, and whether the information is genuinely confidential. 2. Contain. Revoke links and credentials, isolate affected accounts, suspend automated sharing, contact recipients where appropriate, and prevent further dissemination. 3. Preserve. Place relevant systems and devices under a legal hold; preserve logs, emails, access records, file versions, and chain-of-custody information. Do not alter or delete evidence while attempting to “clean up.” 4. Investigate. Determine whether the event was accidental, negligent, malicious, or the result of third-party compromise. Establish the scope without unnecessarily spreading the secret. 5. Assess obligations. Consider trade-secret claims, privacy and data-breach notification duties, contractual notice requirements, employment law, sector regulation, securities disclosure rules, and cross-border transfer restrictions. 6. Decide on remedies. Options may include negotiated return and deletion, injunction proceedings, damages claims, disciplinary action, supplier termination, technical remediation, and communications management. Legal strategy should consider whether litigation itself could expose the secret. 7. Learn and improve. Update controls, training, classifications, access rules, and contractual templates. An incident is evidence about system design, not merely individual behavior. Potential remedies differ by jurisdiction and facts. Injunctive relief may restrain use or disclosure; damages may address actual loss, unjust enrichment, or a reasonable royalty in some systems; exemplary or aggravated damages may be available for deliberate misconduct. Criminal liability may arise in some circumstances, but civil and employment responses must still respect due process and applicable rights. 8. Illustrative Case: The “Aurora” Beverage LaunchBackgroundAurora Drinks, a fictional international beverage company, developed a low-sugar botanical beverage. Its confidential assets included the flavor formula, consumer testing results, a retailer-specific launch calendar, and a pricing model. The company stored the formula in an encrypted product-development system, but the launch calendar was circulated as a spreadsheet through email. An external creative agency and a packaging supplier were involved. ProblemThree weeks before launch, a competitor released advertising that closely matched Aurora’s campaign concept and approached two retailers with proposed launch dates. An employee had forwarded the launch spreadsheet to a personal email account to work from home. The account was later compromised. The employee’s NDA existed, but the agency’s subcontractor had not signed a direct confidentiality agreement. AnalysisThe formula was likely a strong trade-secret candidate: it had commercial value because it was secret, was not readily known, and was protected by encryption and restricted access. The launch calendar and testing results could also qualify, but Aurora’s controls were weaker. The spreadsheet’s distribution history, lack of access segmentation, and personal-email use would create evidentiary and reasonableness questions. The absence of a direct subcontractor agreement increased contractual risk, although other duties might still exist depending on the facts. Approach and solutionAurora’s response team preserved email and access logs, disabled the compromised account, notified counsel, and identified every recipient of the spreadsheet. It requested deletion from authorized recipients, investigated the agency’s subcontractor, and assessed whether the competitor’s conduct indicated improper acquisition. It separated the formula from the broader launch folder, introduced role-based access, prohibited personal storage, required agency flow-down clauses, and created a controlled “launch room” with download logging. OutcomeThe investigation established that the competitor had obtained the campaign concept from an unrelated public pitch, but evidence suggested the retailer dates had been disclosed by a subcontractor. Aurora modified the schedule, renegotiated retailer communications, and pursued contractual remedies against the agency. It did not publicly accuse the competitor without sufficient evidence. The launch suffered some timing and negotiating disadvantages, but the formula remained protected. Learning points- Different assets require different controls; the formula and launch calendar should not have been managed identically.
- Contractual protection must extend through subcontracting chains.
- Evidence preservation is essential before accusing an employee, agency, or competitor.
- A reasonable-secrecy analysis considers actual behavior, not only written policies.
- Ethical competitive intelligence may independently produce similar creative ideas; similarity alone does not prove misappropriation.
9. Governance, Ethics, and Critical LimitationsTrade-secret governance involves tensions between protection and openness. Excessive secrecy can obstruct collaboration, reduce employee mobility, suppress legitimate research, and conceal misconduct. Employees may need to report wrongdoing, regulators may need access to information, and organizations may have duties to disclose material risks. Confidentiality policies must therefore include lawful reporting exceptions and should not be used to intimidate workers or prevent protected communications. Organizations should also avoid using trade-secret labels to hide ordinary information, poor management, or anti-competitive conduct. Confidentiality cannot legitimize price fixing, market allocation, deceptive employment practices, or unlawful customer-data use. Personal information may be commercially valuable but remains subject to privacy principles such as purpose limitation, security, data minimization, and lawful processing. A further limitation is uncertainty. Courts may disagree about whether information is sufficiently secret, whether measures were reasonable, and whether the defendant used improper means. Cross-border investigations create conflicts involving discovery, employee monitoring, data localization, and privilege. Brand managers should coordinate with counsel, information security, human resources, procurement, privacy officers, and senior leadership rather than treating trade secrets as solely a legal department issue. 10. Best-Practice Framework for Brand ManagersA defensible program can be organized around eight questions: - What matters? Maintain a current inventory of valuable confidential brand assets.
- Why is it valuable? Record the competitive, financial, operational, or strategic advantage created by secrecy.
- Who owns it? Assign an accountable information owner.
- Who needs it? Apply least privilege and review access regularly.
- What duties apply? Use tailored NDAs, employment terms, supplier clauses, and agency flow-down obligations.
- How is it protected? Combine labels, training, physical safeguards, technical controls, and secure processes.
- What happens if it leaks? Maintain an incident plan with legal hold, containment, investigation, and notification steps.
- When should it change? Reassess assets after launches, reorganizations, technology changes, supplier transitions, and incidents.
The most effective programs are proportionate, documented, understood by employees, and tested through exercises. Their objective is not to make collaboration impossible, but to enable controlled collaboration while preserving competitive advantage. Chapter SummaryTrade secrets protect confidential information that has actual or potential commercial value because it is not generally known and that is subject to reasonable secrecy measures. For brand managers, protectable assets may include formulas, processes, customer insights, launch plans, pricing strategies, unpublished creative work, supplier terms, and crisis playbooks. Protection depends on more than a confidentiality label. Organizations should inventory assets, classify them, assign owners, restrict access, use tailored contracts, train personnel, secure systems and premises, control suppliers and agencies, and manage departure and deletion processes. Competitive intelligence is generally lawful when based on public or legitimately obtained information, independent development, or permitted examination; deception, unauthorized access, theft, breach of confidence, and inducement may constitute misappropriation. Incident response should prioritize triage, containment, evidence preservation, investigation, legal and regulatory assessment, remedy selection, and improvement. Ethical governance requires respect for whistleblowing, employee rights, privacy, competition law, and legitimate research. A mature trade-secret program is therefore an integrated brand, legal, operational, security, and governance capability. Key TermsTrade secret: Confidential information with commercial value because it is secret and protected by reasonable secrecy measures. Misappropriation: Improper acquisition, use, or disclosure of another party’s trade secret. Reasonable secrecy measures: Proportionate legal, organizational, physical, and technical steps used to preserve confidentiality. Nondisclosure agreement (NDA): A contract restricting specified confidential information from unauthorized use or disclosure. Need-to-know: Limiting access to people who require information for an authorized purpose. Least privilege: Giving users only the access necessary for their assigned role. Confidential brand asset: Non-public information that contributes to brand creation, positioning, delivery, or defense. Independent development: Creation of information without using another party’s protected confidential information. Reverse engineering: Lawful examination of a product or system to discover how it works, subject to applicable legal and contractual limits. Competitive intelligence: Collection and analysis of competitor information through lawful and ethical methods. Information classification: Categorizing information according to sensitivity, value, and handling requirements. Clean team: A restricted group authorized to review sensitive information while limiting dissemination to operational personnel. Data-loss prevention: Technical controls designed to detect or prevent unauthorized transfer of information. Legal hold: A direction to preserve potentially relevant information because of anticipated or ongoing proceedings. Whistleblowing: Reporting suspected wrongdoing to an authorized internal or external recipient. Flow-down clause: A contractual requirement that a contractor impose equivalent obligations on subcontractors. Economic value: Commercial advantage or potential advantage associated with information’s secrecy. Confidentiality duty: A legal or equitable obligation to protect and use information only for authorized purposes. Information owner: Person accountable for classification, access, and lifecycle management of an information asset. Review QuestionsShort Answer Questions- What three characteristics commonly define a trade secret?
- Why is a confidentiality label alone insufficient to establish trade-secret protection?
- Distinguish need-to-know from least-privilege access.
- Give two examples of lawful competitive intelligence and two examples of potentially improper acquisition.
- Identify the first four priorities in responding to a suspected confidential-information disclosure.
Long Answer Questions- Compare trade-secret protection with patent, copyright, and trademark protection, and explain why a brand owner may use several forms of protection simultaneously.
- Design a secrecy architecture for a global product launch involving employees, an advertising agency, retailers, and a packaging supplier.
- Explain how employee departure procedures can preserve trade-secret protection while respecting employee mobility and lawful reporting rights.
- Analyze the legal and managerial risks created when employees use generative AI tools with confidential brand information.
- Evaluate the proposition that trade-secret protection is primarily a management discipline rather than a legal right.
Analytical / Application Questions- A competitor releases a campaign resembling an unpublished campaign concept after a former employee joins it. What facts would you investigate before alleging misappropriation, and what immediate steps should the former employer take?
- A company’s customer segmentation model is stored in a shared drive accessible to all marketing employees, but the company’s policy calls it “highly confidential.” Assess whether the company has taken reasonable secrecy measures and recommend improvements.
- An agency accidentally emails a retailer-specific pricing strategy to a competitor. Develop an incident-response plan addressing containment, evidence, contracts, privacy, communications, and possible remedies.
Multiple Choice Questions with AnswersQuestion 1Which combination best describes the generally recognized elements of a trade secret? A. Novelty, registration, and public disclosure B. Secrecy, economic value because of secrecy, and reasonable secrecy measures C. Original expression, fixation, and authorship D. Distinctiveness, use in commerce, and renewal Correct Answer: B. Secrecy, economic value because of secrecy, and reasonable secrecy measures Question 2Which item is most likely to qualify as a confidential brand asset when properly protected? A. A publicly displayed billboard B. A published annual report C. An unreleased retailer-specific launch calendar D. A competitor’s registered trademark Correct Answer: C. An unreleased retailer-specific launch calendar Question 3What is the primary purpose of least-privilege access? A. To give every employee access to all information B. To provide only the access necessary for an authorized role C. To eliminate the need for confidentiality agreements D. To make all information publicly available Correct Answer: B. To provide only the access necessary for an authorized role Question 4Which activity is generally the strongest example of lawful competitive intelligence? A. Using stolen credentials to enter a competitor’s portal B. Inducing a supplier to disclose a competitor’s confidential quotation C. Reviewing a competitor’s publicly published advertising D. Hiring a person specifically to obtain a former employer’s formula Correct Answer: C. Reviewing a competitor’s publicly published advertising Question 5Which contractual feature is particularly important when an agency uses subcontractors? A. A clause requiring subcontractors to receive equivalent confidentiality obligations B. A clause making all agency work public immediately C. A clause removing all security duties from the agency D. A clause permitting unlimited onward disclosure Correct Answer: A. A clause requiring subcontractors to receive equivalent confidentiality obligations Question 6What should generally occur first after discovering that a confidential launch file was publicly shared? A. Delete all system logs B. Publicly accuse the suspected recipient C. Triage the exposure and contain further access D. Destroy the original file Correct Answer: C. Triage the exposure and contain further access Question 7Which statement best distinguishes a trade secret from a patent? A. A trade secret requires public disclosure, while a patent does not B. A trade secret can potentially last indefinitely if secrecy is maintained, while a patent has a limited statutory term C. A patent protects only confidential information D. Trade secrets always require registration Correct Answer: B. A trade secret can potentially last indefinitely if secrecy is maintained, while a patent has a limited statutory term Question 8Why may a customer list receive different trade-secret treatment in different cases? A. Trade-secret law applies only to technical information B. The analysis can depend on accessibility, compilation effort, industry practice, and protective measures C. Customer information can never be confidential D. All customer lists are automatically protected Correct Answer: B. The analysis can depend on accessibility, compilation effort, industry practice, and protective measures Question 9Which action creates a significant generative-AI confidentiality risk? A. Using an approved internal tool under documented controls B. Pasting an unreleased product formula into a public AI service C. Reviewing public campaign examples D. Generating generic brainstorming prompts with no sensitive facts Correct Answer: B. Pasting an unreleased product formula into a public AI service Question 10Which statement about similarity between two campaigns is most accurate? A. Similarity alone always proves trade-secret misappropriation B. Similarity is irrelevant in every case C. Similarity may prompt investigation, but evidence of improper acquisition, use, or disclosure is also important D. Similarity automatically establishes patent infringement Correct Answer: C. Similarity may prompt investigation, but evidence of improper acquisition, use, or disclosure is also important
|