Trade Secret Litigation Checklist: Identification, Seizure, Protective Orders, and Damages

By Casey Scott McKay · 2024-06-03

A trade secret case is decided by evidence that expires within weeks of the departure that starts it, and by an identification document written before anyone knows what was taken. This checklist runs the matter in thirteen phases: preserve, assess whether a case exists, send the notice letter, plead, identify, seek emergency relief, negotiate the protective order, prove use, meet the defenses, run the experts, move for summary judgment, try it, and settle or collect. Each box gives the reason, the authority, and the trap. Boxes marked as gates should clear before filing. It covers the plaintiff, the departing individual, and the hiring employer, whose positions differ substantially. A worked matter runs throughout.

IP and Technology > Trade Secrets | Checklist | Published 3 June 2024 - Updated 9 September 2024 | Casey Scott McKay - marksy.us

Summary. A trade secret case is decided by evidence that expires within weeks of the departure that starts it, and by an identification document written before anyone knows what was taken. This checklist runs the matter in thirteen phases: preserve, assess whether a case exists, send the notice letter, plead, identify, seek emergency relief, negotiate the protective order, prove use, meet the defenses, run the experts, move for summary judgment, try it, and settle or collect. Each box gives the reason, the authority, and the trap. Boxes marked as gates should clear before filing. It covers the plaintiff, the departing individual, and the hiring employer, whose positions differ substantially. A worked matter runs throughout.

Keywords: forensic preservation, log retention, chain of custody, notice letter, DTSA pleading, preemption, trade secret identification, reasonable particularity, temporary restraining order, ex parte seizure, preliminary injunction, protective order tiers, attorneys eyes only, prosecution bar, systems inspection, spoliation sanctions, independent development, reverse engineering, avoided development cost, head start injunction

How to use this checklist

| Phase | What it covers | When | |---|---|---| | 1 | Preserve | First 72 hours | | 2 | Assess whether a case exists | Weeks two to three | | 3 | The notice letter | Week three or four | | 4 | Pleading | Month two | | 5 | Identification | Months two to six | | 6 | Emergency relief | Immediately, or explain | | 7 | The protective order | Before any production | | 8 | Proving use | Months four to twelve | | 9 | The defenses | Throughout | | 10 | Experts | After the record | | 11 | Summary judgment | After discovery | | 12 | Trial | Later | | 13 | Settlement and remedies | Any time |

Boxes marked [Gate] should clear before filing.

The matter. A process engineer resigned on a Friday and started at a competitor two weeks later. Nine months afterward the competitor announced a product with a property the plaintiff believed only its process could achieve.

Phase 1. Preserve

[ ] [Gate] Image the departing employee's devices forensically.
- Why. Laptop, phone, tablet, and any issued hardware, imaged by an examiner.
- Trap. The device was already reissued. Recover the prior image from backup before it is overwritten.
[ ] Preserve the logs before they expire.
- Why. Network and file server access, VPN, badge and building access, email including sent items and forwarding rules, cloud sync records, and USB device history.
- Trap. Retention windows of thirty to sixty days. This is the single most common way a case is lost before it starts.
[ ] Do not let internal IT investigate.
- Why. Examination alters metadata and breaks the chain of custody, making the strongest evidence in the case contestable.
[ ] Issue the litigation hold.
- Why. Scoped to the departure, the projects the employee touched, and communications about the competitor.
[ ] Interview colleagues promptly, with counsel present.
- Trap. Waiting a month, by which time recollections have settled into a shared account.
[ ] Collect every agreement.
- Why. Employment, confidentiality, invention assignment, restrictive covenant, and onboarding acknowledgments.
[ ] [Gate] Check the confidentiality agreement for the immunity notice.
- Authority. 18 U.S.C. § 1833(b).
- Why. Its omission forfeits exemplary damages and fees against that employee, and nothing can be done about it later.

Phase 2. Assess whether a case exists

[ ] [Gate] Confirm there is forensic evidence of taking.
- Why. Without it the case rests on similarity and timing, which is difficult to try and easy to lose.
[ ] [Gate] Confirm someone can describe the secrets specifically.
- Why. If nobody can articulate what was taken in terms a technical person could evaluate, the identification requirement will be fatal.
[ ] Test the reasonable measures element from the defendant's chair.
- Authority. 18 U.S.C. § 1839(3).
- Trap. Information shared with suppliers without agreements, or distributed company-wide when a dozen people needed it.
[ ] Search the literature, patents, and competitors' documentation first.
- Why. Readily ascertainable by proper means defeats the claim entirely, and a plaintiff surprised by its own conference paper has spent a great deal to learn something a week of searching would have shown.
[ ] Assess the realistic remedy.
- Why. An individual with limited resources and a hiring employer that behaved correctly may yield a modest recovery and a narrow injunction. That can still be worth pursuing for deterrence, knowingly.
[ ] Assess the non-fee costs.
- Why. Filing publicizes the existence of valuable information and puts the plaintiff's own security program into discovery.
[ ] Understand the fee exposure.
- Authority. 18 U.S.C. § 1836(b)(3).
- Why. The bad-faith provision runs against plaintiffs, and cases built on categories rather than secrets are where it is invoked.

Phase 3. The notice letter

[ ] Send it to the individual and the hiring employer.
- Why. It creates knowledge supporting a later inducement claim and occasionally resolves the matter.
[ ] Identify the agreements and the categories without disclosing the secrets.
- Trap. A letter that describes the secrets in enough detail to teach them, delivered to the competitor.
[ ] Understand what it costs.
- Why. It triggers the other side's preservation obligation, which prevents spoliation and ends any prospect of catching further deletion.
[ ] Read the response carefully.
- Why. A competitor that confirms a clean-hire instruction and offers a neutral examination has made a seizure application unavailable and made itself an unattractive target.

Phase 4. Pleading

[ ] Plead the federal and state claims together.
- Authority. 18 U.S.C. § 1836.
- Why. The federal statute does not preempt state law and the elements differ at the margins.
[ ] Plead the interstate commerce nexus.
[ ] Plead each element specifically.
- Authority. 18 U.S.C. § 1839(5).
[ ] Plead acquisition as well as use.
- Why. Acquisition by improper means is actionable without use, which matters when use is the hardest element to prove.
[ ] Plead the parallel claims that survive preemption.
- Why. Breach of contract, breach of fiduciary duty and duty of loyalty, tortious interference against the hiring employer, and copyright where the material is code or documents.
[ ] Be careful with the computer access count.
- Authority. 18 U.S.C. § 1030.
- Trap. An employee who accessed files they used daily is unlikely to have violated it, and the count draws a motion.
[ ] Do not plead conversion and unjust enrichment on the same facts.
- Why. Usually preempted and dismissed.
[ ] Satisfy the pre-filing inquiry.
- Authority. Fed. R. Civ. P. 11.

Phase 5. Identification

[ ] Number each secret separately.
- Trap. A narrative description, which cannot be proven or disproven item by item.
[ ] For each secret, state what it is, precisely enough that a technical person could say whether they have it.
[ ] State why it has value.
- Why. Independent economic value is an element and it is the one most often omitted.
[ ] State why it is not generally known.
- Why. Not in the literature, not derivable from the product, not obtainable from a supplier.
[ ] State what measures protected it, element-specific rather than a recitation of general policy.
[ ] State how the defendant obtained it.
[ ] Attach supporting exhibits by reference.
[ ] Reserve narrowly.
- Trap. A blanket reservation to add anything later, which makes courts distrust the whole document.
[ ] Amend once, deliberately, after the defendant's production.
- Trap. Four amendments, which tells the court the plaintiff never knew what was taken.
[ ] Defense: test each numbered secret against the five statements.
- Why. A secret whose value is unexplained or whose measures are generic is a summary judgment candidate, and most identifications contain one.

Phase 6. Emergency relief

[ ] Move quickly or be prepared to explain the delay.
- Authority. Fed. R. Civ. P. 65.
- Trap. Seeking emergency relief at month four, which is denied on timing rather than merit.
[ ] Ask for narrow relief.
- Why. Return of materials, an order against use or disclosure, and preservation. These are granted.
[ ] Do not seek an order barring employment outright.
- Trap. It activates every judicial instinct against restraints on mobility and costs credibility for the rest of the case.
[ ] Assess the seizure provision realistically.
- Authority. 18 U.S.C. § 1836(b)(2).
- Why. Extraordinary circumstances, inadequacy of an ordinary injunction, immediate and irreparable injury, balance of harms, likelihood of success, actual possession, particularity, and a showing that notice would prompt destruction. A wrongful seizure exposes the applicant to damages.
[ ] Check the jurisdiction's position on inevitable disclosure.
- Why. Permitted in some states, rejected in others, prohibited by statute in several, and limited by the federal statute to injunctions based on evidence of threatened misappropriation.
[ ] Post the required security.

Phase 7. The protective order

[ ] [Gate] Negotiate it before producing anything.
- Authority. Fed. R. Civ. P. 26(c).
- Trap. A production made under an inadequate order cannot be recalled.
[ ] Establish tiers.
- Why. Confidential, attorneys-eyes-only, and often a third tier for source code or formulations.
[ ] Set source code terms.
- Authority. Fed. R. Civ. P. 34.
- Why. Standalone machine, no network, printing limits, inspection location, and access list.
[ ] Negotiate the prosecution bar.
[ ] Plan sealing and courtroom closure.
[ ] Warn the client its executives may be excluded from parts of its own trial.
- Why. The most common unpleasant surprise in these cases.

Phase 8. Proving use

[ ] Build the forensic timeline.
- Why. Files accessed, copied, transmitted, and what happened to them afterward. Created by the defendant and the strongest evidence available.
[ ] Look for idiosyncratic similarity.
- Why. Shared errors, arbitrary parameter values, identical naming conventions, and design choices with no functional reason to match.
[ ] Build the timeline compression argument.
- Why. A competitor that solved in four months what took the plaintiff four years, with no change in team or resources.
[ ] Demand the development record.
- Why. Its absence, or a trail beginning the week after the hire, is powerful.
[ ] Frame systems inspection narrowly, through a neutral where possible.
[ ] Watch for spoliation.
- Authority. Fed. R. Civ. P. 37.
- Why. An adverse inference on use is functionally a verdict.

Phase 9. The defenses

[ ] Independent development.
- Why. Contemporaneous, dated records showing the path including the dead ends. The best defense available.
[ ] Public availability.
- Why. Published patents, technical papers, competitors' products, standards, and the plaintiff's own disclosures.
[ ] Reverse engineering.
- Authority. 18 U.S.C. § 1839(6).
- Why. Expressly proper. Documented, with the purchased product and teardown records.
[ ] Failure of reasonable measures, proven from the plaintiff's own practices.
[ ] General skill and knowledge.
- Why. An employee's accumulated expertise is not the former employer's property, and this argument resonates with juries.
[ ] Limitations.
- Authority. 18 U.S.C. § 1836(d).
- Why. Three years from discovery, continuing misappropriation treated as a single claim.

Phase 10. Experts

[ ] Retain three: technical, forensic, and damages.
- Authority. Fed. R. Evid. 702.
[ ] Have the technical expert establish what independent development would have required.
- Trap. A damages model of avoided development cost with no technical foundation.
[ ] Have the forensic expert own the chain of custody.
[ ] Have the damages expert address actual loss, unjust enrichment, and the royalty alternative.
[ ] Establish the head start period.
- Why. It frequently decides the injunction's length and it is a combined technical and economic question.

Phase 11. Summary judgment

[ ] Move on qualification where the information was public.
- Why. Won in the library, from documents.
[ ] Move on reasonable measures where the plaintiff's practices were loose.
[ ] Move on use where there is taking but no evidence of use, remembering that acquisition alone may still be actionable.
[ ] File partial motions.
- Authority. Fed. R. Civ. P. 56.
- Why. Knocking out fifteen of twenty asserted secrets forces the plaintiff to lead with its best material.

Phase 12. Trial

[ ] Reduce to a handful of secrets a juror can name.
[ ] Lead with conduct, not with information.
- Why. Juries understand taking, and a forensic timeline converts an abstract dispute into a concrete story.
[ ] Prepare the plain-English explanations in advance.
- Why. Why something can be secret while three hundred people know it; why reverse engineering is permitted but reading a document is not.
[ ] Defense: show the dated development record, and the plaintiff's own conference presentation.
[ ] Defense: do not overreach on mobility.
[ ] Work out sealed exhibits and the verdict form at the pretrial conference.

Phase 13. Settlement and remedies

[ ] Seek return and certification under oath.
[ ] Seek forensic verification of deletion by a neutral.
[ ] Frame the use restriction around the head start, not forever.
[ ] Seek reassignment rather than a bar on employment.
[ ] Carve out general skill and knowledge.
- Why. A settlement that pretends otherwise will not hold.
[ ] Compute unjust enrichment as well as loss.
- Authority. 18 U.S.C. § 1836(b)(3).
- Why. Avoided development cost and accelerated market entry are the distinctive recoveries here, provable from the defendant's own project records.
[ ] Preserve the exemplary damages claim.
- Why. Up to twice the award plus fees for willful and malicious misappropriation, subject to the immunity notice.
[ ] Include mutual releases, non-disparagement, and no admission.
- Why. These cases are personal and the individual's professional reputation is at stake.

Phase 14. The hiring employer's checklist

The competitor that made the hire is usually the deep pocket and frequently the party that did nothing wrong. Its position is defended before the complaint, not after.

[ ] Ask every technical candidate what agreements they are subject to, and read them.
- Trap. A candidate who says there is nothing in writing and is mistaken.
[ ] Instruct in writing that the candidate must bring nothing.
- Why. No files, no documents, no devices, no printouts. The written instruction is close to dispositive on intent.
[ ] Verify rather than assume.
- Why. A clean-device attestation at onboarding and an actual check of what arrives on the network.
[ ] Instruct managers not to ask about the former employer's technology.
- Trap. A hiring manager's curiosity, recorded in email, is the origin of most tortious interference claims.
[ ] Segregate the new hire from the overlapping project for a period.
- Why. Expensive, and a fraction of the cost of the litigation it prevents.
[ ] Keep the development record independently.
- Why. Contemporaneous, dated design records showing the path including the dead ends. It only exists if someone decided to keep it.
[ ] Preserve immediately on receiving a notice letter.
- Authority. Fed. R. Civ. P. 37.
[ ] Consider a clean-room process where overlap is unavoidable.
- Why. A team with no access to the former employer's information, working from a specification prepared by others, with the boundary documented.
[ ] Produce the good development record early.
- Trap. Holding the best exhibit in the case for trial, which spends a year of fees to make a point available in month three.
[ ] Signal the fee claim early where the plaintiff cannot describe its secrets.
- Authority. 18 U.S.C. § 1836(b)(3).

Phase 15. The departing individual's checklist

Individuals are the least well advised participants in these disputes and the ones with the most personally at stake.

[ ] Return everything before the last day, and document the return.
- Why. A signed inventory of what was returned is worth more than any later testimony.
[ ] Do not copy anything, including your own work.
- Trap. The belief that documents you authored are yours. They are not, and the download log does not distinguish.
[ ] Do not take the contact list.
- Why. A compiled customer list with pricing and preferences is the classic protectable compilation, and exporting it is the classic misstep.
[ ] Delete synced copies from personal devices and cloud accounts, and record doing so.
- Trap. Deleting after a notice letter arrives, which reads as consciousness of guilt and may be spoliation.
[ ] Keep your own copy of every agreement you signed.
- Why. You will need to know what you agreed to, and the employer controls the file.
[ ] Read the immunity provision before reporting anything to a regulator.
- Authority. 18 U.S.C. § 1833(b).
- Why. Confidential disclosure to a government official or attorney for reporting a suspected violation of law is immunized, as is disclosure in a sealed filing.
[ ] Tell the new employer about your obligations before starting.
- Why. It protects both of you, and concealment is what converts a defensible hire into an indefensible one.
[ ] Understand what is yours.
- Why. General skill, knowledge, and experience are yours. A specific formulation, parameter set, or compiled list is not.
[ ] Get counsel separate from the new employer's where interests may diverge.
- Why. They frequently do, particularly at settlement, and the individual is the one whose reputation is at stake.

Phase 16. Choice of law, forum, and the agreement that decides both

[ ] Read the governing law clause in the confidentiality agreement first.
- Why. It may decide which state's trade secret statute applies to the contract claim, whether a restrictive covenant is enforceable at all, and where suit must be brought.
[ ] Check the destination state's law on covenants before assuming one travels with the claim.
- Why. Several states refuse to enforce non-competes against their own residents regardless of a contractual choice, and some void the choice-of-law clause itself.
[ ] Check the forum selection clause.
- Why. Generally enforced, and it can move a case away from the employee's home state, though some states restrict this for residents.
[ ] Compare state limitations periods.
- Why. They vary from three to five years and the federal three-year period runs from discovery.
[ ] Compare exemplary damages availability.
[ ] Compare the treatment of inevitable disclosure.
- Why. Permitted in some states, rejected in others, prohibited by statute in several.
[ ] Compare the scope of preemption.
- Why. Some states displace all overlapping common law claims; others preserve claims based on confidential information that does not qualify as a trade secret.
[ ] Plead the federal claim to secure the forum you want.
- Authority. 18 U.S.C. § 1836.
- Why. It supplies federal jurisdiction and carries the state claims along.

Phase 17. Budget and staffing

[ ] Fund the forensics first and generously.
- Why. It is comparatively modest and it buys the answer to whether a case exists.
[ ] Budget the emergency motion as front-loaded.
- Why. Compressed into days, expensive per day, and it sets the tone for everything after.
[ ] Expect several rounds on identification.
- Why. It consumes the first half of the schedule in most cases.
[ ] Budget three experts.
[ ] Budget trial logistics separately.
- Why. Sealing, redacted exhibit sets, closed sessions, and a verdict form that does not publish the secrets.
[ ] Staff for two skills.
- Why. These matters need someone who can talk to a forensic examiner and someone who can talk to a jury, and they are not always the same person. The translation from a technical report into a timeline a juror follows is where cases are won.
[ ] Keep a one-page assessment current.
- Why. The secrets in the case, the evidence for each, the defenses, the remedy sought, and the next event that changes the value.

Phase 18. The failure modes, in one list

[ ] Internal IT investigated first.
[ ] Logs expired before preservation.
[ ] The device was reissued and the prior image lost.
[ ] Filed on suspicion before the forensics returned.
[ ] The immunity notice was missing from the agreement.
[ ] Forty categories identified instead of four secrets.
[ ] The notice letter described the secrets in enough detail to teach them.
[ ] Emergency relief sought months late.
[ ] An injunction against employment sought and denied.
[ ] Production made before the protective order was negotiated.
[ ] The computer access count overpleaded and dismissed.
[ ] Conversion and unjust enrichment pleaded on the same facts and preempted.
[ ] The plaintiff's own conference paper described the secret.
[ ] Reasonable measures failed on the plaintiff's own documents.
[ ] The defendant held back a good development record until trial.
[ ] A damages model of avoided development cost with no technical foundation.
[ ] Thirty secrets taken to trial, so the best one competed with the weakest.
[ ] The individual and the hiring employer shared counsel until their interests diverged at settlement.

Every one of these is preventable, and most of them are prevented in the first three weeks.

Phase 19. Trade secret claims that are not about a departure

Most of these cases begin with an employee leaving, but a meaningful share do not, and the checklist above needs adjusting for them.

[ ] The failed transaction. A party received confidential information in diligence, walked away, and later launched something similar.
- Why it differs. The duty comes from the non-disclosure agreement rather than from employment, the disclosure was deliberate and documented, and the identification is easier because the data room index records exactly what was shared.
- Trap. A residuals clause permitting use of information retained in unaided memory, which many parties sign without reading and which can defeat the claim entirely.
[ ] The supplier or contractor relationship. Specifications, tooling, or process information shared to enable manufacturing, later used for the supplier's own product or a competitor's.
- Why it differs. The agreement usually addresses ownership of improvements and tooling, and the dispute is as much about contract interpretation as about misappropriation.
- Trap. Information shared before the agreement was signed, which is common and which the supplier will emphasize.
[ ] The joint development relationship. Two parties contributed, one commercialized, and the boundary between background and foreground information was never drawn.
- Why it differs. Both sides have legitimate claims to overlapping information, and the case turns on the agreement's definitions rather than on wrongdoing.
- Authority. See Whose Invention Is It.
[ ] The outright theft. Intrusion, social engineering, or a plant.
- Why it differs. Improper means is not contested, the criminal provisions become relevant, and the seizure remedy is more realistic than in an ordinary departure case.
- Authority. 18 U.S.C. § 1832; 18 U.S.C. § 1831.
[ ] The acquisition. A company bought a business and received information it should not have, or discovered the target had misappropriated from a third party.
- Why it differs. Acquisition of a secret knowing it was obtained improperly is itself misappropriation, so the buyer inherits exposure it did not create. Diligence should ask the question.

In each of these the preservation and identification discipline is identical. What changes is where the duty comes from and which documents define it, and reading the governing agreement before anything else is the whole of the adjustment.

Phase 20. What the client should be told at the outset

[ ] The evidence expires. The records that prove taking live for weeks, not months, and the decision to preserve has to be made before the decision to sue.
[ ] You will have to describe the secret. To the court, to opposing counsel, and eventually to a jury. Protective orders manage this; they do not eliminate it.
[ ] Your own security practices go into discovery. Reasonable measures is an element, and proving it means producing the policies, the agreements, the access controls, and the exceptions.
[ ] Your executives may be excluded from parts of your own trial. Attorneys-eyes-only material is seen by counsel and experts, and the tier exists precisely because the other side is a competitor.
[ ] The strongest evidence will come from them, not from you. Access logs, development records, and timelines are the defendant's documents, which means the case gets better or worse in month nine rather than in month one.
[ ] An injunction may matter more than money. A time-limited order against use, framed around the head start, changes the competitive position in a way damages do not.
[ ] Fees run both ways. Willful and malicious misappropriation supports exemplary damages and fees; a claim made in bad faith exposes the plaintiff to the same. 18 U.S.C. § 1836(b)(3).
[ ] The case is about a person. These disputes carry more emotion than any other category of intellectual property litigation, and the matters that go badly are the ones where that was not managed in the first month.

Outcome. The laptop was recovered from backup and the server logs were preserved with eleven days left in the retention window. The forensics showed twenty-two files accessed in three days and nineteen copied to a personal cloud folder. The immunity notice was present. Four secrets were identified, not a category. A preliminary injunction against use was granted; an injunction against employment was sought and denied. The competitor's development record, produced in month nine, was complete and predated the hire by eighteen months, and summary judgment followed for the competitor. The individual settled with verified deletion, a two-year use restriction, and reassignment.

Key Authorities at a Glance

| Authority | Proposition | Phase | |---|---|---| | 18 U.S.C. § 1836 | Civil action; seizure; remedies; limitations | 4, 6, 13 | | 18 U.S.C. § 1839 | Definitions; improper means; reverse engineering | 2, 4, 9 | | 18 U.S.C. § 1833(b) | Immunity and required notice | 1, 13 | | 18 U.S.C. § 1832 | Criminal theft of trade secrets | 4 | | 18 U.S.C. § 1831 | Economic espionage | 4 | | 18 U.S.C. § 1030 | Computer Fraud and Abuse Act | 4 | | Fed. R. Civ. P. 11 | Pre-filing inquiry | 4 | | Fed. R. Civ. P. 26(c) | Protective orders | 7 | | Fed. R. Civ. P. 34 | Inspection of systems and code | 7, 8 | | Fed. R. Civ. P. 37 | Spoliation sanctions | 8 | | Fed. R. Civ. P. 56 | Summary judgment | 11 | | Fed. R. Civ. P. 65 | Restraining orders and injunctions | 6 | | Fed. R. Evid. 702 | Expert testimony | 10 |

The five things people get wrong

One: they let internal IT look first. Metadata is altered, the chain of custody breaks, and the single strongest piece of evidence in the case becomes contestable. Preserve, then analyze, and use an examiner for both.

Two: they miss the log retention window. Thirty to sixty days is common. The records that prove taking are gone before anyone has decided whether to sue, and no amount of later diligence recovers them.

Three: they identify categories. "Our manufacturing processes" is not a trade secret, it invites a court-ordered narrowing on the defendant's terms, and it produces a jury that cannot hold the case in mind. 18 U.S.C. § 1839(3).

Four: they ask to stop the person from working. Narrow relief against use and disclosure is granted routinely. A request to bar employment outright is denied and it costs credibility that the rest of the case needs.

Five: they never check the immunity notice. One sentence in the confidentiality agreement decides whether exemplary damages and fees are available against that employee, and its absence is discovered at the remedies stage when nothing can be done. 18 U.S.C. § 1833(b). See Litigating a Trade Secret Misappropriation Claim.