Protecting Company Trade Secrets and Proprietary Information Under New Hampshire Law
To protect proprietary information under the New Hampshire Uniform Trade Secrets Act (N.H. Rev. Stat. Ann. § 350-B:1 et seq.), businesses are generally required to implement reasonable operational safeguards. This means securing digital access, labeling confidential documents, and enforcing strict internal policies for employees to prevent data theft before it happens.
Defending Your Business Assets in the Granite State
In today's highly competitive market, the unique information your business holds is often its most valuable asset. Whether you run a tech startup in Manchester, a manufacturing plant in Nashua, or a B2B service in Concord, protecting your proprietary data is essential. Under the New Hampshire Uniform Trade Secrets Act (NHUTSA), formalized in N.H. Rev. Stat. Ann. § 350-B:1, information only qualifies as a trade secret if you make reasonable efforts to maintain its secrecy.
Because the law requires proactive, operational steps to prove information was protected, businesses cannot simply declare data a trade secret after it has been misappropriated. If enforcement becomes necessary in a local trial court, such as the Hillsborough County Superior Court Northern District, Manchester or the Merrimack County Superior Court, Concord, judges will scrutinize whether the company made continuous efforts to protect its confidential records. In Mortgage Specialists, Inc. v. Davey, 153 N.H. 764 (NH Supreme Court 2006), the New Hampshire Supreme Court emphasized that information such as customer lists only qualifies for statutory trade secret protection if the owner exercised reasonable efforts to maintain secrecy. We strongly encourage you to browse our United States Attorney Directory to find a New Hampshire business lawyer who can review your internal protocols and draft ironclad non-disclosure agreements. By establishing robust internal defenses now, you prevent intellectual property theft before it occurs, helping minimize the risk of costly disputes.
Safeguarding Specific Types of Proprietary Information
Different industries face unique vulnerabilities when it comes to keeping information confidential. Tailoring your operational security to your specific business model is critical.
Protecting Client Lists in B2B Sales
For wholesale distributors and B2B service providers, a comprehensive client list is the lifeblood of the company. To protect this under NHUTSA, you must do more than just keep a spreadsheet. Operationally, you should restrict access to this database so only active sales representatives can view it, and only for their specific territories. Disabling mass-export and printing functions within your Customer Relationship Management (CRM) software is a highly effective technological barrier against departing employees attempting to take your clients with them.
Protecting Software Source Code
Tech companies must treat their source code with the highest level of security. Operational protection involves using secure, encrypted repositories that track every user's keystroke and access log. Implementing strict compartmentalization-meaning developers only have access to the specific modules of the code they are actively working on-reduces the risk of a single employee copying the entire software architecture. Additionally, prohibiting the use of personal USB drives and external cloud storage on company devices is essential.
Securing Manufacturing Processes
If your New Hampshire factory utilizes a unique manufacturing technique or proprietary formula, physical security is just as important as digital security. Access to the production floor should be restricted using keycards or biometric scanners. Visitors and outside vendors must be required to sign a visitor log and a non-disclosure agreement before touring the facility. Clearly labeling machinery and blueprints with 'Confidential and Proprietary' stamps helps establish the legal standard of reasonable secrecy.
Managing Remote Worker Access
The rise of remote work presents a massive challenge for data security. When employees access your servers from home, you must enforce strict technological policies. Require all remote workers to connect via a secure Virtual Private Network (VPN) and mandate multi-factor authentication (MFA) for all corporate accounts. Furthermore, issue company-owned laptops that are equipped with Mobile Device Management (MDM) software, allowing you to remotely wipe the device if it is lost, stolen, or if the employee is terminated.
Step-by-Step Guide to Securing Trade Secrets
To ensure your business fully complies with the proactive requirements of the New Hampshire Uniform Trade Secrets Act, follow these operational steps.
Step 1: Conduct a Confidentiality Audit
Identify exactly what information gives your business a competitive advantage. This could be algorithms, financial projections, or supplier pricing lists. Once identified, catalog this information and physically or digitally label it as confidential. You cannot protect a secret if you do not know exactly what it is.
Step 2: Implement Need-to-Know Access Controls
Audit your user permissions across all digital platforms. An entry-level marketing assistant does not need access to the company's master financial ledgers or the raw software code. By limiting data access strictly to those who need it to perform their job duties, you significantly shrink your vulnerability footprint.
Step 3: Enforce Non-Disclosure and Confidentiality Agreements
Every employee, contractor, and third-party vendor must sign a Non-Disclosure Agreement (NDA) before accessing sensitive data. These contracts explicitly define what constitutes confidential information and outline the severe consequences of sharing it. Your internal employee handbook should also have a dedicated section explaining the company's data protection policies, which all employees must sign annually.
Step 4: Standardize the Offboarding Process
When an employee leaves the company, the risk of data theft skyrockets. Operationally, you must have an immediate offboarding protocol. The moment an employee gives notice or is terminated, IT must revoke all network access, change passwords, and collect all physical keys, keycards, and company devices. Conduct an exit interview to remind the departing employee of their ongoing legal obligations under their NDA.
Frequently Asked Questions (FAQ)
Does a trade secret have to be registered with the state of New Hampshire?
No. Unlike patents or trademarks, trade secrets are not registered with any government agency. The legal protection exists automatically, provided the information holds economic value and you take reasonable, verifiable steps to keep it secret.
Is a customer list always considered a trade secret?
Not automatically. If your customer list consists only of publicly available names and addresses that anyone could find in a directory, it is not a trade secret. It only becomes protected if it includes proprietary data, such as specific purchasing habits, negotiated pricing, or private contact details that took significant effort to compile.
Can an employee use skills learned at my company if they leave?
Yes. General skills, knowledge, and experience acquired during employment belong to the employee. Trade secret protection only covers specific, proprietary, and confidential information belonging to the company, not the general professional development of the worker.
How often should I update my company's digital passwords?
As a best operational practice, businesses should mandate password changes every 60 to 90 days. Furthermore, passwords should be long, complex, and managed by a secure enterprise password manager to prevent employees from using easily guessable combinations.
No reviews yet. Be the first to share your experience!