Protecting Trade Secrets in China: NDAs, Non-Competes, and What Actually Holds Up

Protecting Trade Secrets in China: NDAs, Non-Competes, and What Actually Holds Up

Foreign companies in China often assume that a standard NDA, an English employee handbook, and a broad non-compete clause are enough to protect confidential know-how. In practice, that package is usually too thin. Under Chinese law, trade-secret protection depends not only on what the company says is confidential, but also on whether the information is actually secret, commercially valuable, and protected through real confidentiality measures. That means the legal analysis quickly turns into an operational one: who can access the information, how it is labeled, what records exist, what happens at employee exit, and whether the company can later prove it acted consistently.

For foreign investors, the risk is not limited to a dramatic theft of source code or formulas. More common losses involve customer lists walking out with a sales manager, pricing rules moving to a competitor, supplier terms being copied into a rival bid, or an engineer retaining process documents after departure. In those cases, the dispute is often decided less by a clever contract clause and more by the company’s ability to show that the information was managed as a protected trade secret in the first place.

That is why trade-secret protection in China should be designed across employment, IT access, contracting, and exit control. A company that already cares about employee termination risk in China or brand protection through China trademark registration should treat trade-secret control as part of the same compliance system, not a separate legal formality.

Start by defining what the company is actually protecting

A trade-secret program usually fails when the business calls everything confidential and protects almost nothing in a disciplined way. The safer approach is to identify the categories of information that really matter: technical know-how, manufacturing parameters, formulas, source code, customer data, pricing policies, bidding strategies, supplier terms, unreleased product plans, market-entry plans, and internal financial models. For each category, the company should ask three practical questions. Is the information publicly available? Does it have real commercial value because competitors do not know it? And what concrete steps has the company taken to keep it restricted?

That last question is where many foreign companies in China become vulnerable. A court or enforcement authority may not be impressed by a confidentiality clause if the same files were widely shared, stored without access control, sent through personal accounts, or discussed in open chat groups. A business cannot rely on trade-secret language while operating as if secrecy does not matter. The better practice is to classify information, mark sensitive materials, assign ownership, and restrict access according to role rather than convenience.

In transactions and vendor management, the same principle applies. If key information is disclosed to distributors, manufacturers, laboratories, consultants, or local partners, the contract should define the information scope, purpose limitation, return or destruction obligation, onward disclosure restrictions, and evidence trail. Foreign companies that are new to China often protect upstream headquarters data carefully while leaving local partner exchanges under-documented.

Use NDAs as one layer, not the whole protection strategy

NDAs still matter, but they are often overestimated. A short template signed at onboarding or before a business meeting is useful only if it fits the real information flow. For employees, confidentiality obligations should align with the labor contract, employee handbook, job description, access permissions, invention-assignment rules where relevant, and exit process. For counterparties, the NDA should be paired with document control, meeting records, version management, and a clear rule on who may receive the information on the other side.

Foreign companies should also resist the temptation to draft confidentiality clauses at an abstract global level. The contract should be specific enough to support enforcement later. That does not require listing every secret, but it should make the confidential categories, allowed use, safeguarding duties, retention limits, breach reporting, and post-termination obligations concrete. If Chinese-language execution or bilingual consistency matters in the deal structure, that should be handled before a dispute arises rather than after the documents are tested.

Just as important, the company should keep records showing the NDA was part of a real protection system. Useful evidence can include signed acknowledgments, controlled data-room logs, restricted folder permissions, visitor controls, download limitations, device return lists, investigation memoranda, and reminders issued during employment or the project. In China trade-secret disputes, the record of protective measures is often as important as the contract text itself.

Be careful with non-competes: they are targeted tools, not universal templates

Many foreign employers try to solve trade-secret risk by putting a broad non-compete on every employee. That approach is weak in China. Post-employment non-competes are generally used for senior management, senior technical personnel, and other personnel with confidentiality obligations, not as a mass restriction for the entire workforce. Even where a non-compete is appropriate, the company still needs a sensible scope, a realistic competitive definition, proper compensation handling, and a plan for enforcement. A clause that is too broad, poorly targeted, or unsupported by the employee’s actual role may create dispute risk without delivering much protection.

Companies should therefore separate two different protections. Confidentiality obligations can and should apply more broadly where the employee genuinely handles protected information. Non-compete restrictions should be reserved for the people whose departure could materially transfer customer relationships, strategic knowledge, or technical know-how to a competitor. If the company cannot explain why a particular employee is in that second category, it should reconsider whether a non-compete is the right tool.

Process also matters. A non-compete is much easier to defend when the underlying business justification, employee role, confidential-information map, and post-exit monitoring plan were considered in advance. If the company only remembers the clause after a key person resigns, it is already operating from a weak position. For exits involving sensitive staff, the trade-secret review should run together with the broader employment analysis described in this China employee termination guide.

Control the departure, because that is when most leakage happens

In practice, the highest-risk moment is often not hiring or contracting, but departure. Before a key employee, consultant, or local manager leaves, the company should know what systems they can access, what information they downloaded, what devices they hold, what customer relationships they manage, and whether they were ever reminded of confidentiality obligations in a form the company can later prove. If a dispute already seems likely, the preservation of logs, emails, chat records, access histories, and return documents should start before the exit conversation rather than after.

For foreign companies with fast-moving local teams, the weak point is often informal sharing. Files move through personal WeChat accounts, personal email, USB devices, or unmanaged messaging groups. That behavior may feel operationally efficient until the company needs to prove what information was secret, who received it, and what measures were taken to protect it. Once those boundaries collapse, enforcement becomes harder even if the business strongly believes misappropriation occurred.

A disciplined exit checklist should cover account suspension timing, device recovery, download review, return or deletion certification, customer-notification strategy, reminder letters, and coordination with IT, HR, and legal. If the departing person handled technology, bids, procurement, or major accounts, the company should also assess whether emergency evidence preservation or immediate injunctive strategy needs to be prepared.

Checklist: what actually strengthens trade-secret protection in China

• Information mapping: The company has identified which technical or business information truly matters.
• Access control: Sensitive files are restricted by role, not left open for broad internal circulation.
• Document labeling: Confidential materials are marked and handled under a consistent internal rule.
• Contract alignment: NDAs, employment documents, vendor contracts, and policy notices do not contradict each other.
• Targeted non-competes: Non-compete clauses are limited to roles that genuinely justify them.
• Exit discipline: Device return, account shutdown, reminder letters, and evidence preservation happen on time.
• Proof file: The company can show not only that information mattered, but also that it took real confidentiality measures.

Common mistakes foreign companies make

• Treating the NDA as the protection plan. A signed template does not replace access control, labeling, and exit management.
• Applying non-competes to everyone. Overuse weakens credibility and can create unnecessary employment disputes.
• Failing to localize internal rules. Global policies without China-facing implementation records often leave evidentiary gaps.
• Ignoring vendor and partner leakage. Sensitive information is often exposed through local counterparties, not only employees.
• Waiting until after resignation to preserve evidence. By then, logs, devices, and explanations may already be harder to secure.

Talk to a China Business Lawyer before a key person leaves with your know-how

Trade-secret protection in China is strongest when legal drafting and operational controls match. Foreign companies should not ask only whether they have an NDA or a non-compete. They should ask whether the information is clearly identified, access is controlled, records are preserved, local counterparties are bound appropriately, and high-risk employee exits are managed in a defensible way.

If your company is entering China, expanding a local team, negotiating with a supplier, or facing the resignation of a key employee, it is worth reviewing the confidentiality structure before a dispute begins. To discuss a specific situation, talk to a China business lawyer.

---

This article is general information, not legal advice. For advice on your situation, please get in touch.

About the author: Jianxing Pan is a lawyer and partner at Beijing Chang’an Law Firm (Beijing/Shenzhen) and previously served as director of the firm’s Shenzhen office. His practice spans intellectual property, dispute resolution, corporate law, and cross-border compliance and tax-audit matters, and he serves as standing legal counsel to numerous enterprises and individuals. He pairs a solid command of the law with extensive practical experience, focusing on the issues that decide a case to secure the best possible outcome for clients. To discuss a specific matter, you are welcome to get in touch through the contact details on this site.

Jianxing Pan, Attorney · Beijing Chang’an Law Firm (Beijing/Shenzhen)
Focus areas: Intellectual Property · Employment Risk · Dispute Resolution · Cross-Border Compliance
July 2026