What does the reasonable measures requirement actually demand?
Steps that are reasonable in the circumstances to keep the information secret — proportionate to its value and to the size and nature of the business. Information only qualifies as a trade secret if its owner took such steps, which makes this an element of the claim rather than a matter of good hygiene.
The standard is explicitly not perfection. A company is not required to have deployed every control available, and courts have repeatedly accepted that a modest business is not held to the practices of a large enterprise. A small company with signed agreements, limited access and a real exit process is generally in a stronger position than a large one with elaborate written policies that nobody followed.
What most often causes the reasonable measures element to fail?
Administrative drift, almost always. The recurring finding is the unsigned agreement: a company believes every employee is under a confidentiality obligation and discovers during litigation that the relevant person’s document was never countersigned, never executed at all, or was superseded by a later contract that dropped the clause.
After that come access controls that were nominal rather than real — a share drive open to the whole company because restricting it caused complaints — and exit processes where nobody asked for anything back or reminded anyone of anything. None of this involves wrongdoing by the company. All of it is checkable in an afternoon, and it is almost never checked before it matters.
Does marking everything confidential help?
It tends to hurt. Blanket marking is routinely characterized as evidence that the owner never distinguished genuinely sensitive material from ordinary business records, which undermines both the reasonable measures element and the credibility of the identification.
Selective and consistent marking is considerably more persuasive than universal marking, and far more persuasive than none at all. The point of marking is to communicate a judgment about what matters; marking everything communicates that no judgment was made.
Does disclosing information to a vendor under an NDA destroy secrecy?
Generally not — that is precisely what confidentiality agreements are for, and trade secrets are routinely shared with vendors, contractors and partners without losing protection. The questions are narrower than the general worry suggests.
They are whether the agreement was actually in force at the time, whether its terms covered this information, and whether the disclosure stayed within its scope. Failures here are almost always administrative: an agreement that had expired, a disclosure that went beyond what the agreement contemplated, or material sent to a prospective partner during discussions before anything was signed. That last one is common enough to be worth a specific check.
When is the reasonable measures question asked?
As of the misappropriation, not as of trial and not as of today. This is why timeline reconstruction matters more than a description of current practice, and why the evidence has to be dated documents rather than testimony about how things are done.
Measures introduced after a suspicious departure or after litigation became likely are prudent and largely irrelevant to whether the information qualified when it was taken. Companies frequently arrive at litigation having substantially improved their controls, and are surprised to find that the improvements do not help the claim at all.