Protecting Trade Secrets Under TUTSA: What a Dallas Business Law Attorney Tells Tech and Services Firms to Have in Place

Most trade secret cases in Texas are not lost on whether the information was valuable. They are lost on whether the company did anything to protect it. The Texas Uniform Trade Secrets Act builds that requirement into the definition itself, so a pricing model or client roster sitting on an open shared drive may not qualify as a trade secret at all. A Dallas business law attorney reviewing these files finds the same gap repeatedly: strong confidentiality language in the employment agreement, almost no evidence that access was actually restricted.

What qualifies as a trade secret in Texas?

Under TUTSA, codified at Civil Practice and Remedies Code Chapter 134A and effective since September 1, 2013, information qualifies if two things are true: the owner took reasonable measures under the circumstances to keep it secret, and the information derives independent economic value from not being generally known or readily ascertainable by proper means.

The statute’s list is broad: formulas, designs, compilations, source code, methods, processes, financial data, and lists of actual or potential customers and suppliers. Texas amended the definition in 2017 to track the federal Defend Trade Secrets Act, so the two standards now line up closely.

What falls outside matters just as much. General skill, industry knowledge, and experience an employee accumulated on the job belong to the employee. Information a competitor could reconstruct from public filings, published rate cards, or a LinkedIn search does not become secret because you labeled it confidential.

What counts as reasonable measures?

Reasonable measures means restriction a court can see in the record, not a policy statement. Scale matters, and a fifteen-person services firm is not held to the standard of a public company, but the controls have to be real.

What tends to hold up:

• Role-based access, so engineers reach the codebase, sales reaches the CRM, and neither reaches the other
• Signed confidentiality agreements covering employees, contractors, vendors, and buyers in diligence
• Access logs and version control showing who touched what and when
• Marking and segregating the material that matters instead of stamping every document confidential
• A written offboarding process: device return, credential revocation, signed acknowledgment of continuing obligations
• Restrictions on personal cloud accounts and devices, enforced rather than announced

Companies that mark everything confidential often fare worse than companies that mark ten documents and lock them down, because indiscriminate labeling suggests nothing was treated as sensitive.

Do our agreements need the federal whistleblower notice?

Yes, and leaving it out costs money. Under 18 U.S.C. Section 1833(b), an employer must include notice of the federal immunity for confidential disclosures to government officials or attorneys in any agreement with an employee, contractor, or consultant governing the use of trade secrets or confidential information. Skip it, and the employer forfeits exemplary damages and attorney’s fees against that person in a federal misappropriation claim.

Compliance is nearly free. The notice can sit in the agreement itself or cross-reference a policy document given to the worker. Agreements drafted before the DTSA took effect in May 2016, and plenty drafted since, still omit it.

Can we rely on a noncompete instead?

Only partly, and only if it is drafted to Texas standards. Business and Commerce Code Section 15.50 requires a covenant not to compete to be ancillary to an otherwise enforceable agreement and reasonable in time, geographic area, and scope of activity. Confidential information exchanged for a promise of confidentiality can supply the consideration, the approach from Alex Sheshunoff Management Services v. Johnson (Tex. 2006) and Mann Frankfort Stein & Lipp Advisors v. Fielding (Tex. 2009). Section 15.51(c) tells courts to reform an overbroad covenant rather than void it, which is why sweeping restrictions get narrowed instead of enforced as written.

Two limits deserve attention. Texas courts have generally declined to adopt the inevitable disclosure doctrine, so a former employer usually cannot block a hire on the theory that disclosure is bound to happen. And the FTC’s 2024 rule banning most noncompetes was set aside nationwide by the U.S. District Court for the Northern District of Texas in Ryan LLC v. FTC in August 2024, with the agency shifting toward case-by-case enforcement since. That area keeps moving, so confirm where it stands before relying on it.

An employee just left with our files. What happens in the first week?

Preserve first, then move. Image the departing employee’s laptop and phone before reissuing them, pull access logs and mail forwarding rules, and hold the data intact. Reassigning a device destroys the evidence that proves the case.

TUTSA allows injunctive relief, actual loss plus unjust enrichment or a reasonable royalty, and exemplary damages up to twice the award for willful and malicious misappropriation, plus attorney’s fees for bad faith claims or willful misconduct. A temporary restraining order in Texas state court lasts 14 days under Rule 680, can be extended once for a like period, and requires a bond, so the first hearing arrives quickly. Expect to identify the trade secrets with reasonable particularity rather than gesturing at categories. Chapter 134A also governs protective orders when the other side’s representative wants to attend the hearing, an issue the Texas Supreme Court took up in In re M-I L.L.C. (Tex. 2016).

The clock is three years. Civil Practice and Remedies Code Section 16.010 runs limitations from when the misappropriation was discovered or should have been discovered with reasonable diligence. Egregious cases can also draw criminal exposure under Texas Penal Code Section 31.05.

What should a Dallas business law attorney review before there is a problem?

The agreements, the access controls, and the offboarding process, together rather than separately. A Dallas business law attorney can confirm your confidentiality terms carry the DTSA notice, your covenants meet Section 15.50, and your technical controls would satisfy a judge asking what you did to keep the information secret.

TUTSA protects companies that can show their work. If your confidentiality agreements predate 2016, or you cannot say who has access to your source code, pricing models, and customer data today, schedule a review before a departure forces the question.