Home/IP Protection/EU Trade Secrets Directive

IP Law

EU Trade Secrets Directive 2016/943: A Complete Guide

Directive 2016/943 harmonised trade secret protection across the European Union for the first time, creating consistent minimum standards in all 27 member states. For companies operating in the EU single market, understanding this Directive is essential for protecting proprietary know-how and business information.

Book a Demo Try the IP Calculator

Key Takeaway

The Directive's three-part test requires that information is secret, has commercial value because it is secret, and has been subject to reasonable steps to maintain secrecy. Blockchain timestamps from immut provide irrefutable evidence of the third element — the requirement most frequently challenged in EU trade secret litigation.

Background and Purpose

Before the Directive, trade secret protection varied dramatically across EU member states. Some countries had specific trade secret legislation, others relied on unfair competition law, and others used a combination of contract law and equitable principles. This patchwork created uncertainty for businesses operating across the single market. The European Commission identified this fragmentation as a barrier to innovation and cross-border collaboration. Companies were reluctant to share know-how with partners in other member states without confidence that their trade secrets would be consistently protected. The Directive was adopted on 8 June 2016 and required implementation by 9 June 2018. It establishes minimum standards — member states can provide more extensive protection. The goal was not to create a new IP right but to harmonise the remedies available against unlawful acquisition, use, and disclosure of trade secrets.

The Three-Part Test (Article 2)

Article 2(1) defines a trade secret as information that meets all three conditions: 1. It is secret — not generally known among or readily accessible to persons within the circles that normally deal with the kind of information in question. 2. It has commercial value because it is secret — this includes both actual and potential commercial value. The mere fact that the information is used in business can demonstrate commercial value. 3. It has been subject to reasonable steps under the circumstances, by the person lawfully in control of the information, to keep it secret. The third element — reasonable steps — is the most litigated aspect of the Directive. Courts across member states have examined what constitutes 'reasonable' measures, considering factors such as the value of the trade secret, the size of the business, the cost of security measures, and industry norms. Blockchain timestamps directly address this third element by providing verifiable evidence that the trade secret holder identified and protected the information at a specific point in time.

Lawful and Unlawful Acquisition (Articles 3-4)

The Directive carefully distinguishes between lawful and unlawful means of acquiring trade secrets. Lawful acquisition (Article 3) includes: independent discovery or creation, observation, study, disassembly, or testing of a product that has been made available to the public, exercise of the right of workers to information and consultation under EU or national law, and any other practice that is in conformity with honest commercial practices. Notably, reverse engineering is explicitly listed as lawful unless contractually restricted. This means trade secrets in manufactured products are vulnerable once marketed — reinforcing the importance of documenting trade secrets before disclosure or market launch. Unlawful acquisition (Article 4) includes: unauthorised access to documents or materials containing the trade secret, theft, bribery, deception, breach of a confidentiality agreement, and any other conduct considered contrary to honest commercial practices. The Directive also addresses secondary acquisition — someone who acquires a trade secret through a third party and knew or should have known it was unlawfully acquired.

Remedies and Measures (Articles 10-15)

The Directive provides a comprehensive toolkit of remedies: Provisional and precautionary measures (Article 10): Courts can order cessation or prohibition of use/disclosure, prohibition of production or marketing of infringing goods, seizure or delivery up of suspected infringing goods, and provision of security. Injunctions and corrective measures (Article 12-13): Courts can order cessation of use/disclosure, prohibition of production and marketing, recall of infringing goods from the market, destruction of information, documents, or materials containing the trade secret, and delivery up of infringing goods. Damages (Article 14): Courts shall award damages appropriate to the actual prejudice suffered, taking into account lost profits, unfair profits made by the infringer, and moral prejudice. As an alternative, courts may set damages as a lump sum based on at least the royalties that would have been due. Confidentiality during proceedings (Article 9): Critically, the Directive requires courts to protect trade secret confidentiality during litigation — addressing a key concern that discourages trade secret holders from bringing claims.

National Implementation

Member states implemented the Directive between 2018 and 2019, with some notable variations: Germany enacted the Gesetz zum Schutz von Geschaeftsgeheimnissen (GeschGehG) in April 2019, replacing the previous provisions in the Unfair Competition Act. The German implementation is notable for its strict interpretation of 'reasonable steps,' which courts have interpreted to require documented, concrete measures. France amended the Commercial Code (Articles L.151-1 to L.154-1) in July 2018. French courts have been active in developing case law around the Directive, particularly on the definition of commercial value. Italy amended the Industrial Property Code (Articles 98-99) in June 2018. Italian courts have focused on the relationship between trade secret protection and employee mobility. The Netherlands implemented through the Trade Secrets Protection Act (Wet bescherming bedrijfsgeheimen) in October 2018. Spain implemented through Royal Decree-Law 7/2021, which was notably late, not implementing until May 2021. Despite harmonisation, differences in national court interpretations remain. The commercial value threshold, the standard for reasonable steps, and the scope of remedies can vary between member states. This makes comprehensive documentation — supported by immutable blockchain timestamps — even more important for companies operating across multiple EU jurisdictions.

Key Provisions

Critical Provisions of the EU Trade Secrets Directive

Article 2 — Trade Secret Definition

Three-part test: information must be secret, have commercial value because it is secret, and be subject to reasonable steps to maintain secrecy. This is the foundation of all EU trade secret claims.

Article 3 — Lawful Acquisition

Explicitly permits independent discovery, reverse engineering (unless contractually restricted), and observation of publicly available products. Defines the boundary between fair competition and misappropriation.

Article 4 — Unlawful Acquisition, Use, and Disclosure

Defines unlawful conduct including unauthorised access, theft, bribery, breach of confidentiality, and secondary acquisition from someone who obtained the trade secret unlawfully.

Article 9 — Preservation of Confidentiality

Requires courts to protect trade secret confidentiality during proceedings. Measures include restricting access to hearings, limiting disclosure of documents, and redacting judgments. Addresses the key barrier to litigation.

Article 10 — Provisional Measures

Courts can order interim cessation of use/disclosure, prohibition of production, seizure of infringing goods, and security deposits. Provides urgent protection while the case proceeds.

Article 14 — Damages

Damages based on actual prejudice including lost profits, unfair profits, and moral prejudice. Alternative lump sum calculation available based on hypothetical royalties. Ensures meaningful compensation for trade secret holders.

immut

How immut Supports EU Trade Secrets Directive Compliance

Provide verifiable evidence of 'reasonable steps' under Article 2(1)(c) — the most contested element in EU trade secret litigation across all member states.

Establish the date a trade secret existed, supporting the 'quality of secrecy' element and proving the information predates any alleged independent discovery or reverse engineering.

Create timestamped documentation that satisfies the German GeschGehG's strict interpretation of 'documented, concrete measures' for maintaining secrecy.

Generate evidence admissible under the eIDAS Regulation (Article 41), which prohibits courts from denying legal effect to electronic timestamps — applicable across all 27 EU member states.

Support cross-border trade secret claims with a single blockchain timestamp valid in every EU jurisdiction, eliminating the need for country-by-country documentation.

Build an audit trail of confidentiality measures that demonstrates ongoing protection efforts — critical when courts assess the totality of reasonable steps taken.

FAQ

Frequently Asked Questions

What is the EU Trade Secrets Directive?

Directive 2016/943 is EU legislation that harmonised trade secret protection across all 27 member states for the first time. It defines trade secrets, establishes what constitutes lawful and unlawful acquisition, and provides minimum remedies including injunctions, damages, and confidentiality orders during proceedings.

What are 'reasonable steps' under the Directive?

The Directive doesn't provide a definitive list. Courts consider the totality of measures including access controls, NDAs, document classification, employee training, and security protocols. Blockchain timestamps from immut provide documented proof of when you identified and began protecting information as a trade secret — directly supporting the reasonable steps requirement.

Does the Directive apply in the UK after Brexit?

The UK transposed the Directive into national law through the Trade Secrets (Enforcement, etc.) Regulations 2018 before Brexit. These regulations remain in effect as retained EU law, so the UK's trade secret framework continues to mirror the Directive's standards.

Can trade secrets be reverse-engineered in the EU?

Yes. Article 3 of the Directive explicitly lists reverse engineering as a lawful means of acquiring trade secrets, unless contractually restricted. This is why documenting trade secrets before they become embedded in marketed products is essential — and why blockchain timestamps are valuable for establishing what you knew and when.

How does the Directive protect confidentiality in court?

Article 9 requires courts to take specific measures to protect trade secret confidentiality during litigation. This can include restricting access to hearings, limiting who can see disclosed documents, and issuing non-confidential versions of judgments. This addresses a major concern that previously deterred trade secret holders from bringing claims.

Protect Your Trade Secrets Today

Get blockchain-verified proof of your intellectual property in 60 seconds. Court-admissible evidence that supports your rights under the EU Trade Secrets Directive.

Book a Call Try the IP Calculator