Confidentiality Breach Claims

What is confidential information?

Confidential information is information that is not generally public, has been communicated or held in circumstances importing confidence and has sufficient substance or commercial value to justify protection. Whether information qualifies is a factual and legal question, not simply a label chosen by the business.

Businesses rely on information that gives them an advantage or allows them to operate securely: customer requirements, non-public pricing, margins, bids, product plans, technical processes, financial forecasts, supplier terms and strategic decisions. Its value may lie in secrecy, timing or the effort involved in assembling it. Disclosure to a competitor can destroy that value; misuse of a client database can divert goodwill; and circulation of sensitive negotiations may damage a transaction before it is completed.

Not every internal document is confidential. Information may already be public, obvious to an experienced person, obsolete or too vague to be protected. A claimant should identify the information with enough precision for the recipient and the court to understand what is said to be confidential. Broad allegations that “business information” was taken rarely explain the real case.

Confidentiality claims have their own legal framework but often overlap with Restrictive Covenant Disputes, Business Contract Disputes, Director Disputes and Shareholder Disputes. Intellectual-property or personal-data issues may also arise, but they should be analysed separately rather than treated as interchangeable with breach of confidence.

What information can be protected?

Protection exists on a spectrum. The more closely guarded, commercially valuable and specific the material is, the stronger the case may be. Context and security measures matter alongside the content itself.

Trade secrets and other confidential information

A trade secret is a particularly protected category: information that is secret, has commercial value because it is secret, and has been subject to reasonable steps to keep it secret. The Trade Secrets (Enforcement, etc.) Regulations 2018 provide measures and remedies for unlawful acquisition, use or disclosure. The wider law of confidence continues to protect other information that may not satisfy every element of that statutory definition.

Practical measures help demonstrate both confidentiality and commercial seriousness: limited access, password controls, contractual wording, document markings used selectively, staff training, permissions, retention policies and a clear record of who received the material and for what purpose.

If information is being circulated and you are unsure whether it is legally protectable, call 0161 436 0000.

How confidentiality obligations arise

A signed NDA is useful evidence, but it is not the only source of a duty. The obligation may arise from contract, a person's role, the relationship between the parties or the circumstances in which information was shared.

Contractual clauses and NDAs

Employment contracts, consultancy terms, supply agreements, shareholder and partnership agreements, joint-venture documents and business-sale agreements commonly define confidential information and permitted use. A non-disclosure agreement may govern discussions before the main transaction exists. The court considers the clause's actual wording, exclusions, duration, authorised recipients and any process for return or destruction rather than assuming that every disclosure is prohibited.

Duties arising from the relationship

Employees may owe implied duties during employment; directors and others in fiduciary positions may owe duties concerning company information and opportunities; and partners may owe duties arising from their business relationship. The scope after departure needs separate analysis. General knowledge and experience are not automatically captured merely because they were acquired at work.

The equitable duty of confidence

A duty can arise even without a contract where information has the necessary quality of confidence, was imparted in circumstances importing an obligation of confidence, and is used or disclosed without authority to the claimant's detriment or in a manner engaging the court's conscience. A recipient who knows, or should understand, that information was supplied for a limited purpose may not be free to exploit it for another purpose.

The correct cause of action affects who may be liable, what must be proved, the remedies available and limitation. Contractual, equitable, fiduciary, intellectual-property and data-protection issues should therefore be separated before a claim is framed.

How confidentiality breaches commonly occur

A breach may involve disclosure to somebody else, but unauthorised acquisition, copying or use for a competing purpose can be equally important. These disputes arise across many commercial relationships.

The analysis should identify what was obtained, by whom, when and for what purpose. Copying may be inferred from access logs, timing or unusual similarities, but suspicion alone is not proof. The defendant may argue independent development, prior knowledge, permission, public availability or that the information was insufficiently defined or protected.

Confidentiality obligations and restrictive covenants

Both may protect a business after a relationship ends, but they regulate different conduct and should not be confused.

The same facts may engage both. A former director might use confidential pricing to approach customers, potentially breaching a duty of confidence and a non-solicitation covenant. Each claim still needs its own legal foundation, evidence and remedy; failure of an overbroad covenant does not automatically remove valid confidentiality protection.

Evidence in a confidentiality claim

The evidence must connect the information, the duty, the alleged misuse and the threatened or actual harm. Digital material is often important, but it must be preserved and obtained lawfully.

• Contracts, NDAs and later variations
• Policies, access permissions and security controls
• The confidential documents or defined datasets
• Emails, messages and collaboration-platform records
• Download, transfer, print and access logs
• Device, cloud-storage and audit trail evidence
• Exit correspondence and return-of-property records
• Customer, supplier and colleague witness evidence
• Competing documents showing unusual similarities
• Evidence of value, loss, risk and circulation

Immediate preservation may include suspending deletion policies, securing relevant business accounts, retaining original files and recording who had access. A forensic specialist may be appropriate where copying, deletion or device use is disputed. Businesses should not access personal devices or accounts without a lawful basis, and parties should not delete relevant material after a dispute arises.

If the incident also involves personal data, separate containment, assessment and regulatory duties may apply. That question should be addressed promptly, but a personal-data breach and a commercial breach of confidence are not the same claim.

Why urgent legal action may be necessary

Confidentiality can be lost irreversibly. Once a trade secret is widely published, a bid disclosed or a customer database exploited, a later damages award may not restore the original commercial position.

The immediate objective is often containment: identify recipients, prevent further use or circulation, preserve evidence and secure return or deletion. Focused correspondence may seek confirmation, disclosure of what happened and enforceable undertakings. It should avoid overstating the information claimed or demanding restrictions unrelated to the breach.

An interim injunction may restrain use or disclosure until trial or further order. The application requires evidence addressing the legal right, urgency, actual or threatened misuse and why damages would not be adequate. Orders may also concern preservation, delivery up or, in exceptional cases, imaging or search measures. These are serious remedies with strict procedural safeguards and potential cross-undertakings in damages.

If information is still circulating or a competitor may use it, call 0161 436 0000 to discuss containment and the need for urgent relief.

Remedies and the route to resolution

The desired remedy should follow the commercial problem: stop disclosure, recover material, establish rights, compensate loss or agree controlled future conduct.

Injunctions, delivery up and deletion

Interim or final injunctions may restrain acquisition, use or disclosure. Orders or agreed undertakings may require return, delivery up, secure deletion or verification concerning copies and recipients. The wording must identify the protected material and required conduct clearly.

Damages and other financial remedies

Damages may compensate provable loss caused by the breach, such as lost profit or reduced commercial value. Depending on the legal basis and facts, an account of profits or a reasonable-use measure may be considered. These remedies are not automatic: causation, scope, valuation and potential double recovery require analysis.

Declarations, settlements and undertakings

A declaration can determine rights or the confidential status of information. Settlement may control permitted use, identify recipients, secure deletion, protect future disclosures, record payment and costs, and avoid wider publicity. Negotiation or mediation can provide a more tailored result than a final judgment.