By Sanuji Munasinghe
In Sri Lanka, as in many jurisdictions around the world, trade secrets and confidential information play a vital role in protecting commercially valuable business knowledge that provides a competitive advantage. In today’s technology-driven economy, where information can be created, shared, and replicated with unprecedented ease, safeguarding confidential business information has become increasingly important.
Unlike registered intellectual property rights such as patents, trademarks, or industrial designs, trade secrets do not require formal registration to obtain legal protection. Instead, protection arises so long as the information remains confidential, possesses commercial value because of its secrecy, and the lawful holder takes reasonable steps to preserve its confidentiality.
What Constitutes a Trade Secret?
Trade secrets generally consist of information that:
- is not publicly known or readily accessible;
- derives commercial value from remaining secret; and
- is subject to reasonable measures taken by its lawful holder to maintain its secrecy.
The scope of confidential or undisclosed information varies depending on the nature of the business. Typical examples include manufacturing processes, formulas, recipes, software source code, algorithms, customer and supplier databases, pricing strategies, business plans, marketing strategies, financial information, and research and development data.
The commercial value of such information often lies not in its physical form but in the competitive advantage it provides. Once confidentiality is lost, that advantage may disappear permanently.
Legal Protection in Sri Lanka
The primary statutory protection for trade secrets in Sri Lanka is found in the Intellectual Property Act, No. 36 of 2003, particularly within the provisions dealing with unfair competition.
Although the Act does not expressly create a proprietary right in trade secrets or provide a comprehensive statutory definition, it protects undisclosed information against unlawful acquisition, disclosure, or use by third parties.
For information to qualify for protection under the Act, it must possess commercial value because it is secret and must be subject to reasonable measures designed to preserve its confidentiality.
Sri Lanka is also a member of the World Trade Organization and is bound by the Agreement on Trade-Related Aspects of Intellectual Property Rights (TRIPS Agreement), which requires member states to provide protection for undisclosed information against unfair commercial use. These international obligations have been incorporated into Sri Lankan law through the Intellectual Property Act.
The Importance of Contractual Protection
In practice, contract law remains one of the most significant mechanisms for protecting trade secrets in Sri Lanka. Confidentiality clauses and Non-Disclosure Agreements (NDAs) are routinely used to impose legally enforceable obligations upon employees, consultants, contractors, suppliers, investors, and business partners who receive confidential information.
The effectiveness of trade secret protection frequently depends on the conduct of the information holder. Unlike other forms of intellectual property, legal protection cannot be maintained unless the owner actively preserves confidentiality.
Reasonable measures expected of businesses typically include:
- limiting access to confidential information on a need-to-know basis;
- implementing comprehensive Non-Disclosure Agreements and confidentiality clauses;
- maintaining appropriate physical, electronic, and cybersecurity safeguards;
- adopting internal confidentiality policies and access controls; and
- educating employees and business partners regarding their confidentiality obligations.
If confidential information enters the public domain through inadequate safeguards or unrestricted disclosure, legal protection will generally be lost.
Enforcement and Available Remedies
Where confidential information is unlawfully acquired, disclosed, or misused, trade secret holders may pursue several legal remedies.
These include:
- injunctions restraining actual or threatened disclosure;
- claims for damages arising from economic loss;
- actions based on the principles of unfair competition under the Intellectual Property Act; and
- contractual remedies arising from breaches of Non-Disclosure Agreements or confidentiality obligations, including specific performance, damages, and injunctive relief.
Given the practical challenges associated with proving misuse and obtaining evidence, contractual protection often provides the strongest legal foundation for enforcement. Sri Lankan courts frequently examine both the existence and quality of confidentiality agreements when determining whether reasonable steps were taken to protect undisclosed information.
Best Practices for Businesses
To strengthen the protection of trade secrets and confidential information, businesses should adopt a comprehensive internal protection strategy.
Key measures include:
- identifying and classifying confidential information according to its sensitivity;
- using carefully drafted Non-Disclosure Agreements and confidentiality clauses;
- restricting access strictly on a need-to-know basis;
- implementing robust cybersecurity measures together with appropriate physical security controls;
- maintaining document management and access monitoring systems; and
- conducting regular employee training and compliance reviews.
These practical measures not only reduce the risk of unauthorised disclosure but also demonstrate that reasonable efforts have been taken to preserve confidentiality, an essential requirement for legal protection.
Drafting Effective Non-Disclosure Agreements
A well-drafted Non-Disclosure Agreement remains one of the most effective tools for protecting confidential information.
An NDA should clearly define confidential information broadly enough to include technical, commercial, financial, strategic, and operational information, while expressly excluding information that is already publicly available, independently developed by the receiving party, or lawfully obtained from another source. Such clarity helps minimise disputes and strengthens enforceability.
The agreement should also specify the precise purpose for which the confidential information is being disclosed and prohibit any use beyond that authorised purpose. This assists courts in determining whether misuse or unauthorised exploitation has occurred.
Confidentiality obligations should generally survive termination of the contractual relationship. While certain categories of confidential information may warrant protection for a fixed period, core trade secrets may justify protection for as long as the information remains confidential, provided the restriction is reasonable.
Additionally, the agreement should include provisions requiring the receiving party, upon completion of the intended purpose or termination of the relationship, to return or securely destroy all confidential information together with any copies or derivatives. Such provisions help ensure that confidential information is not retained or misused after the relationship has ended.
In the employment context, confidentiality obligations should be carefully drafted so as not to impose unreasonable restraints on trade. They should clearly distinguish between protectable confidential information and the employee’s general skills, knowledge, and experience, which remain freely usable following termination of employment.
Businesses should also periodically review and update their NDAs to reflect technological developments, evolving business practices, and changes in applicable law. Well-drafted contractual provisions are most effective when supported by comprehensive internal policies, appropriate access controls, employee exit procedures, and ongoing compliance measures.
Conclusion
Sri Lanka’s legal framework provides meaningful, although largely indirect, protection for trade secrets and confidential information through the combined operation of the Intellectual Property Act, No. 36 of 2003, contract law, and the principles of unfair competition.
Although enforcement may present practical and evidential challenges, businesses can substantially strengthen their legal position by implementing effective internal confidentiality measures and entering into carefully drafted Non-Disclosure Agreements with employees, consultants, and commercial partners.
As commercial competition intensifies and businesses become increasingly reliant on valuable information assets, the proactive management and protection of confidential information has become not only a legal necessity but also a critical component of long-term commercial success for Sri Lankan enterprises.