II.\u00a0 \u00a0Key highlights<\/strong><\/p>\n1.\u00a0 Broader scope of protected information<\/p>\n
The Provisions confirm that trade secrets consist of commercial information that is not known to the public, has commercial value, and is protected by corresponding confidentiality measures adopted by the rights holder.<\/p>\n
They cover in particular:<\/p>\n
Technical information, including structures, raw materials, formulas, materials, samples, styles, processes, methods, data, algorithms, computer programs and code; and<\/p>\n
Business information, including creative, management, sales, financial, planning and customer-related information, as well as other information connected with business activities.<\/p>\n
Importantly, the Provisions expressly include algorithms, computer programs, code and data within the scope of protected technical information. They also clarify that protected customer information may extend beyond basic identification details and include transaction habits, intentions and transaction content.<\/p>\n
This confirms that the new regime is intended to address the growing value of digital and intangible business assets.<\/p>\n
2.\u00a0 \u00a0Stronger emphasis on effective confidentiality measures<\/p>\n
The Provisions also broaden the concept of reasonable confidentiality measures. In addition to contractual protections, they refer to practical safeguards such as permission-based access controls, data anonymisation and the retention of operation logs, including in remote working and cross-border collaboration scenarios.<\/p>\n
This is an important development for businesses. The Provisions suggest that confidentiality clauses in employment contracts or standalone non-disclosure agreements may no longer be sufficient on their own. Companies may now be expected to show that they exercise effective control over access to sensitive information through technical and organisational measures.<\/p>\n
In practice, businesses should be able to demonstrate how access rights are allocated, how sensitive files are monitored, whether download activity is traceable, and whether internal systems allow suspicious handling of confidential information to be identified.<\/p>\n
The Provisions therefore place greater emphasis on practical confidentiality measures and evidence of control, in line with the increasing digitalisation of internal workflows and information management.<\/p>\n
3.\u00a0 More detailed rules on infringing conduct<\/p>\n
The Provisions also provide further detail on conduct that may constitute infringement of trade secrets.<\/p>\n
They reiterate that operators may not obtain trade secrets through theft, bribery, fraud, coercion, electronic intrusion or other improper means.<\/p>\n
First, electronic intrusion is expressly identified as an improper means, including unauthorised access to a rights holder\u2019s digital office systems or the use of malicious software to obtain confidential information.<\/p>\n
Second, it may also be unlawful to access, possess or copy, without authorisation or beyond the authorised scope, documents, materials or other media containing trade secrets, or from which trade secrets may be derived. In a digital environment, this may include design documents, flow charts, technical documentation or raw data sets.<\/p>\n
Third, where there is evidence that the information used by a suspected infringer is substantially the same as the rights holder\u2019s trade secret, and that the suspected infringer had the opportunity to access it, the market supervision authorities may find that infringement is established unless the suspected infringer can prove a lawful source.<\/p>\n
<\/p>\n
III.\u00a0 Practical implications for businesses<\/strong><\/p>\nThe Provisions make clear that businesses should move beyond a purely formal approach and review whether their current systems are suited to the digital environment in which they operate.<\/p>\n
In light of the new rules, companies may wish to:<\/p>\n
1. Identify and classify protected information more comprehensively<\/p>\n
Businesses should review the scope of their core trade secrets and ensure that assets such as algorithms, data, software, source code and commercially sensitive digital records are properly identified.<\/p>\n
2. Reinforce confidentiality measures in operational terms<\/p>\n
Companies should assess whether their internal controls are sufficient in practice, especially in remote working and cross-border collaboration settings. This may include access control policies, anonymisation tools, system logging, restrictions on copying or downloading, and closer governance over digital repositories and shared platforms.<\/p>\n
3. Align legal, HR, IT and compliance practices<\/p>\n
Trade secret protection can no longer be treated as a purely contractual issue. Employment contracts, confidentiality undertakings, onboarding and offboarding procedures, employee training and internal investigation procedures should be reviewed in light of the new requirements.<\/p>\n
4. Prepare for enforcement and evidentiary needs<\/p>\n
Companies should also consider whether they are in a position to prove the existence of trade secrets, the measures taken to protect them, and the circumstances of any suspected misuse.<\/p>\n
<\/p>\n
IV.\u00a0 Conclusion<\/strong><\/p>\nThe Provisions reflect a clear development in China\u2019s approach to trade secret protection. They take into account the growing role of digital tools and systems in the creation, storage and circulation of commercially sensitive information. For companies operating in China, the key issue is no longer simply whether confidentiality obligations exist on paper, but whether sensitive information is effectively identified, protected and traceable in practice. Ahead of the entry into force of the Provisions on 1 June 2026, businesses would be well advised to assess whether their current arrangements meet these expectations.[\/vc_column_text][vc_separator type=”transparent” thickness=”10″][\/vc_column][\/vc_row]<\/p>\n","protected":false},"excerpt":{"rendered":"
On November 11th, 2015, the sales volume of Taobao (a B2C platform owned by Alibaba Group) reached CNY 91.2 billion (around 14 billion USD), with around 680 million online deals completed and the packages delivered all across the country.<\/p>\n","protected":false},"author":6,"featured_media":46757,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[166,1],"tags":[1176,1177,924,1178,1179,1180],"yoast_head":"\n