Establishing Baseline Confidentiality Measures under Chinese Competition Law

Clamp

Statutory Standards under Article 9

Article 9 of the PRC Anti-Unfair Competition Law defines commercial secrets as technical, operational, or business information not known to the public, capable of producing commercial value, and protected by corresponding confidentiality measures adopted by the rights holder. Under Chinese competition law, proprietary data gains legal protection only if documented protective steps were active before any alleged misappropriation. Courts in Beijing, Shanghai, and Guangdong enforce a strict objective standard, giving minimal weight to subjective intent.

Generic non-disclosure agreements that omit explicit references to protected assets routinely fail under this review.

The 2019 amendments to the Anti-Unfair Competition Law expanded procedural remedies, but left the requirement for documented baseline controls unchanged. Proving trade secret status requires establishing three statutory elements: non-public status, commercial value, and reasonable protective measures. That third element serves as the primary gateway.

If baseline protective steps are absent, courts dismiss the suit without reviewing the underlying tech. Information lacking verified physical, contractual, or digital restrictions loses trade secret protection regardless of its commercial worth or technical complexity.

Supreme People’s Court Judicial Interpretation Fa Shi No. 14 outlines specific criteria for meeting Article 9 requirements. Tribunals weigh the rigor of secrecy measures against the asset’s commercial value, checking the visibility of confidentiality markings and mapping physical and system access. Foreign compliance policies rarely stand up in Chinese courts unless translated, integrated into daily plant operations, and backed by local enforcement records.

Judges expect clear physical and documentary evidence showing access was restricted to designated personnel.

Physical segregation of drawings prevents technical leakages where written non-disclosure covenants fail to restrain outgoing staff.

Local branches of the Market Supervision and Administration Bureau apply these same standards during administrative actions. When investigating misappropriation complaints, officials audit factory entry logs, server records, and employment contracts to verify baseline controls. Foreign companies manufacturing in China forfeit statutory protection under competition law when they rely on off-the-shelf Western NDAs that ignore local judicial practice.

Judicial Interpretation of Reasonable Protection

Precedent from specialized IP courts highlights what survives evidentiary review. The Supreme People’s Court expects protective measures to reflect the nature of the specific asset ~ mechanical drawings, chemical formulas, source code, and customer lists each demand distinct operational controls. In one software dispute before the Shanghai IP Court, sending files via unencrypted email failed to meet the statutory threshold for reasonable security.

Contracts form an essential starting point, but written agreements alone rarely satisfy the statutory standard. NDAs signed by JV partners, contractors, or key personnel must spell out the precise scope of protected technical and business data. Generic clauses covering all proprietary information without detailed asset schedules or classification tags fail to meet Article 6 of the 2020 SPC Judicial Interpretation.

Judges look for physical confidentiality stamps on hard copies and credentialed access controls on electronic files.

Physical controls give courts tangible proof during asset preservation applications. Badge logs, locked storage rooms, and restricted shop floors demonstrate an active commitment to protect sensitive data. In manufacturing disputes, rights holders must show that access to moulds, die patterns, and assembly lines remained restricted to authorized staff.

Permitting third-party contractors onto factory floors without visitor logging routinely undermines trade secret claims during administrative raids.

Digital controls serve as another primary pillar. Localized servers, restricted directory permissions, and mandatory watermarking demonstrate compliance with security mandates. Recent Beijing IP Court rulings show that displaying files on employee screens without user-specific dynamic watermarks carries substantial evidentiary risk.

System logs must capture who viewed, edited, or downloaded files to build a defensible chain of custody.

Compliance demands continuous operational oversight rather than static policy binders. Judges look closely at whether rules were actively enforced or left dormant on paper. Regular security briefings, signed employee acknowledgments, and documented breach investigations demonstrate active maintenance.

Lacking enforcement records, courts frequently hold that protection was effectively abandoned before any infringement occurred.

Meeting Article 9 standards requires coordinated physical, digital, and contractual controls, backed by systematic evidence preservation on the ground.

Chemistry

Physical Segregation and Digital Air-Gapping

Protecting IP inside Chinese assembly plants requires physical and digital isolation of critical components. Risk spikes when foreign enterprises transfer complete manufacturing packages to contract manufacturers. Splitting technical data across separate vendors prevents any single supplier from holding the complete blueprint.

Likewise, physically partitioning key sub-assemblies prevents shop-floor workers and outside auditors from observing proprietary process steps.

Air-gapping compute systems inside local plants stops process parameters from leaving the facility. Workstations driving automated tooling, CNC machinery, and custom test rigs should run on isolated internal networks disconnected from corporate intranets and the public internet. USB ports ought to be physically blocked or administratively disabled, with local logs tracking all peripheral connections.

Establishing this level of isolation simplifies shifting the burden of proof under Article 32.

Data loss prevention software on local workstations tracks file interaction in real time. Dynamic watermarks should overlay vector graphics, Gerber files, and bill-of-materials data with the user’s name, timestamp, and national ID number. If files move outside approved local storage, monitoring systems trigger immediate security alerts.

Hosting encryption keys on secure off-site servers ensures session access revokes automatically if local network checks fail.

Notarized access logs recorded on local Chinese servers provide the primary evidentiary foundation for PRC court discovery orders.

Equipment itself needs hardware protection to prevent reverse engineering of process parameters. Firmware on microcontrollers should be compiled with readout protection to block debugger access to flash memory. For chemical formulations, plating solutions, and proprietary compounds, off-site batching is effective: materials arrive pre-mixed and tagged with batch numbers rather than chemical names.

The local plant receives only the application settings necessary for production, never the underlying formula.

Custom tooling and fixtures need physical tags and locked storage when not in use. Stamping unique serial numbers into tooling bases establishes clear ownership during physical inspections. Custom moulds belong in locked toolrooms accessible only to master toolmakers via biometric controls.

When outside vendors perform machine maintenance, internal staff must supervise them directly so technicians cannot examine internal component geometry.

Vendor Onboarding and Technical Data Flow

Vendor onboarding requires strict data protocols before technical files leave corporate hands. Handing over complete CAD packages, material specs, and tolerance details during initial RFQ rounds creates severe leakage risks. Early vetting should rely on outer-envelope drawings that exclude internal dimensions and material grades.

Full technical drawings should only follow executed NNN agreements tailored to Chinese jurisdiction.

Data transfers to vendors should run through encrypted, monitored local file exchange portals. Attaching vector files or unencrypted PDFs directly to emails exposes proprietary data and undermines Article 9 claims. Localized portals record every view, download, and print attempt under specific vendor logins, while automated expiration dates revoke access when project terms conclude.

1. Receiving initial supplier screening approval and issuing anonymized outer-envelope dimension drawings for initial capability assessment.
2. Executing a Chinese-language non-disclosure, non-use, and non-circumvention agreement with liquidated damages tied to specific provincial court jurisdiction.
3. Creating isolated access credentials on a localized data portal configured with user-specific dynamic watermarking and disabled local print rights.
4. Releasing segmented component files excluding master assembly schematics and critical material grade codes.
5. Conducting on-site baseline physical security audits to verify that supplier workstations and tooling storage comply with contractual isolation covenants.
6. Securing notarized receipts signed by the supplier legal representative acknowledging receipt and custody of specified technical files.

Secondary leaks frequently occur down the supply chain at tier-two and tier-three levels. Primary contractors often sub-contract specialized tasks like heat treatment, plating, or precision grinding to unvetted workshops. Tier-one contracts should explicitly prohibit sub-contracting without prior written consent and require any approved sub-contractor to sign matching confidentiality agreements directly enforceable by the IP owner.

Component marking keeps physical parts traceable during manufacturing. Laser-etching part numbers, batch IDs, and ownership notices onto internal surfaces creates tangible evidence for administrative actions. Stamped markings should state explicitly that the part design is a commercial secret protected under the PRC Anti-Unfair Competition Law.

Clear physical markings preserve statutory rights.

Data management also requires automatic access revocation once a project ends. Monitoring portal activity helps flag unusual downloading patterns, such as bulk requests or off-hours access. When a vendor contract terminates, IT teams should immediately deactivate accounts and issue formal notices reminding supplier management of surviving non-use and confidentiality obligations.

Returning prototypes, test fixtures, and hard-copy documents must be documented through signed chain-of-custody logs.

Component blueprints are sometimes shared with sub-contractors under the justification of meeting tight production schedules, creating unmonitored exposure down the supply chain.

Ledger

Shifted Burden of Proof under Article 32

Article 32, added in the 2019 revision of the Anti-Unfair Competition Law, shifted the evidentiary burden in trade secret litigation. A plaintiff must first present preliminary evidence of baseline confidentiality measures, potential misappropriation, and substantial similarity between the proprietary data and the defendant’s product. Once that threshold is crossed, the burden shifts to the defendant to prove lawful acquisition or independent development.

This significantly improves a rights holder’s position in court.

Establishing preliminary proof requires thorough documentation of controls established before litigation begins. Chinese courts look for physical security records, digital access settings, signed NDAs, and clear confidentiality labels. Historically, claims failed when plaintiffs submitted basic NDAs without accompanying access logs or marking records.

Courts verify that the plaintiff actively protected the specific data in question before examining the defendant’s conduct.

Proving substantial similarity usually depends on technical appraisals performed by designated judicial forensic centers. Plaintiffs submit engineering files, production logs, or chemical formulas for side-by-side comparison with the competitor’s product. If access and substantial similarity are established, judges presume misappropriation.

The defendant must then produce independent design records, prior art, or valid reverse-engineering evidence to rebut that presumption.

Courts inspect records closely before applying the burden shift. Because Chinese civil procedure restricts evidence collection after filing, pre-litigation notarization is essential for foreign plaintiffs. Having server logs, confidentiality policies, and access records notarized by a domestic Chinese notary creates admissible evidence that holds up under scrutiny.

Un-notarized digital evidence gathered overseas routinely fails authentication challenges at trial.

What Evidence Convinces a Chinese IP Court That Baseline Confidentiality Measures Existed?

Judicial outcomes in trade secret litigation depend on the quality and admissibility of evidence establishing baseline protection. Specialized IP Courts in Beijing, Shanghai, and Guangzhou follow established evidentiary protocols when reviewing confidentiality proof. Chinese civil procedure favors documentary and physical evidence over witness testimony.

Presenting a complete evidence dossier assembled before the dispute arose forms the core strategy for successful litigation under the Anti-Unfair Competition Law.

• Notarized Access Logs recorded from localized electronic document management systems proving restricted file access permissions and user access histories.
• Bilingual Confidentiality Agreements executed with employees and third-party suppliers, specifying protected technical domains and governing law.
• Physical Security Records including badge access logs, visitor registries, restricted area signage photos, and physical key logbooks.
• Confidentiality Classification Matrices detailing technical data tiers, authorization levels, dynamic watermarking rules, and document marking stamps.
• Training Attendance Rosters bearing employee signatures acknowledging receipt and comprehension of corporate trade secret policies.
• Asset Handover Receipts documenting physical custody of prototype samples, tooling dies, and specialized production machinery.

Evidence must be collected within mainland China following local notarization procedures to meet PRC rules of evidence. Foreign affidavits, server logs hosted overseas, and un-notarized email chains face heavy admissibility hurdles under the SPC Rules on Evidence in Civil Litigation. A Chinese notary must witness the extraction of server logs, inspect physical plant security, and notarize signed agreements for evidence to carry full weight in court.

Recovering technical documentation incurs significant costs when an unmonitored local partner extracts CAD files from an un-notarized cloud server.

Independent development is the most common defense domestic competitors raise once the burden shifts under Article 32. Defendants typically argue the technology was derived from public patents, academic publications, or reverse engineering. Plaintiffs counter this by producing historical R&D lab notebooks, version logs, and test data showing a developmental history that a competitor could not have duplicated in a short window.

Detailed documentation of development costs and timelines directly supports damage calculations under Article 17 of the Anti-Unfair Competition Law. Courts examine internal payroll, material logs, and third-party R&D invoices to determine actual losses. Maintaining detailed financial records on technical projects provides the evidentiary backing needed to pursue maximum damages and punitive multipliers.

Paperwork

Contract Drafting for Chinese Jurisdiction

Confidentiality agreements executed for use in mainland China must align directly with PRC civil and competition law. Standard Western NDAs tied to foreign law and foreign forums are largely ineffective in local courts. Agreements should be drafted in bilingual Chinese-English text, designating Chinese as the controlling language.

Governing law must specify the PRC, selecting local courts in the defendant’s domicile or place of breach as the venue.

Contracts also fail if protected assets are defined too broadly. Blanket clauses covering all business information without specific inventory lists rarely pass Article 9 review. Enforceable contracts include detailed annexes identifying specific drawings, chemical formulations, parts databases, and operational parameters covered by the agreement.

Precise asset schedules leave little room for signatories to claim ambiguity over what was protected.

Liquidated damages provisions under Article 585 of the PRC Civil Code offer an immediate financial remedy upon breach. Courts uphold these clauses when the specified amount represents a reasonable pre-estimate of actual economic loss. Excessive figures are routinely reduced by judges to match verifiable damages, while unrealistically low figures provide no real deterrence.

Formulaic calculations based on R&D costs or commercial value offer the most defensible baseline.

Non-use and non-circumvention terms must accompany standard non-disclosure clauses. While non-disclosure prevents third-party disclosure, non-use and non-circumvention prevent the recipient from producing competing goods or bypassing the rights holder to deal directly with customers. A unified NNN agreement provides essential protection against supplier bypass.

Enforcing Non-Compete and Non-Disclosure Terms

Employment agreements require explicit confidentiality and non-compete terms under the PRC Labor Contract Law. Staff with access to core technical secrets should sign standalone confidentiality undertakings at onboarding. These agreements need to detail proper data handling, watermarking compliance, and strict prohibitions against transferring files to personal devices, preventing departing employees from claiming ignorance.

Non-compete covenants for key personnel must comply strictly with Articles 23 and 24 of the PRC Labor Contract Law. Post-employment restrictions are capped at two years. During this period, the employer must pay monthly compensation ~ typically set at thirty percent of the employee’s average monthly salary before departure, or the local statutory minimum wage.

Missing non-compete payments for three consecutive months allows the former employee to terminate the agreement under SPC Judicial Interpretations on Labor Disputes. Once payments stall, enforceability drops, leaving key technical staff free to work for local competitors. HR systems must automate monthly non-compete payments and tie them to regular compliance verifications.

Exit interviews act as a vital procedural checkpoint when key personnel leave. HR should run structured exit reviews where departing employees return all corporate devices, media, and physical documentation. Employees must sign an exit declaration confirming asset return, acknowledging ongoing non-disclosure duties under the Anti-Unfair Competition Law, and confirming active non-compete terms and payment schedules.

Employment contracts should also explicitly cover service inventions and trade secrets. Under Article 6 of the PRC Patent Law and matching competition law rules, IP created using employer equipment, data, or funds belongs to the company. Clear contractual assignment prevents departing engineers from patenting proprietary designs personally or transferring them to a new employer.

The party agrees that any unauthorized extraction, copy, or use of technical drawings listed in Annex A constitutes a material breach under Article 585 of the PRC Civil Code, subjecting the breaching party to immediate liquidated damages of RMB 2,000,000 payable in local currency.

Stock

Quantifying Damages and Punitive Multipliers

Article 17 of the Anti-Unfair Competition Law sets out four methods for calculating damages. Courts look first at the plaintiff’s actual economic losses. If those cannot be calculated reliably, damages shift to the infringer’s illicit profits.

Where neither loss nor profit is clear, courts look to multiples of comparable licensing fees. If none of these can be proven, statutory damages apply, capped at RMB 5,000,000.

The 2019 amendments introduced punitive damages up to five times the base assessment for intentional infringement under serious circumstances. Specialized IP Courts determine intent by looking for bad faith ~ such as poaching employees to breach contracts, stealing physical files, or disregarding cease-and-desist notices. Serious circumstances typically involve widespread distribution, severe financial harm, or direct threats to the victim’s business survival.

Proving base loss figures requires audit work supported by PRC-certified accounting firms. Base damages are generally calculated by multiplying lost sales volume by the plaintiff’s net profit margin, or by applying the defendant’s operating margin to sales derived from the stolen IP (less costs proven by the defendant). Accounting reports must reconcile tax invoices, bank statements, and customs export records to withstand judicial review.

Asset preservation orders under the PRC Civil Procedure Law freeze defendant funds and physical assets prior to trial. To secure an order, plaintiffs must post collateral or buy litigation insurance matching the value of the targeted assets. Freezing bank accounts, assembly lines, and inventory stops infringers from transferring equipment or hiding funds during litigation, frequently forcing early settlement discussions.

Administrative Complaints and Criminal Referral Thresholds

Administrative actions led by the Market Supervision and Administration Bureau provide a faster alternative to civil litigation. Under Article 21 of the Anti-Unfair Competition Law, market supervision agencies can conduct unannounced site raids, seize infringing goods, inspect server databases, and confiscate tooling. Fines range from RMB 100,000 to RMB 1,000,000 for standard violations, reaching up to RMB 5,000,000 for egregious breaches.

Fines escalate when multiple violations are uncovered. Crucially, administrative raids produce official enforcement logs, evidence inventories, and confiscation receipts that function as pre-authenticated evidence in follow-on civil suits. Filing a complaint detailing physical controls, proof of ownership, and technical comparison reports can trigger swift SAMR raids, halting domestic manufacturing before products reach export channels.

Trade secret theft can be prosecuted criminally under Article 219 of the PRC Criminal Law if the misappropriation causes serious consequences. The 2020 SPC/SPP Judicial Interpretation Fa Shi No. 10 lowered these criminal thresholds significantly: losses exceeding RMB 300,000 trigger criminal liability punishable by up to three years’ imprisonment. Losses over RMB 2,500,000 or theft carried out on behalf of foreign entities draw sentences of seven to ten years.

The Economic Crime Investigation Division of the Public Security Bureau handles criminal cases once a formal complaint is accepted. PSB officers possess wide investigative authority, including digital forensic seizures, detentions, and nationwide bank tracing. Under Chinese procedure, parallel civil lawsuits are suspended until criminal proceedings conclude.

A criminal conviction provides binding proof of misappropriation, leaving civil courts only to determine final monetary damages.

Winding down operations or liquidating joint venture assets while trade secret disputes are pending is costly and slow. Corporate exits demand secure data destruction, physical tooling repatriation, and tax clearance alongside any ongoing litigation. Failing to clear trade secret risks before deregistering a company can expose foreign directors to personal liability under PRC Company Law.

Establishing strong baseline protections upfront ensures IP assets retain value through an exit.

How will Chinese IP Courts adapt baseline confidentiality standards as generative artificial intelligence systems complicate traditional digital permissions and server access monitoring protocols?