TRW & Co · Technology, IP & Data
Confidential Information and Trade Secrets in Singapore
Trade secrets in Singapore are protected by the law of confidence and by contract, not by registration. Since the Court of Appeal's 2020 decision in I-Admin, a defendant who takes confidential material can be presumed in breach. This guide explains the framework, how to protect information, how to respond to misuse and what remedies are available.
Key pointAfter I-Admin, unauthorised acquisition of confidential information can shift the burden to the defendant, so the decisive evidence is often access logs and download records gathered in the first days, not proof of later use.
At a glance
No statute or registration
Singapore protects trade secrets through the equitable law of confidence and contract; IPOS confirms there is no registration process and no fixed time limit on protection.
I-Admin burden shift
Under I-Admin [2020] SGCA 32, once confidentiality and an obligation or unauthorised acquisition are shown, breach is presumed unless the defendant proves its conscience was unaffected.
Post-employment limits
After employment ends, implied duties protect only trade secrets, not ordinary confidential information, so express clauses and reasonable covenants are essential.
Urgent relief available
Courts can grant interim injunctions, search orders and delivery up, but applicants must act promptly, identify information specifically and give undertakings in damages.
Remedies include savings
Equitable damages may reflect development costs and time a defendant saved, alongside damages, equitable compensation or an account of profits.
Swipe or scroll →
What trade secrets in Singapore cover
Trade secrets in Singapore are protected mainly through the law of confidence rather than a registration system. Any information that is not public, has value because it is secret and was shared or obtained in circumstances that impose a duty of confidence can qualify: source code and algorithms, formulations, manufacturing methods, pricing models, customer lists, bid strategies and supplier terms.
The question usually becomes legal at a moment of movement. A senior engineer resigns and joins a competitor. A distributor relationship ends and a lookalike product appears. A joint venture partner starts a rival business. A data room for an acquisition is accessed by people who should not have seen it. In each case, the first issue is whether the information is protectable, and the second is whether there is evidence to act quickly.
Because there is no registration and no time limit, the strength of protection depends almost entirely on how the business identified, controlled and documented its confidential information before anything went wrong.
The legal framework
Singapore has no trade secrets statute. As the Intellectual Property Office of Singapore explains, trade secrets are primarily protected through the law of confidence, supported by contract. IPOS also publishes a Trade Secrets Enterprise Guide with practical safeguarding steps.
Breach of confidence after I-Admin
The leading authority is the Court of Appeal's decision in I-Admin (Singapore) Pte Ltd v Hong Ying Ting [2020] SGCA 32. The claimant must show that the information has the necessary quality of confidence and that it was imparted in circumstances importing an obligation of confidence, or was accessed or acquired without the owner's knowledge or consent. Once those elements are shown, a breach is presumed, and the burden shifts to the defendant to show that its conscience was unaffected.
That modified approach matters in practice. Before I-Admin, owners often struggled to prove that information had actually been used. Now, unauthorised downloading or retention of confidential material can itself support a claim, which makes early evidence of access and copying especially valuable.
Contract and employment duties
Employees owe an implied duty of fidelity during employment, which covers confidential information generally. After employment ends, the implied duty protects trade secrets but not the wider category of ordinary confidential information, which becomes part of the employee's skill and knowledge unless an express clause protects it. That is why express confidentiality clauses, and in appropriate cases reasonable restrictive covenants, matter. Courts will not allow restraints that simply prevent a former employee from using general skill and knowledge.
Other relevant laws
- Computer Misuse Act 1993. Unauthorised access to computer material and related conduct are criminal offences, which can be relevant where data is taken from systems without permission.
- Penal Code 1871. Conduct such as criminal breach of trust may be engaged in some misappropriation cases.
- Copyright Act 2021. Source code, manuals and databases may also be protected by copyright, giving a parallel claim.
- Personal Data Protection Act 2012. Customer lists containing personal data raise PDPA duties for both the original holder and anyone who takes them.
- Limitation Act 1959. Contract and equitable claims are generally subject to a six-year limitation period, with knowledge-based extensions in some damages claims.
| Route | What it protects | Strengths | Limits |
|---|---|---|---|
| Equitable breach of confidence | Information with the quality of confidence, shared or taken in confidence | No registration; I-Admin burden shift helps claimants | Information must be specifically identified and still secret |
| Express contract (NDA, employment clause) | Whatever the contract defines | Clear obligations; can survive termination; can cover ordinary confidential information | Overbroad definitions may be unenforceable; only binds parties |
| Restrictive covenant | Legitimate proprietary interests | Prevents competitive use for a period | Presumed void unless reasonable; cannot protect general skill |
| Copyright | Expression in code, documents, databases | Statutory rights; works against third parties | Does not protect ideas or methods as such |
| Patent | Inventions | Strong monopoly for up to 20 years | Requires full public disclosure; ends secrecy |
| Criminal complaint | Data accessed or taken unlawfully | Police powers of investigation | Owner loses control of timing; no direct compensation |
Identifying and protecting trade secrets
The most common reason claims fail is that the owner cannot say precisely what the secret is. Courts expect confidential information to be identified with specificity, not described as "all our know-how". A trade secrets programme should start with an inventory.
What gives information the quality of confidence
Courts look at several factors when deciding whether information is confidential: whether it is in the public domain, how widely it is known inside the business, the measures taken to guard it, its value to the owner and competitors, and how easily others could acquire or duplicate it independently. Compilations can qualify even if individual items are public, for example a curated customer list with buying patterns and pricing history.
In the employment context, courts also ask whether the employer made clear that the information was confidential and whether it can be separated from the employee's general skill and knowledge. Labelling documents, restricting access and reminding staff of confidentiality are therefore not formalities. They are the evidence that later supports the claim.
Inventory and classification
List the categories of information that drive competitive advantage, who owns them and where they are stored. Classify them into tiers so the strongest controls apply to the most valuable material.
Access controls
Restrict access on a need-to-know basis, log access to key repositories and limit bulk downloads, removable media and personal cloud storage for staff handling top-tier information.
Contracts and policies
Use NDAs with partners and vendors, confidentiality and IP assignment clauses in employment contracts, and a written policy that staff acknowledge and are trained on.
Joiner and leaver processes
Check that new hires bring no third-party secrets, and run exit interviews, device returns and reminders of continuing duties when key people leave.
Our employment contracts and restrictive covenants pages explain how to draft the employee side, and our post on corporate trade secrets management covers programme design.
Trade secrets in Singapore are protected for as long as they stay secret and no longer. Every control a business skips today becomes an argument for the other side tomorrow.
Responding to suspected misuse
When misuse is suspected, the first 48 to 72 hours often decide the outcome. Evidence can be deleted, information can spread and delay can undermine an application for urgent relief.
- Preserve evidence. Suspend deletion policies for relevant accounts, image the departing employee's devices and collect access logs, email forwarding records and download histories with a forensic provider.
- Define the information. Identify exactly which documents or data are at risk and why they are confidential, with evidence of the controls that applied to them.
- Assess the legal routes. Consider breach of confidence, contract, copyright and any criminal angle, and whether foreign parties or servers are involved.
- Send a letter or seek relief without notice. In lower-risk cases, a letter demanding undertakings may resolve matters. Where destruction or further use is likely, apply to court for an interim injunction or a search order before the other side is alerted.
- Secure undertakings and delivery up. Obtain undertakings not to use or disclose, and arrange forensic verification that materials have been returned or deleted.
- Pursue the remedy. Choose between damages, equitable compensation and an account of profits, and consider claims against the new employer if it knew or ought to have known.
- Fix the gap. Review the control failure that allowed the loss and update policies, access rights and contracts.
Where Singapore court or tribunal representation is required, we work alongside Singapore-qualified counsel. Our injunctions and urgent relief and workplace investigations pages explain those processes in more depth.
Before applying for urgent relief, be ready to show the court a short, specific list of the confidential information at stake, the steps taken to protect it and the evidence of copying or access. A vague claim to "all proprietary information" is one of the most common reasons interim applications struggle.
Remedies available
Singapore courts can grant interim and final injunctions, orders for delivery up or destruction of materials, damages, equitable compensation and an account of profits. In I-Admin, the Court of Appeal recognised that equitable damages may be assessed by reference to what the defendant saved, such as avoided development costs and time, which can be significant where software or processes were copied.
Search orders, sometimes called Anton Piller orders, allow the claimant's representatives to enter premises and preserve evidence under court supervision. They are exceptional and require strong evidence and full disclosure to the court. Claimants must also give undertakings in damages when seeking interim injunctions, which is a real cost if the claim later fails.
IPOS also offers mediation and other IP dispute options that can suit disputes between commercial partners who want to keep working together. Many technology and commercial contracts send disputes to arbitration, which is confidential and enforceable internationally. Arbitration clauses usually allow parties to seek urgent interim relief from the court or an emergency arbitrator. See our technology disputes page for how those clauses interact.
Documents and evidence to assemble
- Information inventory identifying the specific secrets, their owner and location.
- Policies and training records showing staff knew what was confidential.
- Signed contracts: employment terms, NDAs, consultancy and partner agreements, with confidentiality and IP clauses.
- Access logs and system records from document management, email, cloud storage and endpoint tools.
- Forensic images and reports prepared with a clear chain of custody.
- Exit documentation: resignation letters, exit interviews, device return records and acknowledgements of continuing duties.
- Evidence of value, such as development costs and commercial use, which supports both confidentiality and quantum.
Risks and common mistakes
Defining confidential information too broadly
Contracts that treat everything an employee learns as confidential are hard to enforce and can undermine the credibility of the whole clause. Courts distinguish between trade secrets, ordinary confidential information and an employee's general skill and knowledge. A clause that lists categories with examples, excludes public information and explains why the categories matter is more persuasive. The same applies in NDAs with commercial partners, where overbroad definitions invite disputes about what was actually protected.
Waiting too long to act
Delay can be fatal to urgent relief. If a business knows that a former employee took files but waits months before acting, a court may question whether urgent relief is really needed, and the information may already have spread. Equally, acting without evidence risks a costly failed application. The answer is a prepared response plan, with forensic and legal support identified in advance, so that evidence can be gathered and assessed within days.
Hiring a competitor's employee without safeguards
Businesses that recruit from competitors can be drawn into breach of confidence claims if a new hire brings confidential material with them. Ask candidates to confirm in writing that they will not bring or use a former employer's confidential information, instruct them not to upload old files, and quarantine any suspicious material immediately. These steps also help show that the new employer's conscience was unaffected, which matters after I-Admin.
Disclosing secrets in deal and partner processes
Data rooms, pilot projects and joint development discussions are common points of leakage. Use staged disclosure, clean teams for competitively sensitive information, watermarking and clear NDA terms on use, return and residual knowledge. Avoid residuals clauses that let the recipient use information retained in unaided memory unless you understand their effect. Our technology transfer team advises on these structures.
Treating a police report as the main remedy
Criminal complaints under the Computer Misuse Act or Penal Code can be appropriate where systems were accessed without authority. But once the police are involved, the owner has less control over timing and scope, and a criminal process does not compensate the business or necessarily stop use quickly. Most owners pursue civil relief first or in parallel, after taking advice on how the two processes interact.
Trade secrets in Singapore and the digital workplace
Most leaks of trade secrets in Singapore now happen through ordinary digital tools rather than stolen paper files. Personal email forwarding, consumer cloud storage, messaging apps on personal phones and unmanaged laptops are the usual routes. A protection programme that ignores these channels protects very little.
Generative AI and external tools
Staff who paste source code, contract terms or customer data into public generative AI tools may be disclosing confidential information to a third party on terms the business has not reviewed. Whether that destroys confidentiality depends on the tool's terms and how the data is used, but the risk is real and hard to reverse. Set a clear policy on approved tools, prefer enterprise versions with contractual confidentiality and no training on inputs, and log use for high-risk teams. Our AI governance team helps organisations set those rules.
Remote work, vendors and outsourcing
Remote and hybrid work spreads confidential information across home networks and personal devices. Vendors and outsourced developers often have broad access to repositories. Contracts with service providers should include confidentiality, security, audit and return-of-data obligations, and access should be removed promptly when engagements end. Where personal data is involved, the same controls support PDPA compliance, so the two programmes should be designed together rather than separately.
Evidence matters here too. Endpoint monitoring, data loss prevention tools and access logs must be set up lawfully, with employees told about monitoring in a policy, so that the records can be relied on if a dispute arises. Retain logs for long enough to cover the period before a departure becomes known.
The cross-border angle
Misappropriation of trade secrets in Singapore often has a foreign dimension. Information may be stored on overseas servers, the departing employee may move to a competitor in another country, or the recipient may be a foreign manufacturer. Singapore courts can grant relief against parties within the jurisdiction and, in appropriate cases, permit service abroad, but enforcement may require parallel proceedings where assets or operations are located.
TRW & Co's network is relevant here. Bangladeshi manufacturers and technology firms working with Singapore partners need NDAs and supply contracts that are enforceable in both places. UK businesses can rely on the UK's statutory trade secrets regime at home and need to understand that Singapore relies on common law confidence. UAE and Chinese counterparties frequently appear in supply chain and technology licensing disputes, and arbitration seated in Singapore is often the most practical forum for enforcement across those jurisdictions.
How TRW & Co helps protect trade secrets in Singapore
We advise on prevention, response and disputes, and coordinate forensic, employment and litigation workstreams.
Protection programmes
We design trade secret inventories, classification schemes, policies and training, and review NDAs and employment clauses for enforceability.
Departure and hiring risk
We advise on exits of key staff and on hiring from competitors, including undertakings, device protocols and onboarding safeguards.
Rapid response
We coordinate evidence preservation and forensic review, assess legal routes and prepare urgent applications with Singapore counsel where court action is needed.
Transactions and partnerships
We structure data rooms, clean teams, joint development and licensing terms so that confidential information remains protected through deals.
See our practices for related work or contact us to discuss a concern.
Checklist for decision-makers
- Have we identified our most valuable trade secrets in Singapore and across the group, specifically and in writing?
- Do access controls and logging cover the repositories where that information sits?
- Are confidentiality and IP clauses in employment and partner contracts current and specific?
- Do leaver processes include device return, access removal and reminders of continuing duties?
- Do we screen new hires from competitors for third-party confidential material?
- Is there a response plan naming forensic and legal support for suspected misuse?
- Are data rooms and partner disclosures staged and recorded?
- Do dispute clauses with foreign partners provide for enforceable interim relief?
Businesses that can answer yes to these questions are well placed both to deter misuse and to act decisively if it happens.
Frequently asked questions
01Is there a trade secrets law in Singapore?
There is no dedicated statute. Trade secrets are protected primarily by the equitable action for breach of confidence and by contractual obligations such as NDAs and employment clauses. Other laws can help in particular cases, including copyright for code and documents, the Computer Misuse Act 1993 for unauthorised access to systems and the PDPA where personal data is involved. Because there is no registration, protection depends on keeping the information secret and being able to show the steps taken to do so.
02What did I-Admin change for confidential information claims?
In I-Admin (Singapore) Pte Ltd v Hong Ying Ting [2020] SGCA 32 the Court of Appeal held that, once a claimant shows information was confidential and was imparted in confidence or taken without consent, a breach is presumed. The defendant must then show that its conscience was unaffected, for example because it received the information accidentally. This makes unauthorised downloading or retention actionable even where actual use is hard to prove.
03Can a former employee use what they learned in their next job?
Former employees can use their general skill and knowledge, and courts will not enforce restraints designed simply to prevent that. After employment ends, the implied duty protects trade secrets but not ordinary confidential information unless an express clause covers it. Express confidentiality clauses and reasonable restrictive covenants can extend protection, but they must be specific and proportionate. Taking documents or data, rather than relying on memory, is far more likely to be actionable.
04How fast can we get an injunction against someone misusing our information?
Singapore courts can hear urgent applications quickly, including without notice where there is a real risk that evidence will be destroyed or information disclosed. Speed depends on how quickly the claimant can assemble evidence: a specific description of the information, proof of the controls protecting it and evidence of access or copying. Delay on the claimant's side weakens the case for urgency, so preparation before an incident is valuable.
05Should we report a theft of trade secrets to the police?
Sometimes. Where computer systems were accessed without authorisation, the Computer Misuse Act 1993 may apply, and other offences may be relevant. But criminal proceedings are controlled by the authorities, may move at a different pace and do not directly compensate the business. Most owners prioritise civil remedies such as injunctions and delivery up, and consider a police report in parallel after taking advice on timing and on how the two processes interact.
06What should an NDA for a Singapore deal include?
A specific definition of confidential information with sensible exclusions, a restriction on use to the stated purpose, limits on who may receive the information, return and destruction obligations, a duration that reflects the value of the information and an acknowledgement that injunctive relief is available. Consider clean team arrangements for competitively sensitive data, avoid residuals clauses unless their effect is understood, and choose a governing law and forum that allow fast interim relief.
07How long does protection for trade secrets in Singapore last?
There is no fixed term. Information remains protectable as long as it keeps its confidential quality and has not entered the public domain. Once it becomes public, through publication, a patent application or careless disclosure, protection is usually lost. Limitation periods for claims after a breach are generally six years for contract and equitable claims, with some knowledge-based extensions for damages claims, but owners should act much sooner to preserve evidence and obtain relief.
Sources and official materials
- IPOS: Trade Secrets — Law of confidence and Trade Secrets Enterprise Guide
- I-Admin (Singapore) Pte Ltd v Hong Ying Ting [2020] SGCA 32 (WIPO Lex) — Court of Appeal modified approach to breach of confidence
- IPOS: Resolve IP Disputes — Mediation and dispute options for IP matters
- IPOS: Copyright Overview — Parallel protection for code, documents and databases
- PDPC: PDPA Overview — Data protection duties for customer and employee data
General information only, current as at 20 October 2026. It is not legal advice and does not create a lawyer–client relationship. Singapore law and regulatory practice change; check current official sources and take advice on the facts of your matter.