Corporate espionage and trade secret theft in India

Hire Your Detective editorial teamUpdated 21 October 20269 min read

Is corporate espionage illegal in India?

Yes, but not under one law. India has no statute that defines a "trade secret" or makes stealing one a single named offence. Instead, the conduct that makes up espionage is caught by several laws at once: contract law, the equitable duty of confidence that courts enforce, the Information Technology Act, 2000, and, where physical property or documents are involved, the Bharatiya Nyaya Sanhita, 2023 (BNS).

In practice, most Indian espionage cases are not spies breaking into offices. They are insiders: a sales manager who forwards the client list to a personal Gmail before joining a rival, an engineer who copies drawings to a pen drive, or a vendor who shares pricing with a competitor. This guide covers that information leak. If your problem is stolen stock, cash or inflated bills, see our guide on employee theft and fraud investigation instead.

How are trade secrets protected without a trade secret law?

Indian courts have repeatedly protected confidential information where three things are shown: the information was genuinely confidential (not public or trivial), it was shared in circumstances that created a duty of confidence, and it was used or disclosed without permission. The main tools are:

The Digital Personal Data Protection Act, 2023 matters too, but in the opposite direction: if the leaked material includes customer personal data, your company may have its own obligations as a data fiduciary once the relevant provisions commence.

Can you stop an ex-employee from joining a competitor?

Usually not. Section 27 of the Indian Contract Act, 1872 voids agreements that restrain anyone from a lawful profession, trade or business, and Indian courts have consistently refused to enforce non-compete clauses that bite after employment ends. Restrictions during employment (including a notice or garden-leave period) are treated differently and are generally upheld.

What you can do is stop the misuse of your information. A court will not tell your former sales head that he cannot work for a rival, but it can restrain him from using your client database, pricing sheets or formulations, and from soliciting specific clients through that information. That is why well-drafted confidentiality and non-solicitation clauses, plus a clear list of what counts as confidential, matter more in India than a broad non-compete.

What are the signs of corporate espionage or an insider leak?

No single sign proves a leak, but a cluster deserves a closer look:

• A competitor suddenly quotes just below your price on several tenders, or approaches your clients with suspiciously specific offers.
• A rival launches a product or feature uncannily close to your unreleased design.
• An employee who has resigned, or is about to, downloads or prints far more than usual, or emails files to a personal address.
• Large transfers to USB drives, personal cloud storage or file-sharing sites, often late at night or just before notice is served.
• Staff asking for access to systems unrelated to their role.
• Key team members leaving together for the same competitor.
• A vendor, consultant or channel partner who also works for a rival.

Physical eavesdropping is rarer but real in high-value negotiations. If you suspect bugs in a boardroom, a lawful bug sweep of your own premises is the right response.

What should a company do when it suspects a leak?

1. Contain quietly. Restrict the suspect's access to sensitive systems without tipping them off unnecessarily. Do not wipe or reissue their laptop.
2. Preserve evidence. Have IT or an external forensic examiner image the work devices and preserve email, VPN, DLP and access logs. Keep a chain-of-custody record so the evidence can later carry a certificate under s.63 of the Bharatiya Sakshya Adhiniyam, 2023.
3. Identify the secret precisely. Courts will not protect "everything we know". List the exact documents, datasets or code taken and why they are not public.
4. Check the paperwork. Pull the appointment letter, NDA, IT policy, acceptable-use acknowledgements and exit documents the person signed.
5. Speak to a lawyer early. Decide between a legal notice, an urgent civil suit for injunction (sometimes with a court-appointed local commissioner to search and seize), and a criminal complaint under the IT Act.
6. Investigate the outside link. If you need to know whether the person has joined or is feeding a competitor, a lawful external enquiry can help (see below).
7. Close the gaps. Fix the access controls and contracts that allowed the leak.

Avoid two common mistakes: confronting the employee before evidence is secured, and accessing their personal phone, email or social accounts. The second exposes the company to liability under the IT Act and can taint your case.

How do you prove trade secret misappropriation in court?

You need to show a chain: what the information was, why it was confidential, how the defendant got it, and that they used or disclosed it (or are about to). Useful evidence includes:

• Forensic reports showing files copied, emailed or uploaded, with timestamps.
• Access logs tying the activity to the person's credentials and device.
• Signed confidentiality clauses and policy acknowledgements.
• Proof the information was marked confidential and access was restricted.
• Evidence of use: matching quotations, identical documents in a rival's bid, client testimony that the ex-employee approached them using your data.

Electronic evidence must be produced with the certificate required by BSA s.63 (earlier Evidence Act s.65B). Indian courts often grant interim injunctions early if a strong prima facie case is shown, so the quality of the first week's evidence collection frequently decides the case.

How can a private investigator help in an espionage case?

A corporate investigator works on the external side of the leak, lawfully. Typical tasks include confirming where a former employee now works, identifying companies or LLPs set up by insiders (through MCA records and field enquiries), checking whether a vendor has undisclosed links to a rival, discreet market enquiries with distributors, and documenting a competitor's use of your material through publicly available products, catalogues and bids.

What a lawful investigator will not do: hack accounts, obtain call records, plant devices, or pose as a government official. Those methods are offences, and evidence gathered that way can sink your case. If a firm offers them, walk away. A verified detective for corporate investigation on Hire Your Detective works within these limits and coordinates with your lawyer and forensic team.

Where the suspect is a business partner or a company you are about to acquire, the work overlaps with due diligence; where it is a supplier, start with structured vendor and supplier verification.

How to prevent corporate espionage and data theft by employees

• Classify information and restrict access on a need-to-know basis. Mark documents confidential.
• Draft contracts properly: specific confidentiality obligations surviving exit, non-solicitation of clients and staff, return-of-property clauses, and IP assignment for employees and consultants.
• Technical controls: data loss prevention, USB restrictions, logging of downloads and email forwarding, and disabling access on the day of resignation for sensitive roles.
• Exit process: collect devices, take a written declaration that no data has been retained, and remind the leaver of continuing obligations.
• Screen people before access: thorough employee background verification for sensitive roles, and checks on consultants and vendors.
• Monitoring policy: monitor company systems only under a written, disclosed policy, never personal devices or accounts.

Bottom line

India protects trade secrets without a trade secret law. Your strongest assets are clear contracts, evidence preserved the right way, and fast legal action. Non-competes after exit rarely work, but confidentiality does. Investigate lawfully, involve a lawyer early, and treat prevention as cheaper than litigation. If you need discreet outside enquiries, you can find a verified corporate detective near you.

This guide is general information, not legal advice. Laws and procedures change, and every case is different — speak to a lawyer about your situation. In an emergency, call 112.