Protecting Your ‚Secret Sauce‘: Trade Secrets Under UAE Law

Safeguarding Your Most Valuable Intangible Assets

In the United Arab Emirates’ fast-paced economy, a company’s most valuable assets are often intangible, such as proprietary formulas, client databases, and internal processes—collectively known as “trade secrets.” The unauthorized disclosure of this “secret sauce” can inflict significant financial damage and undermine a company’s market position.

Unlike patents or trademarks, the UAE does not have a single, unified law for trade secrets. Instead, protection is derived from a “piecemeal array” of provisions across the Civil Code, Penal Code, and Labour Law, among others. This fragmented framework places the burden of protection squarely on the business owner. UAE courts will not protect a secret that the owner has not actively and diligently protected themselves. Therefore, an effective strategy must be multi-layered and proactive, integrating legal instruments with rigorous internal policies. This report provides a guide for businesses to define, protect, and enforce their rights over these critical assets.

1. Defining Your ‘Secret Sauce’: What Qualifies as a Trade Secret?

Before information can be protected, it must legally qualify as a trade secret. Since the UAE’s onshore laws lack a single statutory definition, legal practice defers to the internationally recognized standards of the World Intellectual Property Organization (WIPO). For information to be protected, it must meet all three of the following criteria:

1. It is secret: The information is not generally known or readily accessible to people who normally deal with this kind of information.
2. It has commercial value because it is secret: The information provides a competitive advantage due to its confidentiality. This includes “negative information,” like failed research, which saves competitors time and money.
3. It has been subject to reasonable steps to keep it secret: The owner must have taken active, demonstrable measures to maintain its secrecy. The UAE Patent Law reinforces this, stating protection relies on “effective measures implemented by its legal holder for its protection”. This is the most critical criterion, as the failure to prove such steps is a common reason claims fail in court.

In contrast, the Dubai International Financial Centre (DIFC) free zone sets out a statutory definition of trade secrets in its IP Law, giving businesses greater certainty by expressly protecting all forms of confidential business information against misappropriation—such as obtaining, using, or disclosing it through unlawful or improper means. Protection applies only where the information qualifies as a trade secret, has actual or potential economic value from remaining undisclosed, and is subject to reasonable confidentiality measures, which may include encryption, password protection, access restrictions, or marking information as confidential.

2. The Legal Armoury: UAE’s Multi-Layered Legislative Framework

While the UAE lacks a standalone trade secrets act, it offers robust protection through provisions in its core federal laws. This allows businesses to leverage a combination of civil, criminal, and labour law remedies.

• The Civil Code (Federal Law No. 5 of 1985): This is the foundation of employee duty. Article 905(5) obliges employees to safeguard trade secrets even after their contract ends. Crucially, Article 922(2) states that legal actions for the “disclosure of trade secrets” are not subject to the standard one-year limitation period for other employment claims, giving employers a longer window to act.
• The Penal Code (Federal Decree-Law No. 31 of 2021): This provides the strongest deterrent by criminalizing disclosure. Article 432 makes it an offense for anyone entrusted with a secret through their profession to divulge it without authorization. A conviction requires proving criminal intent and carries penalties of at least one year in prison and/or a minimum fine of AED 20,000.
• The Commercial Companies Law (Federal Decree-Law No. 32 of 2021): Article 369 targets corporate insiders, sanctioning anyone who “utilizes or discloses a secret of the company”. Penalties include imprisonment and fines ranging from AED 50,000 to AED 500,000.
• The Labour Law (Federal Decree-Law No. 33 of 2021): This law grants employers immediate remedies. Article 16 reinforces the employee’s duty of confidentiality, while Article 44(5) allows an employer to dismiss an employee without notice or end-of-service gratuity for divulging company secrets.
• The Patent Law (Federal Law No. 11 of 2021): Articles 61-63 protect “undisclosed information” or “know-how,” but explicitly state that this protection is contingent on the holder having taken “effective measures” to maintain secrecy.

This multi-pronged framework allows a business to pursue several remedies at once: for example, terminating an employee under Labour Law while simultaneously filing a criminal complaint under the Penal Code and a civil suit for damages under the Civil Code.

3. Proactive Protection Through Contractual Safeguards

The most effective method for protecting trade secrets is through proactive, well-drafted contracts. The two most critical instruments are Non-Disclosure Agreements (NDAs) and non-compete clauses.

A: The Non-Disclosure Agreement (NDA)

The NDA is the cornerstone of any trade secret protection program, creating a formal, legally binding confidential relationship. To be enforceable, an NDA must be precisely drafted and include:

• A clear and specific definition of “Confidential Information.”
• The limited purpose for which the information is being shared.
• The recipient’s obligations to protect the information.
• Standard exclusions (e.g., publicly available information).
• A specified duration for the confidentiality obligation.
• A requirement to return or destroy the information upon request.
• The consequences of a breach.
• A governing law and jurisdiction clause specifying UAE law and courts.

NDAs can be unilateral (one-way), mutual (two-way), or multilateral, depending on the business relationship.

B: The Non-Compete Clause

Non-compete clauses aim to prevent a former employee from using their knowledge to compete directly against the business. However, they are subject to a high level of judicial scrutiny in the UAE. Under Article 10 of the Labour Law, a non-compete clause is only enforceable if it is reasonable and necessary to protect a legitimate business interest. To be valid, the clause must be strictly limited in three key aspects:

1. Time: The restriction cannot exceed two years, with courts often favoring shorter periods like 6 to 12 months.
2. Place (Geography): The scope must be limited to the area where the employer’s business could be harmed.
3. Nature of Business: The restriction must be confined to the specific type of work that would directly compete with the employer.

Enforcement is challenging, as the employer must prove actual financial damage, and UAE courts generally do not grant injunctions to prevent an employee from starting a new job.

A Non-Solicitation Clause, which prohibits a former employee from poaching clients or staff, is often a more targeted and enforceable alternative.

4. Enforcement and Legal Recourse

When a breach occurs, the UAE legal system offers a dual-track approach, allowing for both civil and criminal actions.

• Civil Action: Pursued in civil courts, this path aims to obtain financial compensation for damages caused by the breach of contract or statutory duties. The employer bears the burden of proving the information was a trade secret, a breach occurred, and it caused quantifiable financial loss. The primary remedy is monetary damages, as federal courts generally do not grant preventative injunctions.
• Criminal Action: This involves filing a complaint with the police or Ministry of Economy, which can trigger a state investigation. A key advantage is that authorities can conduct a raid on the suspect’s premises to seize evidence, which can be crucial for proving the case. A conviction under the Penal Code results in punishment, including imprisonment and fines, serving as a powerful deterrent.

For businesses operating within the DIFC, the common law courts offer significant advantages, including the power to grant potent injunctive relief to immediately stop the use or disclosure of a trade secret.

Strategically, initiating a criminal complaint first can be highly effective. The state’s investigative powers can unearth evidence that would be difficult to obtain in a civil case, and a criminal conviction can then be used to support a subsequent civil claim for damages.

Proactive Governance is the Ultimate Defence

The UAE’s fragmented legal framework for trade secrets places a significant emphasis on proactive self-protection. A company’s “secret sauce” is only as secure as the legal and operational safeguards it builds. Effective protection rests on three interconnected pillars:

1. A Deep Understanding of the Law: Businesses and their counsel must be fluent in the rights and remedies available across the UAE’s “piecemeal” statutory framework. This includes knowing when to leverage the criminal deterrent of the Penal Code, the enduring obligations of the Civil Code, the immediate administrative power of the Labour Law, and the corporate protections of the Commercial Companies Law.
2. Robust Contractual Fortifications: Meticulously drafted Non-Disclosure Agreements and reasonable, narrowly tailored restrictive covenants are the essential first line of defence. These contracts transform implicit duties into explicit, enforceable obligations, providing a clear legal basis for action in the event of a breach.
3. Comprehensive Internal Governance: Legal agreements are only as strong as the internal culture and procedures that support them. A demonstrable, documented program of confidentiality—encompassing data classification, access controls, employee training, and third-party risk management—is the practical embodiment of the “reasonable steps” required by law. It is this evidence of diligent self-protection that ultimately persuades a court that the information was, in fact, a secret worth protecting.

Businesses should treat trade secret protection as a core element of their daily operations, not only to safeguard sensitive information but also to preserve long-term value. Seeking legal advice can further help organizations design practical policies and safeguards that fit their specific operations, reducing risks and strengthening long-term resilience.

Download the article here.