TRW & Co · Technology & IP
Trade Secrets in the UAE
Trade secrets in the UAE are protected by the Industrial Property Law, contract, labour and criminal law, and by separate regimes in the DIFC and ADGM. None of them works unless the business can prove it kept the information secret. This guide explains the legal tests, how to build reasonable measures, and what to do in the first days after a leak.
Key pointEvery UAE route to protect a trade secret turns on proof of reasonable secrecy measures, so access logs, classification and tailored contracts created before a leak are usually worth more than any clause drafted after it.
At a glance
Statutory protection exists
Part Six of Federal Law No. 11 of 2021 protects undisclosed information that is secret, commercially valuable and subject to reasonable secrecy measures.
Criminal penalties apply
Intentional infringement can lead to imprisonment, a fine of AED 100,000 to AED 1,000,000, or both, alongside civil compensation and seizure orders.
Reverse engineering allowed
Article 65 permits acquiring information by testing products on the market, independent development or public sources, so product-visible features need other protection.
New civil law from June 2026
The Civil Transactions Law in force from 1 June 2026 expressly addresses misuse of confidential information received during negotiations or under a contract.
DIFC has its own regime
DIFC Law No. 4 of 2019 includes a trade secrets framework with a three-year limitation period from discovery and an IP Commissioner.
Swipe or scroll →
What protecting trade secrets in the UAE involves
Trade secrets in the UAE are business information that has value because competitors do not know it: formulas and process know-how, source code and algorithms, pricing models, tender strategies, customer and supplier data, product roadmaps and deal pipelines. Unlike patents or trade marks, they are not registered. They are protected for as long as they stay secret and the holder can show it took reasonable steps to keep them that way.
That makes trade secret protection a management discipline as much as a legal right. Most losses happen through ordinary channels: a senior employee joining a competitor, a joint venture partner that keeps using shared know-how, a supplier that reverse-engineers a component, or a cyber intrusion. The legal response depends on what the business did before the loss.
The question becomes urgent when someone leaves with data, a former partner launches a strikingly similar product, or a regulator or counterparty asks for sensitive information. In each case, speed, evidence and the choice of forum decide whether the secret can still be protected.
The legal framework for trade secrets in the UAE
There is no single trade secrets statute. Protection comes from several overlapping sources, and the right combination depends on whether the business sits onshore, in the DIFC or in ADGM, and whether the person who took the information was an employee, a contractor or a stranger.
Undisclosed information under the Industrial Property Law
The main statutory protection is Part Six of the Federal Law No. 11 of 2021 on the Regulation and Protection of Industrial Property Rights, which treats undisclosed information as industrial property, as the government's IP overview notes. Under Article 61, information is protected if it is secret, in the sense of not being generally known or readily accessible to people in the relevant field; has commercial value because it is secret; and is subject to reasonable measures by its lawful holder to keep it secret. Protection lasts as long as those conditions continue.
Article 64 lists unfair practices, including inducing or bribing employees to disclose information, breach of confidentiality agreements, theft, espionage and fraud, and the knowing use of information obtained in those ways. Article 65 sets out what is not unfair: obtaining information from public sources, by examining products lawfully on the market, by independent research and development, or where it is already known in the industry. Separately, Article 62 protects test data submitted to authorities for pharmaceutical and agricultural chemical approvals for a limited period.
Remedies include civil compensation under Article 67, precautionary seizure orders under Article 68, and criminal penalties under Article 69 for intentional infringement of rights protected by the law, with imprisonment, a fine of between AED 100,000 and AED 1,000,000, or both. The implementing regulation is Cabinet Decision No. 6 of 2022, listed on the Ministry's IP legislation page.
Employment, contract and criminal law
The Labour Law, Federal Decree-Law No. 33 of 2021, requires employees to keep work secrets confidential and return work materials when employment ends, allows dismissal without notice where an employee discloses secrets causing loss to the employer, and permits a non-compete of up to two years if it is limited in time, place and type of work.
The new Civil Transactions Law, Federal Decree-Law No. 25 of 2025, in force from 1 June 2026, adds an express rule against the unauthorised use or disclosure of confidential information received during negotiations or under a contract, which strengthens claims against prospective buyers, bidders and partners.
Criminal law also plays a role: the Penal Code penalises disclosure of secrets entrusted by profession, and the cybercrime law, Federal Decree-Law No. 34 of 2021, covers unauthorised access to and taking of electronic data.
DIFC and ADGM
The DIFC Intellectual Property Law, DIFC Law No. 4 of 2019, contains a dedicated trade secrets regime with a similar three-part definition, defined acts of misappropriation, and a limitation period of three years from when misappropriation was or should have been discovered. Claims can be brought in the DIFC Courts, and an IP Commissioner has administrative powers. ADGM applies English common law under its legal framework, so the equitable action for breach of confidence and contractual claims are available before the ADGM Courts.
| Route | Source | Best used for | Key limitation |
|---|---|---|---|
| Statutory undisclosed information claim | Federal Law No. 11 of 2021, Arts 61 to 69 | Misappropriation by competitors, former staff or partners onshore | Must prove secrecy, value and reasonable protective measures |
| Contract claim | NDAs, employment contracts, supply and JV agreements; Civil Transactions Law | Counterparties and employees bound by confidentiality terms | Only binds parties; damages must be proved |
| Employment remedies | Federal Decree-Law No. 33 of 2021 | Current staff and leavers, including non-compete | Non-competes must be reasonable and limited; labour process first |
| Criminal complaint | Industrial Property Law, Penal Code, cybercrime law | Theft, hacking, deliberate disclosure | Prosecution controls the case; slower civil recovery |
| DIFC or ADGM claim | DIFC Law No. 4 of 2019; English common law in ADGM | Entities and contracts within the centres | Jurisdiction must be established; DIFC limitation period |
Building "reasonable measures": a protection programme
Every route above turns on whether the holder took reasonable steps to keep the information secret. Courts and experts look for evidence, not policies alone. A programme for trade secrets in the UAE usually includes the following elements.
Identify and classify
Keep a register of key secrets, their owners and where they are stored. You cannot show reasonable protection of information you never identified, and classification makes access decisions defensible.
Control access
Limit access on a need-to-know basis, log access to sensitive repositories, restrict downloads and personal devices, and review permissions when roles change. Logs are often the decisive evidence later.
Contract for it
Use tailored confidentiality, invention assignment and non-compete clauses in employment contracts, and NDAs with clear definitions, return obligations and governing law for partners, bidders and suppliers.
Manage joiners and leavers
Screen new hires for information from former employers, and run structured exits: device return, access revocation, reminders of obligations and, for senior leavers, a forensic check of recent downloads.
Train and remind
Short, role-specific training and periodic acknowledgements show that staff knew what was confidential. Mark documents and repositories so that the confidential nature is obvious.
Align with data and cyber rules
Customer and employee data may also be personal data. Align secrecy controls with data protection and cybersecurity programmes so that one incident response serves both.
Our pages on restrictive covenants and federal personal data protection cover two of the most important supporting regimes.
Non-competes are the weakest link if used alone. A two-year, region-wide restriction for a junior employee is unlikely to be enforced as written. A narrower restriction, backed by confidentiality obligations and evidence of the specific secrets the employee held, is usually more effective.
Trade secrets in the UAE across joint ventures, suppliers and licensees
Many of the most valuable trade secrets in the UAE are shared deliberately: with a joint venture partner that needs process know-how, a contract manufacturer that needs specifications, a distributor that needs pricing, or a licensee that needs a technical manual. Sharing does not destroy protection if it is controlled, but every disclosure needs a legal basis and a paper trail.
Joint venture agreements should state which party contributes which know-how, whether it is licensed or assigned to the venture, who owns improvements, and what happens to the information if the venture ends or a partner exits. Supply and manufacturing agreements should limit use to the contract purpose, prohibit reverse engineering of supplied samples where commercially realistic, require security standards and audits, and oblige return or certified destruction at the end. Licences of know-how should be drafted alongside any patent or trade mark licence, because the statutory recording rules for registered rights do not apply to undisclosed information.
Keeping secrets confidential during proceedings
A claimant must usually explain its secret to prove its case, which creates a risk of further disclosure. Onshore courts commonly appoint technical or accounting experts, and parties can ask that sensitive material be reviewed by the expert rather than circulated widely. In the DIFC and ADGM, confidentiality rings and protective orders familiar from common-law practice are available. Arbitration offers privacy by default under most institutional rules, which is one reason to choose it for technology and partnership contracts. Plan the confidentiality regime for any dispute before filing, not after the other side requests the documents.
Responding to misappropriation: step by step
When trade secrets in the UAE are taken, the first days decide what can be recovered. The usual sequence is below.
- Contain. Suspend access, preserve devices and accounts, and stop automatic deletion. Do not wipe a departing employee's laptop before it has been forensically imaged.
- Investigate under privilege where possible. Instruct forensic specialists through counsel, establish what was taken, when and how, and document the chain of custody. See our page on workplace investigations.
- Assess the routes. Decide between civil, labour, criminal, DIFC or ADGM, and arbitration routes based on who took the information, where they are and what outcome is needed.
- Seek urgent relief. Consider precautionary seizure under the Industrial Property Law, interim orders from the competent court, or emergency arbitrator relief where an arbitration clause applies.
- Send a measured demand. A letter to the recipient and any new employer often secures undertakings and return of material, but should not tip off a party before evidence is secured.
- Consider a criminal complaint. Where theft or hacking is clear, a complaint can lead to searches and seizures, but it hands control of timing to prosecutors.
- Remediate. Close the gap that allowed the loss, update the protection programme and record the improvements, which strengthens future claims.
Our emergency and interim relief page explains the onshore and DIFC tools in more detail. Where representation before UAE onshore courts or the DIFC/ADGM Courts is required, we work alongside locally licensed advocates and registered practitioners.
Documents and evidence
UAE onshore courts rely heavily on documents and court-appointed experts, and there is no broad disclosure process like that in English litigation. A claimant must largely bring its own evidence.
- A description of each secret and why it has commercial value, prepared so that it can be shown to a court or expert without destroying secrecy.
- Policies, classification records, access controls and logs showing reasonable protective measures.
- Employment contracts, NDAs, acknowledgements and training records for the people involved.
- Forensic images, download and email logs, and chain-of-custody records.
- Evidence of the misuse: competitor products, tender submissions, customer approaches or code similarities.
- Quantum evidence: lost contracts, development costs and the value of the information.
Risks and common mistakes
Relying on generic confidentiality clauses
Boilerplate clauses that make "all information" confidential are hard to enforce and do little to prove reasonable measures. Courts and experts look for a link between the clause and identifiable secrets. Draft definitions that describe the categories of information that matter, require return or destruction on exit, and deal with residual knowledge. Pair them with operational controls, because a clause without access restrictions or marking suggests the business did not treat the information as secret in practice.
Destroying evidence while reacting
Well-meaning IT teams often reset a departing employee's laptop or disable an account in a way that deletes logs. That can destroy the best evidence of what was taken. Put a hold in place as soon as a concern arises, image devices forensically, and preserve cloud and email logs. Record who handled each item and when. A clean chain of custody is particularly important where the matter may become a criminal complaint or a claim before a court-appointed expert.
Choosing the wrong forum
A DIFC or ADGM entity may have an employee contract governed by the centre's employment law, a customer contract with an arbitration clause, and a competitor based onshore. Each relationship may point to a different forum. Launching in the wrong place can cost weeks and lose interim relief. Map every relationship and clause before filing, and consider whether a single claim in one forum can deliver the order you need. Our page on DIFC Courts proceedings explains how that forum works.
Hiring in contaminated information
Businesses are also defendants. A new senior hire who brings a former employer's pricing files or code can expose the recruiter to claims under Article 64, which covers knowingly using information obtained by unfair means. Use joiner declarations, instruct new hires not to bring material, restrict their access to sensitive projects for a period where appropriate, and act quickly if contaminated material is found, including documented quarantine and deletion.
Over-sharing in deals and tenders
Due diligence, joint venture talks and tenders often involve disclosing secrets to parties who may become competitors. Use staged disclosure, clean teams for competitively sensitive data and data rooms with access logs. From 1 June 2026, the Civil Transactions Law adds a statutory basis to claim against misuse of information received during negotiations, but a tailored NDA remains the primary protection. See our M&A page for deal process controls.
Cross-border angle
Trade secret disputes rarely stay in one country. The UK protects trade secrets through breach of confidence and the Trade Secrets (Enforcement, etc.) Regulations 2018, with strong disclosure and search order tools that can support a UAE matter. Singapore relies on the common law of confidence and contract. China protects trade secrets under its Anti-Unfair Competition Law, which matters when manufacturing partners hold technical know-how. India and Bangladesh have no dedicated trade secrets statute and rely mainly on contract and general law, so contractual protection is especially important for development centres there. Saudi Arabia has its own rules on confidential commercial information.
For groups with teams across the UAE, South Asia and Europe, a consistent protection programme, contracts with suitable governing law and forum clauses, and a plan for parallel relief in the country where the information is being used are essential. Enforcement of foreign judgments and awards in the UAE also has its own requirements, covered on our foreign judgment enforcement page.
The law protects secrets that the business itself treated as secret. Evidence of reasonable measures is not paperwork; it is the claim.
How TRW & Co helps
We help businesses protect and enforce trade secrets in the UAE, coordinating with our teams in Dhaka, Singapore, London and China when information moves across borders.
Protection programme design
We map key secrets, review controls and draft employment, NDA, supplier and joint venture terms so that reasonable measures can be proved.
Incident response
We coordinate containment, forensic preservation and privileged investigation when a leak or departure raises concern, working with technical specialists.
Enforcement strategy
We assess civil, labour, criminal, DIFC, ADGM and arbitration routes, prepare evidence and plan urgent relief with locally licensed advocates.
Transactional protection
We structure disclosure in deals, licences and tenders, including clean-team arrangements and know-how licences.
Browse all our UAE practices or contact our Dubai team to discuss a concern.
Checklist for decision-makers
- Have we identified and recorded our most valuable trade secrets in the UAE and who can access them?
- Can we evidence reasonable protective measures: access controls, logs, marking, training?
- Do employment contracts include tailored confidentiality, invention and proportionate non-compete terms?
- Do NDAs and partner agreements define confidential information precisely and choose a workable forum?
- Is there an exit protocol for senior leavers, including device return and download review?
- Do we have an incident plan that preserves evidence before IT remediation?
- Have we screened new hires for contaminated information?
Protecting trade secrets in the UAE is less about a single statute than about consistent habits. Businesses that identify their secrets, restrict access, contract carefully and preserve evidence quickly are the ones that can still enforce their rights when a key employee, partner or supplier walks away with information that matters, and they also make far less attractive targets in the first place.
Frequently asked questions
01Are trade secrets protected by statute in the UAE?
Yes. Federal Law No. 11 of 2021 on Industrial Property protects undisclosed information that is secret, has commercial value because it is secret, and is subject to reasonable secrecy measures. It lists unfair practices such as theft, espionage, breach of confidentiality agreements and inducing employees to disclose, and provides civil compensation, precautionary seizure and criminal penalties. Contract, labour, civil and criminal law add further protection, and the DIFC has its own regime.
02Do trade secrets need to be registered?
No. Trade secrets are not registered anywhere in the UAE, and registering them would defeat their secrecy. Protection lasts as long as the information remains secret and the holder keeps taking reasonable measures. That is why businesses should keep an internal register of key secrets and evidence of the controls protecting them, rather than relying on any public filing.
03Is reverse engineering lawful in the UAE?
Generally yes. Article 65 of the Industrial Property Law states that acquiring information by examining and testing products lawfully on the market is not an unfair practice, nor is independent research and development or using public sources. Owners therefore cannot rely on secrecy for features that a competitor can discover from the product itself, and should consider patents or contractual restrictions where reverse engineering is a risk.
04Can an employer enforce a non-compete against a departing employee?
The Labour Law allows a non-compete of up to two years after employment ends if it is limited in time, place and type of work, and reasonable to protect legitimate interests. Courts look closely at proportionality, so broad restrictions for junior roles are risky. Confidentiality obligations continue regardless, and disclosure of secrets causing loss can justify dismissal without notice. DIFC and ADGM employees are governed by the centres' own employment laws.
05What remedies are available if a trade secret is stolen?
Onshore, the holder can seek civil compensation, precautionary seizure orders and interim relief, and can file a criminal complaint; intentional infringement under the Industrial Property Law carries imprisonment and fines of AED 100,000 to AED 1,000,000. In the DIFC, the Courts can award injunctions and damages, and the IP Commissioner has administrative powers. Contract claims and arbitration may also be available depending on the relationship.
06How does the new Civil Transactions Law affect confidentiality?
Federal Decree-Law No. 25 of 2025, in force from 1 June 2026, replaced the 1985 Civil Code. It includes express provisions on good faith in negotiations and on the unauthorised use or disclosure of confidential information obtained during negotiations or in connection with a contract. That gives businesses an additional basis to claim against bidders, prospective buyers and partners, alongside any NDA.
07Is there a time limit for trade secret claims?
It depends on the route. In the DIFC, claims must be brought within three years of when the misappropriation was or should reasonably have been discovered. Onshore, limitation depends on whether the claim is contractual, tortious, labour or criminal, and on the transitional rules of the new Civil Transactions Law. Act promptly: delay also weakens applications for interim relief.
Sources and official materials
- Federal Law No. 11 of 2021 on Industrial Property Rights — Undisclosed information, Articles 61 to 69
- Intellectual Property Legislations, Ministry of Economy and Tourism — IP statutes and Cabinet Decision No. 6 of 2022
- Intellectual property (u.ae) — Government overview including undisclosed information
- DIFC Courts — Forum for DIFC trade secret and IP claims
- The ADGM Legal Framework — English common law in ADGM
- WIPO Lex: United Arab Emirates — UAE IP legislation and treaties
General information only, current as at 27 October 2026. It is not legal advice and does not create a lawyer–client relationship. UAE law differs between the onshore jurisdiction, the DIFC, ADGM and the free zones, and changes frequently; check current official sources and take advice on the facts of your matter.
