How to use this checklist
Open a file for every hire from a competitor, even a junior one, and put the completed checklist in it. If a dispute comes two years later, this is the document that shows what the company did, when, and who did it. A court is less interested in your policy than in what happened to this person on these dates.
Work through the phases in order. Phases 1 through 5 run from first contact through day 90. Phase 6 applies the moment anyone suspects outside material has arrived. Phase 7 applies when a letter or lawsuit comes, and the two often overlap. Phase 8 is for a company on the other side of the table.
Owners are shown in brackets: [R] recruiter, [M] hiring manager, [HR], [IT], [L] in-house or outside counsel. Not every item applies to every hire, so note "N/A" and the reason for anything you skip. For a low-tier hire, Phase 1's tier decision may cut this down to a few items, but write the decision down.
For the law behind these tasks, read Hiring From a Competitor: Inevitable Disclosure, Employee Raiding, and the New Employer's Trade Secret Exposure. For the sequence with scripts and sample language, read Onboarding a Competitor's Employee Without Importing Its Secrets: A Practical Guide. Forms mentioned here are in Lateral Hire Toolkit: Candidate Certifications, Onboarding Instructions, and Cease-and-Desist Responses.
Phase 1: Before recruiting and before any offer
Set the ground rules
- [L] Give recruiters and headhunters a written rule: do not ask for or forward competitor information; report any offer of it to counsel. Authority: 18 U.S.C. § 1839(5), under which knowledge or reason to know can make acquisition or use misappropriation. Note: A headhunter's recording of a candidate offering a "crew" and a "turnkey" design was the centerpiece of the evidence in Comet Technologies USA, Inc. v. XP Power, LLC, No. 23-15709 (9th Cir. July 14, 2026). The appeal reversed the judgment on an instruction issue, but the recording was still in the record.
- [L] Confirm that hiring the person is lawful in principle. Merely soliciting or hiring an at-will employee is not actionable absent an independently wrongful act under Reeves v. Hanlon, 33 Cal. 4th 1140 (2004). Recruiting alone also does not supply the knowledge element under Bombardier Inc. v. Mitsubishi Aircraft Corp., 383 F. Supp. 3d 1169 (W.D. Wash. 2019).
- [HR] Open the hire file and name its owner. Note: One person should know where everything is. That person should know the hire's start date, tier, and restrictions.
Identify restrictions and law
- [R or HR] Ask the candidate to list every agreement that may limit the job, including employment, confidentiality, equity, bonus, deferred compensation, and sale of business documents. Note: Do not stop at the employment agreement. Covenants commonly appear in equity documents.
- [L] Obtain and read the actual covenant language. Note: A candidate whose agreement is itself confidential should clear sharing with personal counsel. Ask for the operative language only.
- [L] Note the four locations: where the candidate lives, will work, where the old employer sits, and what the contract's choice of law and forum say. Authority: Application Group, Inc. v. Hunter Group, Inc., 61 Cal. App. 4th 881 (1998); compare Estee Lauder Companies Inc. v. Batra, 430 F. Supp. 2d 158 (S.D.N.Y. 2006).
- [L] Check state noncompete law as of today. California: Cal. Bus. & Prof. Code § 16600, § 16600.5, and Edwards v. Arthur Andersen LLP, 44 Cal. 4th 937 (2008). Minnesota: Minn. Stat. § 181.988. Washington: RCW 49.62, with a statutory ban effective June 30, 2027 (ESHB 1155, Laws of 2026, ch. 149). Florida: CHOICE Act, ch. 2025-213, Laws of Florida. Massachusetts: Mass. Gen. Laws ch. 149, § 24L. Note: Do not rely on the FTC's rule. It was set aside in Ryan LLC v. Federal Trade Commission, 746 F. Supp. 3d 369 (N.D. Tex. 2024) and removed from the Code of Federal Regulations by 91 Fed. Reg. 6,507 (Feb. 12, 2026). See Non-Compete Agreements Under Siege: FTC Rulemaking and State Law Developments for background that predates that removal.
- [L] Check whether inevitable disclosure is available in the likely forum. Compare PepsiCo, Inc. v. Redmond, 54 F.3d 1262 (7th Cir. 1995) and Bimbo Bakeries USA, Inc. v. Botticella, 613 F.3d 102 (3d Cir. 2010) with Whyte v. Schlage Lock Co., 101 Cal. App. 4th 1443 (2002), LeJeune v. Coin Acceptors, Inc., 381 Md. 288 (2004), and Holton v. Physician Oncology Services, LP, 292 Ga. 864 (2013).
Tier the hire
- [L and M] Score the hire: head-to-head competition; overlap of role; sensitivity of old access; timing relative to plans and launches; team moves; departure circumstances; former employer's enforcement habits. Note: These echo the factors in EarthWeb, Inc. v. Schlack, 71 F. Supp. 2d 299 (S.D.N.Y. 1999). The closer the role is to the old one, the stronger the former employer's story.
- [L] Record the tier and the required steps. High tier gets the entire checklist.
Red flag: The candidate describes the move as bringing "the plan," "the book," or "the team." Stop and call counsel before any further contact. Facts like these drove Motorola Solutions, Inc. v. Hytera Communications Corp., 108 F.4th 458 (7th Cir. 2024), where engineers were recruited in exchange for proprietary information, and the DTSA damages alone reached $407.4 million.
Red flag: A current employee of the competitor is assembling a group for you. That is the fact pattern in Bancroft-Whitney Co. v. Glen, 64 Cal. 2d 327 (1966) and Duane Jones Co. v. Burke, 306 N.Y. 172 (1954).
Phase 2: Interviews and candidate communications
- [M] Brief every interviewer in writing: skills only; no customers, pricing, roadmaps, code, or who else may leave.
- [M] Give interviewers the stop script, and tell them to report anything volunteered to counsel without writing down the substance. Note: In Language Line Services, Inc. v. Language Services Associates, Inc., 944 F. Supp. 2d 775 (N.D. Cal. 2013), an interview presentation listed competitor accounts and financial data, and another recruit sent a "60 Day Plan" before starting.
- [M] Use neutral work samples. No code, decks, or models from the current job.
- [R] Use personal contact details only. Do not communicate through the candidate's employer email or phone.
- [M] Avoid notes or messages that describe the hire as a way to hurt or learn about the competitor.
- [L] Check that finalists are not all drawn from one rival without a documented reason. Note: The district court in PepsiCo drew an inference from the fact that all three candidates came from PepsiCo. The Seventh Circuit noted an innocent explanation but deferred.
- [HR] Discuss independent counsel with any candidate holding a covenant or sensitive access. Keep clear who represents whom. Authority: Upjohn Co. v. United States, 449 U.S. 383 (1981) on the corporate client; Waymo LLC v. Uber Technologies, Inc., 870 F.3d 1350 (Fed. Cir. 2017) on adverse interests and lost privilege.
Red flag: A file arrives unsolicited from a candidate. Do not open, forward, or delete it. Call counsel. Reading it adds to who knows and deleting it may create a preservation problem.
Phase 3: Offer and resignation
Offer
- [L] Decide how to handle any enforceable covenant: restructure the role, delay the start or bench, candidate-requested waiver, proceed and defend, or declaratory action under 28 U.S.C. § 2201. Note: An unreasonable covenant may not support interference in some states, as in Juliette Fowler Homes, Inc. v. Welch Associates, Inc., 793 S.W.2d 660 (Tex. 1990). Do not assume that outcome. New York courts may trim the covenant and enforce the rest.
- [HR and L] Include representations: all restrictions disclosed; job can be performed without breach; no former employer material held; none will be brought or used.
- [L] Decide on indemnification and put the limits in writing. Exclude intentional or dishonest conduct, and condition the promise on truthful certification and cooperation. Note: An indemnity can be evidence of knowing interference, so weigh it case by case.
- [L] Write the role description with overlaps in mind. Authority: 18 U.S.C. § 1836(b)(3)(A)(i), under which any conditions must rest on evidence of threatened misappropriation, and a well-designed role gives little to enjoin.
- [HR] Write the letter as if a judge will read it. Note: A signed form did not stop the injunction in Bimbo Bakeries, and its existence did not prevent liability questions in Language Line. It still helps. It is not the protocol.
Good leaver instructions
- [HR] Deliver written leaving instructions: take nothing, including one's own work; no forwarding, downloading, or photographing; return everything.
- [HR] Instruct: do not wipe, reformat, or delete to comply; speak to personal counsel first. Note: In WeRide Corp. v. Kun Huang, 379 F. Supp. 3d 834 (N.D. Cal. 2019), the court treated erasing a laptop, deleting files, and clearing browser history as evidence of misappropriation.
- [HR] Instruct: recruit no colleagues and solicit no customers before the last day, and check any covenant afterward.
- [HR] Instruct: give notice soon after accepting, and step back from sensitive meetings. Note: Bimbo Bakeries relied on the executive's staying in the room for nearly three months after accepting. Whyte and PepsiCo recount similar facts.
- [HR] Instruct: no lying about the move. The candidate need not volunteer the destination unless required, but false statements hurt. Note: The "out and out lies" finding was central to the result in PepsiCo.
- [HR] Include the statement that nothing limits lawful reports to government agencies or counsel, consistent with 18 U.S.C. § 1833(b).
Red flag: The candidate says, "I've been saving a few things to my personal Drive just in case." Do not advise deletion. Send the candidate to personal counsel at once, record that you did, and do not start the person until counsel has dealt with it.
Phase 4: Onboarding, day one through day 30
Machines and accounts
- [IT] Issue a clean, managed device. No restores from personal backups and no migration utilities from any old machine.
- [IT] Disable USB mass storage by default, and log any exception.
- [IT] Block personal cloud sync clients and consumer storage uploads on managed devices. Note: Sync can move files in ways users do not intend. In CAE Integrated, L.L.C. v. Moov Technologies, Inc., 44 F.4th 257 (5th Cir. 2022), a personal Google Drive linked to a work-used MacBook kept deleted files in its trash until they were restored. Trade Secrets in the Age of Remote Work and Cloud Computing covers the pattern.
- [IT] Prevent personal browser profile sign-in where practical. Synced profiles carry bookmarks and saved passwords.
- [IT] Keep personal code hosting accounts and private repositories separate from company tooling. Review imported snippets and dotfiles for high-tier engineers.
- [IT] Limit AI tools to approved accounts, and tell the hire not to carry over personal chat history. See Trade Secrets and Generative AI: Reasonable Measures, Prompt Leakage, and Vendor Terms.
- [IT] Retain logs for lateral hires longer than usual through at least day 90.
- [L] Confirm old employer credentials will not be used. Authority: 18 U.S.C. § 1030; Van Buren v. United States, 593 U.S. 374 (2021). See Computer Fraud and Abuse Act Claim Checklist: A Practical Checklist.
Instruction and role
- [HR and M] Hold a live day-one meeting, read the instruction, and sign it together.
- [HR] Obtain a signed certification that lists any material found and any restriction known.
- [M] Teach the "I can't talk about how they did it" script to the hire and the immediate team.
- [L and M] Write down the firewall: named accounts, products, or decisions the hire will stay out of, and the end date. Note: PepsiCo's injunction lasted about five months, and in Bimbo Bakeries the order ran until an early trial. Tie your period to how long the old information stays valuable.
- [M] For sales hires, require that customer data come from your own CRM or public sources, and control imports. Authority: Ed Nowogroski Insurance, Inc. v. Rucker, 137 Wash. 2d 427 (1999) and Al Minor & Associates, Inc. v. Martin, 117 Ohio St. 3d 58 (2008), on memorized customer information.
- [M] Assign replicating or head-to-head technical work to people who never worked at the competitor. Authority: 18 U.S.C. § 1839(6)(B) on independent derivation.
Red flag: The hire offers a "template," "starter kit," or "what we used to do." Stop, thank them, say no, and tell counsel the same day. Under Oakwood Laboratories LLC v. Thanoo, 999 F.3d 892 (3d Cir. 2021), use includes relying on a secret to assist or accelerate research or development.
Phase 5: Monitoring, day 30 through day 90 and beyond
- [M and HR] Hold the 30, 60, and 90 day check-ins and record them. Ask: have you been asked for anything; have you found any old material; has anything made you uneasy?
- [IT] Run keyword and metadata checks on company systems for the former employer's name, domain, known project names, and foreign copyright headers. Authority: written monitoring policy, and state notice statutes such as N.Y. Civ. Rights Law § 52-c, Conn. Gen. Stat. § 31-48d, and Del. Code tit. 19, § 705.
- [M] Keep dated records of independent development: design documents, tests, commits, vendor quotes, and dead ends. Note: Speed draws attention. In WeRide the court cited "implausibly fast development," and Rohm & Haas Co. v. Adco Chemical Co., 689 F.2d 424 (3d Cir. 1982) charged a company with what it would have learned had it asked where a process came from.
- [M] Explain sudden progress at the time it happens, in writing, if it follows soon after the hire.
- [L] Do not access any personal account of the hire, even if credentials are stored on a company device. Authority: 18 U.S.C. § 2701.
- [L] Reassess the firewall at its end date, and record the decision.
- [HR] Close and keep the file, with retention at least through the likely limitation period. Authority: 18 U.S.C. § 1836(d) (three years from actual or constructive discovery).
Red flag: Colleagues say the new person always seems to know the answer "without testing it." That may be experience, or it may be negative know-how. Ask counsel to look before you ship.
Phase 6: When outside material surfaces
Immediately
- [Finder] Stop. Do not open more, forward, or delete. Call counsel by phone.
- [L] Treat litigation as reasonably foreseeable and issue a hold the same day. Authority: Micron Technology, Inc. v. Rambus Inc., 645 F.3d 1311 (Fed. Cir. 2011); Silvestri v. General Motors Corp., 271 F.3d 583 (4th Cir. 2001); Fed. R. Civ. P. 37(e). Use Litigation Hold and Evidence Preservation Checklist: A Practical Checklist.
- [IT] Suspend auto-delete, chat expiry, device refresh, and any exit wiping that could touch relevant data. Note: Auto-delete, ephemeral chat, and exit wiping were all failures in WeRide Corp. v. Huang, No. 5:18-cv-07233 (N.D. Cal. Apr. 24, 2020), ending in terminating sanctions.
- [IT] Isolate by access control. Do not delete, reimage, rewrite a repository's history, or force-push. Freeze the branch or folder, and restrict it to the vendor.
- [L] Limit knowledge to those who must act. No circulating the file to see if it matters.
First week
- [L] Retain a forensic vendor through counsel, with a written scope. Authority: Fed. R. Civ. P. 26(b)(3) on work product. Note: A report may be discoverable. See Waymo. Limit distribution, and never give it to anyone whose interests may be adverse without advice.
- [L] Interview the employee with an Upjohn warning and recommend separate counsel.
- [L] Ask whether copies exist elsewhere, including personal accounts. Obtain the employee's consent, through counsel, before anyone looks.
- [L and M] Remove the employee from the affected work while facts are gathered.
- [L] Assess whether material was used, in what, and by whom.
- [L] If used, plan remediation: isolate the source, wall off exposed people, rebuild from a functional specification with fresh staff. Authority: Computer Associates International, Inc. v. Altai, Inc., 982 F.2d 693 (2d Cir. 1992).
- [L] Decide about disclosure to the former employer, and record the reasoning.
- [L] Arrange return or destruction only after imaging, and preferably by agreement, with certifications from those involved.
- [HR and L] Decide about discipline after the facts are in.
Red flag: Someone proposes "just cleaning it up quietly." E.I. du Pont de Nemours & Co. v. Kolon Industries, Inc., 803 F. Supp. 2d 469 (E.D. Va. 2011) found bad faith spoliation after employees deleted thousands of files and emails following suit, and imposed fees and an adverse inference instruction.
Phase 7: When a letter or lawsuit arrives
On receipt
- [Recipient] Send it to counsel with time and date of receipt.
- [L] Classify it: reminder, accusation, or filed action. Note the specifics. Generic warnings may not establish knowledge under Bombardier. A letter naming files likely does.
- [L] Issue or update the hold the same day.
- [L] Tell the hire not to delete or return any device, and recommend personal counsel. Note: WeRide linked the return of a personal laptop to the manufacturer with the day a demand letter arrived.
- [L] Calendar the deadline, and send a short holding note if needed. See Responding to a Cease and Desist Letter: A Practical Guide.
Investigating and replying
- [L] Investigate before asserting anything. Do not say "we have confirmed" until you have.
- [L] Match the author to the sender.
- [L] Reply factually: no interest in their information; instructions given; what was checked and found; specific assurances; request for particulars and hash values; preservation confirmed.
- [L] Avoid long arguments about enforceability, but cite the statute where a covenant is void. Authority: Cal. Bus. & Prof. Code § 16600.5.
- [L] Consider a neutral forensic protocol and a hash exchange.
If an emergency motion is filed
- [L] Identify the declarant who can describe onboarding, role design, and findings. See Preliminary Injunction and TRO Application Checklist: A Practical Checklist.
- [L] Prepare the Winter response. Authority: Winter v. Natural Resources Defense Council, Inc., 555 U.S. 7 (2008); Fed. R. Civ. P. 65(d).
- [L] Press identification. Authority: Mallet & Co. v. Lacayo, 16 F.4th 364 (3d Cir. 2021); Insulet Corp. v. EOFlow, Co., 104 F.4th 873 (Fed. Cir. 2024); InteliClear, LLC v. ETC Global Holdings, Inc., 978 F.3d 653 (9th Cir. 2020).
- [L] Raise the DTSA limit on employment injunctions and any conflicting state policy. Authority: 18 U.S.C. § 1836(b)(3)(A)(i)(I), (II); WCG Clinical, Inc. v. Sitero, LLC, No. 1:24-cv-01080 (S.D. Ind. Jan. 15, 2025); Bureau Veritas Technical Assessments LLC v. Brosa, No. 2:25-cv-02339 (D. Ariz. Feb. 18, 2026).
- [L] Check the burden on "readily ascertainable" under the DTSA. Authority: Comet; 18 U.S.C. § 1839(3).
- [L] Check limitations. Authority: Insulet Corp. v. EOFlow, Co., No. 25-1807 (Fed. Cir. May 28, 2026).
- [L] Check vicarious liability under the forum's law. Compare Thola v. Henschell, 140 Wash. App. 70 (2007) with Infinity Products, Inc. v. Quandt, 810 N.E.2d 1028 (Ind. 2004) and Hagen v. Burmeister & Associates, Inc., 633 N.W.2d 497 (Minn. 2001).
- [L] Consider offering narrow conditions or periodic discovery. Authority: Bayer Corp. v. Roche Molecular Systems, Inc., 72 F. Supp. 2d 1111 (N.D. Cal. 1999).
- [L] Consider forum and removal. See Getting Into or Staying Out of Federal Court: A Practical Guide to Jurisdiction and Removal.
Settling
- [L] Prefer certifications, return protocols, role limits, and named customer restrictions.
- [L] Avoid blanket no-hire terms, and have antitrust counsel review any hiring restriction. Authority: 15 U.S.C. § 1; Deslandes v. McDonald's USA, LLC, 81 F.4th 699 (7th Cir. 2023).
Red flag: Executives want to move internal discussion of the dispute onto disappearing messages. Do not. WeRide described just that kind of shift among the facts supporting sanctions.
Phase 8: If you are the former employer
- Secure the departing employee's machines and accounts; do not reissue them. Preserve logs before they age out. See Employee Departure Trade Secret Protection Checklist: A Practical Checklist.
- Preserve your own evidence and hold, since your duty arises when you anticipate suing.
- Have a forensic examiner report what the artifacts do and do not prove. Note: In Bimbo Bakeries, the examiner identified a copying pattern but could not determine conclusively what had been copied.
- Write down the secrets at issue, separated from general knowledge. Use Trade Secret Identification and Discovery Checklist: A Practical Checklist.
- Sort your evidence against each defendant: acquisition, disclosure, use, and knowledge. Do not plead recruitment as knowledge.
- Calendar three years from the first date you knew of access and similarity. Authority: 18 U.S.C. § 1836(d); Insulet (May 2026).
- Do not rest on inevitable disclosure alone. Authority: Whyte; FLIR Systems, Inc. v. Parrish, 174 Cal. App. 4th 1270 (2009); Molon Motor & Coil Corp. v. Nidec Motor Corp., No. 1:16-cv-03545 (N.D. Ill. Nov. 30, 2020); 18 U.S.C. § 1836(b)(3)(D).
- Do not threaten a void covenant in California. Authority: Cal. Bus. & Prof. Code § 16600.5.
- Write a specific letter: names, files, dates, what you want. See Drafting a Demand Letter: A Practical Checklist.
- Decide what relief you need, and tailor any injunction request. Authority: Fed. R. Civ. P. 65(d); Mallet. Use Trade Secret Damages and Remedies Checklist: A Practical Checklist to frame the money side.
Red flag: The only evidence is that a good employee went to a competitor, and that the competitor is doing well. Courts have refused to infer use from success alone, as in CAE Integrated.
This checklist is general information and is not legal advice for a specific situation.
Related Documents
Related Articles
- Hiring From a Competitor: Inevitable Disclosure, Employee Raiding, and the New Employer's Trade Secret Exposure: the law and system-level detail behind each task.
- Non-Compete Agreements Under Siege: FTC Rulemaking and State Law Developments: background on noncompete policy.
- Protection of Trade Secrets: what qualifies as a trade secret.
Related Guides
- Onboarding a Competitor's Employee Without Importing Its Secrets: A Practical Guide: the narrative sequence with scripts and sample language.
- Responding to a Cease and Desist Letter: A Practical Guide: replying to a demand.
- Bringing or Defending a Civil Computer Fraud and Abuse Act Claim: A Practical Guide: the computer access claims that can accompany these disputes.
Related Checklists
- Employee Departure Trade Secret Protection Checklist: A Practical Checklist: the matching list for the company losing the employee.
- Litigation Hold and Evidence Preservation Checklist: A Practical Checklist: for the hold in Phases 6 and 7.
- Preliminary Injunction and TRO Application Checklist: A Practical Checklist: for emergency motion practice.
- Trade Secret Identification and Discovery Checklist: A Practical Checklist: for defining secrets in Phase 8.
- Computer Fraud and Abuse Act Claim Checklist: A Practical Checklist: for computer access issues.
Related Toolkits
- Lateral Hire Toolkit: Candidate Certifications, Onboarding Instructions, and Cease-and-Desist Responses: the forms named in this checklist.
- Trade Secret Litigation Toolkit: Identification Statements, Two-Tier Protective Orders, and Forensic Protocols: for filed disputes and forensic protocols.
