Summary. Discovery in a trade secret case runs on a different clock from ordinary commercial litigation: the evidence is at risk in the first days, the plaintiff must describe its secrets before it can probe the defendant's, and every exchange of information risks a second misappropriation. This guide walks through the process step by step, from preservation and pre-suit investigation, through emergency relief and early forensic orders, the protective order, the identification statement, the discovery plan, and the neutral forensic examination, to written discovery, depositions, experts, discovery disputes, and narrowing the case for trial. Each step explains what to file, what to say, which rules and cases govern, and the decision points for both the trade secret owner and the accused employee or competitor. It includes a timeline and budget table, a worked example involving a contract manufacturer accused of using a customer's process, common mistakes, and an FAQ. It is the procedural companion to the cluster's article, checklist, and toolkit.


The scheduling order arrives with a line most litigators have never seen in a commercial case: "Plaintiff shall serve its identification of asserted trade secrets, with reasonable particularity and under the protective order, within 21 days. Discovery into Defendant's confidential technical information shall not commence until that identification is served." Everything else in the case, from which documents are relevant to what the jury will be asked, will now be measured against a document that does not yet exist.

Trade secret discovery is ordinary federal discovery with three complications: the thing in dispute has no public definition, the best evidence sits on devices the other side controls, and every production hands confidential information to a competitor. This guide is organized as a sequence of steps, roughly in the order they arise, with the decisions each side faces at each step. It is the procedural companion to Identifying Trade Secrets in Litigation: Reasonable Particularity, Sequencing Discovery, and Protecting the Secret While You Sue, which explains the doctrine in depth.

The short answer

Managing discovery in a trade secret case comes down to ten moves, made in roughly this order:

  1. Preserve and investigate before anyone files, on both sides.
  2. Decide on emergency relief (a temporary restraining order, a preservation order, expedited discovery, or, rarely, an ex parte seizure) and tie it to identified files rather than to "trade secrets" in the abstract.
  3. Put a two-tier protective order in place before anything confidential changes hands.
  4. Serve, test, and if necessary litigate the identification of the asserted secrets.
  5. Negotiate a discovery plan and ESI protocol that sequences technical discovery around the identification.
  6. Run the forensic examination through a neutral, under a written protocol that protects privacy and privilege.
  7. Take written discovery and depositions that test each numbered secret and each defense.
  8. Build the expert and summary judgment record secret by secret.
  9. Handle disputes and spoliation with the specific remedy each rule allows.
  10. Narrow the case for trial and protect the secrets in the courtroom.
Phase Typical timing What drives it Key authority
Preservation and investigation Days 0 to 14 Demand letters, litigation holds, forensic collection Fed. R. Civ. P. 37(e)
Emergency relief and early forensics Days 7 to 45 TRO, preservation order, device turnover Fed. R. Civ. P. 65; 18 U.S.C. § 1836(b)(2)
Protective order Days 14 to 60 Model order, AEO tier, source code, prosecution bar Fed. R. Civ. P. 26(c)(1)(G); 18 U.S.C. § 1835
Identification Days 30 to 120 Statute (California, Massachusetts) or scheduling order Cal. Civ. Proc. Code § 2019.210; Fed. R. Civ. P. 16
Fact discovery Months 2 to 12 Documents, source code, forensics, depositions Fed. R. Civ. P. 34; Fed. R. Civ. P. 30
Experts and summary judgment Months 10 to 18 Secret-by-secret opinions and motions Fed. R. Evid. 702; Fed. R. Civ. P. 56

The rules that govern each step

The Defend Trade Secrets Act supplies the claim and a few procedural provisions: the definitions in 18 U.S.C. § 1839, the civil action and the ex parte seizure remedy in § 1836(b), and the confidentiality mandate in § 1835, whose subsection (b) bars a court from authorizing disclosure of information the owner asserts is a trade secret without first allowing the owner a sealed submission explaining its interest in confidentiality. State trade secret statutes survive alongside it under 18 U.S.C. § 1838, and California's Cal. Civ. Proc. Code § 2019.210 and Massachusetts's Mass. Gen. Laws ch. 93, § 42D(b) require identification before discovery relating to the secret.

Everything else comes from the Federal Rules of Civil Procedure: Rule 1 (the "just, speedy, and inexpensive" mandate judges invoke when identification fights stall a case), Rule 16 (scheduling and case management), Rule 26 (scope, proportionality, timing, protective orders, supplementation), Rule 29 (stipulations about discovery procedure, which is how most forensic protocols begin), Rules 30, 33, 34, and 36 (the discovery devices), Rule 45 (non-parties), Rule 53 (special masters), Rule 37 (motions to compel, sanctions, and lost electronically stored information), and Rule 65 (temporary restraining orders and preliminary injunctions). On the evidence side, Fed. R. Evid. 502(d) protects against privilege waiver, Fed. R. Evid. 901 governs authenticating forensic evidence, and Fed. R. Evid. 1006 lets experts summarize voluminous logs.

Two guidance documents fill the gaps: the Sedona Conference's Commentary on the Proper Identification of Asserted Trade Secrets in Misappropriation Cases, 22 Sedona Conf. J. 223 (2021), and the Federal Judicial Center's Trade Secret Case Management Judicial Guide (2023). Judges read both. So should you.

Step 1: Preserve and investigate before anyone files

For the trade secret owner. The first forty-eight hours decide what evidence will exist. Do these things in this order:

  1. Freeze the departed employee's devices and accounts. Tell IT, in writing, not to reimage, reassign, or wipe the laptop or phone, and not to delete the email account. Suspend automatic deletion for the relevant mailboxes, file shares, and logs.
  2. Collect before you look. Have a forensic examiner image the laptop and phone and export server, VPN, data-loss-prevention, USB, and cloud-sync logs before anyone browses them. Browsing alters metadata.
  3. Build a hash list. The examiner should compute cryptographic hash values for every file that appears to have left, so that copies can later be found on the other side's devices without anyone reading unrelated material.
  4. Triage what left. Separate public, personal, and stale files from the material that matters. This is the first draft of your identification.
  5. Run the investigation through counsel. Retain the examiner through outside counsel for the purpose of legal advice, and assume the facts will eventually be discoverable anyway; in the Waymo litigation, a forensic report Uber commissioned before acquiring the departing engineer's startup was ordered produced, and the Federal Circuit dismissed the engineer's mandamus petition. Waymo LLC v. Uber Technologies, Inc., 870 F.3d 1350 (Fed. Cir. 2017).
  6. Send a preservation and demand letter. Address it to the employee and the new employer. Identify the devices, accounts, and categories of files at issue; demand preservation and return; and propose a neutral forensic protocol. A specific letter fixes the date by which the recipients' preservation duty attached; courts hold that the duty attaches at the latest when the claimant informs the defendant of its claim. Cohn v. Guaranteed Rate, Inc., 318 F.R.D. 350 (N.D. Ill. 2016).

For the accused employee and the new employer. Receiving that letter triggers a duty to preserve "unique, relevant evidence that might be useful to an adversary." Zubulake v. UBS Warburg LLC, 220 F.R.D. 212 (S.D.N.Y. 2003). The new employer should issue a litigation hold, interview the employee with counsel present, collect the employee's devices and any external media, quarantine any former-employer material found, wall the employee off from the relevant project, and preserve its own development records for the accused product, because independent development is usually the best defense and version-control history is its proof. The individual employee should do nothing to the devices: no deleting, no "cleaning," no factory resets. Cleanup after a demand letter is the fact pattern that produces default judgments.

Decision point: notify the government? Theft of trade secrets is also a federal crime under 18 U.S.C. § 1832. A criminal referral can bring search warrants and grand jury subpoenas, but it also takes control of timing away from the civil plaintiff and may prompt the individual defendant to invoke the Fifth Amendment in civil discovery. In a civil case, the factfinder may draw an adverse inference from a party's refusal to testify. Baxter v. Palmigiano, 425 U.S. 308 (1976). Discuss the tradeoffs before calling anyone.

For the full preservation workflow, see the Litigation Hold and Evidence Preservation Checklist and the Employee Departure Trade Secret Protection Checklist.

Step 2: Choose your emergency relief and lock down early forensics

Discovery in a trade secret case usually starts before the rules say it can. Under Fed. R. Civ. P. 26(d)(1), no party may seek discovery from any source before the Rule 26(f) conference unless the rules, a stipulation, or a court order permits it, so everything that happens in the first month happens because someone asked a judge, or the other side, for it. The order entered in week one also tends to become the template for the forensic work in month four, which is a good reason to draft it as if you will live with it.

The options, from least to most aggressive:

Option What it gets you What you must show Typical timing Main risk
Stipulated quarantine Devices and accounts go to a neutral; standstill on use; agreed protocol Nothing, if the other side signs Days Nothing to enforce unless the court so-orders it
Noticed TRO for preservation and return Preservation, return of identified files, non-use, device turnover The Rule 65 factors, usually on a forensic declaration 3 to 14 days Overbroad requests get trimmed or denied
Expedited discovery Targeted documents, imaging, one or two short depositions before the injunction hearing Good cause, in most courts 1 to 4 weeks "Limited" requests that are not limited get denied
Ex parte TRO The same relief, without notice Specific facts showing irreparable injury before the defendant can be heard, plus counsel's certification under Rule 65(b)(1) Hours to days Expires within 14 days unless extended; must be defended at a prompt hearing
DTSA ex parte seizure Seizure by federal officers of property needed to stop dissemination Eight findings under 18 U.S.C. § 1836(b)(2), including that the defendant would evade a Rule 65 order Days Liability for wrongful or excessive seizure, not capped by the bond

Expedited discovery: ask for little and you will get it fast

Most federal courts apply a reasonableness or good-cause standard: good cause exists where "the need for expedited discovery, in consideration of the administration of justice, outweighs the prejudice to the responding party." Semitool, Inc. v. Tokyo Electron America, Inc., 208 F.R.D. 273 (N.D. Cal. 2002). Semitool expressly declined to follow the stricter test of Notaro v. Koch, 95 F.R.D. 403 (S.D.N.Y. 1982), which borrows the preliminary injunction factors (irreparable injury, some probability of success, a connection between the discovery and avoiding the injury, and a balance of injuries); a minority of courts still use it, so check your district. Under either test the movant "must make some prima facie showing of the need for the expedited discovery." Merrill Lynch, Pierce, Fenner & Smith, Inc. v. O'Connor, 194 F.R.D. 618 (N.D. Ill. 2000).

Scope decides most of these motions. Courts deny requests that are full discovery in disguise: in Qwest Communications International, Inc. v. WorldQuest Networks, Inc., 213 F.R.D. 418 (D. Colo. 2003), the breadth of the requests belied their description as "limited," and American LegalNet, Inc. v. Davis, 673 F. Supp. 2d 1063 (C.D. Cal. 2009), denied requests that went to the merits of the whole case instead of being "narrowly tailored to obtain information relevant to a preliminary injunction determination." The FJC guide recommends a joint proposed order that caps the number of requests, limits each deposition to a few hours, names the devices to be imaged, and says whether early discovery counts against the case-wide limits. Expedited discovery also runs both ways. In Ciena Corp. v. Jarrard, 203 F.3d 312 (4th Cir. 2000), the Fourth Circuit left an injunction in place but remanded with instructions to give the enjoined employee up to 30 days of expedited discovery and a chance to move to dissolve.

Speed has a price. Injunction hearings can come within about three weeks of filing, as in Interbake Foods, LLC v. Tomasiello, 461 F. Supp. 2d 943 (N.D. Iowa 2006), or after months of expedited discovery. In Waymo's case against Uber, the court later observed that by insisting on a quick hearing Waymo had "embraced early on the foreseeable disadvantage of an incomplete evidentiary record." Waymo LLC v. Uber Technologies, Inc., No. C 17-00939 WHA, 2017 WL 2123560 (N.D. Cal. May 11, 2017). Decide early whether you want a fast hearing or a full one. You rarely get both.

What the papers and the proposed order should contain

  1. A forensic declaration that says what was accessed or copied, when, by what route (USB device serial number, cloud sync, personal email), and with what hash values. Last-days activity persuades. In Bimbo Bakeries USA, Inc. v. Botticella, 613 F.3d 102 (3d Cir. 2010), an executive had accepted a competitor's offer and kept it quiet for three months while retaining full access; on his last day his account opened twelve confidential files in thirteen seconds, a pattern the employer's examiner called consistent with copying, and the Third Circuit affirmed an injunction keeping him out of the new job pending trial.
  2. A sealed list of the specific files or categories at issue. The FJC guide treats preservation and return orders as the narrow exception to full identification: they can rest on the files themselves, before anyone has decided which parts of them are secret.
  3. Order language a stranger could enforce. Rule 65(d)(1) requires the order to describe the restrained acts "in reasonable detail," without referring to the complaint or other documents. The circuits are not uniform about general "trade secrets" clauses. The Fourth Circuit upheld an order barring use of "any of CIENA's trade secrets or confidential information" in Ciena, but the Second Circuit vacated an injunction that did not identify the secrets in Corning Inc. v. PicVue Electronics, Ltd., 365 F.3d 156 (2d Cir. 2004), the Eighth Circuit held a similar clause too vague in E.W. Bliss Co. v. Struthers-Dunn, Inc., 408 F.2d 1108 (8th Cir. 1969), and the Third Circuit vacated an injunction built on general categories in Mallet & Co. v. Lacayo, 16 F.4th 364 (3d Cir. 2021). The safe course everywhere is a sealed attachment to the order that lists what is covered, a practice the Ninth Circuit approved for a permanent injunction in Henry Hope X-Ray Products, Inc. v. Marron Carrel, Inc., 674 F.2d 1336 (9th Cir. 1982).
  4. The forensic terms: who the neutral is and to whom the neutral answers, which devices and accounts, the objective (for example, locating exact duplicates of listed files by hash value), deadlines, who receives the reports, privacy protections, an end point, and who pays.
  5. Security. Rule 65(c) requires security in an amount the court considers proper to pay the costs and damages of a party found to have been wrongfully restrained. Propose a number and explain it, or the court will pick one.
  6. Employment limits. A DTSA injunction may not prevent a person from entering into an employment relationship, and any conditions on that employment must rest on "evidence of threatened misappropriation and not merely on the information the person knows." 18 U.S.C. § 1836(b)(3)(A)(i). Ask for conditions (a project wall, no work on an identified product line) rather than a ban.

The seizure question

Seizure applications are filed far more often than they are granted, and courts that refuse them usually substitute relief with notice. In Broker Genius, Inc. v. Zalta, 280 F. Supp. 3d 495 (S.D.N.Y. 2017), the court denied ex parte relief, held a hearing the same day with all sides present, and entered a TRO against accessing the plaintiff's technology and destroying evidence, while refusing to seize the defendants' computers. Another court denied seizure and instead ordered the individual defendant to bring his devices to court. OOO Brunswick Rail Management v. Sultanov, 2017 WL 67119 (N.D. Cal. Jan. 6, 2017). The reported grants involve defendants who had already lied, hidden data, or ignored the court. Mission Capital Advisors LLC v. Romaka, 2016 WL 11517104 (S.D.N.Y. July 29, 2016) (defendant failed to appear at a show-cause hearing); Blue Star Land Services, LLC v. Coleman, 2017 WL 11309528 (W.D. Okla. Aug. 31, 2017) (files moved to a personal cloud account, deletions to cover tracks, and false statements).

If a seizure order does issue, the statute builds the next round of discovery into it. Seized material goes into the court's custody and may not be connected to a network without both parties' consent; the court may appoint a special master to isolate the trade secret information and return everything else; the hearing must occur within seven days, with the applicant bearing the burden of proof; and the court may adjust discovery deadlines so that the hearing is meaningful. 18 U.S.C. § 1836(b)(2)(B), (D), (F). For the full list of required findings, see Trade Secret Misappropriation Litigation Under the Defend Trade Secrets Act: A Practical Guide.

For the defendant: the first week

  • Answer on paper, fast, with something concrete. Delivery of devices to a neutral, a sworn accounting of what left, and a standstill on use make a contested TRO look unnecessary and cost far less than opposing one.
  • Attack scope as well as merits. Unexplained delay undercuts irreparable harm; a non-use clause should list files rather than "trade secrets"; any protocol should screen privileged and personal material before the plaintiff sees anything.
  • Ask for your own expedited discovery under Ciena, and argue the amount of the bond.
  • Mind the appellate clock. A preliminary injunction is immediately appealable under 28 U.S.C. § 1292(a)(1); a temporary restraining order generally is not.

For the injunction standards themselves, see Preliminary Injunctions and Temporary Restraining Orders: Emergency Relief in Federal Court and the Preliminary Injunction and TRO Application Checklist; for what happens when an order is ignored, see Contempt and Enforcing Injunctions.

Step 3: Get a two-tier protective order in place before anything changes hands

Nothing confidential should move, in either direction, until a protective order or a signed interim agreement covers it. The FJC guide says plainly that a plaintiff should not be required to serve its identification without that protection, and no sensible defendant produces source code or formulas without it either. The authority is Fed. R. Civ. P. 26(c)(1)(G), which allows an order that a trade secret "be revealed only in a specified way"; a contested motion requires a certification of good-faith conferral and a particularized showing of harm, as explained in the companion article. If the court has not entered an order by the time the identification is due, serve it under a signed stipulation that the parties will treat it as attorneys' eyes only pending entry, and ask the court to enter the district's model order on an interim basis.

Start from a model and fix what the model does not cover

Many districts publish model or default orders, and the Northern District of California's stipulated order for litigation involving patents, highly sensitive confidential information, and trade secrets is the one most often borrowed; the District of Delaware's default standard for access to source code is the usual starting point for code. Starting from a model shortens the negotiation and gives the judge a familiar baseline, so every deviation needs a reason. The provisions that generate the fights:

Provision What to decide Common resolution
Tiers How many, and what qualifies for each "Confidential" and "Highly Confidential, Attorneys' Eyes Only," plus a source code tier where code is produced
In-house counsel Whether any in-house lawyer sees AEO material Only designated house counsel with no role in competitive decision-making, after written disclosure of job duties
Experts Disclosure and objections CV, current employer, and five years of engagements and testimony; 14 days to object; 7 days to confer; the objecting party bears the burden (the Northern District of California model)
Accused employee Whether the individual defendant sees the plaintiff's AEO material Supervised access to specific items, without copies or screenshots, if the employer cannot show good cause to exclude
Source code Review conditions Standalone, non-networked computer; sign-in logs; no recording devices; limits on printed pages
Prosecution bar Whether AEO recipients may prosecute patents in the field A bar tailored to subject matter and duration; the model runs two years after final termination of the case
Depositions Designating testimony On the record, or within 21 days if that right is invoked on the record
Privilege Clawback A Fed. R. Evid. 502(d) order plus the procedure in Rule 26(b)(5)(B)
Non-parties Coverage of their productions Order expressly available to non-parties who produce
End of case Return or destruction Within 60 days of final disposition, with a written certification

The access fights, and how they usually come out

In-house lawyers. The test is whether the person participates in "competitive decisionmaking," judged by actual role rather than title. U.S. Steel Corp. v. United States, 730 F.2d 1465 (Fed. Cir. 1984). Courts routinely deny access to in-house counsel who advise on licensing, pricing, or product decisions, and they are unmoved by the expense of relying on outside counsel: "Requiring a party to rely on its competent outside counsel does not create an 'undue and unnecessary burden.'" Intel Corp. v. VIA Technologies, Inc., 198 F.R.D. 525 (N.D. Cal. 2000). Smaller companies can propose an independent consultant instead, the solution approved in Brown Bag Software v. Symantec Corp., 960 F.2d 1465 (9th Cir. 1992).

Experts. Expect objections to experts who consult for competitors. Courts split on whether that alone is disqualifying, so disclose early and offer undertakings, such as a commitment not to consult on competing products in the field for a set period after the case, before the other side asks. Compare Layne Christensen Co. v. Purolite Co., 271 F.R.D. 240 (D. Kan. 2010), with Streck, Inc. v. Research & Diagnostic Systems, Inc., 250 F.R.D. 426 (D. Neb. 2008).

The accused employee. Most courts put the burden on the former employer to show good cause for excluding the individual defendant and then tailor access to the items he is accused of taking. Plaintiffs should propose supervised review at defense counsel's office; defendants should insist that their client see enough to assist in his own defense.

Prosecution bars. Where litigation counsel also prosecute patents, the party seeking a bar must show that its scope, duration, and subject matter reasonably reflect the risk, and individual lawyers can seek exemptions. In re Deutsche Bank Trust Co. Americas, 605 F.3d 1373 (Fed. Cir. 2010). Raise the issue at the first meet and confer, not after the first production.

Two more protections deserve attention. Whatever the protective order says, the court may not authorize disclosure of information the owner asserts is a trade secret without first letting the owner file a sealed submission explaining its interest in confidentiality, 18 U.S.C. § 1835(b). And a 502(d) order, unlike a private clawback agreement, protects privilege "in any other federal or state proceeding," which matters when forensic images of laptops sweep in emails with lawyers; an agreement alone binds only the parties to it, so get the clawback into an order.

For the defendant, the order protects you as much as the plaintiff. Your independent-development records and source code are the evidence that wins the case, and they are exactly what a competitor would most like to read. Insist on the AEO tier for them and on keeping the plaintiff's engineers out of your code. For model provisions, see the Trade Secret Litigation Toolkit; for the negotiation itself, see Negotiating a Protective Order and Filing Under Seal: A Practical Guide and the Confidentiality Toolkit.

Step 4: Serve the identification, test it, and litigate it only if you must

The identification is the document against which everything else in the case will be measured: the scope of discovery, the expert reports, the summary judgment motions, and the verdict form. The doctrine is explained in the companion article; this step covers the mechanics.

When it is due

In California state court, Cal. Civ. Proc. Code § 2019.210 requires it before discovery "relating to the trade secret" begins, and Massachusetts imposes a similar rule in Mass. Gen. Laws ch. 93, § 42D(b). Federal courts set the deadline in the scheduling order, using their case-management powers under Fed. R. Civ. P. 16. In United Services Automobile Ass'n v. Mitek Systems, Inc., 289 F.R.D. 244 (W.D. Tex. 2013), the magistrate judge ordered a pre-discovery identification, reasoning that it gives defendants "an equal playing field," and the district judge, reviewing under Rule 72(a), left the order in place. In DTSA-only cases in the Ninth Circuit, Quintara Biosciences, Inc. v. Ruifeng Biztech, Inc., No. 23-16093 (9th Cir. Aug. 12, 2025), holds that the statute imposes no up-front identification requirement and that secrets may not be struck at the threshold, but it leaves the court's power to sequence discovery intact. Expect a deadline within a few weeks of the protective order in most federal courts.

How to serve it

Serve it either as a standalone "Identification of Asserted Trade Secrets" or as the answer to an interrogatory asking for one. If it is an interrogatory answer, Fed. R. Civ. P. 33(b)(3) requires it to be answered "separately and fully in writing under oath," signed by the person making it. Either way, treat it as subject to the duty to supplement under Rule 26(e), and assume that anything never disclosed will be excluded under Rule 37(c)(1). Designate it attorneys' eyes only and never file it publicly. In Loop AI Labs Inc. v. Gatti, 195 F. Supp. 3d 1107 (N.D. Cal. 2016), the plaintiff put a 55-paragraph disclosure on the public docket, and the court called the public filing "a telling indication" that the disclosure was not reasonably particular.

The format that works:

  1. A numbered list, one secret per number, with numbers that never change.
  2. Each entry states what the secret is (the parameters, steps, selection criteria, code module, or data fields), not what it accomplishes.
  3. Supporting documents are cited by Bates number and page, so nobody has to hunt through a production to find the secret, the defect that sank the plaintiff in IDX Systems Corp. v. Epic Systems Corp., 285 F.3d 581 (7th Cir. 2002).
  4. Combination secrets say which elements are combined, how, and why the combination works, following Struthers Scientific & International Corp. v. General Foods Corp., 51 F.R.D. 149 (D. Del. 1970).
  5. Negative know-how is identified by the specific experiments or reports that show what fails.
  6. No catchalls. "Including but not limited to" adds nothing and invites the criticism the California court delivered in Perlan Therapeutics, Inc. v. Superior Court, 178 Cal. App. 4th 1333 (2009).

Here is the difference on the page:

Too vague: "Halvorsen's proprietary low-temperature curing know-how for coated fiberboard."

Reasonably particular: "Trade Secret No. 3. The two-stage cure profile for the 400-series powder coatings on medium-density fiberboard: a ramp from ambient to 121°C over 4 minutes, a dwell at 121 to 125°C for 7 to 9 minutes, and a second ramp to 141°C held for 2 minutes, together with the infrared emitter spacing and line speed that produce it, as recorded in recipe file HC-400-MDF-v6 (HAL-0004412 to HAL-0004415)."

The test is practical: could an engineer at the defendant search its own files with the entry and answer "we use that" or "we do not"?

How the defendant tests it, and when to fight

Most courts apply a two-part test: the identification must put the defendant on notice of the nature of the claims and let it judge the relevance of discovery requests aimed at its own secrets. DeRubeis v. Witten Technologies, Inc., 244 F.R.D. 676 (N.D. Ga. 2007). Specific secrets are required, not categories. Knights Armament Co. v. Optical Systems Technology, Inc., 254 F.R.D. 463 (M.D. Fla. 2008). The procedure:

  1. Deficiency letter. Within the time the order allows (or promptly), identify each challenged number and the specific defect: a category rather than a secret, a catchall, a document dump, an unexplained combination, or information already public. Generic complaints about the whole list persuade nobody.
  2. Meet and confer, live. Many disputes end with the plaintiff dropping or rewriting a few entries.
  3. Motion. The defendant moves for a protective order deferring its technical production under Rule 26(c), or to compel a further answer under Rule 37(a)(3)(B)(iii) if the identification was an interrogatory answer. Expert declarations are common at this stage; if qualified experts on both sides can tell what is being claimed, courts generally let discovery proceed, the approach of Advanced Modular Sputtering, Inc. v. Superior Court, 132 Cal. App. 4th 826 (2005).
  4. Remedy. The usual order is a further identification within a short deadline, not dismissal. In Vesta Corp. v. Amdocs Management Ltd., 147 F. Supp. 3d 1147 (D. Or. 2015), the court granted the defendants' motion in part and gave the plaintiff 21 days to amend its interrogatory answers, while declining to forbid later amendments as discovery progressed.

Defendants should pick their fights. Advanced Modular Sputtering consumed three rounds of designations and dueling expert declarations before any technical document changed hands, and courts lose patience with a defendant that treats the demand as an indefinite stay. Challenge the entries that matter, produce non-technical discovery in the meantime, and save the rest for summary judgment, where vagueness is the plaintiff's problem rather than yours.

Amending without chaos

Amendments are normal, and good cause is the usual standard: diligence, new facts learned in discovery, and no unfair prejudice. Neothermia Corp. v. Rubicor Medical, Inc., 345 F. Supp. 2d 1042 (N.D. Cal. 2004). After a scheduling-order deadline passes, Rule 16(b)(4) adds its own good-cause requirement. Keep a dated log of when you learned each new fact, never renumber (mark withdrawn secrets "no longer asserted"), and add new secrets at the end of the list. Dropping secrets is almost always allowed and usually wise.

Step 5: Build the discovery plan around the identification

The Rule 26(f) conference is where a trade secret case gets its shape. Come with a written proposal on each of these points, because the party with a draft frames the discussion:

Topic What to propose
Identification Date, format, and the procedure and deadlines for challenges and amendments
Sequencing Non-technical discovery now; the defendant's technical production a set number of days after a compliant identification; a refined identification after that production
Protective order and source code Entry date, tiers, expert disclosure procedure, any prosecution bar
Forensic protocol Neutral, devices and accounts, search method, privilege and privacy review, costs
ESI Custodians, non-custodial sources, date ranges, search methodology, production formats
Privilege A 502(d) order and a logging protocol that skips post-complaint communications with litigation counsel
Limits Interrogatories beyond 25 and depositions beyond 10 by stipulation; hour limits; how 30(b)(6) days count
Non-parties Notice before subpoenas to customers and suppliers
Damages Categories of damages now, computations after the defendant's financial production
Experts Staggered reports by issue, with rebuttal dates

The scheduling order can incorporate the parties' 502 agreement under Rule 16(b)(3)(B)(iv), and the default caps come from Rule 33(a)(1) and Rule 30(a)(2)(A)(i); in a multi-defendant case or one involving several technologies, ask for more early, while it still looks reasonable.

Know where the evidence lives. Trade secret cases turn on a predictable set of sources: data-loss-prevention and USB logs, email and chat, cloud audit logs, code repositories and their commit histories, product lifecycle and manufacturing execution systems, badge and VPN records, phones and messaging apps, and personal accounts. Most of these roll over on short retention cycles, so the plan should name them and the hold should already cover them.

Proportionality cuts both ways. Rule 26(b)(1) limits discovery to matter relevant to a claim or defense and proportional to the needs of the case, and the identification is what makes relevance concrete. A defendant's confidential technology is discoverable when it is relevant and necessary, under the burden-shifting approach of Centurion Industries, Inc. v. Warren Steurer & Associates, 665 F.2d 323 (10th Cir. 1981), and Coca-Cola Bottling Co. of Shreveport, Inc. v. Coca-Cola Co., 107 F.R.D. 288 (D. Del. 1985). Independent-development discovery is fair game, but courts let defendants withhold research material unrelated to the accused technology; in Convolve, Inc. v. Compaq Computer Corp., 223 F.R.D. 162 (S.D.N.Y. 2004), monthly research reports about budget and headcount stayed out. Sources that are "not reasonably accessible because of undue burden or cost," such as backup tapes and legacy systems, fall under Rule 26(b)(2)(B) and should be addressed expressly.

Plan for foreign evidence early. When devices or witnesses are abroad, the Hague Evidence Convention is an option rather than a requirement, but courts must weigh comity case by case. Société Nationale Industrielle Aérospatiale v. United States District Court, 482 U.S. 522 (1987). Courts are reluctant to order forensic examination of foreign computers without a strong showing; in Motorola Solutions, Inc. v. Hytera Communications Corp., 314 F. Supp. 3d 931 (N.D. Ill. 2018), the court refused to order inspection of computers in China during limited-purpose discovery, calling forensic examination "a drastic step even in general discovery" and finding the request disproportionate.

For the general mechanics, see Negotiating an ESI Protocol and Managing E-Discovery Costs and Rule 26 Initial Disclosures and Discovery Planning: A Practical Checklist.

Step 6: Run the forensic examination through a neutral

Forensic evidence is usually the best evidence in a trade secret case and often the most expensive to collect and review. The examination is also where privacy objections are strongest, so the side that proposes a careful protocol first usually gets most of what it wants.

The threshold showing

Fed. R. Civ. P. 34(a)(1)(A) allows a party to "inspect, copy, test, or sample" electronically stored information, but courts do not treat that as a right of direct access to an opponent's devices. Appellate courts have granted mandamus against orders that went too far: In re Ford Motor Co., 345 F.3d 1315 (11th Cir. 2003) (unrestricted access to databases), and John B. v. Goetz, 531 F.3d 448 (6th Cir. 2008) (imaging of computers where less intrusive means existed). What usually justifies imaging is something more than suspicion: evidence that the device was used to take or move the information, gaps or inconsistencies in the other side's production, or signs of deletion. The motion should say which device, why, and what the examiner will look for.

Who does the work

Courts use four models: a neutral jointly retained by the parties; a neutral chosen by the court; the producing party's own examiner, with the requesting party's examiner allowed to observe or submit searches; or the requesting party's examiner working under a protocol, which courts rarely allow for personal devices. The neutral model dominates in departing-employee cases because it answers the privacy objection. The leading protocol is the three-step process from Ameriwood Industries, Inc. v. Liberman, 2006 WL 3825291 (E.D. Mo. Dec. 27, 2006): the expert images the devices; the expert recovers the responsive material and gives it to the producing party's counsel; and that counsel reviews for privilege and responsiveness before producing, with a log of anything withheld. Genworth Financial Wealth Management, Inc. v. McMullan, 267 F.R.D. 443 (D. Conn. 2010), adopted that approach for former employees who had taken a client database.

The protocol, clause by clause

  1. Scope. Each device and account by make, serial number, or account identifier; the relevant date range.
  2. Collection. A forensically sound image, a bit-for-bit copy including unallocated space, verified by hash values, with a written chain of custody. See A.M. Castle & Co. v. Byrne, 123 F. Supp. 3d 895 (S.D. Tex. 2015).
  3. Search method. A hash list of the plaintiff's files, file names, a short list of agreed terms, and date filters, together with an artifact analysis: USB connection history, link files and jump lists, cloud sync logs, browser and upload history, email forwarding rules, mobile backups, and traces of wiping tools or clock changes.
  4. Review. Hits go first to the producing party's counsel, who has a fixed period (often 10 to 14 days) to review for privilege and personal content and to log what is withheld.
  5. Production. Responsive, non-privileged material goes to the requesting side, designated under the protective order.
  6. Reports. What the neutral reports, to whom, and at what confidentiality tier; whether the neutral can be deposed; whether the neutral's communications are discoverable.
  7. Disputes. Meet and confer, then the magistrate judge or a special master.
  8. Costs and end point. Who pays, whether costs can shift later, and when the images are returned or destroyed.

Imaging is the cheap part. In Covad Communications Co. v. Revonet, Inc., 258 F.R.D. 5 (D.D.C. 2009), the court observed that taking an image costs little compared with the forensic search itself, and that lawyer review of the results "may dwarf the cost of the search"; it ordered a staged process in which any party wanting further searches would say whether it would pay for them. Courts often shift costs to the party whose conduct made the examination necessary: Genworth split the neutral's fees 80 percent to the defendants and 20 percent to the plaintiff. Build the stages and the cost allocation into the protocol rather than fighting about them later.

Personal email and cloud accounts

Do not subpoena the provider for message contents; the Stored Communications Act, 18 U.S.C. § 2702, bars disclosure in response to a civil subpoena, and courts quash those subpoenas. Crispin v. Christian Audigier, Inc., 717 F. Supp. 2d 965 (C.D. Cal. 2010). Serve a Rule 34 request on the party, who controls the account and can be required to produce from it, or have the neutral collect from it with the party's consent under the protocol. Flagg v. City of Detroit, 252 F.R.D. 346 (E.D. Mich. 2008).

Making the results usable at trial

Plan authentication now. A forensic examiner can authenticate an image and its contents under Fed. R. Evid. 901, and data copied from a device and verified by hash value can be self-authenticating with a qualified person's certification under Fed. R. Evid. 902(14), if the proponent gives the required notice. Voluminous log data comes in through summaries under Fed. R. Evid. 1006. Ask the neutral to document every step with that use in mind.

For the defendant, the protocol is your best protection. Propose a neutral, hash-only searches, a producing-side privilege and privacy review, date limits, and a ban on the plaintiff's employees seeing raw images. A court asked to choose between a careful protocol and an open-ended demand will almost always choose the careful one, and stonewalling invites an order like Genworth's, with the bill attached. Model protocol language is in the Trade Secret Litigation Toolkit.

Step 7: Take written discovery and depositions that test each numbered secret

By now the case has a list of numbered secrets and a forensic record. Written discovery and depositions should be organized around both.

Interrogatories, requests, and admissions

The core interrogatories are predictable, and each side should serve them early:

Plaintiff to defendant Defendant to plaintiff
The development timeline of the accused product or process, with the people involved For each numbered secret: who developed it, when, and at what cost
Every source consulted in that development The measures used to keep each secret confidential
Every person who received or accessed the plaintiff's materials Every disclosure outside the company (patents, papers, customer and supplier disclosures)
Searches performed for the plaintiff's materials and what they found The factual basis for contending that the defendant acquired or used each secret
Onboarding of the departed employee and any instructions given Each category of damages claimed and its basis

Contention interrogatories (what a party contends and why) are more useful later; Rule 33(a)(2) lets the court postpone answers until designated discovery is complete, and the FJC guide recommends exactly that. Document requests must be answered with objections stated specifically and a statement of whether anything is being withheld on the basis of each objection, under Rule 34(b)(2)(B) and (C); ask for technical files in native format and source code under the protocol. Requests for admission under Rule 36 are underused in these cases: ask the other side to admit the authenticity of key documents, the hash matches the neutral found, and the dates of key events. A request not answered within 30 days is deemed admitted.

Expect discovery into your own investigation. Documents from investigations of former employees can be discoverable when they were prepared in the ordinary course rather than because of anticipated litigation. Navigant Consulting, Inc. v. Wilkinson, 220 F.R.D. 467 (N.D. Tex. 2004). Structuring the work through counsel, for the purpose of legal advice, is what gives you a basis to claim protection under Upjohn Co. v. United States, 449 U.S. 383 (1981), and Hickman v. Taylor, 329 U.S. 495 (1947).

Non-parties

The new employer (if not a defendant), customers, suppliers, and cloud vendors all hold evidence. Subpoenas go under Rule 45, which lets the court quash or modify a subpoena that requires disclosing "a trade secret or other confidential research, development, or commercial information," or order production on conditions where the serving party shows a substantial need. Courts watch for subpoenas to customers that look designed to pressure the opponent's business, so serve them only when the information cannot come from a party, and offer the non-party the protective order. See Rule 45 Subpoenas to Nonparties.

Depositions

  • Sequence. Take IT custodians and the forensic witnesses first, then the accused employee, then the decision-makers at the new employer, then the corporate designees. Each layer gives you documents and admissions for the next.
  • Rule 30(b)(6). The serving party and the organization must confer in good faith about the matters for examination before or promptly after the notice is served, under Rule 30(b)(6). Keep topics factual (how each secret was developed and protected; how the accused product was built); the FJC guide recommends handling contentions through interrogatories rather than corporate testimony.
  • Time. Rule 30(d)(1) limits each deposition to one day of seven hours. Ask in the discovery plan for more time for the accused employee and for the plaintiff's corporate designee on technical topics.
  • Confidential testimony. Under Rule 30(c)(2), counsel may instruct a witness not to answer only to preserve a privilege, enforce a court-ordered limitation, or present a motion to terminate or limit the deposition. Confidentiality is handled by designation and by excluding people who may not see AEO material from the room, not by refusing to answer.
  • The Fifth Amendment. An individual facing possible prosecution under 18 U.S.C. § 1832 may invoke the privilege in civil discovery, and the factfinder may draw an adverse inference in the civil case under Baxter v. Palmigiano. Expect motions to stay; courts weigh the overlap with any criminal case and the prejudice of delay.

For the corporate deposition, see Preparing and Defending a Rule 30(b)(6) Deposition and the Rule 30(b)(6) Deposition Preparation Checklist; for interrogatory practice, see Mastering Interrogatories.

Step 8: Build the expert and summary judgment record secret by secret

Every expert report and every summary judgment brief should be organized by the numbers in the identification. A useful working tool for both sides is a matrix with one row per numbered secret and columns for existence, secrecy measures, the defendant's access, evidence of use, and the damages attributable to that secret. Gaps in a row are where the motions will come from.

Experts. Trade secret cases typically need four kinds: a technical expert on whether each secret was generally known or readily ascertainable and whether the defendant's product reflects it; an industry expert on reasonable secrecy measures; a forensic expert; and a damages expert. Testifying experts must serve reports under Rule 26(a)(2)(B), while drafts and most attorney-expert communications are protected by Rule 26(b)(4)(B) and (C). A consultant who will not testify is largely shielded by Rule 26(b)(4)(D), which is a reason to keep the pre-suit examiner as a consultant and retain a separate testifying examiner if that examiner's early work was messy. Admissibility runs through Fed. R. Evid. 702, which since its 2023 amendment requires the proponent to show that it is more likely than not that the testimony meets each requirement, through Daubert v. Merrell Dow Pharmaceuticals, Inc., 509 U.S. 579 (1993), and through Kumho Tire Co. v. Carmichael, 526 U.S. 137 (1999), which applies the gatekeeping duty to technical as well as scientific testimony. An expert who opines about "the trade secrets" in bulk, rather than about Nos. 1 through 14, invites exclusion.

Summary judgment. Under Rule 56 and Celotex Corp. v. Catrett, 477 U.S. 317 (1986), a defendant can win by pointing to the absence of evidence on an element the plaintiff must prove. Whether information is a trade secret is usually a question of fact, see Learning Curve Toys, Inc. v. PlayWood Toys, Inc., 342 F.3d 714 (7th Cir. 2003), and so is the reasonableness of secrecy measures, see Rockwell Graphic Systems, Inc. v. DEV Industries, Inc., 925 F.2d 174 (7th Cir. 1991). But vagueness is decided as a matter of law: plaintiffs lose when they cannot point to specific information, as in Givaudan Fragrances Corp. v. Krivda, 639 F. App'x 840 (3d Cir. 2016), and NEXT Payment Solutions, Inc. v. CLEAResult Consulting, Inc., No. 24-1377 (7th Cir. Jan. 14, 2026). Defendants should move secret by secret, because Rule 56(a) allows judgment on part of a claim and each number that falls narrows the trial. Plaintiffs facing an early motion should file a Rule 56(d) declaration explaining what discovery is still missing; in InteliClear, LLC v. ETC Global Holdings, Inc., 978 F.3d 653 (9th Cir. 2020), the Ninth Circuit reversed a summary judgment entered before the plaintiff had a fair chance to refine its identification through discovery.

For expert depositions, see Taking and Defending an Expert Deposition: A Practical Guide; for admissibility, see Expert Witnesses After the 2023 Amendment to Rule 702; for the damages side, see Proving or Defending Against Trade Secret Damages: A Practical Guide.

Step 9: Handle disputes, sanctions, and spoliation with the right tool

Trade secret discovery generates more disputes than most cases, and judges reward the side that brings fewer, better ones.

The path of a dispute. Confer live and certify it, as Rule 37(a)(1) requires; follow the judge's procedures (many require joint letters with page limits and a proposed compromise from each side); and expect the dispute to go to a magistrate judge, who may decide nondispositive pretrial matters under 28 U.S.C. § 636(b)(1)(A). Objections to a magistrate judge's order must be filed within 14 days under Fed. R. Civ. P. 72(a), and the district judge will set the order aside only if it is "clearly erroneous or contrary to law." Miss the deadline and the objection is gone. The loser of a motion to compel generally pays the winner's expenses unless its position was substantially justified, under Rule 37(a)(5).

Special masters. In technical or high-volume cases, courts appoint a special master under Rule 53, often a retired judge or senior litigator, with costs allocated among the parties based on the amount in controversy, their means, and who made the appointment necessary. Objections to a master's order or report are due within 21 days. In the Waymo litigation, the court sent the question whether Uber had wrongly withheld a former employee's letter to its discovery special master and then fashioned evidentiary remedies based on the master's findings. Waymo LLC v. Uber Technologies, Inc., 2017 WL 6501798 (N.D. Cal. Dec. 15, 2017); 2018 WL 646701 (N.D. Cal. Jan. 30, 2018).

Violations of orders. Rule 37(b)(2)(A) offers a menu running from deeming facts established to striking pleadings, dismissal, default, and contempt, and the Supreme Court has endorsed severe sanctions where needed to deter. National Hockey League v. Metropolitan Hockey Club, Inc., 427 U.S. 639 (1976). A former employee and his co-defendants who intentionally destroyed evidence suffered a default judgment in OmniGen Research v. Wang, 321 F.R.D. 367 (D. Or. 2017). Fees under the court's inherent power must be compensatory and causally tied to the misconduct. Goodyear Tire & Rubber Co. v. Haeger, 581 U.S. 101 (2017).

Spoliation. Rule 37(e) has two tiers: if electronically stored information was lost because a party failed to take reasonable steps and it cannot be restored or replaced, the court may order measures no greater than necessary to cure the prejudice; only on a finding of intent to deprive may it presume the information was unfavorable, instruct the jury accordingly, or enter dismissal or default. Before moving, be ready to answer three questions the FJC guide poses: what was lost, why its loss prejudices you, and why ordinary discovery cannot fill the gap. Seek targeted discovery about the loss (device histories, wiping-tool artifacts, retention settings) rather than a general do-over. The outcomes range widely, from default in Organik Kimya, San. ve Tic. A.S. v. International Trade Commission, 848 F.3d 994 (Fed. Cir. 2017) to an adverse inference that could not carry a damages claim on its own in Epic Systems Corp. v. Tata Consultancy Services Ltd., Nos. 19-1528 & 19-1613 (7th Cir. Aug. 20, 2020, amended Nov. 19, 2020). Text messages are a recurring problem: a court held that texts on a party's personal phone were discoverable and that deleting them breached the duty to preserve in Paisley Park Enterprises, Inc. v. Boxill, 330 F.R.D. 226 (D. Minn. 2019).

Bad-faith claims. The DTSA lets the court award fees to the prevailing party if a misappropriation claim "is made in bad faith, which may be established by circumstantial evidence." 18 U.S.C. § 1836(b)(3)(D). The Sixth Circuit affirmed a fee award under Michigan's similar statute where the former employer showed little more than the existence of generalized trade secrets and the employee's knowledge of them, observing that "[f]iling a trade-secret action to restrain legitimate competition and job mobility, needless to say, is not proper." Degussa Admixtures, Inc. v. Burnett, 277 F. App'x 530 (6th Cir. 2008). A plaintiff that cannot produce a real identification after months of discovery should consider whether it is building that record against itself. See also Rule 11 and Inherent Power Sanctions.

Appellate review. Discovery orders are rarely reviewable before final judgment. Mandamus under 28 U.S.C. § 1651 is reserved for clear abuses, such as the orders in Ford and John B., and the Federal Circuit dismissed the departing engineer's petition seeking to block production of the due-diligence report in Waymo. For the sanctions toolbox, see the Litigation Sanctions and Professional Responsibility Toolkit and Litigation Holds, Spoliation, and Rule 37(e).

Step 10: Narrow the case for trial and protect the secrets in the courtroom

Narrow early. Courts routinely require plaintiffs to elect a manageable subset of secrets before trial, and juries understand five secrets better than thirty. Plaintiffs should choose the secrets with the cleanest proof of secrecy and use; defendants should ask the court to set the election date well before the final pretrial conference. The final pretrial order controls the trial and may be modified only to prevent manifest injustice under Rule 16(e), and a theory or secret never disclosed is likely to be excluded under Rule 37(c)(1), as the Seventh Circuit approved in NEXT Payment Solutions. Motions in limine will address prejudicial labels and side issues under Fed. R. Evid. 403; deposition designations follow Rule 32, discussed in Using Depositions at Trial and on Summary Judgment.

Plan the courtroom. The DTSA directs courts to take action "necessary and appropriate to preserve the confidentiality of trade secrets," 18 U.S.C. § 1835(a), but the public's right of access is at its strongest at trial. Courts may refuse to let their records become sources of business information that might harm a litigant's competitive standing, Nixon v. Warner Communications, Inc., 435 U.S. 589 (1978), and the Ninth Circuit has recognized that genuine trade secrets can overcome the presumption of access, Apple Inc. v. Psystar Corp., 658 F.3d 1150 (9th Cir. 2011), but any sealing requires a specific showing, made in advance, under standards such as the "compelling reasons" test of Kamakana v. City & County of Honolulu, 447 F.3d 1172 (9th Cir. 2006). The FJC guide's toolkit:

  1. Code names keyed to the numbered identification, with a key the jurors can consult.
  2. Sealed exhibits shown on jurors' and counsel's monitors only, or in hard copy.
  3. Narrow redactions identified before the pretrial conference, not during testimony.
  4. Any courtroom closure limited to specific testimony, clustered so the room closes once per witness. Courts generally require specific findings that closure is essential and narrowly tailored, drawing on the Supreme Court's access cases such as Press-Enterprise Co. v. Superior Court, 478 U.S. 1 (1986).
  5. Admonitions to jurors and observers; court personnel are already barred from disclosing confidential information they learn on the job by 18 U.S.C. § 1905.
  6. A verdict form that asks, secret by secret, whether each one exists and was misappropriated, and a sealed attachment listing the secrets in any injunction.

For the remedies that follow a verdict, see Trade Secret Damages and Remedies.

Timeline, budget, and who pays

Clients ask two questions first: how long and how much. The honest answers depend on the number of secrets, devices, and parties, but the shape is consistent. The figures below are rough planning ranges per side for a mid-sized federal case (one company and one or two individuals on each side, a single technology) at typical commercial-litigation rates; complex technology, foreign evidence, or large-firm rates can multiply them.

Phase Typical duration Main cost drivers Planning range per side
Investigation and preservation 1 to 3 weeks Forensic collection, log exports, counsel's investigation $15,000 to $75,000
Emergency relief and expedited discovery 2 to 8 weeks Declarations, short depositions, hearing $75,000 to $300,000
Protective order and identification 1 to 6 months Negotiation, expert input, any challenge $25,000 to $150,000
Neutral forensic examination 1 to 4 months Number of devices and accounts, review rounds $20,000 to $150,000, often shared or shifted
Fact discovery 6 to 12 months Document review, depositions, non-party subpoenas $200,000 to $1,000,000
Experts and summary judgment 4 to 8 months Reports, depositions, motions $150,000 to $600,000
Trial 1 to 3 weeks of trial, months of preparation Witness preparation, exhibits, sealing logistics $300,000 to $1,500,000

Three practical points. First, forensic costs scale with review, not imaging: in Covad, the estimate for copying and analyzing the defendant's drives was $47,000, a figure that did not include the legal work of the examination. Second, costs shift: courts move forensic fees to the party whose conduct made them necessary, award expenses on discovery motions under Rule 37(a)(5), and award fees for bad-faith claims or willful and malicious misappropriation under § 1836(b)(3)(D). Third, the early phases decide the expensive ones. A clean identification and an agreed forensic protocol can take months and six figures out of the middle of the case.

A worked example: the contract manufacturer and the customer's cure process

Halvorsen Coatings developed a low-temperature powder-coating process for fiberboard cabinet doors and, from 2021 to 2025, paid Brightline Finishing to run it under a supply agreement with confidentiality and use restrictions. Halvorsen gave Brightline its process specification and loaded its recipe files onto Brightline's oven controllers. Six months after the agreement ended, Brightline began offering low-temperature finishing to Halvorsen's customers, and a Brightline line supervisor told a Halvorsen salesperson that the new service "runs the Halvorsen recipe with a new name." Halvorsen sues in federal court under the DTSA, the state trade secret statute, and the supply agreement. (For the contract side of this story, see Contract Manufacturing and Hardware Supply Agreements and Drafting Enforceable Non-Disclosure Agreements for Technology Transactions.)

Weeks 0 to 2: preservation. Halvorsen's letter names the evidence that matters in a plant rather than on a laptop: the oven controllers' recipe memory and change logs, the manufacturing execution system's batch records, backups of the line's programmable logic controllers, and the engineering notebooks for the new line. Controller memory can be overwritten when new recipes load, so the letter proposes that a neutral image it within ten days. Brightline issues a hold, exports the logs, and agrees to the neutral, which costs it little and takes the emergency out of the case.

Weeks 2 to 6: emergency relief. Halvorsen considers a TRO but has a delay problem: Brightline has run the line for six months. It moves instead for targeted expedited discovery: the neutral's images, the batch records for the new line, and a three-hour deposition of the line supervisor. The court orders the first two and defers the deposition to ordinary discovery, the scope-focused result Qwest and American LegalNet predict.

Weeks 4 to 8: protective order. The fight is over Brightline's vice president of operations, a chemical engineer who also sets prices. Applying U.S. Steel and Brown Bag, the court denies him access to attorneys' eyes only material but lets Brightline share it with an independent coatings expert and a designated in-house lawyer with no pricing role.

Weeks 6 to 12: identification. Halvorsen serves fourteen numbered secrets, including No. 3 (the cure profile quoted in Step 4), a pretreatment bath concentration window (No. 4), a substrate moisture specification (No. 6), negative know-how about outgassing failures (No. 9), and the combination of Nos. 3, 4, and 6 (No. 12). Brightline's deficiency letter targets four entries: No. 7 matches a published industry bulletin, No. 9 cites "all test reports," No. 12 does not explain how its elements interact, and No. 14 is a category ("customer-specific color formulations"). At the meet and confer, Halvorsen withdraws Nos. 7 and 14 (marking them "no longer asserted" rather than renumbering), rewrites No. 9 to cite three reports by Bates number and page, and explains why No. 12's elements work only together. Brightline moves on No. 12 alone; because both sides' experts can say what is claimed, the magistrate judge denies the motion and technical discovery proceeds.

Months 3 to 7: forensics and documents. The neutral's hash comparison finds three recipe files on Brightline's controllers identical to Halvorsen's except for the header name, created during the supply term. The controller change log shows that the new line's recipe was saved as an edit of one of them, with the dwell extended by two minutes. Brightline's position is independent development: its engineers say the cure window comes from the resin supplier's public data sheet, and that the copied files were retained for warranty support the agreement allowed. Brightline produces its development records for the new line but withholds unrelated research reports, as Convolve permits.

Months 7 to 12: depositions and experts. Halvorsen's 30(b)(6) notice covers the new line's development, the recipe edits, and Brightline's searches for Halvorsen material. Brightline's notice covers the development and protection of each numbered secret and every disclosure Halvorsen made to its resin supplier. Both sides' expert reports are organized by number.

Months 12 to 16: summary judgment and trial. The court grants Brightline summary judgment on No. 4, because the resin supplier's data sheet discloses the same bath window, and on No. 9, because Halvorsen shared those test reports with the supplier without a confidentiality agreement. It denies the motion on Nos. 3 and 12, where the recipe-edit evidence creates genuine disputes. Halvorsen elects Nos. 3, 6, and 12 for trial, and the parties try the case with code names and sealed exhibits.

What each side should take from it. Halvorsen kept a provable case by locking down the controller memory early, pruning its identification at the first meet and confer, and tying every expert opinion to a number. Brightline cut the case from fourteen secrets to three by cooperating on preservation, challenging only the entries that mattered, and building its public-domain and independent-development record secret by secret. Neither side spent money on a seizure application, a blanket stay, or a fight about everything. The Trade Secret Identification and Discovery Checklist turns each of these phases into action items.

Common mistakes

  1. A vague preservation letter. "Preserve all relevant documents" preserves nothing in particular. Name the devices, accounts, logs, and systems, and propose a neutral.
  2. A TRO against "use of trade secrets." Without a sealed list of what is covered, the order may be vacated or unenforceable.
  3. Serving the identification before any confidentiality protection exists. Get the order, or a signed interim agreement, first.
  4. A protective order with gaps. No expert disclosure procedure, no source code terms, and no decision on prosecution bars means three motions later.
  5. "Limited" expedited discovery that is really the whole case. It gets denied, and it costs credibility for the injunction motion.
  6. Spending the interrogatories in the first month on contention questions nobody can answer yet.
  7. 30(b)(6) topics that ask for legal contentions, which invite a protective order and produce useless testimony.
  8. Moving for spoliation sanctions before the forensic work shows what was lost and why it matters.
  9. Missing the 14-day deadline to object to a magistrate judge's order.
  10. Planning code names and sealing during trial instead of before the pretrial conference.
  11. For defendants, refusing all production until the identification is "sufficient." Courts expect non-technical discovery to proceed, and delay rarely buys a better identification to attack.

Frequently asked questions

How long does discovery in a trade secret case take? Expect an emergency phase of one to three months, an identification process that can add one to six months if contested, and nine to eighteen months of fact and expert discovery. The identification dispute in Quintara alone delayed discovery about five months.

Can we serve discovery before the Rule 26(f) conference? Only with a stipulation or a court order, usually on a showing of good cause tied to an injunction motion. One exception helps: Rule 26(d)(2) lets a party deliver document requests more than 21 days after service of the complaint, and they are treated as served at the first Rule 26(f) conference, so the responses come due sooner.

Who pays for the neutral forensic examiner? Whatever the protocol or order says. The requesting party often advances the cost, and courts shift it to the side whose conduct made the examination necessary, as Genworth did with its 80/20 split.

Does the identification have to be verified? If it is an interrogatory answer, yes: it must be answered under oath and signed by the person making it. A standalone identification is signed by counsel, but someone with technical knowledge should be ready to explain every entry in a declaration or deposition.

Can we use what we learn in discovery for anything else? Usually not. Model orders limit the use of protected material to prosecuting, defending, or settling the case. Using it in another case, or sharing it with a government investigator, requires the producing party's consent or a modification of the order.

What happens to the forensic images when the case ends? The protocol and the protective order control. The Northern District of California model requires return or destruction of protected material within 60 days of final disposition, with a written certification; make sure the protocol says who keeps the original images until appeals end.

What if the accused employee takes the Fifth? The employee may invoke the privilege in civil discovery, the factfinder may draw an adverse inference, and the court may weigh a stay if a criminal case is pending. Coordinate early, because the invocation changes what the plaintiff must prove from other sources.

Can a small company afford to litigate this way? It can if it litigates selectively: a short list of strong secrets, a stipulated forensic protocol with cost-sharing, requests for admission instead of extra depositions, no seizure application, and an early mediation after the neutral's report, when both sides finally know what the evidence shows.

Practical takeaways

  • Preserve first, image second, look third, and run every early investigation through counsel.
  • Ask for narrow emergency relief tied to specific files, with a sealed list and a forensic protocol in the proposed order.
  • Get a two-tier protective order, or a signed interim agreement, before anything confidential changes hands.
  • Serve a numbered, specific identification; challenge only the entries that matter; amend for good cause and never renumber.
  • Build the discovery plan, the forensic protocol, the expert reports, and the summary judgment briefs around the numbers.
  • Use the specific remedy each rule provides, meet the objection deadlines, and plan courtroom confidentiality well before trial.

This document is general information, not legal advice for any particular situation; the law changes, and the facts matter.

Related Documents

Related Articles

Related Guides

Related Checklists

Related Toolkits