Where the line usually falls
Misappropriation generally means acquiring a trade secret through improper means, or using or disclosing it in breach of a duty of confidence. Theft and unauthorized access to computer systems are clear examples of improper means. Independent development, and reverse engineering of a product that was lawfully obtained, are generally not improper. Employees are free to carry their general skills and experience to a new job, so the dispute often turns on whether what moved was specific confidential information or know-how the person would have had anyway. The information also has to qualify as a trade secret in the first place, which depends partly on how carefully it was protected before anyone left.
Building the record
For a company that suspects misappropriation, much of the evidence sits in its own systems: access logs, download and transfer records, email forwarding, and records of devices returned or not returned. Preserve those before routine deletion cycles run, and have forensic imaging done by a professional so that it holds up later. Do not log into a former employee's personal accounts, which can create claims against you. Identify what the secret actually is, as precisely as you can, because courts often require that early in a case. Collect the confidentiality and employment agreements that applied to the people involved.
If you are the one accused
A new employer or a departing employee who receives a demand letter should take it seriously without panicking. Do not delete files, wipe devices, or send material back on your own, because the way information is returned can matter as much as the return itself; preserve everything and get advice first. Companies that hire from competitors can often reduce risk by asking new hires to confirm in writing that they brought nothing with them and by keeping them off projects where the overlap is obvious. Federal and state claims can both be in play, and New York relies on its common law here rather than a uniform statute. On either side of a misappropriation claim, our first conversation usually covers what was taken or is said to have been taken, which agreements apply, and whether a negotiated return protocol could resolve the matter.
