Marcus runs a commercial HVAC company in Jacksonville. His top estimator resigned on a Friday and turned up at a competitor three weeks later. Within a month, two of Marcus's largest bid clients moved their contracts across the street. The estimator had emailed himself the pricing models and the customer list on his way out. When Marcus called a lawyer, the first questions were the hard ones: Did the estimator sign a confidentiality agreement? Was the pricing model ever marked confidential? Who else could open that file? The answers were no, no, and everyone. Marcus did not have a trade-secret problem. He had a trade-secret protection problem, and he found out the week it was too late to fix cheaply.
Florida protects trade secrets, but it protects them on one condition: you have to treat the information like a secret before you lose it. The Florida Uniform Trade Secrets Act (FUTSA, Chapter 688) covers information that has real economic value from not being generally known and that the owner took reasonable steps to keep secret. Both halves matter. Calling something a trade secret is not the same as proving it is one, a point Florida courts make routinely. After 30 years of watching businesses lose their own work to a departing employee, these are the five moves that actually hold up.
1. Identify and mark what is actually secret
You cannot protect a category you have never defined. Before anyone leaves, inventory the information that gives your business its edge: pricing models and margin formulas, customer and prospect lists with the context that makes them valuable, vendor terms, processes, source code, and internal know-how. Then mark it. A document labeled "Confidential – Trade Secret" and stored in a restricted location is evidence of reasonable steps; the same file sitting on a shared drive with no label is evidence of the opposite.
This is the step most businesses skip, and it is the one courts look at first. A customer list is a trade secret in Florida only when it carries independent value and you guarded it. A list a competitor could rebuild from a trade directory is not protected no matter what you call it.
2. Lock it down with the right agreements, signed on day one
The protection runs through signed paper, and the time to get it signed is at hire, not at exit. Every employee and contractor with access to sensitive information should sign a confidentiality and non-disclosure agreement with a clear definition of confidential information, a defined purpose, and obligations that survive the end of the relationship. For anyone who creates work product — code, designs, content, processes — add a present-tense intellectual property assignment, because in Florida the creator generally owns what they make unless the contract assigns it to you.
Note what this is not. A confidentiality agreement is not a non-compete, and you do not need a non-compete to protect a trade secret. The two tools do different jobs: a non-compete limits where a person can work, while the NDA and FUTSA protect the information itself. Reaching for a non-compete when the real issue is confidentiality is one of the most common and expensive mistakes I see.
3. Limit access to the people who need it
Reasonable steps to keep a secret include not handing it to everyone. Access controls, separate permissions for sensitive files, and a plain internal policy on confidential information are what turn "we meant to keep it secret" into "we took steps to keep it secret." If the estimator in the story had been the only person who could open the full pricing model, and the file had logged who opened it, Marcus would have had both better security and far better evidence.
4. Run a real exit protocol
The departure itself is the moment of highest risk, and it is almost always handled with a handshake. Build a short, repeatable exit protocol: cut access the day notice is given for sensitive systems, collect company devices, remind the departing person in writing of the confidentiality and IP obligations they signed, and get written confirmation that they have returned or destroyed confidential materials. Preserve access logs and email records rather than wiping the account immediately. The exit protocol is cheap to run and decisive when you later need to show what you did.
5. Act fast when something goes wrong
If information walks out the door, speed matters more than almost anything else. FUTSA lets a Florida court order an injunction to stop actual or threatened use or disclosure, and that remedy is most powerful before the secret has spread. The statute of limitations is three years from discovery, but the practical window is far shorter: evidence gets overwritten and the information gets used. Preserve the record, document the misappropriation, and get advice on a cease-and-desist or injunction quickly. Waiting to "see if it becomes a problem" is how a protectable claim becomes an unprovable one.
The pattern underneath all five
Every one of these moves is really the same move made at a different time: decide that the information matters, and act like it — in writing — before you need to prove it. Marcus rebuilt his program the expensive way, after the loss. The businesses that keep their edge do it the cheap way, before anyone resigns. For the related question of who owns the work your team creates, see 5 IP Ownership Traps That Cost Florida Businesses Their Own Work Product, and for how confidentiality differs from a non-compete, see NDA vs. Non-Compete: Which Do You Need?
Not every business needs a full trade-secret program. But if your value lives in pricing, relationships, processes, or work product, these five moves are the difference between owning your edge and watching it walk out the door.