How Do You Protect Your Business's Private Information?

By Bill Stilwell · Last reviewed October 16, 2026

The short answer

Write down what information is private, who can see it, and what everyone must do to protect it. Put confidentiality terms in your owner, employee, contractor, and vendor agreements. Under federal law, agreements with employees and contractors that cover trade secrets or confidential information should include a whistleblower immunity notice, and employee rules can’t block workers from talking about their pay.

What this means

This page is the main home for 6.2.8 Confidentiality obligations, 11.2.4 Confidentiality agreement, and 23.6.6 Confidentiality for employees.

Confidential information is anything that would hurt your business or your customers if it got out. For a small business that usually includes:

Customer names, addresses, phone numbers, and job history
Pricing, cost sheets, and profit margins
Vendor terms and supplier lists
Processes, checklists, and methods that give you an edge
Passwords and account access
Financial records and plans

A trade secret is private business information that has value because others don’t know it, and that you take reasonable steps to keep private. If you don’t protect it, you may not be able to claim it later (see 27.3.3 Trade Secrets).

Say a carpet cleaning company has a list of 2,000 past customers with notes on each home. A technician leaves and starts calling those customers. If the technician signed a confidentiality agreement and the list was protected, the company has much better footing than if the list sat in a shared folder anyone could copy.

Why it matters

Customer lists walk out the door. Departing workers and partners are the most common way it happens.
Customer trust is on the line. Leaked personal information can hurt customers and your reputation (see 11.6.2 Sensitive Information).
You can lose legal remedies. Federal law (18 U.S.C. 1833(b)) says an employer that leaves the whistleblower immunity notice out of these agreements can’t recover extra (exemplary) damages or attorney fees from that worker in a federal trade secret case. The law counts contractors and consultants as employees for this rule.
Overly broad rules can be illegal. The National Labor Relations Board (NLRB) says rules that ban covered employees from discussing wages are unlawful.

Who this applies to

Every business where someone other than the owner sees private information. That includes co-owners, employees, contractors, subcontractors, and vendors like bookkeepers or web developers.

A solo owner with no helpers still needs to protect information with good passwords and access controls (see 11.7.6 Least Privilege Access).

How to do it

List the kinds of information your business treats as confidential.
Mark where each kind lives: CRM, shared drive, email, phone, paper files.
Limit access to people who need it for their job (see 11.7.6 Least Privilege Access).
Add confidentiality terms to your owners’ agreement, so co-owners have the same duty.
Add confidentiality terms to employee agreements or offer letters (see 23.6.2 Offer Letters), and to contractor and vendor agreements (see 11.2.2 Independent-Contractor Agreement and 11.2.1 Vendor Agreement).
Have your attorney include the federal whistleblower immunity notice in agreements with employees and contractors, or point to a written reporting policy that includes it.
Make sure your rules don’t stop employees from talking about wages or working conditions. Have an attorney review the wording.
Explain the rules in plain words when someone starts, and keep a signed copy.
When someone leaves, remove their access the same day and ask them to return or delete business information (see 11.7.7 Removing Access When People Leave).
Review the list and agreements once a year.

What proof to keep

Signed agreements with confidentiality terms for every owner, employee, contractor, and vendor
Your list of confidential information and where it’s stored
Access records showing who can see what
Exit records showing access removed and information returned

Keep signed agreements in your legal records folder and access records with your security records.

Common mistakes

Calling everything confidential. If everything is secret, nothing stands out. Be specific.
Leaving out the whistleblower notice. It can cost you remedies later.
Banning pay talk. Rules that stop covered employees from discussing wages are unlawful.
Agreements but no access limits. A signed paper doesn’t help if everyone can download the whole customer list.
Forgetting vendors. Your bookkeeper, web developer, and answering service often see the most.
Using a free template from another state. Rules differ by state. Have an attorney review it.

When to get help from a pro

Attorney: to write or review your confidentiality terms. Ask:

Does our agreement include the federal whistleblower immunity notice in the right way?
Does anything in our rules limit what employees can say about pay or working conditions?
What steps do we need to take so our customer list counts as a trade secret in our state?

Bill’s note

[Bill: add a short story or opinion here. For example, a business that lost customers when a worker left with the list, or how SiteSmarty protects client logins and data.]

How I did this for SiteSmarty

[Date I did this:]
[What I actually did, step by step: what I marked confidential and which agreements I updated]
[What it cost and how long it took: attorney review cost]
[What surprised me or what I’d do differently:]
[Screenshot or photo to add, with private info blurred: the confidentiality section of my contractor agreement]
[Result so far:]

Questions people ask

Do I need an NDA with employees? It’s common and helpful. A nondisclosure agreement (NDA) or a confidentiality clause in the offer letter both work. Have an attorney review it.

What is the whistleblower immunity notice? It’s language from federal law that tells workers they can share trade secrets confidentially with the government or an attorney to report a suspected legal violation. Agreements with employees and contractors should include it.

Can I stop employees from discussing their pay? No. The NLRB says rules that ban covered employees from discussing wages are unlawful.

Is my customer list a trade secret? It can be, if it has value and you take reasonable steps to keep it private. Limit access and use signed agreements.

Audit check

Question: Does every person with access to private business information have a signed confidentiality agreement, with access limited to what they need?
Pass looks like: A written list of confidential information, signed agreements for owners, employees, contractors, and vendors, the whistleblower notice included, no ban on wage talk, and access removed when people leave.
Fail looks like: No agreements. Agreements missing the whistleblower notice. Rules that forbid pay discussions. Everyone has access to everything.
Evidence to collect: Signed agreements, the confidential information list, access records, and exit records.

Where this fits

Do this first: 6.2.7 Intellectual-Property Ownership

Do this next: 6.3.1 Business Attorney

Sources

U.S. Code, 18 U.S.C. 1833, via Cornell Legal Information Institute (checked October 16, 2026)
National Labor Relations Board, "Your Right to Discuss Wages" (checked October 16, 2026)

This page explains general rules and Bill's own experience. It is not legal, tax, or insurance advice. Talk to a qualified professional about your situation.