info@societejuridique.com
Madrid: Paseo de la Castellana 216 8 ª Planta
Alicante: Av. Ansaldo Nº31, local 16
24h emergencies: 669 30 21 13

Social media:

Trade secrets · Articles 278-280 CP

Trade secrets: protection and defence

Criminal defence throughout Spain · offices in Madrid and Alicante

An employee leaves with the client portfolio or the source code. Criminal protection reaches only as far as your prior diligence reached. Preserve the evidence now.

In brief. Articles 278 to 280 punish the seizure, disclosure and use of trade secrets, and the Trade Secrets Act defines what a secret is: information not generally known, valuable because it is secret, and subject to reasonable measures to keep it secret. That last requirement sinks most cases: the law does not protect valuable information, it protects the valuable information you protected.

Why it is different

72h
Access logs, mass downloads and connected devices are overwritten within days: forensic preservation is the first urgent step.
278-280
The Criminal Code articles punishing the seizure, disclosure and use of company secrets.
LIWARD
Our own methodology of legal intelligence and forensic analysis.

What the law protects, and what it does not

Articles 278 to 280 punish the seizure of data or documents constituting a trade secret, their disclosure and their use. The Trade Secrets Act defines the secret: information not generally known, with value because it is secret, and subject to reasonable measures to keep it secret. That last requirement is what sinks most cases: if the client list sat in a shared folder open to the whole workforce, without access controls or confidentiality undertakings, the criminal case is weak whatever the disloyalty.

One line must be kept clear: the worker’s professional experience and knowledge are theirs, and they take them away legitimately. What they may not take is the company’s information. That distinction is the heart of these proceedings. What we see in practice: the salesperson who leaves and whose clients begin switching supplier one by one weeks later; the technician who takes the drawings, the source code or the pricing database; the manager who, before leaving, downloads massively to an external drive or forwards to a personal mailbox; and the competitor that hires an entire team, and with it everything the team knew and had.

The framework

Offences, requirements and the two sides of the problem

Art. 278 CP

Seizure of secrets

Taking data, electronic documents or media to discover a company secret. Aggravated where the secrets are disclosed or transferred to third parties.
Art. 279 CP

Disclosure by an insider

Disclosure or use of a secret by whoever has a legal or contractual duty of reserve: the departing employee, the former director, the partner.
Art. 280 CP

Use by a third party

Whoever, knowing the unlawful origin of the information, uses it without having taken part in its discovery: the hiring competitor’s exposure.
LSE

What counts as a secret

Information not generally known, valuable because secret, and subject to reasonable protection measures. Without the three requirements there is no secret, however valuable the information.
Measures

Access control

Only those who need it access it, with individual credentials and access logging. A shared folder open to the whole workforce is not a secret.
NDAs

Confidentiality undertakings

Signed not only with managers: also with sales staff, technicians and key suppliers. Their absence is the usual reason for dismissal of the case.
Evidence

The first 72 hours

Everything depends on what remains recorded: access logs, mass downloads before departure, forwarded e-mails, external devices, out-of-hours access. That information is overwritten and disappears: forensic preservation of the systems comes first, always.
Civil route

Often better than the criminal one

The Trade Secrets Act offers faster and more effective tools: fact-verification proceedings, cease-and-desist interim measures, prohibition on marketing infringing products, and damages that can be computed on the infringer’s profit. The optimal strategy often combines both routes, or begins with the civil one.
The other side

If the newcomer is your employee

If you hire a professional who arrives with their former employer’s information and uses it, your company can be the one investigated, and even convicted as a legal person. The protection is simple: a written warning to the new employee, verification, and documentary record of both.
Penalties at a glance

Penalty framework by conduct

ConductArticlePenalty frameworkKey factor
Seizure of secrets278.12 – 4 years and fineTaking of data, documents or media
Seizure with disclosure278.23 – 5 years and fineDissemination or transfer to third parties
Disclosure by an insider2792 – 4 years and fineLegal or contractual duty of reserve
Use for own benefit (insider)279 in finePenalty in its lower halfUse without dissemination
Use by a knowing third party2801 – 3 years and fineKnowledge of the unlawful origin
Reasonable measuresLSERequirement of the offenceTheir absence is the usual ground of dismissal
Civil routeLSECease-and-desist, verification, damagesOften faster and more effective
Legal person31 bisFine · suspension · dissolutionThe hiring company’s exposure

Penalty ranges are indicative and set out the ordinary framework; the sentence actually imposed depends on the circumstances of each case.

What the courts require

The reasonable measures: what the judge will ask you

The law does not protect valuable information. It protects the valuable information you protected. At trial the question will be exactly that: what did you do to keep it secret? The measures the courts consider reasonable, whose absence is the usual reason for dismissal: access control with individual credentials and logging; confidentiality undertakings signed with sales staff and technicians, not only with managers; classification of the information and technical measures proportionate to its value; and exit protocols on departures. Everything depends on what remains recorded, and those logs are overwritten in days: forensic preservation of the systems, with chain of custody, is always the first step.

What almost never works is the reflex criminal complaint, filed in the heat of the moment and without evidence, which is dismissed and leaves the company in a worse position than at the start. In many cases the optimal strategy combines the criminal route with the civil tools of the Trade Secrets Act, or begins with the civil one. And where the case is weak because the information was not specially protected, we say so: better to know before investing two years in proceedings.

01

Legal intelligence

02

Financial and accounting analysis

03

Digital evidence · e-forensic

04

Procedural strategy

How we intervene

From the departure to the judgment

Phase 01

Forensic preservation of the systems

Phase 02

Assessment of the reasonable measures

Phase 03

Route selection: criminal, civil or both

Phase 04

Interim measures, trial and recovery

Who we represent

Each profile demands a distinct defence

E

Companies whose secrets leave

Companies facing the departure of key staff with information: preservation, verification and cease-and-desist measures.

C

Hiring companies

Companies incorporating profiles from competitors: written warnings, verification and defence where investigated.

I

Employees and ex-employees

Professionals accused of taking information: the line between their own experience and the company’s information.

S

Partners and founders

Departures of founders and partners with know-how: coordination of the corporate, employment and criminal planes.

FAQ

Frequently asked questions

They had signed a non-compete agreement. Does it help?
It helps on the employment and civil planes, with its requirements (financial compensation, time limit). But the agreement does not turn into an offence what is not one: they are different planes, and it is advisable to use both.
They have taken the clients, but copied nothing.
Winning over clients is not an offence in itself. Doing it using the company’s confidential information is. The difference is proven with the systems, not with suspicions.
Can I examine their computer after they leave?
Yes, with the appropriate guarantees and a prior usage policy. Doing it badly invalidates the evidence.
What if the information was not specially protected?
Then the case is weak, and we will tell you so. It is preferable to know before investing two years in proceedings. The reasonable-measures requirement is what sinks most complaints.
Is the civil route better than the criminal one?
Often, yes. The Trade Secrets Act offers fact-verification proceedings, cease-and-desist measures, prohibition on marketing infringing products and damages computed on the infringer’s profit. The optimal strategy frequently combines both routes or begins with the civil one.
And if the person arriving is my new employee?
If they arrive with their former employer’s information and use it, your company can be investigated and even convicted as a legal person. The protection is simple and almost nobody applies it: a written warning that they must not contribute or use their former company’s information, verification that they do not, and a documentary record of both.

Speak to a criminal lawyer

In a fast-track case, the days you have are the case.

Criminal defence in English before the courts of Alicante and the rest of Spain, for residents and for visitors who have flown home.

Logotipos-abogacia-scje
Paseo De La Castellana 216 8º 28046 Madrid
Alicante – Playa de San Juan Av. Ansaldo 31, local 16, 03540 Alicante
Londres: 20 Wenlock Road, N1 7GU, Reino Unido
París: 72 Faubourg St Honoré, 75008, Francia
info@societejuridique.com

Société de Conseil Juridique et Expert es un despacho de abogados con sedes en Madrid, Alicante, Londres y París, especializado en defensa y acusación penal, delitos económicos y corporativos y derecho tecnológico. Trabajamos con orientación estratégica en procedimientos penales complejos, propiedad intelectual y análisis forense avanzado, y prestamos consultoría jurídica, compliance y escudos de protección a particulares y empresas. Atendemos desde Alicante y Madrid, con consulta online en toda España y asistencia al detenido 24 horas. Resuelva sus dudas en las preguntas frecuentes o solicite una primera consulta.

Copyright © 2026 Société de Conseil Juridique et Expert S.L.

EspanolEnglishFrancaisРусскийItalianoDeutsch
WhatsApp · Urgencias 24h