Email commitment possibly broken by big company So here is the story: I email company A asking for a specific service they provide. They tell me to describe my idea and I ask explicitly for confidentiality (but not NDA just expressed) which was explicitly accepted. Company A is in USA, California. They have an internal discussion and they decide that they do not want to provide me with the service because they are not sure if their investors/partners would be happy with it (very vague explanation). After 3 months, company B launches an effective replica of the core of my idea. Company B is owned by people that are investors in company A. Company B's product now uses the service that was denied to me by company A. Company B is sold for a 9 figure amount one year after to a much bigger company. Proving that someone from company A talked to company B (although they have common shareholders) is the difficult part. Do I have a case?
The question says that the OP &quot;asked&quot; company A for confidentially. It does not say that the agreed to it. If they did not, the asker has no case, and they could publicly admit having used his idea and s/he still would have no case. If Company A agreed to confidentiality, and did so in writing (or if the agreement can be otherwise proved) then there might be a case. Proving communication of the idea to Company B would indeed be a hard part of bringing the case. Company B could also defend by showing independent invention of the concept. History has many examples of the same idea being independently arrived at by multiple people at about the same time. Ideas are more common, and therefore of less value standing alone, than many inventors think. To seriously pursue such a case, it would be a very good idea to consult a lawyer experienced in IP law in your jurisdiction. NDAs (and this agreement, if it existed, would be a form of NDA, even if it wasn't called that) are often governed by state law, but trade secret law is partly Federal (see 18 U.S.C. § 1832). A lawyer could advise more specifically and accurately on the chances of success, the probable costs, and the possible amount of recovery, based on the specific facts. But as described, the case is far from a sure thing. More specifically, most US states have enacted some version of the Uniform Trade Secrets Act. The USTA sec 1.2 prohibits using or sharing a trade secret gained through &quot;improper means&quot;. Section 1.1 defines this: &quot;Improper means&quot; includes theft, bribery, misrepresentation, breach or inducement of a breach of a duty to maintain secrecy, or espionage through electronic or other means. Promising to observe confidentiality and then breaking that promise would seem to fit. Section 1.4 defines a &quot;trade secret&quot; as: &quot;Trade secret&quot; means information, including a formula, pattern, compilation, program, device, method, technique, or process, that: (i) derives independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable by proper means by, other persons who can obtain economic value from its disclosure or use, and (ii) is the subject of efforts that are reasonable under the circumstances to maintain its secrecy The idea described in the question might fit this definition. The UTSA provides successful plaintiffs with several possible forms of relief, including injunctive relief, damages, and attorney's fees. The details will be decided by the court in each case.
Only if the company consents While some jurisdictions have by statute allowed corporations to be bound by pre-incorporation contracts, New York is not one of them and holds to the common law principle that a person cannot enter a contract before that person exists. In your circumstances the company is only bound by the second contract. So, who is bound by the first? Well, corporations can only act through agents and agency law tells us that an agent who purportedly acts for a non-existent principal is actually acting on their own behalf. So, the person(s) who signed for Company X on the first contract are personally bound to the contract. Unless they explicitly told Company Y that they wouldn’t be. It seems that they didn’t so Company Y can require performance of the first contract by them and of the second by Company X. Company Y must, of course, fulfil its obligations under both contracts - it needs to bear this in mind if it is actually impossible to do both, for example, transferring the same property to the signers of the first contract and Company X or becoming a full time employee of both. If so, it might be in Company Y’s best interests to let the first contract “die”.
The answer to the question "can so-and-so sue me?" is almost always "yes", regardless of context. Such a suit might be baseless, and it might get settled in your favor, but you still have to spend the time and money to defend yourself. This can be disastrous for a start-up that's trying to get off the ground, and it's how patent trolls make their money. (I'm not accusing SnapChat of engaging in such tactics as a rule, of course; I'm just pointing out that the legal system does allow for them.) Whether or not you are likely to be sued is a separate question, and one that can really only be effectively addressed by a trademark attorney with full knowledge of the particularities of your situation.
Google is an international company. It has employees in France. It has offices in France. It has costs and revenue in France. It has French subsidiaries, with French bank accounts. Google could absolutely try to ignore a French judgment against it, but the government could seize assets from their French bank accounts, and/or real property they have in the country. The French government could petition other countries in which Google has assets to enforce the judgment, and at least in other EU countries it would likely be successful. Ultimately, though, there'd be no need for such extreme measures. Google's business in France is selling ad space to French businesses. If they didn't have that available as a revenue stream, they might well cut off service to the country themselves.
No, it's not legal. The General Data Protection Regulations (GDPR) apply given that you are in the UK (regardless of where the Data Processor is based). The UK GDPR is slightly modified due to Brexit, but the same principles apply. The only plausible legal basis for this actions would be that you consent to it, and you're entitled to withdraw that consent at any time. Some may claim that Article 6.1(b) applies, i.e. that it's necessary to send marketing email in order to fulfil the contract, but GDPR is clear that bundling such consent into a contract for service simply to permit the data processor additional actions isn't allowed, as I'll demonstrate. UK GDPR requires that consent to use your personal information (in this case, your email address) for the stated purpose be freely given. Consent to use your information for direct marketing is not freely given if it's inseparable from the consent to use it for some other service, as per para 43: Consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case, or if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance. And Article 7.4 backs this up with When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract. The intent of Article 6.1(b) is that only the processing required for the service you have bought is allowed (e.g. if you supply your address for delivery of stuff you've bought, the data processor can use that address to send you the stuff, but is not allowed to add a contract term that allows them to send you unwanted stuff). Examples of emails that Article 6.1(b) would allow (in my assessment) include things such as notification of upcoming downtime, or a reminder that subscriptions are due, but not unsolicited advertisements for other products. There's a grey area that's open to interpretation, where adverts are piggybacked onto actual service messages.
You premise is correct. The processor is someone that processes data on your behalf, and since the GDPR definition of processing is extremely broad, that is about every third party subcontractor that you use for data processing, including various cloud providers. I'm afraid it will soon become a huge mess with a gazillion contracts to sign. I disagree. Yes, the GDPR says that a contract between the controller and processor must exist, but Article 28 of the GDPR does not say anything about how the controller shall document these instructions. Basically, in cases like the one you describe where John Doe relies on a web agency for having a contact form on the web, there will be a standardized (by the web agency) service agreement between the John Doe (controller) and the web agency (processor). There is nothing stopping the parties from agreeing that this service agreement that John Doe accepted as part of the onboarding procedure is also the DPA as required by the GDPR. Putting something like the following in the service agreement would do it: The parties agree that this Service Agreement between You (controller) and Us (processor) set out Your complete and final instructions to Us in relation to the processing of Personal Data and that processing outside the scope of these instructions (if any) shall require prior written agreement between You and Us. You also agree that We may engage Sub-processors to process Personal Data on Your behalf. The Sub-processors currently engaged by Us and authorized by You are listed in Annex A. I think we will se a lot of amendments in service contracts as the GDPR gets better understood, but I don't really see a flood of DPAs in addition to these amended service contracts.
It sounds like you may be conflating ownership and control. It's very common for an affiliate to have a contract with the parent company. These terms can be very detailed - it may give the parent company the right to sell the affiliates widgets, but not sprockets (as those are sold by another parent company). As such, you can't really measure &quot;control&quot; as a simple percentage. So, when the parent is selling widgets, it can reasonably claim control over its affiliate. The buyer does not need to know the exact terms governing the relation between parent and affiliate.
Sorry, what did I agree to? NDA means New Drug Application, right? Or is it Notre Dame Academy? Maybe it's Nebraska Dressage Association - don't want to cross those guys, their horses are mean. When you are trying to form a contract with someone, it's very important that you and they are talking about the same thing. What can't I disclose? That I had a phone call? What I said? What you said? Only the confidential bits? If so, what are they? Can I tell my business partner? My lawyer? My secretary? The IRS? Another important thing about making a contract is to agree on the terms. Post-facto contracts are not a thing After you paint my fence, you can't demand payment. We have to enter into a contract before the thing that happened happens. Elements of the call might be confidential anyway I am bound to respect confidences that were entrusted to me where a) the information is confidential b) it was imparted to me in a situation of confidence and c) disclosing it would cause harm. We don't need a Non-Destructive Analysis to document that.