Is customer list really a trade secret in California? This is about the lawsuit where our tenants and we, the landlord, are being sued for misappropriating competing beauty salon's trade secrets (i.e. customer list). We are about to sign retainer contract with our to-be attorney and will try to get us dismissed on basis that we are merely the other two defendants' landlord and not employer. So don't have anything to do with the alleged theft of trade secrets. However, to my surprise, the other two defendants went to at least 3 different attorneys and neither was willing to take up the case (I don't know the reason yet - will discuss with them tomorrow). The tenants are young and have limited life experience and are totally at risk of default judgement if they don't take up the case themselves or still can't find attorney. I am willing to help them for free and at least attempt to build some defense by doing the paper work that they would submit under their names (I have an engineering background and I like to take up challenges outside my comfort area). But this left me wondering - is customer list really a trade secret in California that attorneys are afraid to challenge? The plaintiff in complaint states that the customer list is a trade secret that was built over years by providing quality services that helped to establish business' reputation and helps to attract new customers and causes existing customers to return while generating stable income for business. Here are my 2 defense arguments that I came up with to at least build defense against the trade secret misappropriation: Most hair salons attract new customers based on business' reputation that is readily accessible on public websites, like Yelp or Google. Contrary to secretive tech startups, beauty salon customers after receiving service are explicitly encouraged by the employee or employer to post public, non-anonymous reviews describing their experience without any restrictions. Which implies that customer list can't be a trade secret because there is no effort to hide customer identities. Most returning customers are usually seeking their favorite hair stylist. Which means that customer list alone can't be constructed as trade secret. It should be viewed as trade secret only in tandem with their favorite hairstylist that they are explicitly seeking. Which means that the moment their favorite hairstylist leaves the employer the information becomes incomplete and hence can't be a trade secret anymore. Would, in your opinion, something written like above convince court?
The customer list is indeed a trade secret if the shop kept its customer list secret and has an advantage from having that customer list, while others don’t have it. And I would think that is the case, because a competitor laying their hands on the list could for example send special offers to the customers in the list. The question is whether your two hairdressers took that customer list and whether the store has reasonable evidence that they did. If customers find out where their favourite hairdresser moved to that’s no legal problem. Can’t understand why no attorney wants to take the case. To the attorney it doesn’t make a difference whether they took the list or not. If they took the list then his or her job is to end the case with the smallest possible amount of damages being paid. PS. Just read in the comments that there is an accusation of "intentional interference with economic relationship". I would want a lawyer who knows the difference between perfectly legal competition which includes trying to get customers to move their business, and "intentional interference with economic relationship". PS. Really make sure that these guys appear in court. With a lawyer. Not appearing means that if the plaintiff says "Judge, these guys did X, punish them!" and they are not there to say "We absolutely didn't do X, prove it if you can", the judge will assume that they did X.
There is, in most countries at least, no law requiring a business to treat a customer fairly. In general, a business may refuse to serve a would-be customer for any reason or none, provided that the reason is not membership in a protected class (racial, religious, ethnic, or sexual bias, mostly). Exactly which classes are protected depends on the local law (in the US, there can be such laws at all of federal, state, and municipal levels). If a customer is asked to leave and does not do so, s/he could be charged with defiant trespass (or local equivalent). More likely, security, or the police, could simply escort the customer out of the business, using as much force as is reasonably needed for that purpose. Unless there are grounds for action not mentioned, I see no basis for a successful suit by the customer.
The CEO wants to "fool" users You are essentially admitting that the company you are working for is about to deceit its customers and asking whether that is legal. The relevant set of laws is rather sparse and does not give direct answers in regards to oAuth tokens or other details of that level (which is probably making your CEO think he can "handle" the arising questions). Probably the most relevant bit of legislation that applies here is The Federal Trade Commission Act (15 U.S.C. §§41-58) which prohibits unfair or deceptive practices and has been applied to online privacy and data security policies. I am pretty sure that, in practice, if the users take your company to court, it will be held liable because: users are allowing us to read their CRM data and once we get the data, the data become ours, and we can do whatever we want with it. Is this true? While the users are still allowing you to read their data it is completely up to the Terms/EULA what you can do with it. However, once you have made the users think that they have withdrawn your access (e.g. they "deleted" oAuth tokens), you are no longer authorized to read the current data (although the Terms may still allow you to use the old data you obtained when you had access). Silently continuing to access their data without their knowledge/approval is definitely a deceit. The CEO wants us to download all of their emails and store them in our database There would be nothing wrong with that if it was in the Terms. But if it is not, that would be a blatant (and easily punishable) breach of privacy. Note that you may also be held personally liable for this wrongdoing (if/when proved so). "Just doing your job" claim will not work.
From a German perspective, it would be absolutely normal and expected that you're providing identity &amp; contact information publicly. Per §5 TMG (Impressumspflicht / Anbieterkennzeichnung) this is required for German tele-media offerings, such as websites or email providers, even if non-commercial. Whereas for you as an upstanding and diligent email provider an abuse@... address should be enough, the German context expects a street address where you could be served with a lawsuit… There absolutely are privacy and free speech issues with this compelled self-doxxing. But by running an email service, you're not just acting as a private person. Your privacy interests and the transparency and security interests of other people have to be balanced. Now since you are not in Germany, the TMG does not apply to you. You have no legal obligation to provide this information. However, the ISP also has no legal obligation to to deliver your email. The ISP does have an obligation to apply appropriate organizational and technical safety measures. It seems that one organizational measure they have found appropriate is that they will only deliver emails from providers that provide public contact information, as would be the norm in Germany. I am not entirely sure how the GDPR applies here. The GDPR doesn't really allow or prohibit disclosures of personal data, it just requires that every purpose of processing for personal data has a legal bases per GDPR Art 6. One such legal basis is a legitimate interest, which boils down to a balancing test between your rights and freedoms and other people's interests. I'm also not sure if the contact information should be classified as personal data in this context, because the contact info primarily relates to your role as an email provider. I'm also not sure if the ISP is processing your personal data in the sense of the GDPR when they merely require you to publish it on your own site. They would be processing it as soon as they scrape, store, or otherwise use this info.
"Civic obligations" are based on one's personal moral philosophy, best discussed on Philosophy SE. On the legal front, in the US, there is no (existing) legal basis for simply declaring some random thing to be "top secret", even if it has great potential to be used for evil purposes. If this is research conducted under the umbrella of the Dept. of Defense, it might be classified, but a garage inventor is not subject to the laws regarding classified documents. Congress could pass a law prohibiting promulgating research on time travel, but even if such a law were found to be constitutional (unlikely, on First Amendment grounds, see this), one cannot be penalized for breaking the law before it becomes a law.
Prove my work is not a trade secret violation Please don't. It's not your job to prove your innocence. The burden is on them to be specific, explain fully, and prove specific claims about your actions. In other words, don't justify, don't explain, and don't defend yourself to them. It's actually best you do not say anything to them, and just forward the letter to your legal counsel (Since you're selling software to be used in the medical field, I assume you already have some kind of legal counsel). For instance, even saying something as innocuous as "Managing patients, Exams, Bills etc are all public knowledge." could be used against you. Because it establishes the fact that you've been working on those features with them and that you've been working on those features with your new company (which doesn't necessarily follow, for all they know, you could have purchased a library module from someone else with those exact features). In other words, even if you were to reply with such an innocuous-sounding statement, you could be saving them months of cross-border discovery and litigation about some of their claims (even if you believed you were being entirely reasonable by defending yourself). But at the same time, don't take what I'm saying to mean that you should lie to them about which features you recently worked on. When I say that you shouldn't be talking to them. I mean that you should not be talking to them. You shouldn't be engaging with them and you shouldn't be giving them any shred of information whatsoever (implied or otherwise). It's not your job to make their job any easier. Do not reply to them. Don't even acknowledge the receipt of the letter (unless you already did by signing for it, which can't be helped). Use a legal intermediary. Give the letter to your own legal counsel (whether you signed for the letter, or not) and leave any reply to him or her (assuming he/she thinks this warning letter even warrants a response). And if this former employer gives you a phone call, kindly refer them to your legal counsel without saying another word.
It is any law protecting me from the people that distrubute a video of me falling the stairs and shared without my permision? No. Your permission is not necessary for distributing or watching that video. The recording was from your workplace, where your entitlement to privacy is quite limited unlike few settings such as (1) your attorney's office in the course of obtaining legal advice for which the disclosure was needed, or (2) your home. Even if such an entitlement existed, your decision to share that recording with the person who was with you generally constitutes a waiver of your right to privacy regarding that incident. The waiver would apply even if California had some legislation akin to the EU's GDPR. Your description nowhere indicates that that person had a statutory or equitable duty of confidentiality. It is also highly doubtful that you would wish to block the distribution of the video if people instead of mocking you expressed something pleasant or encouraging to you. people who I don't even know their names come to me to comment about the video and joke about not falling again. That is not unlawful in and of itself. Since the matter does not involve a protected category such as sex, race, religion, or disability, pursuing a claim of hostile work environment would be quite a stretch. It would also be futile because any relief would not cover outsiders who watch the video and feel like joking about it. The notion of harassment entails a pattern of conduct (meaning that a person engages twice or more in that conduct) that causes a reasonable person to feel annoyed or concerned for his safety. Even if someone engages makes a few jokes that cause you to get annoyed, any petition for restraining orders seems unlikely to succeed. Sooner rather than later, the jokes will get old and people will move on.
I did not write "confidential" on my letter, but I assumed a business proposal is automatically considered as a confidential material. An incorrect assumption unfortunately. Unless you have a confidentiality agreement (NDA) with the first company, they and their agents are not under any legal obligation to keep information you share with them confidential. How is the legal situation here? There is none on your side. You lied about a direct question asked and were caught in the lie. Company A had no obligation to keep what you sent confidential. Even if they did, that may not (depending on how the confidentiality agreement is worded) keep the employee of company A stating that they had received the same proposal. Chalk this one up to a lesson on confidentiality and honesty in business. There are no reasonable assumptions of confidentiality in business unless you specifically state that they are confidential or are provided as part of a confidentiality agreement.