Is a Customer List a Trade Secret in Florida?
Start with the question the whole case turns on, because every remedy on this page flows from the answer. Florida’s trade secret law protects information, and it names compilations specifically, when two things are true. First, the list has real value precisely because competitors do not have it and cannot easily rebuild it from public sources. Second, you made efforts that were reasonable under the circumstances to keep it secret. That is the whole test. No registration, no filing, no magic words.
A customer list sits comfortably inside that definition when it is the product of years of work, with prospects called, losers weeded out, buyers kept, and contact people, pricing, and order history attached. A Florida appellate court held exactly that, protecting a list built at great expense and effort, unavailable from public sources, and distilled from a universe of potential customers into the ones who actually buy. That is what a CRM full of live accounts is. By contrast, a bare list of company names anyone could assemble from a directory or a trade-show roster gets far less protection, which is why the fight is usually about what traveled with the names.
Then comes the audit most owners do not expect. The secrecy efforts are yours to prove. Password-protected systems, access limited by role, confidentiality language in offer letters or a handbook, a policy against mass exports. None of it needs to be elaborate, only real. If the same list rides around on personal phones and gets emailed to vendors, the other side will say you never treated it as secret, and that argument has sunk real cases. An hour spent honestly assessing your own hygiene, before filing anything, shapes everything that follows.
Move Fast: The Injunction That Stops the Calls
Florida law says actual or threatened misappropriation may be enjoined, and courts can also order affirmative steps to protect the secret. In practice that means a temporary restraining order or preliminary injunction (an order entered early, sometimes within days, before the case is fully litigated) barring him from using the list, soliciting the customers on it, and passing it to anyone else, plus the return or destruction of every copy. For a startup competitor running on your data, that order is often the end of the business model.
Injunctions are won on evidence assembled fast. The checklist we build in the first days looks like this.
- The export and access logs. Most CRMs record who exported what, when, and from where. A download the night before termination, or a login two weeks after it, is the spine of the case. Preserve the logs now, before retention settings overwrite them.
- His accounts and devices on your systems. Emails to personal addresses, files moved to personal cloud storage, the company laptop’s last week of activity. Image it; do not let IT wipe and reissue it.
- The new company’s footprint. The Sunbiz filing date, the website, the ads and reviews offering the same services. Screenshot everything with dates, because pages get edited once letters arrive.
- Customer accounts of the calls. Which customers he called, what he said, what he offered. Their written accounts and testimony usually carry more weight than anything else.
- The recorded call, handled with care. Florida generally requires all parties’ consent before a private conversation is recorded, and an unlawful recording can be a crime and can be barred from evidence. A recording a customer made on their own raises questions a lawyer has to vet before anyone relies on it. Do not record him yourself, and do not forward the customer’s recording around. Bring it to counsel and let the export logs do the loud talking.
Two more first-week moves. Preservation letters go to him and to anyone he is working with, putting them on notice that deleting data now becomes its own problem. And your own hands stay clean. No logging into his personal accounts, no pretext calls, no self-help that converts you from plaintiff to defendant.
The Claims Stack
These cases are rarely one claim. The complaint gets built from the two or three that fit the facts tightly.
- Florida’s trade secret act. The workhorse. It covers acquiring the list by improper means, and using or disclosing it in breach of a duty of secrecy, which is what an employee’s export-and-exploit is. Injunction, damages, exemplary damages, and fees all live here.
- The federal Defend Trade Secrets Act. The same conduct supports a federal lawsuit when the products or services tied to the secret move in interstate commerce, which covers most modern businesses. Federal court brings nationwide reach and, in extraordinary circumstances, an ex parte seizure order (the court can have property seized before the other side is heard, a rare remedy with strict requirements). One honest limit applies. The federal statute will not enjoin someone from taking a job, and any conditions on his employment must rest on evidence of threatened misappropriation, not merely on what he knows.
- Breach of a non-solicit, if he signed one. Florida enforces restrictive covenants that are written, signed, and reasonable, and the statute names substantial customer relationships as a protectable interest. A non-solicit turns the fight from proving trade secret status into proving a promise and a phone call, which is a shorter road. Our guide to Florida non-competes and restrictive covenants covers what holds up and what gets trimmed.
- Tortious interference. Florida common law reaches an ex-insider who wrongfully wrecks your customer relationships, contract or no contract. The fights turn on whether it was wrongful conduct or hard competition, and on proving what the lost relationships were worth.
- The computer-access claims. Florida’s Computer Abuse and Data Recovery Act aims at exactly the fact pattern where his credentials outlived the job. An employee’s permission to use the company’s protected systems ends when the employment ends, and a knowing post-termination intrusion that causes harm or loss supports a civil claim, with mandatory fee-shifting to the winner. The systems must actually sit behind a technological barrier, a password or its equivalent, which is one more argument for the hygiene above. The federal computer statute can add a count, though federal courts have read its authorization language narrowly in recent years and its civil claim carries a loss threshold, so counsel decides whether it earns its place.
Are the calls happening right now?
Injunctions reward the owner who moves first. Book a free 30-minute consult and we will sequence the evidence sweep, the letter, and the filing before more accounts move.
Book your free consultWhat You Can Recover
Under Florida’s trade secret act, damages start with your actual loss, the accounts and profits the calls took, plus any unjust enrichment the theft produced beyond that loss, so his gains count even where your losses are hard to trace. Where neither is provable, the law allows a reasonable royalty for the use he made of your list. And when the misappropriation was willful and malicious, the phrase courts use for an employee who knew exactly what he was taking and took it anyway, the court can add exemplary damages of up to twice the award, on top of it, and can shift your attorney’s fees onto him.
The computer-access claim adds its own ledger, with actual damages including lost profits, the violator’s profits beyond that, recovery of the exported data and every copy, and attorney’s fees that the statute requires the court to award to whoever prevails. Fair warning runs in the other direction. The trade secret act lets a court shift fees against a claim brought in bad faith, so the label has to fit the facts, which is a theme across Florida business litigation. And a judgment is only worth what it collects; a startup built on your list may have thin pockets, which is why the injunction usually matters more than the damages count, and why we give you a candid collectability read early. When there is a judgment to chase, our guide to collecting a judgment in Florida shows the toolkit.
The Letter That Often Ends It
Most of these cases do not end at trial. They end with a letter, sent early, built on evidence. A cease-and-desist from litigation counsel demands that the solicitation stop, that the list and every copy come back or be destroyed under oath, and that he and his new venture preserve every record. It recites what the export logs already prove, names the claims, and prices the alternative, an injunction hearing, exemplary exposure, and a fee award, against a business that has not made its first payroll yet.
A meaningful share of these matters resolve inside a few weeks of that letter, with an agreed standstill, the data returned, and sometimes a payment. The letter works because it arrives while the evidence is warm and the new venture is fragile, and it works only when it is drafted rather than dashed off, since a demand built on soft facts teaches the other side the case is soft too. How these letters work on both the sending and receiving end is covered in demand letter from a lawyer. The evidence-and-letter stage is a modest engagement, quoted at the free consult, and it is the stage that resolves the most cases per dollar.
Accused of Taking Clients Yourself?
We handle the other chair too, and the honest version of this page has to say so. Not every departure with clients is theft. Clients are not property. When customers follow you because they like your work, on their own initiative, by word of mouth, that is competition, not misappropriation, and no Florida court will order them back. Information you carry in your head about an industry you worked in for years is not automatically anyone’s trade secret. And a restrictive covenant reaches only people who signed one; if there is no written, signed agreement, there is no covenant claim, whatever the letter implies. Florida’s covenant statute does not restrain conduct you never agreed to restrict.
What you do in the first week matters as much for the accused as for the accuser. Do not ignore the letter, and do not call your old employer to explain yourself; the record you make now is the record you live with. Have counsel answer it. If something did come along that should not have, a synced folder, an old export, return it promptly on advice, because the cleanup fact pattern settles and the cover-up fact pattern does not. Fee-shifting runs both ways in trade secret and covenant cases, which gives an overreaching plaintiff something to lose. If your exit came with paperwork, have the release and covenants read before you respond; our severance agreement review covers what those documents actually bind you to.
Red Flags That Mean Stop and Call a Lawyer
Some of these cases are lost before a lawyer ever sees them. These five traps do the most damage.
- You are about to gather evidence you cannot lawfully hold. Logging into his personal email, tracking his phone, or recording his calls without consent can violate state and federal law, expose you to a felony charge, and hand him a counterclaim. Florida gives you a lawful pipeline through preservation letters and discovery, and the pipeline is enough.
- You are about to threaten him in writing. The angry message that says stop calling my customers or I go to the police reads differently to a prosecutor than it does to you. Florida law makes threatening criminal accusations to extract an advantage its own felony. The demand letter asks for what the civil law allows, and nothing else.
- Your secrecy story has holes you are about to deepen. If the list was loosely handled before, the worst move is to keep handling it loosely while building a case about how secret it is. Lock the systems down now, quietly, before the other side takes discovery on your hygiene.
- You are about to sue on adjectives. A trade secret claim brought in bad faith can shift his attorney’s fees onto you, and so can a covenant claim pressed without substance. The export logs, not your anger, decide whether the label fits.
- The accounts are moving now. Every week of calls converts more of your book, and injunctions go to owners who acted like the matter was urgent. If customers are telling you about the calls today, the consult belongs this week, not this quarter.
Locking the Doors for Next Time
Every case on this page got easier or harder based on decisions made long before the export. The prevention list is short and cheap.
- Kill access the hour employment ends. CRM, email, shared drives, passwords, remote sessions, and any personal devices synced to company systems. The single most common fact in these cases is a login that outlived the job, and it is the easiest one to prevent.
- Put non-solicits on customer-facing roles. A signed, reasonable non-solicitation agreement converts a hard trade secret fight into a short covenant case. Pair it with confidentiality language that names customer data. The drafting rules are in our non-compete guide.
- Treat the list like the asset it is. Role-limited access, export alerts, no standing mass downloads, and an offboarding checklist someone actually owns. These are the secrecy efforts the statute asks about, and you want the answer ready before you need it.
- Paper the owners too. Departing partners take client books the same way departing employees do, and the covenants belong in the company’s foundational documents. That is operating agreement work, done on a calm day.
The same discipline that protects your client list protects your liability shield. If your entity hygiene has drifted, our companion guide to commingling funds in an LLC covers what actually endangers the veil and the short list that keeps you safe.
Frequently Asked Questions
Is a Customer List a Trade Secret in Florida?
It can be, and often is. Florida law protects a compilation of information that has value because competitors do not have it and cannot easily rebuild it from public sources, so long as you made reasonable efforts to keep it secret. A list distilled over years into actual buying customers, with contacts, pricing, and history attached, has been held a trade secret by a Florida appellate court. A list of names anyone could pull from a public directory is weaker. The secrecy side matters as much as the value side. Password protection, limited access, and confidentiality agreements build the case, while a list emailed freely around the office undermines it.
Can I Stop a Former Employee From Contacting My Customers?
Often yes, and quickly. Florida law allows a court to enjoin actual or threatened misappropriation of a trade secret, which means an order, sometimes obtained within days, that bars him from using or sharing the list. If he signed a non-solicitation agreement, that covenant supports its own injunction with a statutory presumption of irreparable injury behind it. What no court will do is stop customers from choosing him on their own, so the order targets the taking and the solicitation, not the customers’ freedom to leave.
What if He Never Signed a Non-Compete or Non-Solicit?
You still have claims. Trade secret law does not require any agreement; it protects the list itself when it qualifies. Tortious interference reaches an ex-insider who wrongfully raids relationships he learned of in your employ. And the computer-access statutes reach the export itself where he pulled the data through credentials that should have died with the job. The covenant, when it exists, adds a count and simplifies the fight, but its absence does not end the case.
He Still Had Access to Our CRM After We Let Him Go. Is That a Legal Claim?
It can be. Florida’s computer-abuse statute says an employee’s permission to use a business’s protected systems ends when the employment ends, so a post-termination login and export can support a civil claim where it was done knowingly and caused harm or loss, with the winner’s attorney’s fees attached. There is a federal counterpart too, though federal courts have read its authorization language narrowly in recent years, so counsel weighs which statute the facts actually fit. It also cuts the other way. The fact that you left his access on will be Exhibit A in his version of events, which is one more reason to route this through counsel rather than argue it yourself.
A Customer Recorded His Sales Call. Can I Use It?
Handle it with care and hand it to your lawyer before anyone relies on it. Florida generally requires the consent of all parties before a private conversation is recorded, and a recording made without that consent can be a crime and can be excluded from evidence. Whether a particular customer’s recording is lawful and usable depends on facts a lawyer needs to examine, including where the parties were and what expectations of privacy applied. Do not make recordings yourself, and do not build your case around one until counsel has vetted it. The export logs and the customer’s own testimony usually carry the case anyway.
What Damages Can I Recover for a Stolen Customer List?
Florida’s trade secret act allows your actual loss, the lost customers and profits, plus whatever unjust enrichment the taking produced beyond that, or a reasonable royalty as an alternative measure. If the misappropriation was willful and malicious, the court can add exemplary damages of up to twice the award, and can shift your attorney’s fees onto him. The computer-abuse statute separately allows lost profits, the violator’s profits, recovery of the data and every copy, and it requires the court to award fees to the prevailing party. What any of it is worth in practice depends on proof and collectability, which we assess candidly at the consult.
How Long Do I Have to Sue?
The trade secret claims, state and federal, generally must be brought within 3 years of when you discovered the misappropriation or reasonably should have. Other claims carry their own deadlines, some shorter. The practical clock runs far faster than any statute, though, because injunctions reward speed, evidence sits in systems that overwrite themselves, and every week of calls moves more customers. If the calls are happening now, the consult belongs this week.
What if I Am the One Being Accused?
Take the letter seriously and do not answer it yourself. The defenses are real. Clients who followed you by word of mouth were not solicited, information you carry in your head is not automatically a trade secret, and a covenant you never signed cannot be enforced against you. But fee-shifting runs in both directions in these cases, and what you write in the first week becomes the record. Have counsel respond, return anything you should not have kept, and let the overreach in their letter become your leverage.
Common Situations
The login that outlived the layoff. A services firm lays off an account manager and nobody cancels his CRM access. Three weeks later customers start mentioning calls from his new company, same services, ten percent cheaper, and one forwards a recording of the pitch. The export logs show a full download two days after termination. Counsel vets the recording quietly and builds the injunction on the logs and two customer declarations instead. The court enters an order, the data comes back under oath, and the matter settles with a standstill and a payment before the sixth account moves.
The letter that ended it. An owner discovers a former employee soliciting from what can only be her price sheet. Instead of a lawsuit, a cease-and-desist goes out reciting the access logs, demanding return and preservation, and pricing the exemplary and fee exposure. His new venture, three months old and unfunded, returns everything and signs a standstill within two weeks. Total litigation spend came to one letter and a follow-up call.
The departure that was not theft. A consultant leaves an agency on good terms, signs nothing on the way out, and a dozen clients follow her over the next year, unprompted. The agency’s lawyer sends a letter claiming trade secret theft. Her counsel answers with the facts. No agreement, no export, clients who called her. Faced with fee exposure for a claim without substance, the agency drops it, and she keeps the practice she built.
Sources of Law
- Florida Uniform Trade Secrets Act: Fla. Stat. §688.002 (definitions: a trade secret derives independent economic value from not being generally known or readily ascertainable by proper means and is the subject of reasonable secrecy efforts; misappropriation; improper means), §688.003 (actual or threatened misappropriation may be enjoined; affirmative protective acts), §688.004 (actual loss plus unjust enrichment, or a reasonable royalty; exemplary damages up to twice the award for willful and malicious misappropriation), §688.005 (attorney’s fees for bad-faith claims, bad-faith injunction motions, or willful and malicious misappropriation), §688.007 (3 years from discovery; continuing misappropriation is a single claim). flsenate.gov (retrieved 2026-08-09).
- Defend Trade Secrets Act, 18 U.S.C. §1836 (federal civil action where the trade secret relates to a product or service in interstate or foreign commerce; ex parte seizure in extraordinary circumstances; injunctions may not prevent a person from entering an employment relationship, and conditions on employment must rest on evidence of threatened misappropriation, not merely what the person knows; actual loss plus unjust enrichment or a reasonable royalty; exemplary damages up to 2 times; fees; 3-year limitations period). law.cornell.edu (retrieved 2026-08-09).
- East v. Aqua Gaming, Inc., 805 So. 2d 932 (Fla. 2d DCA 2001) (customer list compiled at great expense and effort, not available from public sources, and distilled into viable customers qualifies as a trade secret).
- Fla. Stat. §542.335 (restrictive covenants: writing and signature required; legitimate business interests include trade secrets, valuable confidential information, and substantial relationships with specific customers; overbroad covenants modified; presumption of irreparable injury; prevailing-party fees). Retrieved 2026-08-08.
- Computer Abuse and Data Recovery Act: Fla. Stat. §§668.801 to 668.805 (authorized-user permission terminates upon cessation of employment; knowing unauthorized access to a business computer protected by a technological access barrier, with intent to cause harm or loss; actual damages including lost profits, the violator’s profits, recovery of the information and copies, injunctive relief, mandatory prevailing-party fees; 3-year limitations period). Retrieved 2026-08-09.
- Computer Fraud and Abuse Act, 18 U.S.C. §1030 (access without authorization or exceeding authorized access; civil action under subsection (g) with a $5,000 one-year loss threshold; 2-year limitations period). Retrieved 2026-08-09.
- Fla. Stat. §934.03 (interception of wire, oral, or electronic communications; lawful for a private person only with the prior consent of all parties; criminal penalties). Retrieved 2026-08-09.
- Tortious interference with contracts and advantageous business relationships is recognized under Florida common law; elements and defenses are case-specific.
Updated on August 9, 2026. Reviewed by Kevin D. Klagge, Esq., Fla. Bar No. 99502. Attorney Kevin Klagge represents families, businesses, and international clients in estate and tax planning, business structuring, and international law, with a focus on Florida legal tools. He litigates estate and business issues in court. General information about Florida law, not legal advice, and no attorney-client relationship is created. Outcomes depend on the specific facts; past results do not guarantee a similar outcome. Do not send confidential information until we have agreed to represent you.