An Employee Left With Your Customer List.
What Oklahoma Law Actually Allows

A salesperson resigns on a Friday. By Monday you learn she has joined a competitor, and three of your largest accounts have gone quiet. You check her company laptop and find a thumb drive was connected the week before she gave notice. Somewhere on that drive is your customer list, your pricing model, and eighteen months of proposal templates.

Most Oklahoma business owners in this position reach the same wrong conclusion: nothing can be done, because Oklahoma does not enforce noncompete agreements. That conclusion is half right and expensively incomplete. Oklahoma does void most employee noncompetes. But the state gives employers a separate and in some ways stronger set of tools, including a criminal statute that specifically names customer lists, a civil misappropriation claim with fee shifting, and a federal cause of action with a seizure remedy.

This guide explains what actually protects an Oklahoma business when an employee walks out with something valuable: what qualifies as a trade secret, what the criminal and civil statutes each require, what to do in the first seventy two hours, and the single factor Oklahoma courts examine most closely when deciding whether you have a case at all.

Why This Happens More Often Than Owners Assume

Departing employee data theft is not an exotic risk. It is one of the most predictable events in the life of a business, and the window is narrow enough to plan around.

Research on insider risk consistently finds that the two weeks before a resignation are the highest risk period for data exfiltration in the entire employment relationship. One widely cited longitudinal analysis found that employees are meaningfully more likely to move data out of company systems in the run up to giving notice, and pre departure data theft is now described as the most common critical insider risk pattern. Survey data is bleaker still: roughly eight in ten security leaders report that departing employees take valuable intellectual property with them.

Internal actors show up in a meaningful share of confirmed breaches in the annual Verizon Data Breach Investigations Report, and the most recent edition put internal actors at 12 percent of confirmed breaches. The motive is rarely dramatic. Surveys of privilege misuse find that convenience, not espionage or grudge, is the leading driver. Most departing employees who take a customer list are not plotting against you. They built relationships, they feel a sense of ownership over them, and they see the file as partly theirs.

That distinction matters legally. It does not change whether misappropriation occurred, but it shapes how a judge views the conduct, how a jury reacts, and how willing the other side is to settle early.

Table of Contents

• Why This Happens More Often Than Owners Assume
• Oklahoma Voids Noncompetes, So Trade Secrets Are the Real Tool
• What Actually Qualifies as a Trade Secret in Oklahoma
• The Criminal Statute Most Owners Do Not Know About
• Your Civil Claim Under the Oklahoma Uniform Trade Secrets Act
• The Federal Option: The Defend Trade Secrets Act
• What Nonsolicitation Agreements Can and Cannot Do
• The First Seventy Two Hours
• Proving It: Evidence, Forensics, and Timing
• Reasonable Secrecy Measures: The Factor Courts Focus On
• Oklahoma Specific Considerations
• Common Mistakes That Sink These Cases
• What to Put in Place Before Anyone Resigns

Oklahoma Voids Noncompetes, So Trade Secrets Are the Real Tool

Oklahoma is one of a small group of states that voids most employee noncompete agreements by statute. Under 15 O.S. Section 219A, a former employee is generally free to work in the same or a similar business after employment ends, and a contract conflicting with that rule is void to the extent of the conflict. Our Oklahoma noncompete guide covers the statutory framework and the narrow exceptions in detail.

The practical effect for employers is that the tool most business owners reach for first is the one least likely to help them. A noncompete that reads like a general prohibition on competing will not survive. What survives is narrower and, handled correctly, more durable:

• Trade secret and confidentiality protection. Enforceable where the information genuinely qualifies and the employer took real steps to keep it secret.
• Nonsolicitation of established customers. Permitted within limits under Section 219A, discussed below.
• Nonsolicitation of employees and contractors. Addressed separately under Section 219B.
• Fiduciary duty claims. Available against officers, managers, and in some cases key employees who competed while still employed.

The Oklahoma Bar Association’s own analysis of the line between restraint of trade and protecting competitive advantage describes this framework in depth, including the elements of a misappropriation claim and the factors Oklahoma courts weigh. It is worth reading if you want the doctrinal background: Mind Over Matter, Oklahoma Bar Journal.

What Actually Qualifies as a Trade Secret in Oklahoma

This is where most cases are won or lost, and where most owners are surprised. A file is not a trade secret because it is important to you, because it took years to build, or because you told the employee it was confidential. It qualifies only if it meets a two part test.

Part One: The Information Derives Value From Not Being Known

The information must have independent economic value precisely because competitors do not have it. A list of every HVAC contractor in Oklahoma County is not a trade secret; anyone can build it. A list of your two hundred active accounts with contract renewal dates, margin by account, decision maker contacts, and notes on what each one is unhappy about is a very different asset.

Part Two: You Took Reasonable Measures To Keep It Secret

This is the requirement employers fail most often, and it is the one Oklahoma courts scrutinize hardest. An employer who claims its customer list is a trade secret while leaving it in a shared drive with open permissions, unmarked, accessible to every employee including the receptionist, and never mentioned in any training or agreement, has a serious problem.

What Typically Qualifies

• Customer and prospect lists with relationship detail, pricing history, or buying patterns
• Pricing models, margin structures, cost data, and bid formulas
• Vendor terms and supplier pricing not available in the market
• Proprietary methods, processes, formulas, and specifications
• Source code, algorithms, and internal tooling
• Business plans, acquisition targets, and unreleased product roadmaps

What Typically Does Not

• Information the employee can reconstruct from memory and general skill
• Publicly available data, including anything in a trade directory or on your website
• General industry knowledge and techniques the employee brought with them
• Information you disclosed to customers or vendors without confidentiality terms

The federal USPTO trade secret policy resources provide a useful overview of how trade secret protection differs from patents and trademarks, which matters when you are deciding what to protect and how. Our own overview of corporate trade secrets and guide to protecting confidential information cover the categories in more depth.

The Criminal Statute Most Owners Do Not Know About

Here is the provision that changes the conversation, and that almost no business owner knows exists.

Oklahoma has a criminal larceny statute specific to trade secrets. Under 21 O.S. Section 1732, taking an article representing a trade secret with intent to deprive the owner of its use can constitute larceny, and the value of the trade secret rather than the value of the physical article controls whether the offense is grand or petit larceny.

The critical detail is what the legislature added to the definition. Senate Bill 1013 amended the statute to include customer lists and business records within the definition of both an “article” and a “trade secret” for purposes of the criminal provision. The current text of Section 1732 names customer lists and business records explicitly.

In plain terms: in Oklahoma, walking out with the customer list is not only a civil matter. It is potentially a crime, and the legislature said so specifically.

Why This Matters Even If You Never Pursue Charges

Most employers in this situation are not looking to have a former employee prosecuted. They want the data back, they want the solicitation to stop, and they want the competitor to understand that the conduct has consequences. The criminal statute is useful for all three reasons:

• It changes the settlement posture. A demand letter that accurately notes potential criminal exposure under Section 1732, alongside civil claims, lands differently than one asserting breach of a confidentiality clause.
• It reaches the competitor. A hiring employer that learns its new salesperson may have committed a statutory larceny has its own risk calculus to run, including exposure for use of the information.
• It preserves an option. Referral to a district attorney is available where the conduct is egregious, though it is a decision to make deliberately and with counsel.

The Cautions

Using a criminal statute as leverage carries real risk and must be handled carefully. Threatening criminal prosecution to gain advantage in a civil dispute raises serious ethical and potentially legal problems for the person making the threat. The correct approach is to state the legal landscape accurately and let it inform the other side’s analysis, not to trade a declination for a settlement. This is not a do it yourself letter.

Your Civil Claim Under the Oklahoma Uniform Trade Secrets Act

Oklahoma adopted the Uniform Trade Secrets Act in 1986. It is the primary civil vehicle for these disputes, and it operates alongside, not instead of, the criminal statute.

The Three Elements

As the Oklahoma Bar Journal analysis sets out, a misappropriation claim under the state act requires the plaintiff to establish three things:

1. The existence of a trade secret. The plaintiff carries the burden, and this is a fact intensive inquiry.
2. Misappropriation by another. Acquisition by improper means, or disclosure or use without consent.
3. Use of the secret to the owner’s detriment. Oklahoma requires both use and detriment, which is a meaningful addition compared to some other frameworks.

That third element is worth pausing on. Proving that someone copied a file is not the end of the analysis under the state act. You generally need to show the information was used and that the use harmed you. In practice this means documenting lost accounts, undercut bids, and revenue movement, not just the exfiltration itself.

Available Remedies

• Injunctive relief. Often the first and most valuable objective. An order stopping use and requiring return or destruction of the information.
• Actual damages. Lost profits, lost customer value, and in some cases the cost of investigation and remediation.
• Unjust enrichment. The benefit the defendant obtained, where that is easier to prove than your loss.
• Reasonable royalty. An alternative measure where an injunction would be inequitable.
• Exemplary damages. Available for willful and malicious misappropriation.
• Attorney fees. Available in defined circumstances, including willful misappropriation and bad faith claims. Fee exposure runs both directions, which is a reason to be confident before filing.

Timing

Trade secret claims carry a limitations period that generally runs from discovery of the misappropriation rather than from the act itself. That sounds forgiving and is not, because the practical clock is much shorter. Evidence degrades. Laptops get reimaged. Log retention windows expire, often at thirty or ninety days. Injunctive relief becomes harder to obtain the longer you waited, because delay undercuts the claim of irreparable harm. Treat this as a matter of days, not months.

The Federal Option: The Defend Trade Secrets Act

Before 2016, trade secret owners had no federal civil cause of action. The Defend Trade Secrets Act changed that by amending the Economic Espionage Act to create a private right of action. The American Bar Association’s explanation of the DTSA remains one of the clearer overviews of what the statute added.

What the Federal Act Offers

• Federal court access and nationwide reach. Valuable when the former employee, the competitor, or the data has left Oklahoma.
• Ex parte civil seizure. In extraordinary circumstances, a court may order seizure of property necessary to prevent dissemination of the trade secret, without advance notice to the other side.
• Exemplary damages. Up to twice actual damages for willful and malicious misappropriation.
• Attorney fees. For willful misappropriation or bad faith claims.

Set Expectations on Seizure

The seizure remedy gets the most attention and is the least available. It requires extraordinary circumstances, a stringent showing, and a prompt hearing at which the moving party bears the burden of proving the facts underlying the order. Courts grant these rarely, and a wrongful or excessive seizure exposes the party who sought it to a damages claim. The USPTO’s own summary is appropriately hedged, describing seizure as available only in extraordinary circumstances. In most cases a temporary restraining order and preliminary injunction under the ordinary rules is the realistic path.

What Nonsolicitation Agreements Can and Cannot Do

Because general noncompetes are void, nonsolicitation is the contractual restraint that actually works in Oklahoma, and it works only within defined limits.

Customer Nonsolicitation

Section 219A permits an agreement prohibiting a former employee from directly soliciting the sale of goods, services, or a combination from the employer’s established customers. The operative words carry weight:

• Directly. Passive acceptance of business, and general advertising that happens to reach your customers, are different from direct solicitation.
• Established customers. Ongoing relationships reasonably expected to continue. Prospects, former customers, and suppliers should not be swept in.
• Solicitation of a sale. Not a prohibition on employment, and not a prohibition on competing generally.

Overdrafting is the common failure. A clause that functions as a disguised ban on competition risks being struck rather than narrowed, and a clause that reaches prospects and former customers invites the argument that the whole provision is an unlawful restraint.

Employee Nonsolicitation

Section 219B addresses agreements not to solicit the employer’s employees or independent contractors. It should be drafted as a separate provision, not folded into the customer restriction, so that a problem with one does not contaminate the other.

The Sale of a Business Exception

The analysis changes substantially when the restrictive covenant accompanies the sale of a business, where the covenant protects goodwill the buyer actually paid for. Oklahoma treats that context differently from the ordinary employment context. If you are selling, this interacts directly with deal value, which we cover in our guide to selling a business in Oklahoma and in the diligence discussion in conducting due diligence in private M&A.

The First Seventy Two Hours

What you do immediately after suspecting theft determines whether you have a case. Most of the damage owners do to their own position happens in the first three days, usually out of an understandable instinct to investigate personally and confront quickly.

What Not To Do

Do not access the former employee’s personal email or cloud accounts, even if a password is saved in a company browser. Do not remotely wipe a personal device. Do not contact the new employer without a plan. Each of these can convert a strong position into a countersuit, and computer access statutes cut both ways.

Proving It: Evidence, Forensics, and Timing

These cases are won with records, not testimony. The evidence that carries the most weight is almost always generated automatically before anyone knew there would be a dispute.

The Evidence That Usually Matters

• USB and external device connection history. Windows and macOS both retain records of connected devices.
• Bulk download and export events. A CRM export of every account record the week before resignation is powerful.
• Cloud sync activity. Personal storage accounts configured on a company machine.
• Email forwarding. Auto forward rules to a personal address, and unusual volumes of self addressed attachments.
• Print and scan logs. Still common, still overlooked.
• Timing correlation. Activity clustered against the resignation date and the competitor’s hiring timeline.
• Downstream evidence. Bids that match your pricing too precisely, proposals with your formatting artifacts, customers reporting they were contacted with specific knowledge of their renewal dates.

Keeping the Evidence Admissible

Chain of custody matters. The images should be made by a qualified examiner, hash verified, documented, and stored so that you can establish nobody altered them. Forensic work performed at the direction of counsel also raises questions of privilege and work product that are better addressed before the work starts than after.

CISA’s Insider Threat Mitigation Guide is written for security programs rather than litigators, but its framework for detection and documentation maps closely onto what you will need to prove a case. A recent discussion of the guide’s updates makes the point that insider risk sits at the intersection of security, HR, and legal, which is exactly why these investigations fail when any one of the three runs them alone.

Reasonable Secrecy Measures: The Factor Courts Focus On

If you take one thing from this article, take this. Oklahoma courts tend to focus on the measures the employer actually took to guard secrecy. A trade secret claim frequently fails not because the information lacked value but because the employer treated it casually and then asked a court to call it a secret.

This is also the most controllable factor. Everything below is something you can do before a dispute exists, at modest cost.

Two of those deserve emphasis. First, marking documents is the cheapest evidence you will ever create, and its absence is the first thing a defendant points to. Second, role based access does double duty: it limits exposure and it proves you treated the information as restricted.

Our guide to structuring an NDA and key NDA provisions cover the agreement side. The employee handbook guide covers the policy side, and independent contractor classification matters because contractor agreements are where assignment and confidentiality terms are most often missing entirely.

Oklahoma Specific Considerations

Several features of Oklahoma practice shape how these disputes actually unfold in this state.

The Statutory Combination Is Unusual

Oklahoma pairs one of the country’s most employee friendly noncompete statutes with a criminal trade secret provision that expressly names customer lists. Employers who understand both operate from a much stronger position than employers who only know the first half. Out of state competitors and their counsel frequently assume Oklahoma offers employers nothing, which is a useful asymmetry.

Oklahoma Business Courts

Oklahoma’s business court system was created to handle complex commercial disputes, and trade secret and restrictive covenant cases sit squarely within that category. Whether your dispute lands there, and whether you should specify it as the forum in your employment and confidentiality agreements, is worth deciding in advance rather than in a crisis. Our overview of Oklahoma’s new business courts covers the current status.

Industry Patterns in Oklahoma

The disputes we see most often in Oklahoma cluster in a few predictable places. Energy services, where crew relationships and bid formulas walk out together. Oilfield and industrial supply, where vendor pricing is the asset. Professional and technical services, where the client relationship is the business. Construction and specialty trades, where an estimator leaving with the bid history can reprice against you for a year. In each, the valuable secret is usually pricing and relationship detail rather than technology.

Multi State Employees

An Oklahoma employer with employees working in other states cannot assume Oklahoma law governs. Choice of law and choice of forum clauses matter, and some states will refuse to apply another state’s restrictive covenant law to their residents. If you have remote employees, the agreement that works for your Tulsa staff may not work for the one in Colorado or California.

The Sale Context

If a sale of your business is anywhere on the horizon, trade secret hygiene becomes a diligence item rather than a theoretical risk. Buyers ask whether employees and contractors signed confidentiality and assignment agreements, whether chain of title to intellectual property is clean, and whether any misappropriation claims are pending or threatened. Gaps get paid for by the seller, through price, escrow, or indemnity. Owners with partners should also review how these obligations interact with ownership documents, which we cover in LLC operating agreements and minority owner protections.

Common Mistakes That Sink These Cases

1. Reimaging the Laptop

IT does it as routine housekeeping, often within days. It is the single most damaging act in the sequence and it is entirely preventable with a standing hold policy.

2. Investigating Personally

An owner who spends a weekend clicking through the departing employee’s laptop has altered timestamps, overwritten deleted file remnants, and handed the other side a chain of custody argument.

3. Relying on a Void Noncompete

Sending a demand letter built on an unenforceable noncompete signals to sophisticated opposing counsel that you do not know the statutory landscape, and it wastes the leverage you actually have.

4. Never Identifying the Secret

Courts require specificity. “Our confidential information” is not a trade secret. If you cannot describe with particularity what was taken and why it has value from not being known, you do not yet have a claim you can plead.

5. Waiting

Owners often spend weeks hoping the accounts come back. Logs expire, devices get reused, and the delay itself becomes the defendant’s best argument against injunctive relief.

6. Missing the Whistleblower Notice

An otherwise strong federal claim loses its fee and exemplary damages teeth because a 2016 statutory notice was never added to the confidentiality template.

7. Overreaching

Suing over information that is plainly public, or seeking to stop a former employee from working at all, invites a bad faith fee award and damages your credibility on the claims that were legitimate.

What to Put in Place Before Anyone Resigns

Everything above is easier and cheaper if the groundwork exists. None of it requires a large budget.

The Documents

1. Confidentiality and invention assignment agreements for every employee, with the federal whistleblower notice
2. Separate, narrowly drafted customer nonsolicitation and employee nonsolicitation provisions
3. Contractor agreements with the same confidentiality and assignment terms, plus work for hire language
4. A written trade secret inventory, reviewed annually
5. An acceptable use and device policy covering personal cloud storage and removable media

The Systems

1. Role based access, with periodic review of who can reach what
2. Export and bulk download controls in the CRM and file systems
3. Log retention beyond ninety days
4. Confidentiality marking applied automatically where possible
5. Immediate access revocation tied to the termination event

The Exit Process

1. A written checklist run the same way every time
2. Device return documented, with devices held rather than reissued for a defined period
3. A signed acknowledgment of continuing confidentiality obligations
4. A standard access log review for any departure from a sensitive role
5. A notice letter to the new employer where circumstances warrant, drafted by counsel

Frequently Asked Questions

• My former employee is calling my customers. Can I stop them in Oklahoma?

  It depends on what they signed and what they took. Oklahoma voids general noncompetes, so you usually cannot stop them from working for a competitor. You may be able to stop direct solicitation of your established customers if you have a properly drafted nonsolicitation provision, and you may be able to stop use of your information entirely if it qualifies as a trade secret and they took a copy.

• Is taking a customer list actually a crime in Oklahoma?

  It can be. Oklahoma’s criminal trade secret larceny statute was amended to expressly include customer lists and business records in the definition of a trade secret and an article. Whether a particular set of facts meets the statute is a separate question, and the decision to involve prosecutors should be made carefully with counsel rather than used as settlement leverage.

• We never had them sign anything. Do we have any recourse?

  Possibly. Trade secret protection is statutory and does not require a contract, so misappropriation claims can proceed without a signed agreement. What you lose is the contractual nonsolicitation restraint, some remedies, and a good deal of clarity. You also face a harder argument on reasonable secrecy measures, since the absence of any confidentiality agreement is evidence you did not treat the information as secret.

• How fast do we need to move?

  Within days. Log retention windows commonly expire at thirty days, devices get reimaged as routine IT housekeeping, and delay weakens any request for injunctive relief because it undercuts the claim of irreparable harm. Preservation should happen immediately, even if the decision about litigation takes longer.

• Can we look at their personal email if the password is saved on the company laptop?

  Do not. Accessing a personal account without authorization raises exposure under state and federal computer access and privacy statutes, and it can transform your strong claim into their counterclaim. Restrict the review to company systems and company data, and let counsel direct the scope.

• Is our customer list really a trade secret?

  Only if it derives economic value from not being generally known and you took reasonable measures to keep it secret. A list anyone could assemble from public directories generally does not qualify. A list with pricing, margins, renewal dates, and relationship notes, kept under restricted access and marked confidential, has a much stronger claim.

• Should we sue the competitor who hired them, or just the employee?

  That depends on what the competitor knew and whether it used the information. Claims against a hiring employer often carry more practical leverage because the company has assets, insurance, and a reputation to protect. It also raises the stakes and the cost, so it is a strategic decision rather than an automatic one.

• What is the whistleblower notice and why does it matter?

  The federal Defend Trade Secrets Act requires employers to notify employees of certain whistleblower immunities in any agreement governing trade secrets or confidential information. An employer that omits the notice cannot recover exemplary damages or attorney fees from that employee under the federal act. Many confidentiality templates still lack it.

• We just hired someone and their old employer is threatening us. What now?

  Take it seriously and act quickly. Instruct the new hire in writing not to use or bring any former employer materials, preserve everything, do not let them connect personal devices containing old data to your systems, and have counsel respond. Employers who ignore these letters can end up funding someone else’s litigation.

• Does any of this change if I am selling my business?

  Yes. Buyers examine confidentiality and assignment agreements, intellectual property chain of title, and any pending or threatened misappropriation claims during diligence. Gaps are paid for by the seller through price reductions, larger escrows, or indemnity obligations. Restrictive covenants also receive different treatment when they accompany a sale, because they protect goodwill the buyer purchased.

Disclaimer: This article provides general information about Oklahoma and federal trade secret law and should not be considered specific legal advice. Trade secret disputes are highly fact dependent, and outcomes turn on the particular information at issue, the measures taken to protect it, and the evidence available. Statutes and case law change over time. Nothing here should be used to threaten criminal prosecution or to guide an investigation without counsel. For guidance on your specific situation, consult with experienced Oklahoma business attorneys.

About Cantrell Law Firm: We are Oklahoma business attorneys who help entrepreneurs and business owners protect what they have built. As former business owners ourselves, we combine practical transactional experience with the legal judgment these disputes require, whether you are responding to a departure or putting agreements in place so the next one is straightforward. Contact Cantrell Law Firm to discuss protecting your confidential information and customer relationships.