How Businesses in China Can Establish Tiered Access and Confidentiality Controls for Proprietary Know-how Before Franchising

Turning an existing business into a franchise network often means sharing core knowledge with franchisees, including recipes, process parameters and purchasing specifications. Head office must enable outlets to operate independently while preventing business resources from being copied indiscriminately. The answer is not simply to sign a non-disclosure agreement. Before recruitment begins, the business needs to decide what must be shared, who may access it and how it will demonstrate that the information is protected in practice.

1. Distinguish business resources from trade secrets

Article 3 of China’s Regulations on the Administration of Commercial Franchising lists proprietary know-how as one of the business resources used in franchising. However, information being a business resource held by head office does not automatically make it a trade secret in law.

Under the Anti-Unfair Competition Law of the People’s Republic of China, trade secret protection depends on conditions including the information not being known to the public, having commercial value and being subject to corresponding confidentiality measures taken by the rights holder. Public menus, standard service procedures and equipment instructions available through public channels cannot gain equivalent protection simply by being stamped ‘confidential’.

Before launching a franchise operation, the operations, technical and legal teams should jointly compile an information inventory, recording at least:

• Content and source: who developed the information and whether it includes technology belonging to suppliers or other third parties.
• Public availability: which information has already been publicised and which is accessible only through internal systems.
• Operational need: what franchisees, store managers and individual job roles each need to know.
• Basis for protection: whether existing licence agreements, confidentiality provisions, access permissions and delivery records are complete.

Pay particular attention to the scope of licences for purchased recipes or software configurations. Permission for head office to use something itself does not necessarily include permission to disclose or sublicense it to franchisees.

2. Set access levels by role rather than handing over everything

Information can be divided into three tiers: public information, essential outlet information and restricted-access information. Classification should serve operational needs, not make every document appear important.

Public information explains the service and the franchise model. Essential outlet information includes role-specific operating requirements, quality standards and procedures for handling problems. Restricted-access information may include original recipes, back-end configurations or core process parameters that genuinely need protection. For each category, specify the recipient roles, permitted uses, copying limits and person responsible for approval.

For example, where an outlet uses premixed ingredients supplied by head office, staff may only need to know mixing ratios, storage conditions and safe operating requirements, rather than the complete formulation. But if an outlet must carry out a critical process itself, head office cannot withhold the necessary parameters while still demanding consistent results.

Article 14 of the Regulations on the Administration of Commercial Franchising requires franchisors to provide an operations manual and ongoing operational guidance, technical support and business training as agreed. Confidentiality measures must not become a reason to withhold knowledge essential to running the business, nor must they obstruct safe working practices, legally required product disclosures or co-operation with regulators.

Test the access tiers in company-owned outlets first. Ask staff in different roles to complete their tasks using only the information they would be authorised to access, and record where they need additional help. If routine operations frequently depend on head office unlocking information, adjust permissions before rolling the system out to franchisees.

3. Turn licensing boundaries into workable contract schedules

Article 11 of the Regulations on the Administration of Commercial Franchising requires a written contract covering key matters such as the scope of the franchise, support services, quality requirements and liability for breach. Licences for proprietary know-how should be linked to these provisions through itemised schedules, rather than a blanket statement that ‘all information is confidential to head office’.

A schedule can list each item’s name, version, permitted uses, applicable outlets, recipient roles and delivery method. Where franchisee employees or external service providers may access information, it should also explain the approval procedure and how confidentiality obligations will be implemented. A declaration by head office in the franchise agreement will not generally, by itself, bind everyone who has not signed it.

Confidentiality clauses should expressly prohibit unauthorised disclosure to other operators, use at unauthorised outlets and copying beyond the agreed limits. They should also make reasonable distinctions for information lawfully in the public domain, information already held by the recipient and disclosures required by law. Terms should focus on specific information requiring protection, rather than treating all experience that franchisees gain through ordinary business operations as belonging to head office.

The contract should also specify reporting channels for suspected leaks, co-operation with investigations, evidence preservation and liability. Liability provisions should reflect the information’s value, the nature of the conduct and the risk of harm, rather than relying solely on large contractual penalties as a deterrent.

4. Test protection through delivery records and leak-response exercises

In practice, prioritise named user accounts and role-based permissions rather than allowing an entire outlet to share one password. For restricted-access information, use download permissions, recipient identifiers and version records as needed. For paper documents, establish numbering, signed receipt and custody arrangements. Access to these records should also be restricted, so that protecting know-how does not unnecessarily expose personal information.

For each delivery, retain at least a record of the recipient, information version, authorised purpose, date and acknowledgement of receipt. Update permissions promptly when staff change roles or leave. When key information is revised, ensure authorised staff can obtain the current version: protective measures must not leave outlets working with outdated parameters.

Before formally recruiting franchisees, simulate an incident in which core information is accidentally sent to an external group chat. Who receives the report? Who preserves evidence? Who limits further circulation? Who arranges for outlets to continue operating? A suspected leak is not proof of a contractual breach. Distinguish risk containment from determining liability, and avoid hastily disabling all systems and causing additional losses.

Practical takeaway: Start with one particularly important piece of proprietary know-how. Complete its information inventory, role-based access matrix, contract schedule and delivery records, then test the arrangements in company-owned outlets. A sustainable confidentiality system for a franchise network both gives the right people timely access and shows who received what, and when.