Building a Franchise: Protect Your Know-how Before Sharing It

Opening up a successful business to a franchise network means sharing the know-how behind its success. This creates a risk: pricing calculations, recipes or internal processes could leak even during contract negotiations. The answer is not maximum secrecy, but a clear, practical protection framework. This allows serious prospective franchisees to make an informed decision while safeguarding the information that makes your business distinctive.

1. Identify exactly which knowledge needs protection

Not every piece of business information is a trade secret. Commonly known sales techniques or publicly visible interior design features cannot be made exclusive simply by marking them confidential. By contrast, non-public preparation methods, detailed costing models, specific process parameters or internal analytical methods may qualify for protection.

The key legislation in Germany is the Trade Secrets Act (Gesetz zum Schutz von Geschäftsgeheimnissen, or GeschGehG). Under section 2, no. 1, information must, among other things, be secret and have commercial value because it is secret. It must also be subject to reasonable measures to keep it secret, and there must be a legitimate interest in maintaining its secrecy. A confidentiality clause alone is therefore no substitute for protective measures that are actually put into practice.

Before your first discussions with prospective franchisees, draw up an internal register. For each important piece of information, record:

• What exactly needs to be protected?
• What commercial benefit does keeping it secret provide?
• Who needs the information, and for which task?
• Where is it stored, and how is access restricted?
• Who is responsible for updating it and authorising its release?

Distinguish between public information, internal working documents and highly confidential know-how. This classification helps you focus your protective efforts on genuinely sensitive material, rather than treating every document as secret.

2. Take a sensible, staged approach to disclosure during negotiations

Germany has no dedicated franchise legislation and no general government franchise register. Franchise relationships are governed primarily by the German Civil Code (BGB), alongside commercial, competition, trade mark and data protection law, depending on the subject matter. The GeschGehG also applies to the protection of confidential know-how. An industry association’s code is not legislation; it may become binding, for example, through membership or incorporation into a contract.

Although there is no statutory franchise disclosure form, pre-contractual disclosure obligations still apply. These arise in particular under sections 311(2) and 241(2) BGB; a breach involving fault may give rise to claims for damages under section 280(1) BGB. Essential information needed to make a decision must therefore not be withheld on the pretext of protecting trade secrets.

Plan disclosure in three stages:

1. Initial discussions: Explain the concept, division of responsibilities and basic requirements using non-confidential materials.
2. Detailed assessment: Once an appropriate confidentiality agreement is in place, provide the information needed to make a decision. Restrict access to the purpose of that assessment.
3. Implementing the agreement: Share detailed operational know-how in line with the agreed training and induction plan, before it is needed to run the business.

These stages are an organisational recommendation, not a legally prescribed sequence. What matters is that prospective franchisees receive reliable information in good time. Keep a record of which documents and versions were provided, when they were supplied and which questions remain unanswered.

3. Tie confidentiality obligations to a defined purpose

A confidentiality agreement should be signed before access to sensitive information is granted. It must reflect the actual exchange: a site visit requires different rules from digital access to process documentation.

Describe the categories of information protected, the permitted purpose of use and the authorised recipients. Also cover knowledge explained verbally and observations made during work shadowing. Exceptions should include information that is already publicly known or has been lawfully obtained independently. Disclosures permitted or required by law must not be prohibited across the board.

Expressly allow independent assessment. Prospective franchisees should be able to review the necessary documents with suitable legal, tax or finance advisers. Specify the confidentiality requirements that apply, rather than imposing a blanket ban on sharing information.

You will need rules on returning and deleting information if discussions do not lead to an agreement. Take account of statutory retention requirements and backup copies that cannot be deleted immediately for technical reasons. Continuing confidentiality obligations after the contractual relationship ends may be sensible, but should not become a broad non-compete restriction in disguise.

Have standard-form clauses and any contractual penalties reviewed by a qualified professional. Even in business-to-business contracts, the rules on reviewing standard terms under sections 305 onwards BGB may apply. Overly broad prohibitions do not automatically provide better protection.

4. Control and document access in day-to-day operations

Put the agreed rules into practice through technical and organisational measures. Individual user accounts, role-based permissions and a documented authorisation process are usually more useful than shared passwords. Give particularly sensitive files additional protection, and regularly check whether existing access rights are still needed.

For visits to your pilot operation, prepare a brief itinerary: which areas will be shown? Which documents will be kept out of sight? Is photography permitted? Who will accompany the visitor? Also tell employees which information they may explain.

If you collect or log personal data, your measures must comply with the General Data Protection Regulation (GDPR). Confidentiality agreements do not replace the need for a lawful basis under data protection law. Anonymised sample data is often the better choice for demonstrations.

When discussions end or a partner leaves, revoke access promptly and document the agreed return of materials. Responsibilities for preserving evidence, taking technical containment measures and obtaining a legal review should already be clear in case an information leak is suspected.

Practical takeaway: Before your next meeting with a prospective franchisee, create a trade secrets register, a staged disclosure plan and a defined access-control process. This allows you to share know-how purposefully within your franchise network without leaving it unnecessarily exposed.