Franchising a Hong Kong Business: Protecting Recipes, Technology and Operational Trade Secrets

Turning an existing business into a franchise network means teaching partners how to run it. It should not mean handing over recipes, purchasing terms and core technology indiscriminately. Effective protection involves more than asking everyone to sign a confidentiality undertaking: first identify which information needs protecting, then decide who can access it, how it may be used and what happens to it when the relationship ends.

1. Distinguish trade secrets from general operational knowledge

Hong Kong’s Intellectual Property Department notes that franchise licences generally cover trade marks, as well as trade secrets and industrial know-how relating to business methods, working systems and procedures. For businesses preparing to franchise, this means that operational knowledge beyond the brand itself also needs clearly defined licensing boundaries.

Simply marking a document ‘confidential’ does not automatically make its contents a protected secret. Public menus, readily observable service processes and employees’ general skills cannot all be treated as information exclusive to the franchisor. The confidential nature of the information, the circumstances of its disclosure and the measures actually taken to protect it may all affect its legal status.

Start by drawing up an information inventory with three tiers:

• Public information: brand introductions, publicly available product information and general franchise recruitment materials.
• Essential operational information: preparation instructions, quality control methods and equipment settings that staff need to use.
• Restricted information: core recipe proportions, unpublished research and development records, and confidential supplier quotations and negotiated terms.

Assign someone responsibility for each item and record its version, permitted recipients and intended use. The aim is not to lock everything away, but to give franchisees enough knowledge to operate while avoiding unnecessary disclosure.

2. Build confidentiality into negotiations and franchise agreements

Hong Kong has no legislation specifically regulating the offering and sale of franchises, nor a generally applicable franchise registration scheme or statutory pre-contract disclosure regime. This does not mean franchise relationships are unregulated. Both parties remain subject to common law contract principles and applicable legislation, including the Misrepresentation Ordinance. Trade secrets can also be protected through contracts and principles of confidentiality under common law and equity, rather than through a trade secret registration system.

During franchise recruitment, initially provide enough information for prospective partners to assess the opportunity. Before sharing genuinely sensitive material, consider putting a confidentiality agreement in place and then disclosing information on a need-to-know basis. Confidentiality must not be used to justify false or misleading statements about the investment.

A Hong Kong solicitor should draft the final franchise agreement to suit the business. It should address at least the following:

• Scope of information: specify how documents, system content, demonstrations and oral disclosures are identified as confidential.
• Permitted use: restrict use to operating the authorised franchise outlet, excluding use for other businesses or disclosure to other brands.
• Recipients: identify which employees, advisers or contractors may have access and the confidentiality obligations they must undertake.
• Reasonable exceptions: explain how information already in the public domain, lawfully obtained from third parties or independently developed will be treated, and what notification is required if disclosure is legally compelled.
• Continuing obligations: specify which duties survive termination, with arrangements appropriate to the nature of the information.

Confidentiality clauses are not the same as non-compete restrictions. They govern the use and disclosure of information and should not be used to impose a blanket ban on franchisees drawing on their wider work experience.

3. Test ‘minimum necessary access’ in a pilot outlet

Before recruiting franchisees, test information access permissions in a company-operated pilot outlet. Can staff complete their work using only the authorised training materials? Do managers have enough information to investigate quality problems? If every mistake requires the founder’s intervention, the problem may be insufficient access to information, rather than simply inadequate training.

For example, a drinks outlet could give frontline staff preparation and quality control instructions while limiting access to recipes for centrally produced ingredients to designated personnel. However, food safety information, allergen information and anything that must legally be disclosed should not be withheld on confidentiality grounds.

In practice, use individual accounts rather than a shared password for the whole outlet. Set viewing and downloading permissions by role, and retain version histories and access logs. Core documents can carry recipient identifiers, while training should explain whether photography, recording or forwarding is permitted. Review access permissions when employees change roles or leave, rather than waiting until the franchise agreement ends.

Technical restrictions are no substitute for operational judgement. If an outlet needs access to safety procedures during a system outage, arrange controlled backup copies in advance so that confidentiality measures do not undermine safe operations.

4. Plan for leaks and the return of information

Information leaks are not always malicious. Someone might send a document to the wrong messaging group or lose a device that is still logged into the system. The franchisor should establish a reporting channel, emergency contact arrangements and the details required in an incident report, including the documents involved, the recipients and the time of the incident.

Once an incident is discovered, restrict further access and preserve relevant records before assessing the impact and possible remedies. Do not ask everyone to delete messages immediately before evidence has been preserved. If customers’ or employees’ personal data is also involved, assess obligations under Hong Kong’s Personal Data (Privacy) Ordinance separately; the matter cannot be handled solely as a trade secret incident.

When the franchise relationship ends, check printed training materials, electronic copies, system accounts and information held by contractors, and arrange for their return or deletion, with written confirmation. For records that must legally be retained and backups that cannot be erased immediately, specify arrangements for segregation, prohibition of further use and appropriate deletion. Avoid requiring the other party to make commitments it cannot fulfil.

Practical takeaway: Before opening the business to franchisees, choose one critical trade secret and test the complete process of identifying it, authorising access, delivering it, tracking access and retrieving it. Only extend the system across the franchise network once it works without disrupting outlet operations.