Protect Your Trade Secrets Before Franchising in Malaysia

When an established business prepares to franchise, its owner needs to share the knowledge that makes its operations successful. But sharing a system does not mean giving everyone access to every piece of information. In a franchise network, protecting trade secrets should enable franchisees to run their operations effectively while reducing the risk of recipes, formulas, internal methods or commercial information being used without permission.

1. Identify information that is genuinely confidential

Start by listing information that gives the business a competitive advantage and is not publicly available. Examples include blending formulas, processing parameters, internal pricing methods, negotiated purchasing terms and specific procedures for resolving technical problems.

Do not label every document as confidential without distinguishing its importance. A menu displayed to customers is not equivalent to a production formula. Similarly, a publicly known supplier address is not necessarily confidential, but negotiated discount rates may need to be controlled.

Prepare a simple register covering four points:

• Information: the specific information to be protected.
• Internal owner: the person responsible for its accuracy and use.
• Authorised users: the roles that need access to carry out their duties.
• Storage location: where the official copy is held and controlled.

Also check where the information originated. If a consultant developed a formula or a technology supplier created a system, make sure the contract permits its use across the franchise network. Paying for development work does not necessarily settle every question of ownership and sharing rights.

The outcome should be a clear inventory of knowledge assets, not simply a large folder marked “confidential”.

2. Decide what to share at each stage

Prospective franchisees need enough information to assess the business opportunity. They do not necessarily need the complete formula or access to the operational knowledge base during initial discussions.

Create a staged information-sharing plan. At the enquiry stage, explain the concept, operational responsibilities and support available. During more detailed assessment, share the necessary commercial information through controlled channels. Once the relationship is formalised, provide role-based operational access as needed for implementation.

For example, counter staff may only need final preparation instructions. An outlet manager needs stock control and troubleshooting procedures. The central production team, meanwhile, may need the complete formula. This is a suggested approach to access management, not a reason to withhold important information from franchisees.

Do not use confidentiality to restrict legally required disclosure. In Malaysia, the Franchise Act 1998 (Act 590) governs the sale and operation of franchises. Section 15 requires the franchise agreement and related documents to be provided to prospective franchisees at least ten days before the agreement is signed, subject to the relevant provisions concerning approved documents.

Keep assessment and disclosure documents separate from detailed technical materials. Seek a lawyer’s review if proposed access restrictions could affect information that must be provided.

3. Align contractual protection with actual access

The Franchise Act 1998 recognises the use of trade secrets and confidential information among the elements of the definition of a franchise under section 4. Section 18 also requires franchise agreements to be in writing. Protecting business knowledge is not a secondary matter that should be left to verbal agreement.

Ask a lawyer familiar with Malaysian franchise law to review the statutory confidentiality obligations and how they are reflected in the agreement and supporting documents. An initial non-disclosure agreement can help control information sharing during negotiations, but it does not replace the requirements of the Act.

Practical points to clarify include:

• The information protected and the purposes for which it may be used.
• Who may receive information on the franchisee’s behalf.
• Restrictions on copying, forwarding or using information beyond the agreed purposes.
• The process for reporting lost documents or unauthorised access.
• How copies and access rights are handled when someone changes roles or the relationship ends.

Avoid confusing confidentiality with non-compete restrictions. They serve different purposes and have different implications. Do not assume that one general clause is enough to cover all the responsibilities of franchisees, directors and relevant employees.

Explain these obligations in operational terms as well. Managers need to know, for instance, whether sending a photograph of a formula sheet through a personal messaging account is permitted or prohibited.

4. Test controls before information starts circulating

Use individual accounts for sensitive materials rather than a single password shared by the entire outlet. Limit permissions according to duties, keep records of access changes and decide who can authorise downloads or printing.

For printed documents, record recipients and copy numbers. For production demonstrations, set rules on photography and recording before the visit begins. Controls should be reasonable so that employees can still work safely and consistently.

Test three scenarios before expanding the network: a prospective franchisee withdraws, a manager leaves and a work device goes missing. Can the team identify what information has been shared, block access and promptly contact those responsible?

Also establish procedures for returning, deleting or retaining information with restricted access when a relationship ends, taking account of applicable record-retention obligations.

Practical action: before sharing your system with the next prospective franchisee, complete a confidential information register, a role-based access plan and an access-revocation process. Effective protection combines appropriate contracts with disciplined day-to-day working practices.