Ex-employee using customer list

Hello there. I am Gemma from Lawyer Destroyer. Dealing with an ex-employee who has taken your customer list can be incredibly frustrating and worrying for your business. The short answer is yes, you usually can stop them, depending on how they got the list and what your employment contract says.

The legal position:

Under the law of England and Wales, customer lists are generally protected as confidential information or trade secrets. The exact protection relies on a few different legal concepts.

First, we look at the employment contract. Most business contracts include restrictive covenants. These are specific clauses that stop ex-employees from soliciting clients, working for competitors for a set period, or using company data. There is usually a distinct confidentiality clause too.

Even if you do not have a robust written contract, the law still steps in to help. Employees have an implied legal duty not to steal trade secrets or use highly confidential business information after they leave. Also, if they copied or emailed the customer list to themselves before leaving, they breached their fundamental duty of loyalty while they were still employed by you.

There is also a very strong data protection angle. Taking a list containing the personal details of customers without your permission is a serious data breach under UK data protection laws. Depending on how it was done, unlawfully obtaining personal data can actually be a criminal offence.

What we need to check:

To understand exactly how strong your position is, we are missing a few facts. We would need to look at the ex-employee's contract to see exactly what post-termination restrictions and confidentiality clauses were agreed.

We also need to know how they took the list, for example whether they printed it, emailed it to a personal account, or downloaded it to a USB drive. Finally, we need to understand what they are actually doing with the list right now. If they are just holding it, the approach might be slightly different than if they are actively ringing your clients to try and win their business.

Practical next steps:

1. Gather the evidence
Start by finding out exactly what has happened. IT checks can often show if the ex-employee emailed the database to themselves or downloaded it to a memory stick just before they left. Keep a detailed record of any customers who tell you the ex-employee has contacted them, noting down when and what was said.

2. Secure your systems
Make absolutely sure the ex-employee's access to all your systems, emails, social media accounts, and cloud storage is completely cut off, and change shared passwords if necessary.

3. Send a cease and desist letter
This is usually the most effective early step. This is a formal letter telling the ex-employee that you know what they have done, reminding them of their contractual and legal duties, and demanding that they stop using the list immediately. You normally demand that they return or permanently delete the data and sign a legal promise, known as an undertaking, confirming they have done so. Reminding them that taking client data is a breach of data protection law can carry a lot of weight here.

4. Early resolution
If they reply to the letter and are willing to talk, you might find that a swift negotiation or mediation resolves the issue. They might agree to walk away or return the data to avoid a legal fight, which saves everyone time and money.

5. Formal court action
If they ignore the letter or refuse to stop stealing your clients, you might need to take them to court. You can apply to the court for an injunction, which is a powerful judge-made order forcing them to stop using the list entirely. You can also claim financial damages if their actions have already cost you money. However, court action can be very expensive, stressful, and risky, so it is usually a last resort if a firm letter does not work.

Please let me know if you would like to go through their employment contract together or if you want to start putting together that first letter.