Grist Legal All articles
Employment Law

The Controlled Exit: Confidential Information When a Senior Employee Resigns

Grist Legal
The Controlled Exit: Confidential Information When a Senior Employee Resigns

A senior employee hands in their notice. The immediate concern is often the laptop, the pass and the final payslip. Those are visible items, easily collected on the last morning. The greater risk is usually less visible: the client list copied into a personal notebook, the pricing model remembered rather than downloaded, the supplier terms discussed in a final round of calls. For a UK business, the departure of a key employee should be managed as a controlled legal process, not a scramble at the door.

Begin before the last day

The resignation meeting is not the moment to improvise. Once notice is given, the employer should identify who needs to be involved: HR, the line manager, IT and, where the role is sensitive, legal advisers. The aim is to protect the business while treating the employee fairly and consistently with the contract.

Start with the paperwork. Check the employment contract, any statement of particulars, the staff handbook, confidentiality policies, intellectual property clauses and any shareholder or incentive documents. Look specifically for notice terms, garden leave provisions, restrictive covenants and express confidentiality obligations. Do not assume that a broad clause will automatically achieve what the business wants. UK courts interpret such terms carefully, particularly where they restrain future employment or competition.

The early stage is also about tone. An accusatory email or an unexplained suspension can create dispute risk before any information has been lost. A short, professional letter acknowledging the resignation, confirming the notice period and setting out next steps is usually more effective. Where garden leave or a handover plan is intended, say so clearly and explain the practical arrangements.

Confidential information is not the same as general skill

One of the most common misunderstandings in exit disputes is the difference between confidential information and the ordinary knowledge and skill an employee acquires in a role. An employer cannot prevent a departing employee from using general experience, sector knowledge or personal abilities. Those are part of the employee's working life and, in broad terms, their future livelihood.

Confidential information is different. It may include trade secrets, unpublished pricing structures, margins, customer lists, supplier terms, technical specifications, business plans, tender documents and non-public financial information. The precise boundary depends on the facts and the contract. Information that is already public, or that the employee could readily obtain from lawful sources, is harder to protect. So is information that has become part of the employee's general stock of knowledge.

Client relationships sit in a sensitive middle ground. A former employee may know clients well, but that does not necessarily entitle them to take confidential contact details, account histories or pricing arrangements. Employers should identify what is genuinely confidential and ensure that the contractual wording, policies and practical controls are consistent with that position.

Data protection also matters. Client and employee information held on work systems is personal data, and any review or copying of devices should be proportionate and carried out under a documented policy. An employer should not use the exit process as an excuse for indiscriminate access to personal files or private communications.

Garden leave: useful, but not a complete answer

Garden leave keeps the employee employed during notice but away from work, usually with full pay and benefits. It can be valuable. It reduces access to systems, limits client contact and gives the business time to reassure customers and arrange a handover. It can also make it easier to monitor compliance with confidentiality obligations.

However, garden leave is not automatic. The employer generally needs a contractual right to impose it, or the employee's agreement. The employee should remain on full pay and receive normal benefits unless the contract validly provides otherwise. The employer should also give clear instructions about what the employee may and may not do during the period, including contact with clients, colleagues and suppliers.

Garden leave does not, by itself, stop a former employee from joining a competitor after notice ends. Nor does it guarantee that confidential information has not already been taken. It is a control measure, not a substitute for a properly drafted confidentiality clause, evidence preservation and, where necessary, a realistic assessment of restrictive covenants.

Restrictive covenants must be proportionate

Restrictive covenants can protect legitimate business interests, but they are enforceable only if they go no further than reasonably necessary. Non-solicitation clauses, non-dealing clauses and non-compete clauses are treated differently. A court will consider the employee's role, the nature of the business, the length of the restriction, the geographical scope and the interest being protected.

A broad non-compete clause is not a guaranteed shield. UK courts are cautious about restraints of trade and may refuse to enforce wording that is wider than necessary. Employers should review covenants before relying on them and take advice quickly if there are signs of breach, because delay can weaken the practical position. Evidence of solicitation, client contact or use of confidential information may matter more than the width of the clause itself.

Preserve evidence before access is cut off

On the last morning, access is often removed within minutes. That is sensible for security, but it can destroy the evidence needed to assess whether information has been misused. The answer is to plan the sequence.

Before access is terminated, the employer should preserve relevant material in a proportionate and lawful way. That may include work emails, CRM activity, shared drive logs, download records, printing history, device usage and records of client contact. A legal hold should be applied so that routine deletion does not remove potentially relevant documents. If forensic review is needed, it should be scoped carefully and conducted by someone who understands both data protection and employment law.

This is not an invitation to monitor employees covertly or to copy personal data without limit. The employer should follow its policies, record what was done and why, and keep the material secure. A clear evidence trail is valuable if a dispute later arises, whether in correspondence, before a tribunal or in court.

A practical exit timetable

In the first days after notice, confirm the resignation in writing, identify the contractual terms, preserve evidence and agree a handover plan. During notice, remind the employee of continuing confidentiality and intellectual property obligations, communicate with key clients where appropriate, and collect company property and access rights in a structured way. On the final day, confirm that access has been revoked, devices returned and continuing obligations explained.

After departure, a brief reminder of confidentiality and restrictive covenants can be useful. So can monitoring for obvious breaches, provided it is lawful and proportionate. The objective is not to create a confrontational atmosphere. It is to make sure the business has done the simple things properly.

A senior exit is rarely comfortable. Handled as a controlled process, it is far less likely to become a costly dispute. The laptop at the door should be the end of the practical arrangements, not the beginning of the legal risk.

All Articles

Related Articles

A Good Word, Carefully Chosen: Reference Practice for UK Employers in 2026

A Good Word, Carefully Chosen: Reference Practice for UK Employers in 2026

Repairing Obligations, Not Blank Cheques: Managing Dilapidations at Lease End

Repairing Obligations, Not Blank Cheques: Managing Dilapidations at Lease End

Clock Running, Evidence Fading: A Small Firm's Data Breach Response Plan

Clock Running, Evidence Fading: A Small Firm's Data Breach Response Plan