Apple vs OpenAI: A Trade Secret Lesson for Your Business
You know the moment. A key employee resigns. You’re happy for them, but a little voice asks: What do they know? Your client list? Your supplier discounts? Your pricing? Your playbook? That feeling isn’t paranoia. It’s risk assessment. And right now, one of the biggest tech companies in the world is living that exact nightmare—in public.
Apple is suing OpenAI and two former Apple employees, according to a report. Apple says the employees ran a scheme to funnel confidential product information to OpenAI’s hardware business. OpenAI responded with a detailed public rebuttal, calling the lawsuit “careless, aggressive and oddly personal.” For Malaysian SME owners, this global titan clash is actually a warning. It shows that trade secret problems don’t disappear just because you’re big, or because you have lawyers on retainer.
TL;DR: Apple is seeking a preliminary injunction against OpenAI over alleged trade secret leaks. OpenAI pushed back with messages that appear to show Apple employees continuing to request access to company files from a former engineer months after his departure. For your business, the key takeaway isn’t about whose side you’re on. It’s about what you do today, before the resignation letter ever lands.
What “Trade Secrets” Actually Means
Trade secrets are pieces of confidential business information that give you an edge—think client databases, pricing models, product designs, supplier terms, marketing plans. In Malaysia, trade secrets are generally protected through the law of breach of confidence, and through employment contracts that include confidentiality clauses and, where appropriate, non-compete or non-solicitation agreements. If an ex-employee takes your client list and calls your customers, you have legal options. But legal options are slow, expensive, and public. The OpenAI case shows exactly how messy that gets.
What’s interesting here is the detail. Apple claims two former employees, Chang Liu and Tang Tan, shared confidential data with OpenAI. OpenAI says Apple’s lawyers emailed the wrong person in February after confusing two Asian last names, and published the apology from Apple’s counsel. OpenAI also published iMessages showing Apple staff still asking Liu—after his January 22 departure—to help locate files and AirDrop files from his Apple-linked iCloud account. One participant in the thread called the exchange “highly irregular.” According to Apple’s complaint, more than 400 former Apple employees now work at OpenAI.
The fact that Apple is taking this to court isn’t unusual. But OpenAI’s public rebuttal is. It’s a reminder that your business’s confidential information isn’t just protected by a legal contract. It’s also protected by your daily habits, your systems, and your exit processes.
How This Applies to Malaysian SMEs
You may not have hundreds of ex-employees working for a competitor. But you likely have two to five key people who know almost everything about your business: your operations manager, your accountant, your sales lead. When one of them leaves, whether to a competitor or to start their own business, what prevents them from using your confidential knowledge? A signed contract helps. But in Malaysia, restraint of trade clauses must be reasonable in scope, duration, and geographic area to be enforceable. Court rulings have been strict on overbroad clauses that unfairly restrict someone’s right to work. So you can’t just write a blanket “don’t compete with us ever” clause and hope it sticks.
Instead, take a leaf from the Apple-OpenAI episode—on the right side, though. The evidence OpenAI published shows Apple employees asking a former worker for access to internal files and iCloud data. That’s a system failure. If your admin assistant can still access your cloud drive years after leaving, or your ex-sales rep knows your password because you never changed it, then your “trade secret” protection is just a piece of paper. Malaysian SMEs often rely on trust. It’s lovely, but trusting a staff member to “do the right thing” isn’t a confidentiality policy.
Consider a real scenario. You run a food manufacturing company in Penang. Your production manager resigns and three months later, a competitor launches a product with the same sauce recipe, same naming, same packaging style. Had you stored your recipe in a shared folder that your manager accessed daily, you’d have a hard time proving they “took” it digitally. Your lawyer would need to show a specific transfer of information. But if you had access logs, an offboarding checklist, and a signed non-disclosure agreement, your position becomes much stronger. It also deters the majority of would-be leakers: most people don’t intentionally leak—they just take their old habits with them, like forwarding an email to a personal address for “reference.”
And here’s where automation comes in. You can set up simple automated systems to protect your secrets: access reviews, automatic deactivation of accounts on termination, document encryption, and audit logs that show who viewed what and when. You don’t need an IT team. You need discipline and a checklist.
“Trade secret battles aren’t won in court. They’re won months before with proper systems. Apple may have a billion-dollar legal team. You have the advantage of being small enough to fix your vulnerabilities today.”
Let’s lay out the numbers from this case:
| Fact | Detail |
|---|---|
| Former Apple employees now at OpenAI | more than 400 according to Apple’s complaint |
| Tan’s tenure at Apple | 24 years before joining a hardware startup that merged with OpenAI (source) |
| Liu’s departure date | January 22, yet Apple staff still messaged him as late as March 5 per iMessages published by OpenAI |
| Months between alleged contact and lawsuit | 5 months after OpenAI says it heard nothing further (source) |
Those aren’t just tech details. The “400 former employees” number tells you that when a big company hires many people from one competitor, suspicion grows. In Malaysia, if you see three of your ex-staff suddenly at the same competitor, it’s worth a conversation with your legal advisor. But again, the real work is upstream.
Practical Takeaways for Your Business
- Do an exit interview with your offboarding checklist: require staff to return all hardware, clear passwords, sign a confirmation that they’re not taking confidential files.
- Restrict access on a need-to-know basis: don’t give every employee access to every folder. Use cloud tools where you can see who opens what.
- Use automation for access control: when an employee leaves, your system should deactivate accounts, revoke keys, and remove them from shared files automatically.
- Audit your own backups: if someone keeps forwarding emails to a personal account, you’ll want a way to notice.
- Refresh your contracts: ensure your employment agreements include confidentiality and reasonable non-solicitation clauses that comply with Malaysian employment law.
- Keep your own culture strong: people are less likely to dish out secrets if they don’t feel wronged on their way out.
The Bigger Picture
As Malaysia’s digital economy grows, more SMEs are using cloud tools, messaging apps, and shared drives. That makes trade secret protection harder, because information can be copied in seconds. The Apple-OpenAI dispute will likely drag on for months, and its outcome may reshape how companies treat ex-employee communication. But for you, the lesson is immediate: you don’t need to be a trillion-dollar company to learn from this. You just need to look at your own workplace with fresh eyes.
Ask yourself: if your best employee resigned today, what stops them from taking your client list? If your answer is “nothing,” that’s your to-do list. Automation can help you build the controls, but it starts with you making it a priority. Because in business, your secrets are one of the few assets that can be stolen overnight.
Ready to Streamline Your Operations?
Your business should run itself. AutoRunBiz deploys AI agents to automate your daily operations — WhatsApp orders, invoicing, customer follow-ups, and accounting. Book a free 15-min ops audit to see where automation fits your business →