Reverse Engineering and Trade Secrets: What's Legal in Canada

A competitor buys your product, takes it apart, and figures out how it works. Is that legal? For many Ontario business owners protecting a product built on hard-won know-how, the answer is uncomfortable: reverse engineering a lawfully obtained product is generally legal in Canada, and that fact shapes how trade secret protection actually works — and doesn't work.

This article explains why the general rule favours reverse engineering, where it stops being legal, and what that means for how you should actually be protecting your product.

The General Rule: Reverse Engineering Is Usually Legal

If a competitor lawfully buys your product on the open market and studies it — takes it apart, tests it, analyzes how it functions — that activity is generally not, by itself, a legal wrong in Canada. There is no general law against figuring out how a lawfully purchased product works through your own independent effort and analysis.

This surprises many business owners who assume that "trade secret" means something closer to a patent — an exclusive right that blocks anyone else from using the same idea. It doesn't work that way.

Why Trade Secret Law Works Differently From Patent Law

A patent gives its owner an exclusive right to an invention for a defined period, regardless of how a competitor later arrives at the same idea — independent invention is not a defence to patent infringement. Trade secret protection is fundamentally different: it only protects against improper acquisition, use, or disclosure of confidential information. If a competitor arrives at the same solution independently — including by lawfully reverse engineering a product they bought — there is generally no trade secret claim available against them.

This is the core trade-off businesses face: a patent can be expensive and requires public disclosure of how the invention works, while trade secret protection is free and can last indefinitely, but it offers no protection against someone who figures it out on their own.

Where Reverse Engineering Crosses the Line

Reverse engineering stops being a safe activity where it involves:

• Improper means of obtaining the product or information — theft, deception, bribery, or accessing something the person was never entitled to see in the first place.
• A breach of a contract or confidentiality obligation — if the product or information was only obtained under a licence, NDA, or terms of use that specifically prohibit reverse engineering, doing it anyway can be a breach of contract even if it wouldn't otherwise be unlawful.
• Breach of confidence by an insider. An employee or contractor who had privileged access to confidential design information — rather than working backward from the finished, publicly available product — is in a fundamentally different, and much riskier, position.

The distinction is subtle but important: the law generally protects the confidentiality of information, not the underlying idea itself once it can be lawfully discovered from a public product.

Contracts Can Change the Analysis

Because the general legal rule favours reverse engineering, many businesses close that gap through contract instead. Software licences, terms of service, and NDAs commonly include clauses specifically prohibiting reverse engineering, decompiling, or disassembling a product as a condition of using it. Where such a clause validly applies, reverse engineering in violation of it can expose the person to a breach-of-contract claim even though the underlying activity would not otherwise be unlawful on its own.

Canadian copyright law also includes narrow, technical exceptions specifically addressing reverse engineering of computer programs — for purposes like achieving interoperability between software products — which can affect what a contractual restriction can validly prohibit. This is a specialized area worth confirming with a lawyer before relying on either a broad restriction or a broad exception.

Protecting Against Reverse Engineering From the Start

Since the law will not stop a competitor from lawfully reverse engineering your product, practical protection generally comes from a combination of:

1. Contractual restrictions in any licence or terms of use governing how the product may be used or studied
2. Keeping the truly valuable know-how confidential — manufacturing processes, formulations, or source code that never leaves the business, rather than something embedded in the sold product itself
3. Considering patent protection where the innovation is genuinely novel and disclosure is an acceptable trade-off for exclusive rights
4. Strong internal confidentiality practices so insiders cannot become the real source of a leak dressed up as "reverse engineering"

Frequently asked questions