DB43/T 2652-2023 企业商业秘密保护管理规范

ICS03.100.01

CCSA01

43

湖南省地方标准

DB43/T2652—2023

企业商业秘密保护管理规范

Managementspecificationforprotectionoftradesecretsofenterprises

2023-06-26发布2023-09-26实施

湖南省市场监督管理局发布

DB43/T2652—2023

目次

前言························································································································Ⅲ

1范围······················································································································1

2规范性引用文件·······································································································1

3术语和定义·············································································································1

4一般要求················································································································1

5涉密节点管理··········································································································2

5.1定密···············································································································2

5.2隐密···············································································································3

5.3解密···············································································································3

5.4销密···············································································································3

6涉密人员管理··········································································································4

6.1入职管理········································································································4

6.2在职管理········································································································4

6.3离职管理········································································································5

7涉密载体管理··········································································································5

7.1涉密文件资料··································································································5

7.2涉密电子信息··································································································5

8涉密区域管理··········································································································6

9涉密活动管理··········································································································7

10维权救济管理·········································································································7

10.1侵权评估·····································································································7

10.2维权方案·····································································································8

10.3取证固证·····································································································8

10.4维权路径·····································································································8

11监督检查管理·········································································································9

附录A（资料性）企业商业秘密保护管理体系概览图························································10

附录B（资料性）商业秘密区块链存证指引····································································11

附录C（资料性）员工保密合同（参考文本）·································································13

附录D（资料性）竞业限制协议（参考文本）·································································16

I

DB43/T2652—2023

II

DB43/T2652—2023

前言

本文件按照GB/T1.1—2020《标准化工作导则第1部分：标准化文件的结构和起草规则》的规

定起草。

请注意本文件的某些内容可能涉及专利。本文件的发布机构不承担识别专利的责任。

本文件由湖南省市场监督管理局提出并归口。

本文件起草单位：湖南省知识产权保护中心、湖南省湘鉴知识产权鉴定评估中心有限公司、长沙朕

扬知识产权代理事务所（普通合伙）。

本文件主要起草人：郭科技、李小强、贺俊宾、耿立刚、姜欢、刘跃红、杨斌、言琳芝、戴孙强、

徐显、肖坤立、刘金平。

III

DB43/T2652—2023

IV

DB43/T2652—2023

企业商业秘密保护管理规范

1范围

本文件规定了商业秘密保护的管理的一般要求、涉密节点管理、涉密人员管理、涉密载体管理、涉

密区域管理、涉密活动管理、维权救济管理和监督检查管理等内容。

本文件适用于企业的商业秘密保护管理，企业集聚的园区、行业协会、具有商业秘密保护需求的其

他组织可参照本文件执行。

2规范性引用文件

本文件没有规范性引用文件。

3术语和定义

下列术语和定义适用于本文件。

3.1

商业秘密tradesecrets

不为公众所知悉、具有商业价值并经权利人采取相应保密措施的技术信息、经营信息等商业信息。

3.2

涉密人员secret-relatedpersonnel

根据工作职责或者保密协议有权接触、使用、掌握商业秘密的企业员工或其他人。

3.3

涉密载体secretcarriers

以文字、数据、符号、图形、图像、视频和音频等方式记录商业秘密信息的各类物质，如纸质文件、

存储介质（磁性介质、光盘、U盘、硬盘、服务器等）和其他介质。

3.4

涉密区域secret-relatedarea

可以接触到商业秘密信息的一切场所，包括但不限于企业园区、厂房、车间、实验室、办公室、保

密室、档案室、机房、用户现场等。

4一般要求

4.1企业商业秘密保护管理应遵循“依法规范、企业自主、预防为主、全面覆盖”的原则。

4.2企业应全方位构建领导责任、监管责任、主体责任一体贯穿的商业秘密保护管理体系（见附

录A）。

4.3企业董事会等决策管理层应履行商业秘密保护的领导责任，最高管理者为第一责任人，决策管理

层的职责包括但不限于：

1

DB43/T2652—2023

a）贯彻落实国家有关商业秘密保护的法律、法规和规章；

b）确立企业商业秘密保护管理目标、方针；

c）监督、检查企业落实商业秘密保护管理目标、方针情况；

d）做好企业商业秘密保护管理制度体系的评价与改进。

4.4企业应成立商业秘密保护办公室等专门机构，履行商业秘密保护的监管责任，其职责包括但不

限于：

a）执行企业商业秘密保护领导机构的决策决议；

b）研究制定企业商业秘密保护管理制度，监督、检查企业落实商业秘密保护管理制度情况；

c）形成企业商业秘密保密事项清单并动态更新；

d）组织对企业员工进行商业秘密保护教育培训；

e）指导、监督业务部门制定实施生产、经营相关的商业秘密保护方案；

f）组织企业内部商业秘密风险隐患排查并落实专项整治；

g）做好泄密事件的应急处理，配合有关部门完成商业秘密侵权事件的调查举证。

4.5企业研发、生产、销售、人事、财务等业务部门应履行商业秘密保护的主体责任，其职责包括但

不限于：

a）梳理本部门保密事项清单并动态更新；

b）全员严格遵守企业商业秘密保护规章制度，执行分析预警、自查评估等制度，落实保密岗位

责任；

c）及时发现上报商业秘密泄密隐患、侵权线索等。

4.6企业应全面统筹知识产权保护的目的、载体、路径等，将商业秘密与专利、商标、著作权、集成

电路布图等系统布局，立体保护。

4.7企业宜加强商业秘密前置保护，可应用电子签名、可信时间戳、哈希值校验、区块链等技术自建

或使用符合国家标准、行业标准的商业秘密存证平台，实施预先存证保护措施。商业秘密区块链存证指

引见附录B。

5涉密节点管理

5.1定密

5.1.1企业应对商业秘密进行核查和评估，其表现形式、评估范围应包括：

a）涉密技术信息：与科学技术有关的结构、原料、组分、配方、材料、样式、工艺、方法或其步

骤、算法、数据、计算机程序及其有关文档等信息；

b）涉密经营信息：与经营活动有关的创意、管理、营销、财务、计划、样本、招投标材料、数据、

客户信息等，以及对特定客户的名称、地址、联系方式、交易习惯、交易内容、特定需求等信

息进行整理、加工后形成的客户信息；

c）除技术信息、经营信息以外，其他符合商业秘密构成要件的商业信息。

5.1.2对企业的商业秘密重要性进行核查和评估时应考虑以下一般因素：

a）信息的经济价值，包括该信息的现有价值，以及该领域技术革新的速