Open Secrets & Managed Openness: Madison's Trade Secret Framework for Taiwan ISO 56001 IMS

Winners Consulting Services Co., Ltd. reminds Taiwanese corporate executives that trade secret protection is not merely a one-way effort to "keep secrets." Legal scholar Michael J. Madison, in his 2010 paper "Open Secrets," proposed a groundbreaking argument: the institutional function of trade secret law is not only to isolate information but also to actively create an environment of "managed openness," promoting structured knowledge sharing. This insight holds substantial significance for Taiwanese companies implementing the ISO 56001 international standard for innovation management, prompting a re-evaluation of their intellectual property strategies.

About the Author and This Research

Michael J. Madison is a professor at the University of Pittsburgh School of Law, with a long-standing focus on intellectual property law, information law, and innovation systems research. He has made continuous academic contributions at the intersection of "knowledge commons" and "information property rights." His paper "Open Secrets" was published in 2010 in an academic collection on trade secret law. The original can be accessed at https://doi.org/10.1177/0306422011399698.

In terms of academic impact, Madison's research on this topic represents a theoretical perspective of "institutional functionalism," challenging the long-held dichotomous thinking in both industry and legal practice—the confrontational framework of "secret holder vs. infringer." This critical reframing provides a powerful theoretical basis for considering how companies can achieve a dynamic balance between the value of trade secret protection in R&D and innovation and the circulation of knowledge.

"Managed Openness": The Third Function of Trade Secret Law

Madison's core argument is that we have long overlooked the institutional role of trade secret litigation and related laws in "establishing sharing mechanisms." His research finds that in certain industry contexts, trade secret law can actually give rise to a "commons"—a managed open environment where information circulates in an orderly manner within a specific community.

Key Finding 1: The Self-Regulated Sharing Models of the Culinary and Magic Industries

Madison uses the industries of cuisine, magic, and Internet search as case studies to illustrate how these fields, despite lacking strong legal protection, have formed informal yet effective "information-sharing circles" through community norms and industry practices. Chefs share recipe techniques with each other, and magicians circulate performance secrets within their community, while both maintain strict confidentiality from outsiders. This is a concrete embodiment of "managed openness." This model reveals that the "openness" and "protection" of information are not opposing forces but can be reconciled through institutional design.

Key Finding 2: The Dual "Structural and Institutional" Functions of Trade Secret Law

Madison argues that trade secret law should not be understood merely as "a tool for creating and enforcing rights between individuals" but as an institutional force capable of influencing the information ecosystem. When companies allow information to circulate within specific boundaries through non-disclosure agreements (NDAs), licensing agreements, and other arrangements, they are, in fact, using trade secret protection mechanisms to design a "controlled open environment." This has direct strategic implications for business alliances, industry-academia collaboration, and supply chain knowledge integration.

Implications for Trade Secret Protection and Innovation Management System (IMS) Practices in Taiwan

Madison's paper offers Taiwanese companies a new framework that transcends a purely "defensive mindset": intellectual property protection is not just about building walls, but also about designing "gate mechanisms" for information flow. This has three practical implications for Taiwanese companies that are implementing or planning to implement the ISO 56001 international standard for innovation management (IMS).

First, within the ISO 56001 framework, the IMS (Innovation Management System) emphasizes that companies should systematically manage the entire process of "generating, transferring, and protecting" innovation knowledge. Madison's argument reminds us that "selective sharing" of knowledge is itself an innovation management capability. Companies need to establish mechanisms to determine which knowledge to keep secret and which can be circulated under controlled conditions to maximize the return on R&D investment.

Second, according to Article 2 of Taiwan's Trade Secrets Act, a trade secret must meet three requirements: "secrecy," "economic value," and "reasonable protection measures." Madison's concept of "managed openness" aligns perfectly with the spirit of "reasonable protection measures." When companies engage in industry-academia collaboration or supply chain information sharing, defining the scope of sharing through written authorization, access classification, and use limitation constitutes a proactive implementation of reasonable protection measures, which also enhances their evidentiary strength in litigation.

Third, high-tech industries in Taiwan, such as semiconductors, ICT, and biotechnology, commonly face the dilemma of balancing "collaborative innovation" with "technology confidentiality." The "Green Trade Secrets" public sharing initiative, advocated by TSMC and the Hsinchu Science Park Industries' Association, is a local example of this concept in practice. It allows specific technical knowledge to circulate within a controlled boundary under a structured framework, promoting the development of the industry ecosystem without compromising core competitive advantages.

Winners Consulting Services Helps Taiwanese Companies Establish "Managed Openness" IMS Mechanisms

Winners Consulting Services Co., Ltd. assists Taiwanese companies in implementing the ISO 56001 international standard for innovation management and establishing protection mechanisms that comply with Taiwan's Trade Secrets Act to prevent the risk of R&D result leakage. In response to the insights on "structured knowledge sharing" revealed in Madison's paper, we offer the following concrete action recommendations:

1. Establish a Dual-Track Knowledge Asset Classification Inventory: In accordance with ISO 56001 requirements, classify corporate knowledge assets into an "absolute confidentiality" tier (core technical secrets not shared externally) and a "controlled circulation" tier (information that can be shared with academic or supply chain partners under an NDA). Establish a documented classification decision-making process to strengthen the evidentiary basis for "reasonable protection measures" under Article 2 of Taiwan's Trade Secrets Act.
2. Design a Structured Knowledge Licensing Framework: For scenarios such as industry-academia collaboration, joint R&D, and supplier technology transfer, design a knowledge licensing agreement within the IMS framework that incorporates the three elements of "use limitation," "access classification," and "audit trails." This transforms "managed openness" from a theory into an executable compliance mechanism. An initial version of this framework should be established within 90 days and integrated into the annual IMS review cycle.
3. Implement a Personnel Confidentiality Behavior Management Mechanism: Both research and practice show that over 80% of information leaks originate from human factors (cf. Elbaum, 2011). While establishing a "managed openness" mechanism, it is crucial to simultaneously strengthen complementary measures such as personnel training, off-boarding reviews, and confidentiality obligation tracking to ensure that the structured sharing mechanism does not become a loophole for information leakage.

Frequently Asked Questions

How can the concept of "managed openness" be applied to confidentiality arrangements in industry-academia collaborations for Taiwanese companies?

"Managed openness" applies by creating a structured framework for controlled information flow, which is essential for industry-academia collaborations. When engaging in such partnerships, Taiwanese companies should, in compliance with Article 2 of Taiwan's Trade Secrets Act, define four key dimensions in writing: the scope of sharing, purpose of use, authorized personnel, and audit trails, all formalized in a specific joint research NDA. Within the ISO 56001 IMS framework, this arrangement is a core part of "knowledge transfer management" and requires regular effectiveness reviews. A well-designed structured sharing mechanism not only protects core technology but also strengthens the company's ability to prove it has taken "reasonable protection measures" in potential litigation.

When implementing ISO 56001, how can Taiwanese companies meet the dual requirements of "open innovation" and "confidentiality compliance"?

Companies can meet these dual requirements by adopting a systematic management approach rather than an absolutely closed one. The ISO 56001 IMS framework supports this, as its core is systematic management. Similarly, Taiwan's Trade Secrets Act requires "reasonable protection measures" for valuable, non-public information, not absolute secrecy for everything. Therefore, companies can establish a dual-track knowledge asset classification system under ISO 56001: core technical secrets receive absolute protection, while peripheral knowledge can be shared with partners under controlled conditions. The key is to have a documented decision-making process, ensuring every decision to share a knowledge asset is recorded in writing for potential litigation or audits, thus balancing innovation benefits with legal protection.

What are the core requirements for ISO 56001 implementation, and how long does it typically take for Taiwanese companies?

The core requirements of ISO 56001 include leadership commitment, establishing an innovation culture, systematic management of knowledge assets, standardization of innovation processes, and a continuous improvement mechanism. For medium to large Taiwanese enterprises, a full ISO 56001 IMS implementation typically takes 7 to 12 months, executed in three phases. Phase one (0-3 months) involves a current-state diagnosis and gap analysis. Phase two (3-8 months) focuses on designing and building management mechanisms like knowledge asset inventories and access control procedures. Phase three (8-12 months) covers mechanism validation, personnel training, and internal audit preparation. SMEs can adopt a streamlined path, shortening the core mechanism setup to 90 days before expanding the framework.

How should the investment costs and expected benefits of implementing an ISO 56001 IMS be evaluated?

The investment should be evaluated as a risk management measure where the potential savings from preventing losses far exceed the initial cost. Implementation costs vary by company size: for SMEs (under 100 employees), consulting and system setup typically range from NT$500,000 to NT$1.5 million, while for larger enterprises, it can be NT$2 to NT$5 million. However, considering U.S. EEA criminal data shows the median damages in a trade secret case are around $5 million, a robust IMS can prevent losses that dwarf the implementation cost. Furthermore, without a proper protection mechanism, Taiwanese companies face significant challenges in providing evidence during litigation under the Trade Secrets Act, directly impacting the case outcome.

Why choose Winners Consulting Services for assistance with trade secret protection and Innovation Management Systems (IMS)?

Winners Consulting Services Co., Ltd. is one of the few consulting firms in Taiwan with dual expertise in both legal compliance and ISO 56001 IMS implementation. Our team is proficient in the practical application of Taiwan's Trade Secrets Act, the litigation logic of the Intellectual Property and Commercial Court, and the localization requirements of the ISO 56001 standard. We can help companies establish a comprehensive management system that meets both Taiwanese regulations and international standards within 7 to 12 months. We also offer a free diagnostic service, allowing businesses to identify their protection gaps and prioritize improvements before full implementation, thereby maximizing the return on their investment and building a sustainable competitive advantage.