A senior employee resigns. You discover that for the last few months, they have been forwarding documents to a personal email address. Their LinkedIn profile updates the next day to show a new role at your closest competitor. Several of your largest customers report that they have already been contacted. Your CFO asks the question every executive eventually asks: “What can we actually do, and how fast?”
This is one of the most common emergencies in Canadian commercial law, and one of the most consequential. The first 72 hours often determine the outcome. An employer who acts decisively can preserve customer relationships, recover misappropriated documents, and obtain injunctive relief that effectively shuts down the competitive threat before it materializes. An employer who delays, or who acts without a coherent legal strategy, can find that the customer relationships are gone, the confidential information has been disseminated, and the courts are reluctant to grant the kind of extraordinary relief that would have been available a week earlier.
This article is a practical playbook for what to do when a senior employee leaves and the employer suspects misappropriation of confidential information, breach of fiduciary duty, or unfair competition. It explains the legal framework, the strategic options, and the specific steps that should be taken in the early hours and days after the departure. It is written for executives, in-house counsel, and HR leaders who need to understand the moves available to them, and for the lawyers who advise them. Our breach of confidence practice handles these matters in Ontario.
The Legal Framework: What Every Employer Should Understand
Before turning to the playbook, it is essential to understand the four overlapping sources of legal protection that an employer can invoke when a senior employee departs.
The Duty of Good Faith and Fidelity
Every employee, regardless of seniority, owes their employer an implied duty of good faith and fidelity during the employment relationship. This is sometimes described as a duty of loyalty. It includes the obligation not to compete with the employer while still employed, not to solicit customers or fellow employees on behalf of a competitor, not to misuse confidential information, and not to take advantage of business opportunities that properly belong to the employer.
The duty of fidelity applies during the employment relationship itself, not after termination. But it has important implications even at the end of employment, because the employer can recover damages for breaches that occurred while the employee was still on the payroll. An employee who, in the weeks before resignation, copies customer files to personal storage, recruits other employees to leave with them, or solicits the employer’s customers for the new venture, has breached the duty of fidelity. The breach gives rise to a claim for damages and (depending on what was taken) for a range of equitable remedies.
Fiduciary Duties
A subset of senior employees owe additional fiduciary duties to their employer. These duties are stricter than the general duty of fidelity and continue to apply, in important respects, even after employment has ended.
The leading Canadian authority on when an employee will be classified as a fiduciary is the Supreme Court of Canada’s decision in Canadian Aero Service Ltd. v. O’Malley. The court held that senior officers and key employees who exercise significant discretion and have access to confidential information about the employer’s business may owe fiduciary duties even after they leave. These duties prohibit the former employee from taking advantage of “maturing business opportunities” of the former employer, from using the former employer’s confidential information, and (in some circumstances) from soliciting the former employer’s customers for a defined period after termination.
The “fiduciary employee” classification has been applied to senior executives, key sales personnel with deep customer relationships, partners in professional firms, and others whose roles involve substantial trust and confidence. It is not applied lightly. Courts look at the totality of the relationship, including the level of seniority, the nature of the responsibilities, the access to confidential information, and whether the employee’s role was such that the employer relied on them to act in the employer’s interest. Where these factors are present, the employee is a fiduciary, and the post-employment obligations are correspondingly stronger.
The Ontario Superior Court of Justice and Court of Appeal have had numerous occasions to apply these principles in the context of departing executives, including in cases such as Catalyst Capital Group Inc. v. Moyse, where the court considered the obligations of a senior investment professional who left for a competitor. The application is fact-specific, but the principle is consistent: senior employees with access to sensitive information and significant client relationships face stricter post-termination obligations than ordinary employees.
Confidentiality Obligations
Whether or not an employee is a fiduciary, every employee is bound by an implied (and often express) obligation to keep their employer’s confidential information confidential. This obligation continues after employment has ended.
The categories of information that can qualify as confidential include customer lists and customer data, pricing structures, supplier relationships, technical know-how and trade secrets, business plans and strategies, financial information, and the employer’s processes and methods. Not all information is confidential. Information that is in the public domain, information that the employee acquired before joining the employer, and the employee’s own general skill and experience are not confidential. The line between confidential information and the employee’s general skill (which they are entitled to take with them) is one of the most contested issues in this area of law.
The leading case on the elements of breach of confidence in Canada is the Supreme Court of Canada’s decision in Lac Minerals Ltd. v. International Corona Resources Ltd.. To establish breach of confidence, the plaintiff must prove that the information had the necessary quality of confidence, that it was communicated in circumstances importing an obligation of confidence, and that it was misused to the detriment of the party who communicated it. The doctrine has been applied in countless cases involving departing employees who took customer lists, pricing data, technical information, or other confidential material.
Restrictive Covenants
Many employment agreements contain express restrictive covenants prohibiting the employee from competing with the employer, soliciting the employer’s customers, or soliciting the employer’s other employees for a specified period after termination. These covenants are an important tool, but they are subject to significant judicial scrutiny.
Canadian courts treat restrictive covenants in employment contracts with caution because of the inherent imbalance of bargaining power between employers and employees. The covenant must be reasonable in its scope (geographic, temporal, and activity-based), it must protect a legitimate proprietary interest of the employer, and it must not be contrary to the public interest. The Supreme Court of Canada in J.G. Collins Insurance Agencies Ltd. v. Elsley set out the framework that Canadian courts continue to apply, and the court in Shafron v. KRG Insurance Brokers (Western) Inc. confirmed that ambiguity in a restrictive covenant will be fatal: courts will not “blue pencil” or rewrite a poorly-drafted covenant to make it enforceable.
Non-competition covenants, which prohibit the former employee from working for a competitor at all, are scrutinized particularly closely and are often found unenforceable. Non-solicitation covenants, which only prohibit the former employee from soliciting the former employer’s customers or employees, are easier to enforce and are usually the better drafting choice. In Ontario, the Working for Workers Act, 2021 amendments to the Employment Standards Act, 2000 have effectively prohibited non-competition agreements for most employees (with limited exceptions for executives and in M&A contexts), reinforcing the trend toward narrower covenants.
The Departing Employee’s Own Obligations During the Resignation Period
Many executives are surprised to learn that an employee does not have an unfettered right to walk out the door and begin competing the next day. Even an at-will employee is subject to the duty of fidelity until the moment employment ends, and the timing of resignation itself is governed by legal rules.
The Duty to Give Reasonable Notice of Resignation
Just as the employer owes the employee reasonable notice of termination, the employee owes the employer reasonable notice of resignation. The Supreme Court of Canada confirmed this principle in RBC Dominion Securities Inc. v. Merrill Lynch Canada Inc., a leading case involving a coordinated mass resignation by a branch of investment advisors who left to join a competitor.
The length of reasonable notice depends on the seniority of the employee, the nature of their role, the difficulty of replacing them, and the customary practice in the industry. For a junior employee, reasonable notice may be a matter of days. For a senior executive whose departure leaves a meaningful gap in the employer’s operations, it may be weeks or months. A departing employee who fails to give reasonable notice and instead disappears overnight may be liable in damages for the losses the employer suffers as a result, including lost profits, the cost of replacement, and the cost of mitigation.
Permitted Preparations vs. Active Competition
Canadian courts draw a distinction between “preparation to compete” (which is permitted) and “active competition” (which is not) during the period before an employee’s resignation takes effect. An employee can quietly look for another job, can negotiate with a prospective employer, can incorporate a new company that will operate after their departure, and can take steps that do not actively harm their current employer.
What an employee cannot do, while still employed, is solicit the employer’s customers for the new venture, recruit fellow employees to leave with them, divert business opportunities from the employer to the new venture, or copy and remove confidential information for use after departure. These are breaches of the duty of fidelity that give rise to claims for damages, disgorgement of profits, and equitable remedies.
The line between preparation and active competition is fact-specific. Sending an email to a competitor’s HR department asking about an opening is preparation. Sending an email to twelve key customers announcing a new venture (while still on the current employer’s payroll) is active competition. The courts examine the conduct in detail, focusing particularly on the use of the employer’s time, equipment, and resources, and on whether the conduct involved any misuse of the employer’s confidential information.
The First 72 Hours: A Practical Checklist
When the employer suspects that a departing employee has crossed the line, the first 72 hours are critical. The decisions made in this window determine whether evidence is preserved, whether the customer base is protected, whether injunctive relief will be available, and whether the case can be put together quickly enough to produce a favourable result.
Hour One: Stop, Lock, and Document
The very first step is to suspend the employee’s access to the employer’s systems. This means disabling email, VPN access, cloud storage, customer relationship management systems, and any other system that holds confidential information. It means changing passwords for any shared accounts. It means securing physical access (collecting keys, fobs, and access cards). And it means preserving the employee’s company-issued devices (laptop, phone, tablet) without deletion, reformatting, or modification.
This last point is especially important. The employee’s devices are the most likely source of evidence of misappropriation. Email exports, file transfers to personal storage, copies of customer lists, and the timeline of these actions are often recoverable through forensic examination of the device. The device must be quarantined and preserved in the state it was in when the employee left. Any IT employee who reflexively wipes or reimages the device is destroying evidence and potentially exposing the employer to a spoliation argument later.
Hour Two to Twelve: Conduct an Internal Investigation
Once the employee’s access is locked down, the next priority is to begin an internal investigation. This usually involves a combination of HR, IT, and legal personnel, ideally with external counsel involved from the start.
Key investigative steps include reviewing the employee’s email for the months preceding the resignation, looking specifically for emails to personal accounts, attachments to personal addresses, and communications with customers, suppliers, or competitors that suggest pre-resignation solicitation; reviewing file access logs and download activity to identify any unusual download or copying patterns; reviewing remote access logs to identify access from unusual locations or at unusual times; examining the employee’s company-issued device for evidence of USB drive usage, cloud storage uploads, or printed materials; interviewing colleagues who may have observed pre-resignation conduct (recruitment of other employees, conversations with customers, mentions of the new venture); and reviewing customer interactions in the preceding period to identify any patterns suggestive of pre-resignation solicitation.
The investigation must be conducted carefully to preserve privilege and to avoid prejudicing potential litigation. External counsel should be retained early so that the investigation can be conducted under the umbrella of solicitor-client privilege.
Hour Twelve to Forty-Eight: Communicate with Customers and Employees
While the investigation continues, the employer should consider what messaging is appropriate to its customers and remaining employees. The goal is to prevent customer defections and to reassure remaining employees that the business is stable and committed.
For customers, this often involves a coordinated outreach campaign to key accounts, ideally led by senior executives, designed to reaffirm the employer’s commitment to the relationship and to introduce the customer to new contact persons. For employees, this often involves clear internal communication about the departure, the employer’s expectations of remaining employees, and (where appropriate) a reminder of confidentiality and non-solicitation obligations under their own employment agreements.
This communication must be measured. Aggressive or accusatory messaging about the departing employee can expose the employer to defamation claims. The communication should focus on reaffirming the employer’s relationships and operations, not on attacking the departing employee.
Hour Forty-Eight to Seventy-Two: Send a Cease and Desist Letter
By 48 to 72 hours after the departure, the employer should have enough information to send a formal cease and desist letter to the departing employee and (often) to the new employer. The letter should remind the recipients of the departing employee’s continuing obligations (confidentiality, non-solicitation, non-competition where applicable), demand the immediate return of all confidential information and company property, demand confirmation that the employee has not retained any copies and has not disclosed the information to anyone, demand that the new employer not knowingly induce or facilitate any breach of the former employee’s obligations, and reserve all rights to seek injunctive and damages relief.
The cease and desist letter serves several purposes. It puts the recipients on notice of the employer’s position and creates a clear evidentiary record. It often prompts an exchange of information that reveals the scope of the breaches. It sometimes results in an immediate undertaking from the recipients that resolves the matter without litigation. And it lays the groundwork for any subsequent injunction application by demonstrating that the employer acted with appropriate urgency.
The Litigation Toolkit: Injunctions and Discovery Orders
Where the cease and desist process does not resolve the matter, the employer must consider litigation. Several powerful equitable remedies are available, each suited to different circumstances. Many of these remedies are explored in greater detail in our overview of urgent commercial remedies.
Interlocutory Injunctions
The principal remedy is the interlocutory injunction, which is a court order requiring the departing employee (and often the new employer) to refrain from specific conduct pending the trial of the action. Common terms include orders that the departing employee not solicit the former employer’s customers, not solicit the former employer’s other employees, not use or disclose specified confidential information, and not compete in specified ways for a specified period.
The legal test for an interlocutory injunction in Canada is the three-part test established by the Supreme Court of Canada in RJR-MacDonald Inc. v. Canada (Attorney General): there must be a serious issue to be tried, the applicant must establish that it will suffer irreparable harm if the injunction is not granted, and the balance of convenience must favour granting the injunction.
The “serious issue” component is typically not difficult to satisfy in a confidential information case where there is evidence of pre-resignation misconduct. “Irreparable harm” is harm that cannot be adequately compensated in damages, which often includes the loss of customer relationships, the loss of confidential information that has been disseminated, and damage to goodwill. The “balance of convenience” requires the court to weigh the harm to the employer if the injunction is not granted against the harm to the employee if the injunction is granted.
In some cases, particularly where the employer’s case is very strong, the court may apply a higher threshold and require the applicant to show a “strong prima facie case” rather than just a “serious issue to be tried.” The leading authority on this elevated standard is the Supreme Court of Canada’s decision in R. v. Canadian Broadcasting Corp., which addressed the test for mandatory interlocutory injunctions.
Springboard Injunctions
A particularly important variant for confidential information cases is the springboard injunction. The doctrine, traced to the English case Terrapin Ltd. v. Builders’ Supply Co. (Hayes) Ltd. and adopted in Canada, prevents a former employee from using confidential information acquired during employment as a “springboard” for activities detrimental to the former employer. The injunction is time-limited, typically to the period it would have taken the defendant to develop the information independently, but during that period it can effectively neutralize the competitive threat.
The Supreme Court of Canada considered the springboard principle in Cadbury Schweppes Inc. v. FBI Foods Ltd., a case involving the misappropriation of a confidential recipe. The court awarded damages calculated on a 12-month springboard period, representing the time it would have taken the defendant to develop a competing product without the benefit of the confidential information. The springboard principle has been applied in many Ontario cases involving departing employees, with the duration of the springboard varying based on the nature of the information and the time required for independent development.
The springboard injunction has the advantage that it does not require the employer to prove that the information remains confidential indefinitely. Even where the information has entered the public domain or could be obtained from other sources, the court can still enjoin the former employee from benefiting from the unfair head start they obtained by misappropriating it. This is a significant equitable principle: the court is not protecting the information itself, but the integrity of the competitive process.
Mareva Injunctions
A Mareva injunction is a freezing order that prevents the defendant from dissipating or removing assets from the jurisdiction pending trial. In the departing employee context, a Mareva injunction may be appropriate where there is evidence that the employee has earned profits from misuse of confidential information, that those profits are at risk of being dissipated, and that a damages award at the end of trial would be hollow without a freezing order to preserve the assets.
Mareva injunctions are extraordinary remedies and require a strong evidentiary foundation. The applicant must establish a strong prima facie case on the merits, must show a real risk of dissipation of assets, and must give the usual undertakings as to damages (committing to compensate the defendant if the injunction turns out to have been wrongly granted). They are most often sought in cases involving substantial financial misconduct rather than mere customer solicitation, but they remain a tool in the toolkit.
Anton Piller Orders
The most powerful and most extraordinary remedy is the Anton Piller order. An Anton Piller is, in effect, a civil search warrant: it permits the plaintiff and its representatives to enter the defendant’s premises (often residential premises, sometimes business premises) and to seize and preserve specified categories of evidence. It is granted ex parte (without notice to the defendant) on the basis of a strong prima facie case, evidence of serious damage, clear evidence that the defendant has incriminating documents or things in their possession, and a real possibility that the evidence will be destroyed if the defendant is given notice.
Anton Piller orders are not granted lightly. They have been described as bearing “an uncomfortable resemblance to a search warrant” and as among the most intrusive remedies available in civil litigation. The Supreme Court of Canada in Celanese Canada Inc. v. Murray Demolition Corp. set out detailed safeguards that must accompany an Anton Piller order, including the involvement of an independent supervising solicitor, careful protocols for the handling of seized material, and procedures for protecting privileged or irrelevant material.
In the departing employee context, Anton Piller orders are typically reserved for cases involving substantial misappropriation of confidential information where there is reason to believe the employee has retained electronic copies on personal devices or external storage and where there is a real risk of destruction or further dissemination. They are powerful but expensive and procedurally demanding, and they are usually a last resort rather than a first move.
Norwich Orders
A Norwich order, named after the English case Norwich Pharmacal Co. v. Customs and Excise Commissioners, is an order requiring a third party (typically an internet service provider, telecommunications company, or financial institution) to disclose information that will help the plaintiff identify a wrongdoer or trace assets. In the departing employee context, a Norwich order may be useful where the employer suspects that confidential information has been transmitted through email or cloud services and needs to obtain records from the service provider to establish what was sent and to whom.
Norwich orders are subject to a multi-factor test that balances the need for the disclosure against the privacy interests of the third party and the affected individual. They are most often used in fraud and intellectual property cases, but they have been applied to confidential information cases where the email or cloud service records are essential to establishing the scope of the misappropriation.
Damages and Other Final Remedies
While interlocutory remedies dominate the early stages of these cases, the ultimate goal of litigation is final relief: damages, disgorgement, permanent injunctions, and (in appropriate cases) declarations.
Compensatory Damages
The employer can recover damages calculated to compensate it for the losses caused by the breaches. Common heads of damage include lost profits attributable to customer defections, the cost of replacement employees and the cost of mitigation, the cost of the investigation, and (in cases involving misappropriation of trade secrets or technical information) the value of the misappropriated information itself.
Damages calculations in these cases are often complex. The employer must prove the loss with reasonable certainty, must account for normal customer attrition that would have occurred regardless of the breaches, and must give credit for customers who returned or for replacement business that was successfully obtained. Expert evidence is often required.
Disgorgement of Profits
In appropriate cases, the employer can also seek disgorgement of the profits earned by the departing employee or the new employer through the breaches. Disgorgement is an equitable remedy that focuses on the wrongdoer’s gains rather than the plaintiff’s losses. It is particularly important where the wrongful conduct was a breach of fiduciary duty, because the law of fiduciary obligation has long recognized disgorgement as a primary remedy.
Permanent Injunctions
After trial, the court can grant a permanent injunction prohibiting the continued use or disclosure of confidential information, the continued solicitation of customers (within the scope of any enforceable restrictive covenants), and other ongoing breaches. Permanent injunctions are typically narrower than interlocutory injunctions because the court has had the benefit of a full trial and can tailor the relief precisely to the proven misconduct.
Practical Tips for Reducing Risk Before a Departure Occurs
The best time to think about a departing executive problem is before it happens. Several measures can substantially reduce the risk and improve the employer’s position if a departure does occur.
First, employment agreements for senior employees should include clear, narrowly-tailored confidentiality, non-solicitation, and (where permitted) non-competition provisions. The covenants should be drafted with the expectation that they will be enforced, which means avoiding overbreadth and ensuring that restrictions match the legitimate proprietary interest being protected. Generic boilerplate provisions are often unenforceable when they matter most.
Second, IT systems should be configured to monitor and log unusual activity, including bulk downloads, transfers to personal email addresses, USB drive usage, and access from unusual locations or at unusual times. These logs are invaluable evidence in subsequent litigation and may also deter misconduct in the first place.
Third, off-boarding procedures should include clear protocols for collecting devices, suspending access, conducting exit interviews, and reminding departing employees of their continuing obligations. A signed exit acknowledgement that confirms the employee’s understanding of their continuing obligations and their certification that no confidential information has been retained is a powerful piece of evidence in any subsequent dispute.
Fourth, the employer should maintain reasonable security measures over its confidential information. Information that is freely available throughout the organization, that is not labelled or protected, and that is not subject to access controls, may not qualify as confidential at all. Courts look at how the employer treated the information in determining whether it had the necessary quality of confidence.
Fifth, when an executive departure begins to seem likely, the employer should not wait for the resignation to begin preparing. Counsel should be consulted early. Investigation protocols should be in place. The communication plan should be ready. The decisions made in the first 72 hours after a departure are far better made when the foundation has been laid in advance.
The departing executive scenario combines some of the most demanding areas of commercial litigation: fiduciary duty analysis, the law of confidential information, restrictive covenant enforcement, and the strategic use of equitable remedies including injunctions, springboard relief, and Anton Piller orders. The first 72 hours are often decisive. Whether you are an employer who has just learned of a senior departure and needs to act quickly, an executive considering a move and wanting to understand your obligations, or a new employer who has hired someone whose former employer has alleged misappropriation, careful and prompt legal advice is essential. Our breach of confidence practice regularly handles these matters in Ontario. Contact Grigoras Law to discuss your situation.
Conclusion
When a senior employee leaves and the employer suspects misappropriation of confidential information or breach of fiduciary duty, the first 72 hours are decisive. The employer that acts quickly to lock down access, preserve evidence, investigate the conduct, communicate appropriately with customers and employees, and (where warranted) commence injunctive proceedings is in a fundamentally stronger position than the employer that delays. The Canadian common law provides a powerful set of remedies, including the duty of fidelity, the fiduciary duties owed by senior employees, the obligation to protect confidential information, and the equitable remedies of interlocutory and springboard injunctions, Mareva orders, Anton Piller orders, and Norwich orders. But these remedies are most effective when invoked promptly, with a strong evidentiary foundation, and as part of a coherent strategy.
For executives and in-house counsel, the lesson is clear. The departing executive scenario is not a problem to be managed reactively. It is a problem to be planned for in advance, through careful drafting of employment agreements, robust IT monitoring, thoughtful off-boarding procedures, and a relationship with external counsel that allows for rapid mobilization when the moment arrives. With those foundations in place, the employer can respond decisively when a departure occurs, protect what is most valuable about its business, and emerge from the transition with its competitive position intact.

