Can Administrative Staff Face Prosecution for Leaking Boardroom Secrets?
Introduction
Administrative staff, executive assistants, corporate secretaries, and other employees may gain access to confidential information because of their work. The disclosure of board resolutions, business plans, financial data, client information, negotiations, or other company secrets may expose the employee to disciplinary action and, in appropriate cases, criminal prosecution.
Article 291 of the Revised Penal Code specifically addresses the revelation of secrets with abuse of office. It applies when a manager, employee, or servant learns the secrets of a principal or employer in the course of employment and reveals those secrets. The offense is distinct from other forms of unlawful disclosure, including the revelation of industrial secrets under Article 292.
What Does Article 291 Penalize?
Article 291 of the Revised Penal Code provides that a manager, employee, or servant who, in that capacity, learns the secrets of a principal or master and reveals them may be punished by arresto mayor and a fine not exceeding P100,000.
The fine was increased by Section 76 of Republic Act No. 10951, which amended Article 291. The current statutory penalty is therefore not the earlier fine of P500 stated in older versions of the Revised Penal Code.
The provision is intended to protect the confidentiality arising from an employment or agency relationship. It does not punish every disclosure of information. The prosecution must establish that the information was a secret, that the accused obtained it because of the employment or position, and that the accused revealed it.
What Are the Elements of the Offense?
For criminal liability under Article 291, the following matters must generally be shown:
- The accused is a manager, employee, or servant. The provision covers more than senior officers. A staff member may fall within its terms if the person occupies an employment position through which the information was obtained.
- The accused learned the information in that capacity. The secret must have become known because of the person’s employment, assignment, access rights, or official duties.
- The information is a secret of the principal or employer. The information must possess a confidential character. Information already publicly available ordinarily cannot be treated as a secret merely because the employer labels it confidential.
- The accused revealed the secret. Disclosure may occur through a conversation, email, message, document, file transfer, photograph, presentation, or other communication to an unauthorized person.
- The disclosure was made with the legally required wrongful character. The circumstances must show an unlawful revelation, rather than an authorized disclosure or a communication made for a legitimate purpose.
The prosecution must prove these elements beyond reasonable doubt. A company’s internal finding that an employee breached confidentiality does not, by itself, establish criminal liability.
Who May Be Covered?
Article 291 uses broad employment terms. Potentially covered persons include executive assistants, administrative aides, office managers, corporate secretarial staff, accounting employees, human-resources personnel, information-technology staff, and other employees who obtain confidential information through their duties.
The employee’s title is not decisive. The relevant inquiry is whether the person was employed or engaged by the principal and whether the person obtained the information through that relationship.
For example, an assistant who receives confidential board materials for scheduling and filing purposes may be covered if the assistant intentionally forwards those materials to a competitor. The same may apply to an employee who discloses confidential salary data, acquisition plans, or internal negotiations after obtaining access in the ordinary course of work.
What Counts as a Corporate Secret?
Article 291 does not provide an exhaustive list of protected information. The character of the information must be assessed from the circumstances, including the employer’s efforts to restrict access, the commercial or organizational value of the information, and whether unauthorized disclosure could prejudice the principal.
Possible examples include:
- undisclosed board decisions and corporate expansion plans;
- confidential financial statements and budgets;
- customer, supplier, or investor information;
- unannounced transactions, bids, and negotiations;
- internal compensation data and personnel investigations; and
- business formulas, processes, strategies, and other proprietary information.
Not every office document is automatically a secret. A company should identify confidential information with reasonable precision and maintain procedures showing how that information is protected.
How Is Article 291 Different from Article 292?
Article 292 of the Revised Penal Code concerns the revelation of industrial secrets by a person in charge, employee, or workman of a manufacturing or industrial establishment, when the disclosure is made to the prejudice of the owner.
| Provision | Principal subject | Typical setting |
|---|---|---|
| Article 291 | Secrets of a principal or employer learned through employment | Corporate, office, administrative, or employment relationship |
| Article 292 | Industrial secrets revealed to the prejudice of the owner | Manufacturing or industrial establishment |
The Supreme Court has recognized that trade secrets receive legal protection. In Air Philippines Corporation v. Pennswell, Inc., G.R. No. 172835, 13 December 2007, the Court described trade secrets as privileged information and discussed the protection provided by Articles 291 and 292 of the Revised Penal Code.
The classification of information remains important. A general office instruction or ordinary business communication should not automatically be treated as a trade secret or criminally protected secret.
When Does Disclosure Become Criminal?
Criminal exposure generally depends on the nature of the information, the employee’s access, the recipient, and the employee’s purpose. Disclosure to a competitor or unauthorized third party is more likely to support a criminal complaint than disclosure to an authorized company officer for a legitimate corporate purpose.
The following situations may require different treatment:
- Authorized disclosure: A staff member who sends confidential documents to a director, auditor, regulator, or lawyer authorized to receive them ordinarily has not unlawfully revealed a secret.
- Work-related disclosure: Sharing information internally with personnel who need it to perform their functions may be permissible.
- Good-faith legal consultation: An employee who provides documents to counsel to assert or defend a legal right may have a legitimate explanation, subject to applicable procedural and confidentiality rules.
- Public disclosure: Posting confidential documents online or sending them to media organizations may support a complaint when the information was obtained through employment and was not lawfully released.
- Accidental transmission: An inadvertent email or mistaken attachment does not automatically establish criminal intent or an unlawful revelation. The surrounding facts must be examined.
Board Materials and Administrative Assistants
Boardroom information is often confidential because it concerns pending corporate actions, litigation, financing, mergers, acquisitions, personnel matters, and commercial negotiations. An administrative assistant may therefore have significant confidentiality obligations even without participating in the board’s deliberations.
Access alone, however, is not enough. The prosecution must still show that the employee learned the information through employment and later revealed it. The evidence may include access logs, email records, messaging applications, device data, witness testimony, document metadata, and admissions.
A company should also establish that the information was treated as confidential. Relevant evidence may include confidentiality policies, restricted folders, nondisclosure agreements, document markings, password controls, board protocols, and instructions given to the employee.
Possible Civil and Employment Consequences
A disclosure may produce consequences separate from criminal prosecution. Depending on the facts, the employer may consider dismissal, suspension, recovery of damages, injunctive relief, or enforcement of a confidentiality agreement.
Employment discipline must still comply with the Labor Code and due process requirements. Loss of trust and confidence is not established merely by making a general accusation of disclosure. In Yonzon v. Coca-Cola Bottlers Philippines, Inc., G.R. No. 226244, 14 June 2021, the Supreme Court emphasized that dismissal on this ground requires a position of trust and confidence and a clearly established act justifying the loss of trust.
The employer should also ensure that its rules define confidential information with sufficient clarity. An excessively broad or vague policy may weaken the basis for discipline, particularly where the employee acted in good faith or for a legitimate purpose.
How Should a Company Investigate a Suspected Leak?
A company investigating a suspected disclosure should preserve evidence before confronting the employee or disabling accounts. The investigation should be limited to a legitimate purpose and should respect privacy, labor, data-protection, and procedural requirements.
- Identify the allegedly confidential information and explain why it was secret.
- Determine how the employee obtained access and whether access was authorized.
- Preserve relevant emails, messages, logs, documents, recordings, and device data.
- Identify the recipient, date, method, and scope of the alleged disclosure.
- Give the employee a meaningful opportunity to respond.
- Assess whether the disclosure was authorized, accidental, legally justified, or made in bad faith.
- Refer the matter for legal assessment before filing a criminal complaint.
Evidence should be collected and preserved in a manner that supports authenticity and admissibility. A company should avoid altering files, accessing personal accounts without legal authority, or publicly accusing the employee before the facts are established.
How Should an Employee Respond?
An employee who receives a demand, notice to explain, or criminal complaint should preserve all relevant communications and avoid deleting or modifying files. The employee should identify the source of the information, the intended recipient, the reason for the disclosure, and any authority or instruction supporting the communication.
The employee should not forward additional confidential material merely to prepare a response. Legal advice should be obtained before submitting documents to the employer, law-enforcement authorities, or third parties.
Important Limits on Confidentiality Claims
A confidentiality label does not automatically convert ordinary information into a criminally protected secret. The employer must be able to show a genuine confidential interest and a connection between the information and the employee’s position.
Likewise, Article 291 should not be used to suppress lawful reporting of wrongdoing, participation in judicial proceedings, or communications made to obtain legal assistance. Whether a particular disclosure is protected depends on the facts, the recipient, the purpose, and the applicable law.
The Supreme Court’s treatment of trade secrets in Air Philippines Corporation v. Pennswell, Inc., G.R. No. 172835, 13 December 2007, supports protection against compelled disclosure in proper circumstances, but it does not mean that every company document is immune from disclosure or automatically gives rise to criminal liability.
Final Observations
Administrative staff may face prosecution under Article 291 when they use their employment-based access to reveal a genuine secret of the employer or principal without authority. The offense is fact-specific and requires proof of the employee relationship, the confidential nature of the information, employment-based knowledge, and an unlawful revelation.
Employers should use precise confidentiality classifications, access controls, employee training, documented investigation procedures, and evidence-preservation measures. Employees should follow authorization protocols, disclose information only for legitimate purposes, and seek legal advice before releasing documents that may contain corporate secrets.
About Nicolas and De Vega Law Offices
Nicolas and de Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.
