OpenAI says Apple’s own security practices undermine its trade secrets case

OpenAI is flipping the script on Apple's trade secrets lawsuit, and the argument is sharper than you might expect. According to newly filed court exhibits, OpenAI's defense hinges on a simple but devastating claim: Apple's own lax security practices prove the information in question was never properly protected as trade secrets in the first place.

The most damaging detail? Apple allegedly allowed a manager to access a former engineer's personal iCloud account after the employee had already left the company. That's not just sloppy, it's the kind of security failure that undercuts the entire foundation of a trade secrets case. Under U.S. law, companies claiming trade secret theft must show they took reasonable steps to keep the information confidential. If Apple's offboarding process included poking around in ex-employees' personal cloud storage, OpenAI's lawyers have a strong angle to argue Apple failed that basic test.

This matters because trade secrets litigation has become a favorite weapon in competitive AI talent battles. Companies are racing to hire the best engineers, and when someone jumps ship to a competitor, lawsuits often follow. But this case shows the double edge of that sword. If your own internal practices are messy, aggressive legal tactics can backfire in court and in public perception.

The iCloud access issue also raises broader questions about where employer oversight ends and privacy invasion begins. Accessing a personal account after termination isn't standard offboarding, it's potential evidence that Apple itself didn't respect boundaries around confidential information. That muddies the water considerably when you're trying to claim someone else violated those same boundaries.

For OpenAI, this is a calculated risk. By putting Apple's security practices on trial, they're shifting the conversation from what their hire may have done to what Apple failed to do. It's a classic courtroom pivot, but one grounded in real procedural requirements for trade secret protection.

What this means for you: if you're building or managing anything sensitive in your own work, document your security measures now, not after a dispute starts. Even basic steps like access logs, confidentiality agreements, and clean offboarding protocols matter. And if you're using AI tools to manage proprietary projects, try this prompt with your AI assistant: "Help me create a simple information security checklist for a small team working on a confidential project, including access controls and offboarding steps." It won't make you litigation-proof, but it shows you took reasonable care, which is exactly what trade secret law requires.