Competitor Obtains a Foreign Company’s Confidential Documents in Turkey: Criminal Complaint Options (2026 Updated Guide)

A competitor obtains a foreign company’s confidential documents in Turkey. Learn about criminal complaints, trade secrets, employee leaks, unauthorized system access, digital evidence, urgent protective measures and recovery options.

A foreign company operating or doing business in Turkey may discover that a competitor has obtained confidential documents such as customer lists, pricing tables, supplier agreements, tender files, internal correspondence, technical specifications, financial information or commercial strategy documents. The legal consequences depend heavily on what information was obtained, how it was acquired, who disclosed it and what the competitor subsequently did with it. The incident may involve more than an ordinary commercial dispute. Depending on the facts, unauthorized access to computer systems, unlawful acquisition or disclosure of data, misuse of commercial secrets, employee conduct and other offenses may need to be examined. A foreign company considering a criminal complaint should move quickly to preserve evidence before emails, access logs, messaging records or other digital traces disappear.

What Types of Confidential Documents May Be Involved?

Commercially sensitive information can take many forms. Common examples include customer databases, supplier prices, purchase conditions, bids, tender strategies, manufacturing methods, technical drawings, product-development information, source files, internal financial reports, business plans, distributor agreements, employee records and confidential correspondence.

The legal analysis should focus on the particular information rather than simply describing every internal document as a “trade secret.”

How Did the Competitor Obtain the Documents?

This is often the most important factual question. A competitor may have received documents from a former employee, current employee, consultant, distributor, supplier or business partner. Alternatively, the documents may have been obtained through unauthorized access to an email account, computer, server, cloud account or other information system.

Different acquisition methods can create very different criminal-law issues.

Preserve Evidence Before Contacting the Competitor

A company should generally secure the evidence before sending accusations that could cause relevant information to be deleted.

Preserve original emails, attachments, file metadata, access records, server logs, messages, download histories, security alerts and other available digital evidence.

Do Not Rely Only on Screenshots

Screenshots can be useful, but they may not preserve all relevant technical information. Where possible, original electronic files and metadata should also be retained.

The company should maintain a clear record of how the evidence was collected.

Unauthorized Computer Access May Create Criminal Exposure

If confidential documents were obtained by entering the company’s information system without authorization, offenses concerning information systems under Turkish criminal law may become relevant.

The exact offense depends on what occurred after access was obtained, including whether data were copied, altered, deleted or transferred.

Stolen Passwords Should Be Investigated

If an employee account was used, determine whether the employee actually participated or whether credentials were compromised.

Review login locations, devices, timestamps, authentication records and password-reset history where available.

Email Account Access Can Be Important Evidence

A competitor may obtain sensitive documents through unauthorized access to a corporate email account. Preserve login history and security notifications promptly.

Changing passwords is important for security, but evidence should be preserved before logs are overwritten where technically possible.

Employee Leaks Require Separate Analysis

A current or former employee may have deliberately transferred confidential information to a competitor.

Determine what documents the employee could access, when they accessed them, whether files were downloaded or forwarded and whether there was communication with the competitor.

Employment Duties May Strengthen the Case

Employment agreements, confidentiality clauses, internal policies and access restrictions can help demonstrate that the employee knew the information was confidential.

However, criminal liability should still be assessed independently from contractual liability.

Former Employees May Still Face Consequences

Leaving the company does not automatically authorize a former employee to take confidential databases, internal pricing or technical documents.

The company should investigate whether information was copied shortly before resignation or termination.

Customer Lists Require Context

Not every list of customer names automatically receives identical legal protection. The company should demonstrate what makes the database commercially valuable and confidential.

For example, purchasing history, negotiated prices, contact persons, payment behavior and commercial preferences may make a customer database substantially more sensitive than publicly available customer names.

Pricing Information Can Be Highly Sensitive

Internal price structures, discounts, margins and future tender prices can provide a competitor with a substantial commercial advantage.

Preserve evidence demonstrating that the information was not publicly available and was subject to internal access restrictions.

Tender Documents Require Immediate Action

If a competitor obtains confidential tender information before bids are submitted, the commercial damage can occur extremely quickly.

Preserve the leaked version, determine who had access and document any suspicious similarities between competing bids.

Technical Documents May Contain Trade Secrets

Drawings, formulas, manufacturing methods, software-related materials, specifications and research information may require both criminal and intellectual-property analysis.

The company should identify precisely which technical elements are confidential.

Commercial Secrets May Receive Criminal-Law Protection

Depending on the circumstances, Turkish law contains criminal provisions relevant to unlawfully disclosing information or documents qualifying as commercial, banking or customer secrets.

Whether a particular document qualifies requires a fact-specific analysis.

Personal Data May Also Be Involved

Company files can contain names, telephone numbers, identification details, employee information or customer data.

If personal data were unlawfully obtained, transferred or disclosed, additional criminal and data-protection issues may arise.

One Incident Can Involve Several Offenses

A competitor’s conduct should not automatically be forced into a single criminal classification.

For example, unauthorized system access, acquisition of data and subsequent disclosure or use of confidential information may require separate analysis.

Identify Everyone Involved

The investigation should consider the person who originally obtained the documents, any employee who supplied them, intermediaries who transferred them and individuals at the competitor who knowingly received or used them.

Corporate affiliation alone does not automatically establish personal criminal liability.

Companies and Individuals Must Be Distinguished

Turkish criminal liability generally focuses on natural persons responsible for criminal conduct. The conduct of directors, managers, employees and other individuals should therefore be examined separately.

The competitor company’s commercial liability may simultaneously arise under other legal rules.

Can the Foreign Company File a Criminal Complaint in Turkey?

Potentially, yes, where the alleged conduct falls within Turkish criminal jurisdiction and the company has the necessary procedural standing.

The complaint should clearly describe the facts, persons known or suspected, relevant documents and available digital evidence.

Where Is the Criminal Complaint Filed?

Depending on the circumstances, a criminal complaint may be submitted to the competent public prosecutor’s office or through other legally recognized channels.

Determining territorial jurisdiction can require analysis where servers, employees, competitors and foreign companies are located in different places.

Do Not Delay the Complaint

Certain offenses may be subject to complaint requirements and specific time limits, while others may be investigated differently.

The company should identify the potential offenses and procedural deadlines promptly rather than assuming that every criminal allegation can be filed indefinitely.

What Should Be Included in the Complaint?

A strong complaint should explain what confidential information existed, why it was confidential, who had legitimate access, how unauthorized acquisition was discovered, what evidence connects the suspect to the information and how the competitor used or attempted to use it.

Avoid unsupported accusations against large numbers of employees.

Explain the Confidentiality Measures

Evidence that the company actively protected information can be important.

Relevant measures may include password protection, restricted folders, role-based access, confidentiality agreements, document classifications and internal security policies.

Preserve Access Logs

Server and application logs can establish when a file was opened, copied or downloaded.

Because retention periods may be limited, the IT department should preserve relevant records immediately.

Preserve Company Devices

If an employee is suspected of leaking information, company-owned computers or phones may contain relevant evidence.

Any internal investigation should respect applicable privacy, employment and evidence rules.

Do Not Conduct Unlawful Surveillance

A company investigating a leak should not respond by unlawfully accessing an employee’s private accounts, secretly obtaining unrelated personal communications or using other illegal methods.

Evidence obtained through questionable methods can create separate legal problems.

Forensic Examination Can Be Valuable

For serious cases, digital forensic specialists may help identify USB transfers, cloud uploads, deleted files, email forwarding and unusual access patterns.

The methodology should preserve evidentiary integrity.

Can Deleted Files Be Recovered?

Potentially. Depending on the device, system and subsequent use, forensic analysis may identify deleted material or traces of prior activity.

Devices should therefore not be unnecessarily reformatted or reused before examination.

Messaging Applications May Contain Evidence

Messages between an employee and competitor can be highly relevant if lawfully obtained.

The authenticity, completeness and acquisition method of such evidence should be considered carefully.

Witness Evidence Can Support the Complaint

Employees may have observed suspicious downloads, document copying or meetings with competitors.

Witness statements can support digital evidence but should be recorded accurately without coaching witnesses to adopt a predetermined narrative.

Can Prosecutors Search the Competitor’s Premises?

Search and seizure are criminal-procedure measures subject to statutory requirements and competent-authority decisions. A complainant can present evidence demonstrating why particular digital or physical evidence may exist, but cannot itself order a search.

Can Computers and Phones Be Examined?

Where statutory requirements are met, digital devices and data may become subject to criminal-procedure measures.

A detailed complaint can help investigators understand what evidence may be relevant.

Urgent Evidence Preservation May Be Critical

Digital evidence can disappear quickly. The company should identify servers, devices, email systems, cloud accounts and communication channels likely to contain relevant evidence.

This preservation exercise should occur immediately after discovery.

Criminal Complaint and Civil Action Can Proceed Separately

A criminal complaint is not necessarily the company’s only remedy.

Depending on the facts, civil or commercial proceedings may be considered to stop use of confidential information, recover losses or enforce contractual obligations.

Unfair Competition Rules May Also Apply

Misappropriation or exploitation of confidential commercial information may raise issues under Turkish unfair-competition law.

The company should therefore evaluate criminal, commercial and intellectual-property remedies together rather than treating the incident solely as a police matter.

Interim Measures May Be Necessary

If confidential information is still being used, disclosed or incorporated into competing products, waiting for the criminal investigation alone may not sufficiently protect the company.

Available urgent civil or commercial measures should be evaluated separately.

Calculate the Commercial Damage

Document lost customers, lost tenders, price undercutting, cancelled contracts and other measurable effects.

Financial evidence can become important in subsequent compensation proceedings.

Proving Lost Profits Can Be Difficult

The company should distinguish direct losses from hypothetical commercial expectations.

Customer correspondence, tender results, historical margins and contracts can strengthen the causal link between the leak and claimed loss.

Notify Relevant Business Partners Carefully

If customer or partner information has been compromised, notification obligations and commercial consequences should be assessed.

Communications should be accurate and should not make unproven criminal accusations.

Foreign Parent Companies Should Coordinate Evidence

If documents originated from an international corporate group, determine which entity owns or controls the information and which Turkish entity suffered the direct effects.

This can affect standing, damages and evidence presentation.

Translation of Foreign Documents Must Be Accurate

Contracts, corporate policies, technical documents and foreign forensic reports may need to be used in Turkish proceedings.

Technical terminology and confidentiality classifications should be translated carefully.

Do Not Destroy Embarrassing Internal Evidence

A company should preserve relevant evidence even where some documents reveal internal compliance weaknesses.

Selective destruction after learning of a criminal dispute can seriously damage credibility.

Review Whether the Leak Is Continuing

The company should determine whether unauthorized access has ended.

Disable compromised accounts, rotate credentials, review administrator permissions and preserve the security records connected with those actions.

Separate Cybersecurity Response From Legal Evidence Preservation

Stopping an ongoing breach is urgent, but indiscriminately wiping devices or deleting accounts may destroy valuable evidence.

IT and legal teams should coordinate their actions.

Review Contracts With Consultants and Suppliers

The leak may originate outside the workforce.

Consultants, distributors, subcontractors, technology providers and suppliers may possess confidential company information under contractual obligations.

Contractual Claims Can Be Significant

Confidentiality agreements may permit claims for damages, injunctive relief or other contractual remedies.

The responsible party’s contract should therefore be reviewed alongside the criminal investigation.

What If the Competitor Claims the Documents Were Received Innocently?

The circumstances of receipt and subsequent conduct become important.

Evidence that the competitor knew the material was confidential, requested it, paid for it or used it strategically may be relevant to determining individual responsibility.

What If the Information Was Publicly Available?

The company should distinguish genuine confidential information from information already available through websites, public registries, published catalogues or other legitimate sources.

Overstating confidentiality can weaken the overall case.

Can the Company Recover the Documents?

The legal strategy may include measures aimed at preventing further possession, use or dissemination, depending on the nature of the information and applicable proceedings.

Digital information presents particular difficulties because returning one copy does not establish that all copies have been deleted.

Evidence of Further Copies Should Be Investigated

Cloud synchronization, email forwarding, USB transfers and shared folders can create numerous copies.

The investigation should map the likely distribution of the information.

Management Should Create an Incident Timeline

Record when the information was created, who could access it, when suspicious activity occurred, when the leak was discovered and what happened afterward.

A clear chronology can significantly improve both criminal and commercial litigation strategy.

Immediate Legal Strategy

When a competitor obtains a foreign company’s confidential documents in Turkey, the company should immediately preserve digital evidence, identify the leaked documents, establish why they were confidential, investigate authorized access, preserve server and email logs, determine whether an employee or third party was involved, secure compromised systems without destroying evidence, assess criminal offenses, prepare the criminal complaint, evaluate urgent commercial measures and document financial losses.

Frequently Asked Questions

Can stealing a company’s confidential documents constitute a crime in Turkey?

Potentially. Criminal liability depends on the type of information, method of acquisition, persons involved and subsequent use or disclosure.

Can a former employee be reported to prosecutors?

Potentially, where the evidence indicates conduct that constitutes a criminal offense. Employment termination does not automatically authorize removal or disclosure of confidential company information.

Is a confidentiality agreement necessary for criminal liability?

Not necessarily in every case, but confidentiality clauses can provide valuable evidence that the individual knew the information was protected.

Can unauthorized access to company email create separate criminal liability?

Potentially. Unauthorized access to information systems and subsequent conduct involving data can raise separate criminal-law issues.

Are screenshots sufficient evidence?

They may be useful, but original files, metadata, access logs and forensic evidence can provide substantially stronger proof.

Can the company ask prosecutors to seize the competitor’s computers?

The company can present evidence explaining why digital material may be relevant. Search and seizure decisions are governed by criminal-procedure requirements and competent authorities.

Can the company file both criminal and civil proceedings?

Potentially. Criminal, commercial, unfair-competition, contractual and compensation remedies may coexist depending on the facts.

What if personal data were included in the leaked files?

Additional criminal and data-protection consequences may need to be assessed.

Can the foreign parent company make the complaint?

Standing depends on ownership of the information, the affected legal entity, the alleged offense and the circumstances. The corporate structure should be reviewed before filing.

What is the most important first step?

Preserve the evidence before confronting the suspected employee or competitor. Original files, access logs, email records, metadata and forensic traces can disappear quickly and may determine whether the company can prove how its confidential information was obtained and used.

Client-Focused Legal Support for Confidential Information and Trade Secret Disputes in Turkey

A confidential-document leak can involve criminal complaints, unauthorized system access, employee misconduct, trade secrets, unfair competition, personal data, digital forensics, interim measures and substantial commercial damages. Fırat Fesih Kaya Law Office assists foreign companies, international investors and corporate executives facing confidential-information theft and competitor misconduct in Turkey. Lawyer Fırat Fesih Kaya provides legal assistance in preserving evidence, preparing criminal complaints, coordinating digital forensic evidence, evaluating urgent protective measures and pursuing related commercial and compensation claims.

Phone:
+90 312 434 22 22

Mobile:
+90 532 769 22 22

Email:
info@firatfesihkaya.av.tr

Address:
Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey