Intellectual property policy clauses, a clause-by-clause guide

You are probably reading this because a template is open on your screen, a draft policy has landed from your lawyer, or a new employee handbook needs an IP section before onboarding starts. Whatever the trigger, the way you draft this document will shape who owns your brand, your content and your code when things go wrong, which is usually years after it is signed.

An intellectual property (IP) policy is an internal rulebook. It tells your employees and contractors what counts as your IP, who owns new IP created during their engagement, how it may be used, and what happens if it is misused. It binds the people inside your business as a workplace rule, but it does not create IP rights on its own and it does not replace your contracts. Registration creates the rights, your employment and contractor agreements allocate them, and the policy is the operating manual that makes both work day to day.

Who owns new IP

The ownership clause is the most commercially important part of the policy, because it decides who can enforce rights when a dispute arrives. The default positions under Australian law are not what most founders assume, so draft this clause deliberately rather than copying boilerplate.

For employees, s 35 of the Copyright Act 1968 (Cth) gives the employer ownership of copyright in works an employee makes in the course of employment under a contract of service, unless the parties agree otherwise. That default covers software, documents, designs, photographs and marketing material created as part of the job.

For independent contractors, the default flips. The same section makes the author the owner of copyright, so a contractor who builds your website or designs your logo owns the copyright in it unless there is a written assignment. This is the single most common gap in SME IP protection.

For inventions, there is no equivalent automatic rule. In University of Western Australia v Grey [2009] FCAFC 116, the Full Federal Court confirmed that an employer does not automatically own patents arising from an employee's work unless the contract imposes a duty to invent or otherwise deals with ownership. Your policy cannot fix that on its own, but it should say who owns inventions and point to the contract that does the work.

Bulleted drafting points to check:

• Course of employment: Decide how the policy treats IP created outside working hours or on personal devices, and whether side projects are carved out.
• Pre-existing IP: State that IP the contractor or employee owned before the engagement stays with them, and record any licence back to you.
• Co-created work: Appoint one owner where multiple people contribute, or set out how joint ownership is to be handled.

What counts as IP in your business

A scope clause defines the assets the policy covers. Most Australian SMEs will list trade marks (brand names, logos and slogans), copyright (content, images, software, designs), confidential information and trade secrets, and, where relevant, patents and registered designs.

Two accuracy points matter here. First, copyright is automatic. There is no registration system in Australia, so protection exists from the moment an original work is created. Second, business names and domain names are identifiers, not IP rights. Registering a business name with ASIC does not give you trade mark rights in that name, and a policy that treats them as the same thing will give your team false confidence.

How your IP can be used

The permitted use clause sets the boundaries for day to day work. It should say that personnel may use business IP only for authorised purposes, must follow brand and security guidelines, and must not copy, share or publicly disclose business IP without approval.

This clause is where culture is set. It should name who approves public use, where files may be stored, and what happens to access when someone moves roles internally. Keep it practical; a policy nobody can follow in practice will simply be ignored.

Third-party content and software

Every business uses someone else's IP, usually without thinking about it. The third-party clause requires personnel to have a valid licence or written permission before using images, fonts, music, templates, code or software that the business does not own, and to keep records of the licences obtained.

Traps to watch for:

• Licence scope: A licence for internal use often does not cover marketing, sub-licensing or use by a client, so the policy should require a check of what each licence actually permits.
• Attribution conditions: Creative Commons and free stock licences frequently carry attribution or no-commercial-use conditions that are easy to breach accidentally.
• Open-source code: Software businesses should flag that copying code snippets can pull licence obligations into the product, which a later investor will ask about.

Confidential information and trade secrets

Confidential information is protected by contract and by equitable obligations, not by registration, so the policy is the primary control. The clause should restate that trade secrets, client lists, pricing and unpublished strategy are confidential, that external sharing happens only under a signed non-disclosure agreement with approval, and that personnel keep information secure in line with your security practices.

Registration and protection

A policy should explain when registrable rights are worth pursuing, because registration deadlines are unforgiving. Trade marks are registered under the Trade Marks Act 1995 (Cth) through IP Australia, and a registration gives the exclusive right to use the mark for the goods and services covered, which makes enforcement far more straightforward than relying on passing off.

For patents, novelty is the gate. Public disclosure of an invention before filing can destroy the ability to get a patent. A 12-month grace period exists under s 24 of the Patents Act 1990 (Cth) for disclosures made by or with the consent of the applicant, but relying on it is riskier than filing first, and some overseas rights are lost immediately on public disclosure. The policy should require internal sign-off before anything potentially patentable is shown publicly.

Registered designs are similar. Under ss 15 and 16 of the Designs Act 2003 (Cth), a design must be new and distinctive when compared with the prior art base, which includes designs publicly used in Australia and published anywhere. Selling a product or posting a prototype before filing can be enough to defeat registration.

The practical drafting points:

• Escalation path: Name the person who decides whether to register a trade mark or file a patent.
• Confidentiality before filing: Require approval before public launches, investor pitches or trade show displays of new products.
• Copyright records: Ask personnel to record creation dates and authorship, since copyright disputes turn on who created what and when.

Reporting and enforcement

The enforcement clause gives your team a path when they spot misuse, whether that is a competitor copying your marketing material, an ex-employee using your client list, or a contractor reusing your designs. It should name a single person or inbox for reports, say that reports will be investigated, and identify who decides on next steps.

Enforcement options will vary by the right involved. A registered trade mark supports an infringement claim under the Trade Marks Act 1995 (Cth). Copyright infringement can be pursued under the Copyright Act 1968 (Cth). Unregistered brand rights rely on passing off and on misleading or deceptive conduct claims. The policy does not need to explain all of this; it needs to make sure the business hears about the problem while it is still small enough to fix cheaply.

Exits

Departures are where protection is won or lost. The exit clause should require departing staff and contractors to return or delete business IP and confidential material, revoke their access to systems, and confirm compliance in writing. A checklist attached to the clause makes the handover routine rather than awkward.

Reviews and updates

A policy that is never updated drifts out of sync with the business. A review clause should commit to revisiting the policy at least annually and whenever the business changes materially, such as new product lines, new software, or entry into new markets.

Optional clauses worth considering

Not every business needs every clause, but these are the situational additions that come up most often:

• Inventions and patent disclosure procedure: Worth including if any staff do research and development, so potentially patentable work is flagged before it is published.
• Moral rights and attribution: For creative businesses, a clause noting that creators retain moral rights, which cannot be assigned under s 195AN of the Copyright Act 1968 (Cth), and recording any written consents, prevents disputes over attribution and integrity of works.
• Social media and brand use: Useful where staff post about the business or use brand assets in their personal channels.
• Open-source and AI tools: Increasingly relevant as teams adopt AI assistants and code libraries, because both raise ownership and confidentiality questions the policy should address.
• Personal devices: A bring-your-own-device rule matters if staff access business IP from their own phones and laptops.

When to have a lawyer review your IP policy

A policy is only as good as the contracts it sits beside. An Artificer Legal practitioner would review your policy against your employment contracts, contractor agreements and non-disclosure agreements to make sure the ownership position is consistent across all three, since a policy cannot override what a signed contract says.

We would also check the details that cause disputes later: whether contractors have proper written assignments, whether the policy distinguishes employees from contractors correctly, whether moral rights consents are captured, and whether the registration strategy for trade marks, patents and designs matches what the policy promises. Where the business holds genuinely valuable technology or brand assets, we would look at whether the ownership clause needs to be mirrored in a standalone IP assignment deed rather than left to the policy alone.

The ownership clause

If you remember one thing, make it the ownership clause. Every other clause is about managing assets the business already owns; the ownership clause decides whether the business owns them at all. In disputes over a logo, a website or a client list, the question a court or a lawyer asks first is who the rights belong to, and the answer is usually determined by the employment and contractor agreements plus the policy that sits alongside them.

The rest of the policy supports that foundation. Scope definitions tell people what is protected, permitted use and third-party clauses stop problems before they start, confidentiality and exit clauses contain the damage when people leave, and registration and review clauses keep protection current. None of it is complicated, but all of it needs to be written down, agreed and updated, because the business that can prove it owns its IP is the business that can enforce it.