We have before us an appeal and a cross-appeal in a diversity suit that presents issues of contract law, trade secrets law, and conflict of laws. The underlying dispute between the parties, two software companies that we’ll call MDBS and Dharma, arises out of a four-way deal. The Internal Revenue Service requested bids for a contract to improve the Service’s computer capabilities. Unisys Government Systems, Inc. wanted to bid on this contract. It made a contract with MDBS for the provision of a workstation database management system designed to be used by the IRS. MDBS in turn made the contract with Dharma that is in issue in this suit. In the contract, Dharma agreed to adapt its proprietary software program known as SQL Access for use in the system that MDBS would be providing to Unisys for sale to the IRS. MDBS agreed to pay a license fee of $125,000 for use of the SQL Access program plus $125,000 for Dharma’s adapting the program to MDBS’s needs. The license fee was to be paid immediately. The second $125,000, which is denominated “for professional services,” was to be paid in three installments. The first installment, $50,000, was due upon “Project Start-up.” The second installment, also $50,000, was due upon “Beta Release,” that is, when the modified SQL Access program was sent to MDBS and Unisys for “beta testing.” This is a term of art in the computer industoy; but in the case of custom software (our case) as distinct from commercial software, the record is unclear whether it is the penultimate or ultimate performance test before the customer’s acceptance of delivery of the software. The last installment, $25,000, was due upon “Acceptance by Unisys.”
The contract terms that we have just summarized are the terms as stated in a letter that MDBS wrote Dharma on July 7, 1994. They are not completely congruent with the terms set forth in a lettér that Dharma had written MDBS the previous month. That letter had included a term calling for MDBS to pay Dharma a royalty on each sale of the MDBS program in which the SQL Access program (called “RDMS Emulation” in its adapted form — “RDMS” standing for “Relational Database Management System”) was incorporated. The royalty was to be equal to 25 percent of the price that MDBS charged Unisys for each RDMS Emulation. MDBS’s *652 letter of July 7 makes no reference to a royalty. In between the two letters, however, Dharma had sent MDBS a draft of a License Agreement designed to limit the distribution of the RDMS Emulation, and the draft contained the royalty provision mentioned in Dharma’s letter. MDBS never signed the agreement, but continually reassured an increasingly anxious Dharma (which made repeated requests) that it would do so.
MDBS paid Dharma the $125,000 license fee, and Dharma went to work. MDBS also paid both the first installment of the adaptation fee — $50,000 upon project start-up — and, on November 8, 1994, when Dharma shipped the beta version of the RDMS Emulation, the second $50,000 installment. MDBS turned the beta version over to Unisys for testing. Unisys did not report to either MDBS or Dharma any defects, though whether this is because Unisys tested the beta version and found no problems with it or didn’t test it at all is not disclosed by the record. The following May, Unisys landed the contract with the IRS, and it then asked MDBS to send it six copies of the RDMS Emulation — one for it to keep and the others to sell to the IRS. The beta version of the RDMS Emulation had been on tape, and the IRS wanted it on disks, but Dharma refused to provide disks until MDBS signed the License Agreement. MDBS still refused to sign the agreement, but upon its written representation to Dhar-ma that “it [MDBS] will not distribute this Component [that is, the RDMS Emulation] without [Dharma’s] prior written consent,” Dharma relented and shipped the disks to MDBS on September 20, 1995. Except for the change in the medium, the disks were identical to the tapes, that is, to the beta version which Unisys had received almost eleven months earlier.
A few weeks after this, MDBS, without seeking or obtaining Dharma’s consent, shipped the six copies of the RDMS Emulation to Unisys. MDBS’s cover letter stated that the shipment was for “acceptance testing,” was not “a distribution,” and was to be used for “quality assurance and further testing only,” and “any further duplication or distribution is strictly prohibited.” Two weeks later Unisys notified MDBS of ten (later reduced to nine) defects in the RDMS Emulation. Presumably these defects were revealed by testing the disk version; so we shall assume, although it is conceivable that Unisys was belatedly reporting the results of tests that it had conducted months earlier on the beta version.
The defects apparently
were
minor and easy to correct. But Dharma refused to correct them until MDBS signed the License Agreement. Dharma was worried that once they were corrected, MDBS or Unisys could duplicate the disks and thus sell multiple copies to the Internal Revenue Service. It is true that Dharma’s programs are copyrighted, so neither MDBS nor Unisys could lawfully have copied them. But Dharma was worried that MDBS or Unisys might be able through reverse engineering to extract non-copyrightable elements in the software from which it might be able to build a duplicate of the RDMS Emulation that would not infringe Dharma’s copyright. See
Bateman v. Mnemonics, Inc.,
Despite the defects, Unisys turned over five of the six copies of the RDMS Emulation to the IRS, paid MDBS the $25,000 final installment for transmission to Dharma (which MDBS kept rather than remit to Dharma), and, pursuant to its contract with MDBS, paid MDBS $413,894 in prepaid royalties generated by Unisys’s contract with the IRS. Unisys had been withholding this payment until it obtained the five copies of the RDMS Emulation which it needed to satisfy its contractual obligations to the IRS.
MDBS brought this suit against Dharma seeking restitution of the $225,000 that it had paid Dharma under the contract. Dharma counterclaimed, seeking $25,000 (the unpaid final installment under the contract) in damages for breach of contract and additional damages for misuse of the trade secrets embodied in the RDMS Emulation and the underlying SQL Access program. The district court ruled as a matter of law that the *653 substantive issues in the case were governed by the law of New Hampshire, that MDBS and not Dharma had violated the contract and owed Dharma $25,000 for this breach, and that MDBS had also violated Dharma’s rights under trade secret law. A jury assessed compensatory damages for the trade secret violations in the amount of $76,867.50, the district court having ruled as a matter of law that MDBS was not liable for punitive damages.
MDBS’s business is in Indiana and Dharma’s in New Hampshire. The contract was made by an exchange of letters and other communications, and so has no site. But the contract was performed entirely in New Hampshire, and we agree with the district court that under Indiana’s choice of law rules, which are the rules applicable to this diversity case, the law applicable to both the contract and trade secrets issues is that of New Hampshire. The standards that state courts (including those of Indiana, see
Hartford Accident & Indemnity Co. v. Dana Corp.,
Since the parties’ dispute over trade secrets (like the claim for restitution) grows out of the contract, and the trade secrets themselves were created in and are held in New Hampshire a'nd it is there that the primary harm from their unlawful disclosure would be felt because that is where Dharma’s business is located, we think it reasonably clear that New Hampshire law governs the trade secret issues as well. We can’t find a case on point, but as with the choice of law issue involving the contract there is only one plausible candidate for the state'whose law is to govern. It is true that the last act necessary to make MDBS’s conduct tortious occurred in Virginia, where Unisys received the copies of the RDMS Emulation; until then Dharma’s trade secret had not been taken out of authorized channels. And this means that the tort occurred in Virginia,
Hubbard Mfg. Co. v. Greeson,
The parties believe that choice of law has a twofold significance here. First, New Hampshire unlike most states does not recognize a common law right to seek punitive damages. Punitive damages may be awarded only if a statute authorizes their award. N.H. RSA § 507:16. But there is such a statute here—the Uniform Trade Secrets Act, which both New Hampshire and Indiana have adopted, and which authorizes punitive damages for the willful and malicious appropriation of a trade secret.
Id.,
§ 350—B:3(II); IC 24-2-3-4(c). But the Act says nothing about standard of proof—whether only a preponderance of the evidence is required, or, as the district court ruled in turning down
*654
Dharma’s punitive damages claim, clear and convincing evidence. There are no cases from either Indiana or New Hampshire on the question, and the cases from other jurisdictions are split over it. See
Trandes Corp. v. Guy F. Atkinson Co.,
In any event, the standard of proof doesn’t matter here, for there is no basis for punitive damages under either standard. This is a garden-variety trade secret dispute rather than anything that smacks of willfulness or malice — vague terms but obviously implying some element of aggravation. Cf.
Superbird Farms, Inc. v. Perdue Farms, Inc.,
The second and greater significance of choice of law in this case is that the probability that the contract is governed by the Uniform Commercial Code is much greater under New Hampshire law than under Indiana law. Article 2, the relevant part of the Code, is limited to the sale of “goods.” The only Indiana case holds that custom software is a service,
Data Processing Services, Inc. v. L.H. Smith Oil Corp.,
That cannot be the end of the analysis, however. The contract between MDBS and Dharma was for the sale not only of a good (the RDMS Emulation), as we have just held, but also of a service — the creation of the RDMS Emulation by adaptation of Dharma’s preexisting program, the SQL Access program. Under New Hampshire law, to determine whether such a “hybrid” transaction is governed by the Code requires deciding which aspect of the transaction, the sale of goods or the sale of services, predominates (unless, perhaps, the dispute is clearly
*655
assignable to either the goods or the services aspect, and it is not here).
In re Trailer & Plumbing Supplies,
Having decided that New Hampshire law and the UCC govern, we turn at last to the substantive issues. The principal issue bearing on Dharma’s claim of breach of contract is whether delivery of the RDMS Emulation was “accepted.” For it was only upon acceptance that MDBS was contractually bound to pay Dharma the final installment of the contract price — the $25,000 that the district judge awarded Dharma as the damages for breach of contract. Ordinarily of course delivery is to the buyer under the contract, who either accepts or rejects. But there is nothing to prevent the buyer from delegating receipt and acceptance to another,
Midwest Precision Services, Inc. v. PTM Industries Corp.,
Under the UCC, goods are deemed accepted if the buyer (or, we think it clear though we cannot find any case, its delegate) fails, after having had a reasonable amount of time in which to inspect them, to communicate its rejection to the seller. UCC § 2-606(1)(b);
Van Dorn Co. v. Future Chemical & Oil Corp.,
Unisys received the beta version of the RDMS Emulation in November of 1994 and did not complain about the defects until eleven months later. Unisys neither needed nor was entitled to eleven months to inspect the beta version; the contract gave, it only 20 days to inspect and to report back any defects that the inspection revealed. MDBS’s argument is, rather, that Unisys needed a separate period of time in which to inspect the disk version, which it did not receive until shortly before it communicated the list of defects to Dharma. The two versions, the tape version (the beta version), and the disk version, were identical, and so it may seem odd for the parties to have given Unisys a chance to reject- an identical version of a program that it had already had a chance to inspect. And while the final installment payment was not due until Unisys accepted the program, the apparent purpose was merely to take care of the situation in which the beta version, having been duly inspected, was found to contain defects that had to be corrected before Unisys could use it, and until correction Unisys didn’t want to pay for it.
But the parties may have contemplated two rounds of testing, the first a once-over-lightly review to identify the obvious bugs which are so common in a new software program and the second a more searching review to enable the buyer to make sure that the program really works. Cf.
ProCD, Inc.
*656
v. Zeidenberg,
This gap in the record would require a trial if all we had as evidence of acceptance were Unisys’s silence after receipt of the beta version. But there is more. Despite the nine defects reported by Unisys, the RDMS Emulation worked well enough for Unisys to sell it to the Internal Revenue Service, which Unisys could not have done if it hadn’t bought the software, and to pay MDBS the final installment of the price. This conduct shows both that the defects were not serious enough to permit rejection of the RDMS Emulation (every computer program has bugs) and that Unisys in fact accepted it. See UCC §§ 2-606(1)(a), (c);
Klockner, Inc. v. Federal Wire Mill Corp.,
But this assumes that Dharma did not break the contract by its initial refusal to turn over the disk version of the program to Unisys. It did not. Dharma had justifiable concerns about the loss of its trade secrets, and anyway it did eventually turn over the disks, after receiving written assurances from MDBS; and thus, in the end, it complied with its obligations; nor was MDBS harmed by the delay, which was slight. So MDBS has no basis for claiming the return of the $100,000 in installment payments that it made on the contract.
MDBS’s claim for the return of the $125,000 license fee that it paid Dharma upon the signing of the contract is extracontractual. It is based on the rule that a person who breaks his contract may still be entitled to the restitution of the benefits that he conferred on the other party before the breach, once the victim of the breach has been fully compensated by an award of damages. UCC §§ 2-718(2), (3);
R.E. Davis Chemical Corp. v. Diasonics, Inc.,
There would be merit to this argument if MDBS had actually paid the $125,000 — -which it did not; it was merely the conduit for payment by Unisys to Dharma — and if MDBS had never distributed copies of the program to Unisys, which it did. It is true that the license fee presupposed the execution of an agreement that would enable MDBS to transfer the RDMS Emulation to Unisys so that MDBS could fulfill its contract with Unisys, which was the actual payor for the RDMS Emulation. Had Dharma refused to execute the agreement and as a *657 result prevented MDBS from transferring the RDMS Emulation to Unisys, it could not have pocketed the $125,000. But it did not refuse. And while it sent its own version of such an agreement to MDBS for signature, it did not do so on a take-it-or-leave-it basis, refusing to negotiate the terms. MDBS never signified any dissatisfaction with the terms. In any event, MDBS did transfer the RDMS Emulation to Unisys and received in exchange the substantial compensation that Unisys had promised. MDBS got what it would have gotten if it had paid for the license, and it should pay for it.
We turn last to Dharma’s trade secret claim. A trade secret is simply a piece of information the value of which to the creator of the information depends on its not being generally known. N.H. RSA § 350-B:l(IV)(a). It is not a property right in the sense that a patent is, for it is perfectly lawful for a competitor to buy a product embodying a trade secret and unmask the secret by reverse engineering.
Kewanee Oil Co. v. Bicron Corp.,
The significance of breach of contract in this connection is that a commercial secret rarely has value if it is known only to one person. Others must be let in on the secret and the remaining secrecy preserved by contracts forbidding disclosure to still others who might exploit it commercially to the harm of the secret holder. The RDMS Emulation could not be sold without giving the ultimate buyer, Unisys, a chance to inspect it. But Dharma wanted to make sure that this would not entitle Unisys to duplicate the program without paying Dharma. That is why it insisted that MDBS not transfer the final version of the program to Unisys without Dharma’s prior written consent — to make sure that the transfer was on conditions that prevented duplication. MDBS agreed, but violated the agreement, and as a result Uni-sys obtained the final version and turned it over to its customer, the Internal Revenue Service, without restrictions.
So Dharma’s trade secret was misappropriated, but was there injury? There is no evidence that Unisys or the Internal Revenue Service, or for that matter anyone else, has duplicated the RDMS Emulation. What is undeniable, however, is that MDBS transferred six copies of the program in violation of its agreement. By doing this it deprived Dharma of the income that Dharma would have received had it sold the copies directly to Unisys. But that income, Dharma concedes, is only $18,000 yet the jury awarded it almost $77,000 on its trade secret claim. What could account for the difference?
Dharma put in evidence that if its relations with Unisys hadn’t soured as a result of its quarrel with MDBS, it would probably have sold at least 1,000 copies of the RDMS Emulation to Unisys, obtaining net royalties on these sales of $750,000. MDBS argues that since the evidence consisted entirely of testimony by Dharma’s president, and was thus self-serving (as well as purely oral), it cannot provide a ground for an award of damages. This is not correct. There is no rule that damages can be proved only by documents, only by experts, or only by disinterested third parties. See, e.g.,
Securitron Magnalock Corp. v. Schnabolk,
The jury awarded only a fraction of the damages sought, but the question is whether it should have awarded anything above $18,-000 since the additional damages are not based on the commercial exploitation of Dharma’s trade secret, which is the usual form that misappropriation takes. But by refusing to negotiate a license agreement, MDBS forced Dharma to undertake measures of self-protection likely to irritate Uni-sys by jeopardizing Unisys’s ability to perform its contract with the IRS. The loss of future business with Unisys was a foreseeable consequence of MDBS’s misconduct, and so Dharma was entitled to seek damages for that consequence. Consequential damages, as long as they are reasonably foreseeable, are the norm in tort cases (with an irrelevant exception discussed in
Rardin v. T & D Machine Handling, Inc.,
It’s as if MDBS, having stolen a program from Dharma, inserted a bug in it as a result of which the program didn’t work, and buyers blamed Dharma and refused to do any further business with it. That would be a consequence of misappropriation, and Dhar-ma would be entitled to the foreseeable damages flowing from that consequence.
We conclude that the district court’s rulings were correct and that the jury’s verdict was within the outer bounds of the lawful and the reasonable. The judgment is therefore
Affirmed.
