A confidential disclosure agreement is a binding contract that obligates one or both parties to keep shared information private, and a workable one does five things: it defines the protected information precisely, sets durations for both sharing and survival, carves out standard exclusions, spells out real remedies for breach, and includes the federal whistleblower immunity notice that many drafters still forget. Miss any of those and the agreement may still look impressive on paper while losing enforceability, access to enhanced damages, or both when a dispute actually arises.
Pick the Right Structure First
Before drafting any terms, decide who will actually be sharing sensitive information. That answer determines whether you need a unilateral or a mutual agreement, and getting it wrong leaves one side exposed.
A unilateral agreement fits situations where information flows one direction only. An employer onboarding a new hire, a company engaging an outside contractor, or an inventor pitching a product to a potential investor all fall here. Only the receiving party takes on confidentiality obligations.
A mutual (bilateral) agreement applies when both sides share. Merger negotiations, joint ventures, and partnership discussions typically involve each party opening up its financials, customer lists, or proprietary technology to the other. The same duty of care binds both parties, which keeps the negotiation balanced. If there is any doubt about whether both parties will exchange protected information during the relationship, the mutual version is the safer default.
Core Terms the Agreement Needs
Several provisions have to be present for the contract to hold up. Leaving any of them out invites arguments about what was actually covered and for how long.
Parties and Definition of Confidential Information
Use the full legal name and principal address of each party. A trade name or abbreviation can create confusion about which legal entity is actually bound.
The definition of “confidential information” is the most important clause in the agreement. It needs to be broad enough to cover what will actually be shared and specific enough that both parties understand the boundaries. Most agreements reach written documents, electronic files, prototypes, and oral disclosures. Because oral statements are hard to track, agreements commonly require the disclosing party to confirm them in writing within a set window, often 15 to 30 days, for those statements to stay protected.
Federal law offers a useful reference point. Under the Defend Trade Secrets Act, a trade secret includes financial, business, scientific, technical, or engineering information where the owner has taken reasonable steps to keep it secret and the information derives economic value from not being publicly known.1Office of the Law Revision Counsel. 18 USC 1839 – Definitions Aligning your definition with that federal standard strengthens your position if the dispute later escalates into a misappropriation claim.
Term and Survival Period
Two separate durations belong in the agreement. The term sets how long the parties will share information under the contract, commonly one to three years depending on the relationship. The survival clause then controls how long confidentiality obligations continue after that sharing period ends. Survival periods of one to five years are typical for ordinary business information, while trade secrets often warrant indefinite protection because their value depends entirely on remaining secret. Specifying both separately prevents disputes about when a party is free to use or disclose what it received.
Governing Law and Venue
A governing law clause identifies which state’s laws will interpret the agreement. A separate venue (or forum selection) clause designates the court system where disputes must be litigated. Both should be included. Without a governing law clause, a court may apply the law of whatever jurisdiction it sits in. Without a venue clause, the disclosing party may be dragged into an inconvenient forum, adding cost and delay to any enforcement effort.
What the Agreement Should Carve Out
Every well-drafted agreement excludes categories of information the receiving party has no obligation to protect. These carve-outs keep the contract from reaching further than it should and keep courts from treating it as overbroad.
- Publicly available information, including data that becomes public through no fault of the receiving party.
- Information the receiving party already possessed before the disclosure.
- Information obtained from a third party that owed no confidentiality duty to the disclosing party.
- Information the receiving party develops independently, without using the disclosed materials.
Independent development is the exclusion that generates the most litigation. Proving you built something on your own after receiving related confidential information is a hard sell. Companies that anticipate the issue sometimes use a clean room process, where a separate team works on the project with no access to the disclosed materials, and keep detailed contemporaneous records of the development path. That paper trail is what the defense actually turns on.
Obligations the Receiving Party Takes On
The receiving party’s core duty is to protect the disclosed information with the same care it uses for its own sensitive data. In practice, use must be restricted to a narrowly defined purpose stated in the agreement, such as evaluating a potential acquisition or testing a software integration. Using the information for anything outside that purpose is a breach, even if nothing is ever shared externally.
Access should be limited to people who genuinely need the information: specific employees, outside legal counsel, and financial advisors, each bound by confidentiality obligations at least as strict as the agreement itself. Fewer people with access means lower leak risk and a shorter list to investigate if something does get out.
Return or Destruction of Materials
When the relationship ends or the agreement is terminated, the receiving party has to return or destroy all confidential materials. That means purging digital copies from databases, cloud storage, and email archives, along with shredding physical documents. Many agreements require a written certificate of destruction signed by an officer confirming that everything has been eliminated. This is where parties get sloppy, and it is exactly the kind of evidence a court will look for later.
Non-Solicitation
When the parties are competitors, consider adding a non-solicitation clause. During a negotiation, the receiving party may learn who the disclosing party’s key employees and major customers are. A non-solicitation clause prevents using that information to recruit those employees or divert those customers. Whether to include it depends on whether the disclosed material would meaningfully enable poaching. Not every agreement needs one, but when competitors explore a deal that falls through, its absence is often what the disclosing party regrets.
Remedies That Give the Agreement Teeth
The remedies section decides whether the agreement is enforceable or just a stern letter. Most of the negotiation energy should go here, though many parties treat it as boilerplate.
Injunctive Relief
When information is being leaked or misused, the first move is usually seeking an injunction to stop the bleeding. Courts grant preliminary injunctions when the moving party shows irreparable harm absent intervention.2United States Department of Justice. Civil Resource Manual 214 – Injunctions Leaked trade secrets are a textbook case for irreparable harm because once the information is out, money cannot fully undo the damage. Under the DTSA, federal courts can issue injunctions against actual or threatened misappropriation, though an order cannot prevent someone from taking a new job based solely on what they know.3Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings
Monetary Damages
Federal law allows recovery of actual losses caused by the misappropriation plus any unjust enrichment the breaching party gained. If the trade secret was stolen willfully and maliciously, exemplary damages up to double the compensatory award are available.3Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings
Because quantifying the exact harm from a leaked trade secret is genuinely difficult, many agreements add a liquidated damages clause that pre-sets a dollar amount per violation. Courts enforce these clauses when the amount is a reasonable estimate of anticipated losses at the time of signing. A figure that looks more like punishment than compensation can be struck down as an unenforceable penalty. Tie the number to something defensible, such as development cost or projected revenue loss, rather than picking an arbitrarily large figure.
Attorney’s Fees
Trade secret litigation is expensive, and a fee-shifting clause changes the calculus for both sides. Under the DTSA, courts can award reasonable attorney’s fees when a misappropriation claim is brought in bad faith or when the trade secret was willfully stolen.3Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings A contractual fee-shifting provision reaches further, making fees recoverable regardless of whether the breach was willful. That prospect alone deters many parties from testing the agreement’s limits.
The Whistleblower Immunity Notice
This is the requirement most agreements still get wrong, and the cost of missing it is concrete.
Federal law gives individuals immunity from trade secret liability when they disclose confidential information to a government official or attorney for the purpose of reporting a suspected legal violation, or when they file it under seal in a lawsuit. Any contract governing trade secrets or confidential information must include notice of this immunity. The notice can appear directly in the agreement or through a cross-reference to a company policy document covering the reporting process.4Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions
Skip the notice and the employer forfeits its right to exemplary damages and attorney’s fees in any DTSA action against the employee or contractor who did not receive it. With exemplary damages reaching double the compensatory award and fees in trade secret cases often running into six figures, omitting a short paragraph of boilerplate is an expensive oversight. The requirement reaches any individual performing work for the company, including contractors and consultants, not just traditional employees.4Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions
Keeping the Agreement Enforceable
An agreement that tries to protect everything protects nothing. Courts can refuse to enforce provisions they consider unreasonably broad, and an overbroad confidentiality clause can create problems beyond simple unenforceability.
Although the FTC’s blanket ban on non-compete clauses was struck down and formally removed from federal regulations in early 2026, the agency still has authority under Section 5 of the FTC Act to challenge specific agreements case by case. A confidentiality clause that effectively prevents a worker from using any knowledge or skill gained during employment can draw scrutiny as a de facto non-compete, especially if it sweeps in publicly available information or general industry know-how rather than genuine trade secrets. The safer approach is to tie the definition of confidential information to material with real economic value from being secret.
Add a severability clause. Without one, a court that strikes down a single provision may conclude the entire agreement should fall with it. A severability clause directs the court to remove the offending term and enforce the rest. Courts generally honor that instruction, which makes it cheap insurance.
Signing and Recordkeeping
Authorized representatives on both sides must sign, and each party should receive a fully executed copy with all signatures and dates. Most transactions now use electronic signature platforms, which carry the same legal weight as ink signatures. The Electronic Signatures in Global and National Commerce Act provides that a contract cannot be denied legal effect solely because an electronic signature was used.5Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity
If you sign electronically, make sure the platform generates an audit trail showing when the document was sent, when each party signed, what authentication method was used, and that the document was not altered after signing. That audit trail becomes the primary evidence if execution is ever disputed. Store the signed agreement and its audit trail in a secure, centralized repository that can be searched quickly. Agreements buried in someone’s email inbox tend to surface only after the damage is done.