A confidential non-disclosure agreement is a contract that forbids one or both signers from sharing specified sensitive information with anyone outside the deal. Businesses use them to protect trade secrets, client lists, financial data, source code, and proprietary methods during hiring, acquisitions, joint ventures, and vendor relationships. What the agreement can actually lock down has narrowed in recent years: federal whistleblower rules, the Speak Out Act, a tax penalty tied to harassment settlements, and a growing set of state laws all cut into territory NDAs used to cover without question. Before you sign one or ask someone else to, it helps to know what the document must contain, what it cannot touch, and what breaching it costs.
What the Agreement Has to Contain
A handful of clauses do the real work. Miss one or draft it loosely, and the whole contract can collapse in court.
The Parties
The agreement names a disclosing party (the one sharing) and a receiving party (the one bound to keep quiet). Use the full legal name of each person or registered entity. If the contract names only a parent company but the subsidiary is doing the actual sharing, a judge may find the wrong entity is bound and the obligation never attached.
Definition of Confidential Information
This is where most NDAs live or die. The clause has to spell out what the agreement covers: financial projections, customer lists, source code, manufacturing processes, marketing plans, whatever is specific to the deal. Blanket language like “all proprietary information” without more detail invites a vagueness challenge. Courts have refused to enforce agreements when a reasonable person reading the contract couldn’t tell what was off-limits and what wasn’t.
Purpose Clause
The purpose clause ties the information to a specific business objective. If data is shared so the recipient can evaluate an acquisition, the recipient can’t repurpose it to build a competing product. Any use outside the stated purpose is a breach, whether or not the information ever leaves the recipient’s hands.
Choice of Law and Venue
These clauses pick the state law that governs the agreement and the court that hears disputes. NDA enforceability rules differ meaningfully from state to state, and without these provisions both sides can waste months fighting over jurisdiction before anyone reaches the actual dispute.
Whistleblower Notice
Federal law requires every NDA with an employee or contractor to include a notice about whistleblower immunity under the Defend Trade Secrets Act. The notice tells the signer they are immune from trade secret liability if they disclose a trade secret in confidence to a government official or an attorney solely to report a suspected legal violation, or in a sealed court filing in a lawsuit. An employer can satisfy this by cross-referencing a separate reporting policy. Skip the notice, and the employer loses the right to exemplary damages and attorney fees in any trade secret suit against that employee.1Office of the Law Revision Counsel. 18 U.S. Code 1833 – Exceptions to Prohibitions
One-Way or Two-Way
A unilateral NDA runs in one direction. One party shares, the other promises silence. This is the standard setup for new hires who will see internal databases, client files, or proprietary systems.
A mutual NDA binds both sides equally. Two companies exploring a joint venture or acquisition typically exchange sensitive financials and methods, so each is a discloser and a recipient at the same time. If the deal falls apart, neither side walks off with the other’s data unburdened by secrecy.
What an NDA Cannot Cover
No agreement locks up everything, and judges expect standard carve-outs. Without them, the contract reads as unreasonably broad.
- Publicly available information. If it’s in press releases, government filings, or published research, confidentiality doesn’t attach.
- Prior knowledge. Information the recipient already had before signing isn’t retroactively captured. Dated emails or internal records prove it.
- Third-party sources. Information obtained legitimately from someone with no confidentiality obligation of their own stays outside the agreement.
- Independent development. If the recipient builds similar technology or ideas on its own without reference to the disclosed material, that work belongs to the recipient.2U.S. Securities and Exchange Commission. Business Development Mutual Nondisclosure Agreement
A well-drafted NDA lists these exclusions explicitly so both sides know the boundaries from day one.
Whistleblower Protections That Override the Contract
Several federal laws make clear that an NDA cannot block someone from reporting wrongdoing. Under the Defend Trade Secrets Act, any person who discloses a trade secret in confidence to a federal, state, or local government official, or to an attorney, solely to report or investigate a suspected legal violation is immune from criminal and civil trade secret liability, as is anyone who discloses in a sealed court filing.1Office of the Law Revision Counsel. 18 U.S. Code 1833 – Exceptions to Prohibitions The protection applies no matter what the NDA says.
SEC Rule 21F-17 goes further for securities matters. It prohibits any person or company from taking action to impede someone from communicating directly with SEC staff about a possible securities law violation, which includes enforcing or threatening to enforce a confidentiality agreement to block that communication.3eCFR. 17 CFR 240.21F-17 – Staff Communications With Individuals Reporting Possible Securities Law Violations The SEC has penalized employers for requiring workers to say they hadn’t filed government complaints, or to notify the company before speaking with the agency.
Section 7 of the National Labor Relations Act protects employees’ right to discuss wages and working conditions with each other.4Office of the Law Revision Counsel. 29 U.S. Code 157 – Right of Employees as to Organization, Collective Bargaining, Etc. An NDA with broad confidentiality or non-disparagement language that discourages those discussions can violate the Act. Confidentiality clauses in employment NDAs should be narrowly tailored to specific proprietary business information rather than sweeping in ordinary workplace conversation.
Limits in Harassment and Discrimination Cases
The Speak Out Act, signed in December 2022, bars courts from enforcing pre-dispute NDA or non-disparagement clauses when someone alleges sexual harassment or sexual assault that violates federal, tribal, or state law. The important limit: it applies only to agreements signed before the dispute arose. An NDA that is part of a settlement reached after a claim has been filed can still be enforceable under this particular law, though state law may add restrictions. The Act does not touch an employer’s ability to protect legitimate trade secrets.5Office of the Law Revision Counsel. 42 U.S. Code Chapter 164 – Speak Out Act
States have piled on. California, Illinois, Colorado, Hawaii, Maine, and others restrict or prohibit employers from using NDAs to prevent employees from disclosing information about workplace harassment, discrimination, or other unlawful conduct. Rules vary: some states void pre-employment confidentiality clauses that cover unlawful acts outright, others allow settlement NDAs only if certain disclosure rights are preserved. If an NDA involves employment, check the current rule in the state whose law governs the contract. This area has shifted quickly since 2018 and continues to change.
Tax law adds another cost. Section 162(q) of the Internal Revenue Code denies any deduction for a sexual harassment or sexual abuse settlement payment, or related attorney fees, if the settlement is subject to a nondisclosure agreement.6Internal Revenue Service. Certain Payments Related to Sexual Harassment and Sexual Abuse That penalty hits the party making the payment. The recipient can still deduct their own attorney fees if those fees otherwise qualify.7Internal Revenue Service. Section 162(q) FAQ So a company that insists on confidentiality in a harassment settlement now takes a direct tax hit on top of the payout itself.
How Long the Obligation Lasts
Every NDA runs two clocks. The term of the relationship controls how long the parties will exchange information. The survival period controls how long confidentiality lasts after the relationship ends. Confusing the two is a common drafting error.
Survival periods in commercial NDAs typically run two to ten years after the relationship ends, scaled to how long the information holds its value. A marketing plan may be stale within a couple of years. A chemical formula or core source code may justify perpetual protection as long as it never becomes public. Trade secrets that stay secret can carry indefinite obligations, because their economic value lasts as long as they stay out of public view.
When the agreement ends, most NDAs require the receiving party to return or destroy all copies of confidential materials, including digital files, printouts, and notes, with a written certification from an officer confirming deletion from hard drives, cloud storage, and physical files. Failing to comply is itself a breach.
Some agreements also include a residuals clause, which lets the recipient use general knowledge, skills, and experience retained in unaided memory after reviewing confidential materials. The practical reason is obvious: an employee cannot un-learn what they absorbed. But the clause creates enforcement problems, because proving whether someone drew on memory or on documents is hard. A disclosing party agreeing to a residuals clause should keep it narrow and spell out that it grants no license to patents or other intellectual property.
What Happens If Someone Breaks It
Breach triggers several possible responses, and the disclosing party doesn’t have to wait for a full trial to act.
Emergency Court Orders
The first move is usually an emergency order to stop the leak from spreading. Under federal procedure, a court can issue a temporary restraining order without notifying the other side if the movant shows that immediate and irreparable injury will result before the opposing party can be heard.8Legal Information Institute. Federal Rules of Civil Procedure Rule 65 – Injunctions and Restraining Orders That buys time to pursue a preliminary injunction lasting through trial. Ignoring the order can bring contempt charges, including fines or jail.
Money Damages
Compensatory damages cover actual loss: lost revenue, diminished competitive position, the cost of the information going public. Those numbers are hard to pin down, which is why many NDAs include a liquidated damages clause setting a predetermined payout per breach. Courts enforce such clauses when the amount is a reasonable estimate of anticipated harm at signing. A figure wildly out of proportion to any real loss gets struck down as a penalty.
When trade secrets are involved and the theft was willful and malicious, the Defend Trade Secrets Act allows exemplary damages of up to twice the compensatory award.9Office of the Law Revision Counsel. 18 U.S. Code 1836 – Civil Proceedings That multiplier can turn a serious judgment into a catastrophic one.
Attorney Fees
Many NDAs include a prevailing party clause making the loser pay the winner’s attorney fees. Without one, each side generally pays its own lawyers no matter the outcome. With one, the breaching party’s exposure runs well past the damages, because losing means covering both sides’ legal bills.
What to Check Before Signing
Most people see an NDA at the start of a new job, deal, or partnership, and the pressure to sign fast is real. A few minutes with the document can save months of trouble.
- Scope. Look for a specific, bounded definition of confidential information. If everything you encounter on the job qualifies, the agreement may be unenforceable, but it can still be used as a threat long before any court weighs in.
- Duration. Check how long secrecy survives after the relationship ends. Two years for marketing data is reasonable. A perpetual obligation on information that isn’t a real trade secret is not.
- Exclusions. Confirm the agreement carves out public information, prior knowledge, third-party sources, and independent development. If any are missing, push back.
- Whistleblower notice. For employment NDAs, verify the federally required notice about immunity for reporting suspected violations is present. Its absence signals sloppy drafting or an employer who may not respect reporting rights.
- Bundled restrictions. Watch for non-compete or non-solicitation language buried inside the NDA. An NDA protects information; a non-compete restricts where you can work. They are different instruments with different enforceability standards, and bundling them hides the second behind the first.
- Remedies and fee shifting. Read what happens if you breach. Liquidated damages, injunctive relief, and fee-shifting clauses all change your exposure.
You don’t need a lawyer for a standard NDA, but if the stakes are high or the terms look aggressive, a review before signing is worth the cost. Asking for changes to overbroad or one-sided language is normal practice, not bad faith.