Most non-disclosure agreements last between two and five years, though the real answer depends on what the contract says, what kind of information it protects, and whether any federal or state law overrides its terms. NDAs covering ordinary business information almost always have an expiration date. NDAs protecting genuine trade secrets can last indefinitely. And in certain contexts, like sexual harassment claims, federal law now makes some pre-dispute NDAs unenforceable regardless of the stated term.
Two Clocks Run in Every NDA
One of the most common points of confusion is treating an NDA as a single timeline. A well-drafted NDA runs two separate clocks. The first is the disclosure period, the window during which the parties actually share confidential information. The second is the confidentiality obligation period, which governs how long the receiving party must keep that information secret after disclosure. These can overlap, but they don’t have to match.
Two companies exploring a merger might set a six-month disclosure period to exchange financial records, then require both sides to keep everything confidential for three years after that period ends. The total protection window is three and a half years, even though the NDA’s “term” was six months. When someone asks how long their NDA lasts, the answer usually depends on which clock they mean.
Typical Fixed-Term Durations
The most straightforward NDAs specify an exact confidentiality period. For typical business deals, that period usually falls between two and five years from the date of disclosure. Shorter periods of a year or less can make sense when the information has a brief shelf life, like details about an upcoming product launch or a short-term marketing campaign. Longer periods of five to ten years may be appropriate for technical specifications, proprietary financial models, or research data that retains competitive value over time.
Courts evaluate these time periods for reasonableness. The test varies by jurisdiction, but judges generally weigh the disclosing party’s interest in secrecy, the burden on the receiving party, the nature of the information, and the public interest. An NDA that tries to lock down routine business information for twenty years is asking for trouble. One that protects a detailed engineering schematic for seven years stands on much firmer ground. The key is matching the confidentiality period to how long the information actually matters.
Perpetual NDAs and Trade Secrets
Some NDAs have no expiration date at all. Whether a court enforces that kind of perpetual obligation depends almost entirely on whether the protected information qualifies as a trade secret.
Under the federal Defend Trade Secrets Act, a trade secret is information that derives independent economic value from not being generally known and that its owner has taken reasonable measures to keep secret.1Office of the Law Revision Counsel. 18 U.S. Code 1839 – Definitions Nearly every state follows a similar definition through its own version of the Uniform Trade Secrets Act. Manufacturing formulas, proprietary algorithms, and customer databases built over years are classic examples. Their value exists only as long as competitors don’t have them, so indefinite protection makes logical sense.
An NDA that tries to impose perpetual confidentiality on information that doesn’t meet this standard is vulnerable. If the information is garden-variety business data rather than a genuine trade secret, courts in many states will treat the unlimited duration as an unreasonable restraint of trade and may strike down the clause entirely. The safest drafting approach ties the obligation to the information’s legal status: the duty continues as long as the information qualifies as a trade secret, and ends when it no longer does.
When the NDA Is Silent on Duration
Not every NDA specifies how long confidentiality lasts. When the agreement is silent, courts won’t assume the obligation is perpetual unless trade secrets are involved. A judge will imply a “reasonable” duration based on the circumstances.
What counts as reasonable is fact-specific. Courts look at the nature of the information, the context of the business relationship, industry norms, and how much the duration would burden the receiving party. Some jurisdictions analyze missing NDA terms using the same framework they apply to non-compete agreements, focusing on whether the restriction is reasonable in scope, geography, and time. In the employment context, an NDA without a time limit that effectively prevents a former employee from working in their field is particularly likely to be struck down as unreasonable.
This ambiguity creates real risk on both sides. The disclosing party can’t be sure how long its information will be protected, and the receiving party doesn’t know when its obligations end. Leaving duration undefined is one of the most avoidable mistakes in NDA drafting, and it’s where disputes most often start.
Standard Exclusions That End the Duty Early
Even within a stated term, an NDA’s confidentiality obligation doesn’t apply to every piece of information forever. Nearly every NDA includes standard carve-outs, and courts tend to read these exclusions into agreements even when the contract doesn’t spell them out. The most common ones:
- Public availability. If the information becomes publicly known through no fault of the receiving party, the confidentiality duty ends for that information. A product spec that a third party independently publishes is no longer protectable.
- Prior knowledge. Information the receiving party already possessed before signing the NDA is excluded, provided the party can document that with its own records.
- Independent development. If the receiving party develops the same information on its own without using or referencing the disclosed material, confidentiality doesn’t apply.
- Third-party disclosure. Information obtained from someone else who had the legal right to share it, without breaching any confidentiality obligation of their own, falls outside the NDA.
These exclusions can effectively shorten an NDA’s practical lifespan even if the stated term hasn’t expired. If a competitor reverse-engineers a product and publishes the underlying technology, the NDA’s protection over that information evaporates regardless of what the contract says.
Federal Laws That Cut NDAs Short
No matter what an NDA says on paper, several federal laws carve out situations where the agreement cannot be enforced. Anyone signing or relying on an NDA should understand these limits.
The SPEAK OUT Act
Since December 2022, the SPEAK OUT Act has made pre-dispute nondisclosure clauses unenforceable in cases involving sexual harassment or sexual assault. If a dispute involves conduct that allegedly violates federal, state, or tribal law related to sexual harassment or assault, any NDA signed before the dispute arose cannot be judicially enforced to silence the claimant.2Congress.gov. S.4524 – 117th Congress: Speak Out Act – Text The law applies to claims filed on or after enactment. It does not prevent employers from protecting legitimate trade secrets or proprietary information, and it does not affect NDAs signed after a dispute has arisen, such as those included in settlement agreements.
Roughly a dozen states have gone further, restricting NDAs in settlement agreements related to workplace harassment or discrimination. These state laws often prohibit clauses that prevent disclosure of the underlying facts of a claim while still allowing confidentiality over settlement amounts.
Whistleblower Immunity Under the DTSA
The Defend Trade Secrets Act overrides NDAs when someone reports suspected illegal activity. An individual cannot be held criminally or civilly liable under any federal or state trade secret law for disclosing a trade secret in confidence to a government official or an attorney solely for the purpose of reporting or investigating a suspected violation of law.3Office of the Law Revision Counsel. 18 U.S. Code 1833 – Applicability to Conduct Outside the United States The same immunity applies to disclosures made in a court filing under seal. An NDA that purports to prohibit this kind of reporting is unenforceable to that extent.
Employee Rights Under the NLRA
The National Labor Relations Act protects employees’ rights to discuss wages, working conditions, and workplace safety with each other and with government agencies. In 2023, the National Labor Relations Board reinforced this principle in its McLaren Macomb decision, ruling that severance agreements with overbroad confidentiality clauses violate the NLRA. The Board found that even offering an agreement requiring an employee not to disclose its terms to “any third person” is an unfair labor practice, because it prevents employees from discussing workplace issues with coworkers, unions, or the NLRB. An NDA between an employer and a non-supervisory employee that restricts these kinds of communications can be unenforceable on its face.
Tax Consequences for Sexual Misconduct NDAs
Federal tax law adds another wrinkle. Under Section 162(q) of the Internal Revenue Code, a business cannot deduct settlement payments or attorney’s fees related to sexual harassment or abuse if the payment is subject to a nondisclosure agreement. The IRS has clarified that recipients of those settlements can still deduct their own attorney’s fees if those fees are otherwise deductible.4Internal Revenue Service. Section 162(q) FAQ This creates a financial incentive for businesses to avoid attaching NDAs to harassment-related settlements.
What Survives When the Term Expires
The end of an NDA’s confidentiality period doesn’t necessarily mean all obligations vanish. Most NDAs include survival clauses that keep specific provisions alive after the main term ends. Obligations that commonly survive include the duty to return or destroy confidential materials, indemnification provisions, and any restrictions on using (as opposed to merely disclosing) the information.
Return-or-destroy clauses are standard, but full compliance is harder than it sounds. When confidential information lives in email chains, cloud backups, and archived drives, deleting every copy is often impractical. Many agreements now require the receiving party to destroy what it reasonably can while maintaining ongoing confidentiality over any copies retained under routine data backup policies.
If the NDA doesn’t include a survival clause, the default is that all obligations expire with the term. A disclosing party that wants protection beyond the agreement’s end date needs to spell that out explicitly. Relying on a court to imply ongoing duties after a clearly stated expiration is a losing strategy.
Other Ways an NDA Can End Early
Beyond running out the clock, a few events can terminate an NDA’s obligations before the stated expiration.
A written release from the disclosing party ends the receiving party’s confidentiality duties. This happens when the business relationship changes, the information is no longer sensitive, or the disclosing party simply decides the protection is no longer worth maintaining. The release should be in writing and specific about which obligations it covers.
A court order can also override an NDA. During litigation, a judge may compel disclosure of information covered by an NDA if the public interest or another legal principle outweighs the private agreement. Courts can also invalidate NDA terms they find unreasonable. When that happens, the obligation wasn’t just cut short; it was never enforceable to begin with.
Mutual termination works like any other contract. If both parties agree the NDA is no longer needed, they can end it by written agreement at any time.