A non-disclosure agreement is typically valid for one to five years when it covers ordinary business information, and potentially forever when it protects a genuine trade secret. How long a non-disclosure agreement is valid depends on three things: what the contract’s duration clause says, what kind of information is being protected, and whether a court would consider that timeframe reasonable if the agreement were challenged. A term that is too short leaves sensitive information exposed; a term that is too long may not hold up at all.
Typical Fixed Terms for Business Information
Most well-drafted NDAs include a “Term” or “Duration” clause that sets a specific confidentiality period. For routine business arrangements, that period usually falls between one and five years, chosen to match how long the information will actually matter commercially.
Context drives the number. Details about an upcoming product launch might only need a year or two, because the information becomes public the moment the product ships. A long-term strategic plan or a proprietary pricing model might justify five years. A duration clause can also tie expiration to an event rather than a calendar date, such as the closing of a deal or the end of a business relationship.
Disclosing parties naturally want the longest term they can get. Pushing too hard on routine information tends to backfire: the receiving party refuses to sign, or a court later finds the duration excessive and declines to enforce it. Most NDA negotiation happens in this zone, matching the term to the realistic shelf life of the information.
Some agreements add a tolling provision that pauses the clock if the receiving party breaches. If a violation triggers a lawsuit that takes years to resolve, the confidentiality period does not quietly expire while the case is pending; instead, it is extended by however long the breach lasted.
When Indefinite or Perpetual Terms Hold Up
Plenty of NDAs are written without any expiration date. Whether that works depends almost entirely on what is being protected.
For general confidential information such as customer lists, internal procedures, or pricing strategies, courts in many jurisdictions are skeptical of perpetual obligations. Some states analyze overly broad NDAs under the same reasonableness standards they apply to non-compete agreements, and an excessively long term can render the whole agreement unenforceable. The question is whether the duration matches the nature and commercial value of the information. An NDA that tries to lock down routine business data forever is more likely to be struck down than one with a sensible fixed term.
Trade secrets are different. Under the federal Defend Trade Secrets Act, a trade secret is information that derives independent economic value from not being publicly known, where the owner has taken reasonable steps to keep it secret.1Office of the Law Revision Counsel. 18 US Code 1839 – Definitions Think proprietary formulas, algorithms, or manufacturing processes. Because the value depends on continued secrecy, courts are far more willing to enforce an indefinite NDA term for this category. Protection lasts as long as the information actually remains a trade secret.
The strongest approach is a hybrid clause: a fixed term of three to five years for general confidential information, with trade secret obligations surviving indefinitely or for as long as the information qualifies as a trade secret. That two-tier structure gives a court a clear, reasonable framework and improves the odds the agreement is enforced as written.
Events That End the Obligation Early
Regardless of what the duration clause says, several standard carve-outs can release the receiving party from confidentiality before the term runs out.
- Public disclosure. If the information enters the public domain through no fault of the receiving party, the obligation ends. A product announcement, a government filing, or a news report by the disclosing party all qualify.
- Prior possession. If the receiving party already had the information before signing, they are not obligated to treat it as confidential. Proving this generally requires dated records that predate the agreement.
- Independent development. If the receiving party developed the same information on their own without referencing anything disclosed, the NDA does not apply to that independently created work.
- Legal compulsion. A court order or subpoena can require disclosure. Most NDAs permit compliance, though they typically require prompt notice to the disclosing party so they can seek a protective order first.
These exceptions exist because an NDA is meant to prevent unfair exploitation of shared secrets, not to control information the receiving party obtained legitimately or that the disclosing party failed to keep confidential.
What Survives After the Term Ends
When the main confidentiality period expires, not every obligation disappears. Most well-drafted agreements include a survival clause specifying which duties continue.
The most common surviving obligation is the duty to return or destroy confidential materials. Once the NDA expires, the receiving party is typically required to send back all physical documents and storage devices, or permanently delete all electronic copies and provide written confirmation. This is the duty people most often overlook, and failing to comply can create liability even after the agreement has technically ended.
Other duties frequently survive as well, particularly a prohibition on using the confidential information for the recipient’s own commercial benefit. The end of a duty to keep quiet is not the same as a license to profit from someone else’s proprietary information.
Federal Limits That Can Override the Agreement
Federal law places boundaries on what an NDA can actually prohibit, regardless of what the document says. Two statutes come up often.
The Speak Out Act
Since 2022, the Speak Out Act has made pre-dispute NDA clauses unenforceable when they relate to sexual assault or sexual harassment disputes.2Office of the Law Revision Counsel. 42 US Code Chapter 164 – Speak Out Act If you signed an NDA before any such dispute arose, the confidentiality clause cannot be used to stop you from speaking about it or filing a claim. The law does not affect NDAs signed after a dispute has already surfaced, such as confidentiality terms in a settlement, and it does not touch trade secret or proprietary information protections.
Whistleblower Immunity Under the DTSA
The Defend Trade Secrets Act includes a whistleblower provision that no NDA can override. Someone who discloses a trade secret to a government official or an attorney for the purpose of reporting a suspected legal violation is immune from criminal and civil liability under federal and state trade secret law, provided the disclosure is made in confidence.3Office of the Law Revision Counsel. 18 US Code 1833 – Exceptions to Prohibitions The same immunity applies to disclosures made in sealed court filings as part of a lawsuit.
Any contract or agreement with an employee that covers trade secrets or confidential information must include notice of this whistleblower immunity.3Office of the Law Revision Counsel. 18 US Code 1833 – Exceptions to Prohibitions An employer can satisfy this by cross-referencing a company policy document about reporting suspected legal violations, but the notice itself is not optional. Skipping it costs the employer the ability to recover exemplary damages or attorney fees in any trade secret lawsuit against that employee.
How Long You Have to Sue After a Breach
An NDA’s practical validity also depends on how long the law gives you to file a lawsuit after something goes wrong. Even an unexpired agreement is useless if the deadline to sue has passed.
For trade secret claims brought under the Defend Trade Secrets Act, the statute of limitations is three years from the date the misappropriation was discovered or should have been discovered through reasonable diligence.4Office of the Law Revision Counsel. 18 US Code 1836 – Civil Proceedings A continuing misappropriation counts as a single claim for purposes of this deadline.
For a breach of contract claim based on the NDA itself, the statute of limitations is governed by state law and typically ranges from four to ten years for written contracts. The clock generally starts when the breach occurs, not when the NDA was signed. That distinction matters. If someone violates an NDA in year three of a five-year term, the filing deadline runs from that breach date, which gives the disclosing party years after the NDA has expired to bring a claim. Wait too long, though, and the right to sue is gone no matter how strong the underlying case was.