A “do not distribute” disclaimer is not legally binding on its own. Sticking that line at the bottom of an email or across the top of a document does not create a contract with the person who receives it, because contracts require agreement from both sides and the recipient never agreed to anything. The disclaimer still has uses — it helps show you treated the information as confidential, which matters for trade secret, copyright, and attorney-client privilege claims — but it cannot, by itself, stop anyone from forwarding what you sent.
Why the Disclaimer Alone Binds No One
Contract law needs four things: an offer, acceptance, consideration, and a mutual intent to be bound. A footer tacked onto an outgoing message supplies the offer and nothing else. The recipient didn’t negotiate, didn’t sign, and didn’t exchange anything of value. Opening a message is not the same as consenting to restrictions on what you do with it, and courts have consistently treated these unilateral notices as informational rather than contractual.
This is the gap that catches senders off guard. A business pushes out thousands of emails with a boilerplate footer calling the contents “confidential and proprietary,” then assumes the language itself protects them. It doesn’t. If the recipient forwards that email to a reporter or a competitor, the disclaimer alone gives you almost nothing to sue over. You need an actual agreement, such as a non-disclosure agreement, or a body of law that independently protects the information.
Where the Disclaimer Does Help
The notice earns its keep as supporting evidence under three bodies of law that protect information whether or not the recipient agreed to anything.
Trade Secrets
Under the federal Defend Trade Secrets Act and the state versions of the Uniform Trade Secrets Act, information qualifies as a trade secret only if the owner took reasonable measures to keep it secret. Confidential markings count as one of those measures. The disclaimer alone won’t satisfy the standard, but its absence can hurt you, because courts weigh the full picture: who had access, whether encryption was used, whether employees signed confidentiality agreements, and whether sensitive documents were visibly marked.
When someone does misappropriate a trade secret, the federal statute allows damages for actual losses, any unjust enrichment the misappropriator gained, and injunctive relief. If the misappropriation was willful, courts can double the damages and order the other side to pay your attorney’s fees.1Office of the Law Revision Counsel. 18 USC 1836 – Civil proceedings None of that turns on the disclaimer, but the disclaimer is part of showing you took the information seriously in the first place.
Copyright
Copyright attaches automatically when you create an original work and fix it in a tangible form; you don’t need a disclaimer or even a notice. Including a copyright notice (the © symbol, year, and owner name) does eliminate one defense an infringer might raise, which is that they didn’t know the work was protected.2Office of the Law Revision Counsel. 17 USC 401 – Notice of Copyright: Visually Perceptible Copies A “do not distribute” line next to a copyright notice makes it harder for anyone to claim innocent infringement. That matters because statutory damages for an innocent infringer can drop as low as $200, while willful infringement can run up to $150,000 per work.3Office of the Law Revision Counsel. 17 USC 504 – Remedies for Infringement: Damages and Profits
One catch worth knowing: to sue for infringement you generally need to register the work with the U.S. Copyright Office, and you lose access to statutory damages and attorney’s fees unless you registered within three months of publication.4Office of the Law Revision Counsel. 17 USC 412 – Registration as Prerequisite to Certain Remedies for Infringement A disclaimer does not substitute for registration.
Attorney-Client Privilege
Lawyers routinely mark emails “privileged and confidential,” and the marking does real work when a message is sent to the wrong person: it helps show the sender intended the material to stay confidential. But the label does not create privilege. Whether a communication is actually privileged depends on its content, who sent it, and who received it. Courts have found that stamping every routine email with a privilege notice can actually weaken the claim when it counts, because the label starts to look like meaningless boilerplate rather than a deliberate assertion.
Rights the Disclaimer Cannot Override
No matter how firmly worded the notice is, it cannot strip people of rights granted by federal law.
Employees Talking About Work
The National Labor Relations Act gives employees the right to engage in concerted activities for mutual aid or protection.5Office of the Law Revision Counsel. 29 USC 157 – Right of Employees as to Organization, Collective Bargaining, Etc. That includes talking with coworkers about wages, benefits, and working conditions, and employers cannot retaliate for those conversations.6National Labor Relations Board. Concerted Activity A blanket confidentiality disclaimer on a company handbook or pay document cannot lawfully bar employees from discussing their pay or workplace safety with each other. Employers who try to enforce such restrictions risk unfair labor practice charges.
Whistleblower Reports to the SEC
Under SEC Rule 21F-17, no confidentiality agreement or disclaimer can prevent someone from reporting a possible securities law violation to the SEC. The rule states that no person may take any action to impede such communication, including enforcing or threatening to enforce a confidentiality agreement.7eCFR. 17 CFR 240.21F-17 – Staff Communications With Individuals Reporting Possible Securities Law Violations The SEC has taken action against companies whose employment agreements, severance packages, or compliance manuals required employees to get company approval before contacting regulators. Agreements with that kind of language are not just unenforceable; they can trigger penalties against the company that imposed them.
When the Email Lands in the Wrong Inbox
Misdirected messages are where “do not distribute” gets the most attention, and the obligations of the unintended recipient depend on who they are.
Lawyers who receive clearly privileged documents by mistake have an ethical duty to notify the sender promptly so the sender can take protective measures. The American Bar Association’s Model Rules of Professional Conduct require this notification, and most state bar rules follow the same approach.8American Bar Association. Comment on Rule 4.4 – Respect for Rights of Third Persons An attorney who reads through a misdirected privileged document and tries to use it in litigation risks disqualification and sanctions.
For everyone else, the picture is thinner. No general federal rule forces an ordinary person who receives a misdirected email to delete it or alert the sender just because the footer says so. The disclaimer creates no contract with someone who never agreed to it. But if that recipient knows the information is a trade secret and uses or discloses it anyway, they can face liability under trade secret law, because the statute independently prohibits misappropriating information obtained through improper means.
What Actually Protects Confidential Information
Treat the disclaimer as a signal, not a shield. If the information is worth protecting, build the protection out of pieces that have independent legal force.
- Use a non-disclosure agreement. An NDA is a signed contract with real teeth; breach of it gives you a straightforward claim that a disclaimer never will.
- Register copyrighted works with the U.S. Copyright Office. Registration is the ticket to filing suit and the gateway to statutory damages that can reach $150,000 per work for willful infringement.3Office of the Law Revision Counsel. 17 USC 504 – Remedies for Infringement: Damages and Profits
- Put real access controls in place. Passwords, encryption, role-based permissions, and audit logs do more to show reasonable measures than any footer.
- Limit distribution. Every recipient is a potential leak; share only with people who need the information, and keep track of who received what.
- Reserve the disclaimer for material that genuinely warrants it. A confidentiality notice on every email the company sends reads as background noise to courts and recipients alike. Using the label selectively makes it more credible when you need it to count.
The disclaimer still has a place. It puts recipients on notice, supports a trade secret claim, and signals that someone owns the material. What it will not do is stand in for an NDA, a security policy, or a copyright registration — and the senders who learn that in court usually learn it the hard way.