NDA Laws by State: Federal Limits and Enforceability

Nondisclosure agreements are governed primarily by state contract law, so the rules on what an NDA can cover, how long it can last, and when a court will enforce it shift from one state to the next. On top of that patchwork, federal statutes set floors no state NDA can breach, and close to 20 states layer on their own restrictions aimed mostly at workplace confidentiality. Understanding NDA laws by state means knowing both sides: the state rules that decide enforceability and the federal rules that override whatever the agreement says.

Why State Law Controls Enforcement

An NDA is a contract, and contract law lives at the state level. When someone challenges an NDA, the judge applies that state’s statutes and case law to decide whether the agreement holds up. An NDA drafted to one state’s standards can be unenforceable across the border.

Courts everywhere share one baseline: the terms must be reasonable. What “reasonable” means varies, but judges generally weigh the disclosing party’s interest in secrecy, how long the restriction lasts, how burdensome it is on the recipient, and whether the public has any stake in the information getting out. An NDA that fails this balancing test can be narrowed by the court or thrown out.

One federal statute sits across the top of this state system without displacing it. The Defend Trade Secrets Act of 2016 lets trade secret owners sue in federal court when the information relates to a product or service used in interstate commerce.¹ It opens a federal courtroom door; it does not decide whether the NDA itself is valid. State contract law still answers that question.

Federal Limits No State NDA Can Override

Several federal statutes carve out areas where NDAs cannot reach, regardless of what the agreement says or which state’s law applies.

Whistleblower Immunity

The Defend Trade Secrets Act grants whistleblower immunity: no one can be held civilly or criminally liable under any federal or state trade secret law for disclosing a trade secret in confidence to a government official or an attorney solely to report or investigate a suspected violation of law. The same immunity covers disclosures made in sealed court filings as part of a lawsuit.²

Employers must include notice of this immunity in every contract that restricts use or disclosure of trade secrets or confidential information, whether with an employee, contractor, or consultant. The notice can be satisfied by cross-referencing a reporting policy document instead of placing the full immunity language in the NDA itself. An employer who skips the notice forfeits the right to recover exemplary damages or attorney fees in any trade secret suit against that employee.² Many NDAs quietly fail this requirement, which shrinks the available remedies if a dispute reaches court.

The Speak Out Act

The federal Speak Out Act, signed in 2022 and codified at 42 U.S.C. § 19403, makes pre-dispute nondisclosure and nondisparagement clauses judicially unenforceable when the underlying dispute involves sexual assault or sexual harassment under federal, state, or tribal law.³ The key word is “pre-dispute.” A blanket NDA signed at onboarding cannot be enforced to silence an employee about harassment that happens later. Confidentiality negotiated after a dispute arises, such as in a settlement, is a separate matter governed by state law.

The Act expressly preserves state laws that offer stronger protections, so where a state goes further, the state rule still applies.³ The statute also makes clear that it does not prevent employers and employees from protecting legitimate trade secrets or proprietary information.

The Right to Discuss Pay

The National Labor Relations Act protects employees’ right to engage in “concerted activities for the purpose of collective bargaining or other mutual aid or protection.”⁴ Discussing pay with coworkers falls within that protection. An NDA clause that labels salary information “confidential” and bars employees from sharing it with each other is unenforceable under federal law for most private-sector workers, in any state. This federal floor sits beneath any state pay-transparency statute.

Tax Treatment of Harassment Settlements

Section 162(q) of the Internal Revenue Code, added by the Tax Cuts and Jobs Act of 2017, bars any business expense deduction for a settlement or payment related to sexual harassment or sexual abuse if the payment is subject to a nondisclosure agreement. The ban extends to attorney fees connected to such settlements.⁵

The provision aims primarily at the employer, since the disallowed deduction falls under trade or business expenses. Its effect on a victim’s ability to deduct contingent attorney fees remains ambiguous in the statute. That matters practically: if a victim who signs an NDA loses the above-the-line deduction for attorney fees, those fees could become taxable income with no offsetting deduction. Anyone negotiating a harassment settlement should raise the NDA’s tax impact with a tax professional before signing.

State Restrictions on Workplace NDAs

Beyond the federal baseline, close to 20 states have passed their own laws restricting workplace confidentiality agreements. Two patterns dominate.

Harassment and Discrimination Settlements

The most active area of state NDA legislation targets confidentiality in settlement agreements covering harassment, discrimination, and retaliation. Some states void NDA terms in these settlements outright. Others allow confidentiality only if the person bringing the claim affirmatively requests it. Several of these laws grew out of the #MeToo movement and go further than the federal Speak Out Act because they cover post-dispute settlement NDAs, not just pre-dispute employment agreements. States also vary on which claims trigger the restriction: some reach only sexual harassment, while others cover all forms of workplace discrimination and retaliation.

Whistleblower Protections

Most states have whistleblower statutes that protect employees who report illegal activity to law enforcement or cooperate with government investigations. These laws override any NDA provision that would prohibit or punish such reporting. Signing an NDA does not waive the right to report what you believe in good faith to be a violation of law, even if the information would otherwise qualify as a trade secret under the agreement’s terms.

What No NDA Can Cover

Even a well-drafted NDA has limits on what it can classify as confidential. Courts and standard industry practice recognize four categories of information that fall outside any NDA’s reach, regardless of how the contract defines “confidential information.”

Information that becomes publicly available through no fault of the receiving party. A product spec published in a trade journal loses its protected status.
Information the recipient already knew before signing. An NDA cannot retroactively lock up pre-existing knowledge.
Information received from a third party with no confidentiality obligation attached.
Information the receiving party independently develops without using the discloser’s data.

These exclusions prevent a disclosing party from claiming ownership over information it does not actually control. An NDA that defines “confidential information” so broadly that it sweeps in publicly available knowledge or general industry skills is the kind of agreement courts strike down. If the definition is wide enough to prevent the recipient from working in their field, a court may treat the NDA as a disguised non-compete and void it.

What Makes an NDA Enforceable

State courts look at several structural elements when deciding whether an NDA holds up. A failure in any one can sink the whole agreement.

Legitimate Interest and Reasonable Scope

The NDA must protect information that genuinely qualifies as confidential and gives the business a competitive edge, such as trade secrets, proprietary processes, or detailed customer data. Courts will not enforce an NDA that merely tries to stop a former employee from using general skills picked up on the job. Protection has to tie to specific, identifiable information.

Duration must be reasonable too. A perpetual confidentiality obligation makes sense for a true trade secret that retains its value indefinitely. For most business information, confidentiality periods of one to five years are standard, calibrated to how long the information stays competitively relevant. An NDA with no time limit on ordinary marketing data or client contact information invites a court challenge.

Adequate Consideration

Like any contract, an NDA needs consideration on both sides. For a new hire, the job offer itself is enough. For an existing employee asked to sign mid-employment, the picture gets murkier. Some states treat continued at-will employment as sufficient consideration, reasoning that the employer’s ongoing willingness to employ the worker is itself valuable. Other states require something more concrete: a raise, bonus, promotion, or additional benefits. If you are asked to sign an NDA after you have already started a job and get nothing new in return, enforceability depends heavily on which state’s law applies.

Unilateral vs. Mutual

A unilateral NDA protects one party’s information and is typical when information flows one way, such as an employer sharing trade secrets with a new hire or a startup disclosing financials to a potential investor. A mutual NDA protects both sides and is common in joint ventures, merger talks, and technology partnerships. Courts tend to view mutual agreements more favorably because the reciprocal obligations create a natural balance. An aggressively one-sided unilateral NDA is a more likely target for a reasonableness challenge.

Deadlines to Sue

An NDA breach is a breach of contract, and every state sets a statute of limitations on how long you have to file after the breach. For written contracts, these windows run from three years in the shortest states to ten years or more in the longest. Missing the deadline ends the right to sue entirely, regardless of how clear the breach was. In trade secret cases brought under the federal Defend Trade Secrets Act, a separate three-year federal limitations period applies.¹

1
Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings
2
Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions
3
Office of the Law Revision Counsel. 42 USC 19403 – Limitation on Judicial Enforceability of Nondisclosure and Nondisparagement Contract Clauses
4
Office of the Law Revision Counsel. 29 USC 157 – Right of Employees as to Organization, Collective Bargaining, Etc.
5
Office of the Law Revision Counsel. 26 USC 162 – Trade or Business Expenses