A non-disclosure agreement, commonly called an NDA, is a legally binding contract in which one or both parties promise not to share specified confidential information with anyone outside the agreement. Businesses use NDAs to protect trade secrets, financial data, client lists, and other proprietary information during hiring, partnerships, investor pitches, and acquisitions. The agreement sets out what information is off-limits, how long the restriction lasts, and what happens if someone breaks the rules. The details matter: courts routinely refuse to enforce NDAs that are vague or overbroad, and several federal laws now limit what these agreements can cover at all.
Core Elements Every NDA Needs
An enforceable NDA rests on a handful of components. Leave one out or draft it loosely, and the whole thing can fall apart under challenge.
The Parties
The contract names the disclosing party (the one sharing the information) and the receiving party (the one agreeing to keep it secret). These can be individuals, corporations, LLCs, or other entities. Use accurate legal names. A mismatch between the name on the contract and the real entity creates ambiguity a court can use to sidestep the agreement.
Definition of Confidential Information
This is the single most important clause. It identifies what counts as confidential: technical designs, customer databases, pricing strategies, financial projections, source code, manufacturing processes, and so on. Catch-all language like “any information shared between the parties” invites challenge. The disclosing party wants the broadest definition possible; the receiving party benefits from narrower, specific categories so they know exactly what they can and cannot discuss.
Duration
NDAs specify how long the secrecy obligation lasts. Typical terms run two to five years from the date of disclosure, though agreements covering highly sensitive trade secrets sometimes have no expiration. Courts are more likely to enforce a time limit that reflects the realistic shelf life of the information. A two-year restriction on marketing data that changes quarterly is far more defensible than a perpetual ban on the same material.
Standard Exclusions
A well-drafted NDA carves out categories of information the receiving party can freely use even if the disclosing party shared it:
- Public information already available through no fault of the receiving party, such as material on a company website or in a news report.
- Prior knowledge the receiving party can prove it already had before signing, supported by dated records like internal memos or earlier project files.
- Independent development, meaning ideas or data the receiving party created on its own, without relying on anything the disclosing party shared.
- Information a court order, subpoena, or regulatory investigation compels the receiving party to produce. Most NDAs require the receiving party to notify the disclosing party before complying, giving the discloser a chance to seek a protective order.
Unilateral vs. Mutual NDAs
A unilateral NDA protects information flowing in one direction. One party shares secrets; the other promises not to disclose them. This is the standard arrangement when a company hires a contractor, brings on a new employee, or pitches an investor. The receiving party carries the entire confidentiality burden.
A mutual NDA protects both sides because both are sharing sensitive information. Joint ventures, co-development projects, and merger negotiations typically call for this structure. Each party is simultaneously a discloser and a receiver, which means both face consequences for leaking. The choice comes down to whether one side is doing all the sharing or both sides are putting proprietary information on the table.
The Whistleblower Immunity Notice Employers Keep Missing
Federal law requires every NDA or confidentiality agreement with an employee, contractor, or consultant to include a notice about trade secret whistleblower immunity. The notice must inform the signer that they cannot be held criminally or civilly liable for disclosing a trade secret in confidence to a government official or an attorney for the purpose of reporting a suspected legal violation, or in a court filing made under seal.1Office of the Law Revision Counsel. 18 U.S. Code 1833 – Exceptions to Prohibitions
The penalty for skipping the notice is specific: an employer who leaves it out forfeits the right to recover exemplary damages or attorney fees if it later sues that employee for trade secret misappropriation under the Defend Trade Secrets Act.1Office of the Law Revision Counsel. 18 U.S. Code 1833 – Exceptions to Prohibitions Employers can satisfy the requirement either by writing the notice directly into the NDA or by cross-referencing a company policy document that explains reporting procedures for suspected violations of law.
What an NDA Cannot Cover
Several federal laws now restrict NDAs in ways that would have surprised anyone drafting them a decade ago. If an NDA crosses these lines, the offending provision is unenforceable regardless of what both parties agreed to.
Sexual Harassment and Assault
The Speak Out Act, signed into law in December 2022, makes pre-dispute nondisclosure and nondisparagement clauses unenforceable when the underlying conduct involves sexual harassment or sexual assault that allegedly violates federal, tribal, or state law.2United States Congress. Speak Out Act – Public Law 117-224 The key word is “pre-dispute.” An NDA signed as part of a settlement after an incident has already occurred remains enforceable. One signed at the start of employment that would silence a future complaint cannot be.
There is also a tax consequence. Under Internal Revenue Code Section 162(q), businesses cannot deduct settlement payments related to sexual harassment or sexual abuse if the settlement includes a nondisclosure agreement, and attorney fees connected to those settlements are likewise not deductible.3Internal Revenue Service. Certain Payments Related to Sexual Harassment and Sexual Abuse
Reporting Securities Violations
SEC Rule 21F-17 prohibits any person from acting to impede someone from communicating directly with the SEC about a possible securities law violation. That includes enforcing or threatening to enforce a confidentiality agreement to block the communication.4eCFR. 17 CFR 240.21F-17 – Staff Communications With Individuals Reporting Possible Securities Law Violations The SEC has levied multimillion-dollar penalties against companies whose separation agreements required departing employees to notify the company before speaking with the SEC or to sign waivers stating they had not filed government complaints.
Reporting Crimes to Law Enforcement
The Department of Justice and OSHA have jointly stated that NDAs worded broadly enough to suggest an employee could be sued or terminated for reporting illegal conduct to law enforcement undermine antitrust enforcement and whistleblower protections.5United States Department of Justice. Justice Department and OSHA Issue Statement on Non-Disclosure Agreements That Deter Reporting of Antitrust Crimes No NDA can legally stop someone from reporting a crime or cooperating with a law enforcement investigation.
Severance Agreements
The National Labor Relations Board ruled in 2023 that employers violate the National Labor Relations Act by offering severance agreements with overly broad confidentiality or non-disparagement provisions. Simply offering such an agreement is itself unlawful because it pressures employees to surrender rights to discuss workplace conditions, organize, or communicate with unions and regulatory agencies.6National Labor Relations Board. Board Rules That Employers May Not Offer Severance Agreements Requiring Employees to Broadly Waive Labor Law Rights Confidentiality provisions in severance agreements survive only if they are narrowly limited to proprietary or trade secret information with a time limit tied to a legitimate business reason. A clause protecting the financial terms of a settlement is generally acceptable; one that bars the employee from discussing the agreement’s existence with anyone is not.
When Courts Will Refuse to Enforce an NDA
Courts evaluate NDAs under the standard framework for any contract, with a few factors drawing special scrutiny.
Consideration
Each side must receive something of value. For a new hire, the job itself is the consideration. For a contractor, payment or access to the disclosing party’s confidential information qualifies. The situation gets harder when an employer asks a current employee to sign a new NDA mid-employment. Some courts accept continued employment as enough; others require something additional, like a promotion, bonus, or raise. Pressuring an employee to sign with nothing new on the table is one of the easiest ways to get an NDA thrown out later.
Reasonable Scope
An NDA must be reasonable in what it restricts and for how long. Courts are skeptical of agreements that define confidential information so broadly that the receiving party effectively cannot work in their field afterward. NDAs generally do not include geographic restrictions, because they protect information rather than limit where a person can work. If an NDA contains a geographic limitation, it may actually function as a non-compete, which many states regulate far more strictly or ban outright.
Lawful Purpose
An NDA cannot be used to conceal illegal activity. If the confidential information relates to fraud, workplace safety violations, environmental crimes, or other illegal conduct, a court will refuse to enforce the secrecy provision. Where a court finds that an NDA was designed to hide wrongdoing, it may void the entire agreement rather than just the offending clause.
Remedies When Someone Breaches
The disclosing party has several options when the receiving party breaks the agreement. The most immediately powerful is injunctive relief: a court order prohibiting further disclosure or use of the protected information. To get an injunction, the disclosing party usually has to show irreparable harm, meaning the damage cannot be adequately fixed by a later payment of money. Many NDAs include a clause in which both parties acknowledge in advance that a breach would cause irreparable harm. That makes an injunction easier to obtain but does not guarantee one.
Monetary damages compensate for the financial losses caused by the breach, measured by the lost value of the trade secret, lost profits, or increased costs the disclosure created. If the NDA covers trade secrets and the breach was willful and malicious, the Defend Trade Secrets Act allows a court to award exemplary damages up to double the actual damages, plus reasonable attorney fees.7Office of the Law Revision Counsel. 18 U.S. Code 1836 – Civil Proceedings Many NDAs also contain their own fee-shifting provisions, so the losing party pays the winner’s legal costs regardless of whether the DTSA applies. Some agreements go further and set a liquidated damages amount, a sum owed upon breach. Courts enforce these only if the amount is a reasonable estimate of anticipated harm rather than an arbitrary penalty.
Trade secret theft can also trigger criminal liability under federal law separate from any civil action, with penalties including prison time and substantial fines.8Office of the Law Revision Counsel. 18 U.S. Code 1832 – Theft of Trade Secrets Punitive damages may be available in egregious situations under state law, usually requiring conduct that goes beyond a simple breach, such as fraudulently entering the NDA with no intention of honoring it.
Before You Draft or Sign
Templates are everywhere, but a generic form often fails to account for the specific type of information being protected, industry norms, or the federal notice requirements above. Skipping the whistleblower immunity notice alone can cost an employer the ability to recover enhanced damages in a future lawsuit.
Before signing an NDA someone else drafted, look at how broadly the agreement defines confidential information, whether the duration fits the kind of data involved, and whether anything in the agreement looks more like a non-compete than a confidentiality obligation. If the NDA would effectively prevent you from working in your field or discussing your own professional experience, those provisions are likely to face resistance in court. State laws vary considerably on how aggressively courts will reform or void overreaching terms, so the enforceability of any particular clause depends partly on where a dispute would be heard.