A non-disclosure agreement, or NDA, is a contract in which one party (or both) agrees to keep specified information confidential and accepts legal consequences for leaking it. It creates a private duty of secrecy on top of whatever protections the law already gives trade secrets, and it tells both sides exactly what counts as off-limits, for how long, and what happens if the rule is broken.
NDAs show up almost everywhere sensitive information changes hands: a new hire getting access to internal systems, a consultant seeing proprietary processes, two companies exploring a joint venture, a founder pitching investors. The instrument is simple in concept. Making one that holds up is less simple.
What an NDA Actually Covers
The heart of any NDA is its definition of “confidential information.” That definition decides what the contract reaches, and vague catch-all language is the single fastest way to make the whole agreement unenforceable. Good drafting identifies protected information with enough specificity that both sides know what’s in and what’s out.
The legal framework behind most NDAs comes from trade secret law. The Uniform Trade Secrets Act, adopted in 48 states plus the District of Columbia, defines a trade secret as information that derives economic value from not being generally known and that the owner takes reasonable steps to keep secret.1United States Patent and Trademark Office. Trade Secret Policy At the federal level, the Defend Trade Secrets Act uses a similar definition covering financial, business, scientific, technical, and engineering information in any form, provided the owner takes reasonable measures to maintain secrecy and the information derives value from not being publicly known.2Office of the Law Revision Counsel. 18 USC 1839 – Definitions
In practice, protected information typically includes product formulas, proprietary software code, customer lists, pricing strategies, unreleased marketing plans, and internal financial data. The common thread is competitive edge: the information is valuable precisely because outsiders don’t have it.
One-Way or Mutual
NDAs come in two basic structures. A unilateral NDA runs in one direction: one party shares, the other party agrees not to disclose. This is the usual format when an employer brings on a new hire or a company hires a consultant. Only the receiving party has obligations.
A mutual NDA protects both sides. Each party shares sensitive information and each agrees to keep the other’s data confidential. This structure fits joint ventures, partnership talks, and collaborations where both companies bring proprietary knowledge to the table. Mutual agreements impose equal restrictions and equal liability, which tends to make the negotiation smoother because neither side feels like it is taking on a lopsided risk.
Terms That Make an NDA Enforceable
Beyond defining confidential information, an enforceable NDA needs several provisions working together. Leaving any of them out creates ambiguity that can sink the agreement in court.
- Full legal names and addresses of every individual or business entity involved. If a company signs, the agreement should state whether it binds only the company or also its subsidiaries and affiliates.
- The receiving party’s obligations: what the recipient must actually do to protect the information, such as limiting access to employees who need it for a defined purpose and implementing reasonable security measures.
- Duration. Many NDAs set a term of two to five years for general business information. Trade secrets can be protected indefinitely as long as they continue to meet the legal definition, since there is no statutory time limit on trade secret protection.1United States Patent and Trademark Office. Trade Secret Policy
- Permitted disclosures: specific situations where the receiving party may share the information, such as with attorneys, accountants, or employees who sign their own confidentiality agreements.
- Governing law and venue. Governing law picks which state’s laws interpret the contract. Venue picks the physical court where disputes get heard. The two don’t have to match, and getting both right saves headaches later.
- An integration clause stating that the written agreement is the complete understanding between the parties, superseding any prior oral promises or side deals. Without this, a party could try to introduce earlier conversations or emails to alter the contract’s meaning.
- Whistleblower immunity notice. Federal law requires employers to include a notice in any NDA or confidentiality agreement that employees are immune from liability for disclosing trade secrets to government officials or in sealed court filings for the purpose of reporting suspected legal violations. An employer that skips this notice forfeits the right to recover exemplary damages or attorney fees if it later sues that employee for trade secret misappropriation.3Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions
Consideration is a separate requirement that often gets overlooked. A contract needs something exchanged in both directions. For a new hire, the job itself usually counts. For an existing employee asked to sign mid-employment, the answer is murkier: some courts accept continued employment as consideration, others require something tangible like a raise, bonus, or promotion. An NDA presented years into a job with nothing offered in return may not hold up.
What an NDA Can’t Cover
Every well-drafted NDA carves out categories of information that the receiving party has no duty to keep secret. These exclusions exist because courts view an NDA without them as overreaching, and an overreaching NDA risks being struck down entirely.
The standard exclusions are information that was already publicly available before disclosure, information the receiving party already possessed before signing, information obtained independently from a third party with no confidentiality obligation, and information the receiving party developed on its own without referencing the disclosed material. That last category matters most in industries where multiple companies work on similar technology. If your team built something without ever looking at the other side’s data, the NDA doesn’t restrict your use of your own creation.
Legal compulsion also overrides confidentiality. A subpoena, court order, or regulatory demand must be answered, and disclosure in response is not a breach. Most NDAs require the receiving party to notify the disclosing party before complying, giving the discloser a chance to seek a protective order. But the obligation to comply with legal process always takes priority over a private contract.
Federal law places further hard limits on what an NDA can silence, and no contract language can override them.
Whistleblower Disclosures
Under the Defend Trade Secrets Act, any individual who discloses a trade secret to a federal, state, or local government official, or to an attorney, solely for the purpose of reporting a suspected legal violation is immune from criminal and civil liability under any trade secret law.3Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions The same immunity applies to disclosures made in sealed court filings. An employee who reports fraud to the Department of Justice and includes trade secret details in that report has not breached the NDA, period.
Communicating With the SEC
The SEC prohibits any person from taking action to impede an individual from communicating directly with Commission staff about a possible securities law violation. That includes enforcing or threatening to enforce a confidentiality agreement to block such communication.4eCFR. 17 CFR 240.21F-17 – Staff Communications With Individuals NDA language that requires employees to get company approval before contacting regulators, waive their rights to whistleblower awards, or notify the company after filing a tip with the SEC violates this rule and exposes the company to enforcement action.
Protected Concerted Activity
Section 7 of the National Labor Relations Act protects employees’ rights to engage in concerted activities for mutual aid or protection, which includes discussing wages, benefits, and working conditions with coworkers.5Office of the Law Revision Counsel. 29 USC 157 – Right of Employees An NDA or severance agreement with confidentiality provisions broad enough to discourage these conversations can violate federal labor law. The NLRB’s 2023 McLaren Macomb decision held that severance agreements containing sweeping non-disparagement and confidentiality clauses are unlawful because they tend to chill employees’ exercise of Section 7 rights. As of early 2026, that precedent remains in effect, though its enforcement posture has shifted and its future is being tested through ongoing litigation.
Sexual Harassment and Assault Claims
The federal Speak Out Act of 2022 prevents enforcement of pre-dispute NDAs that cover sexual assault or sexual harassment claims. A blanket NDA signed at the start of employment cannot be used to silence a worker who later experiences harassment. For a confidentiality agreement about sexual harassment or assault to be enforceable, it must be signed after the dispute arises.
Why NDAs Fail in Court
A signed NDA is not a guaranteed win. Judges look closely at whether the agreement was fair when signed and whether its terms are reasonable in scope.
Overbroad definitions of confidential information are the leading cause of trouble. An NDA that treats everything shared between the parties as confidential, with no specificity or marking requirement, is asking a court to issue a blank check. Courts in multiple jurisdictions have held that NDAs must identify the protected information with enough precision that the receiving party can reasonably know what’s covered. Language like “all information disclosed in connection with the business relationship” is exactly what judges refuse to enforce.
Unreasonable duration is another failure point. A five-year confidentiality period for general business information is usually fine. An indefinite restriction on everything learned during employment is not, unless the information genuinely qualifies as a trade secret. Courts distinguish between true trade secrets, which can be protected indefinitely, and ordinary business knowledge, which cannot.
Overreach into non-compete territory also causes problems. An NDA so broad that it effectively prevents someone from working in their field may be recharacterized by a court as a non-compete in disguise and struck down under the stricter standards that apply to non-competes.
When a court finds an NDA partially overbroad, some jurisdictions let the judge narrow the problematic terms and enforce the rest. Others take an all-or-nothing approach and throw out the entire agreement. Counting on a judge to fix sloppy drafting is a bad bet.
What Happens When Someone Breaches
If a receiving party violates the NDA, the disclosing party has several tools, and the right one depends on whether the damage has already happened or is still unfolding.
Injunctive relief is often the first move. The disclosing party asks a court to order the breaching party to stop disclosing or using the information immediately. Getting an injunction requires showing that the harm is irreparable (money alone can’t fix it) and that the plaintiff is likely to win on the merits. Many NDAs recite that any breach would cause irreparable harm, but courts have made clear that contract language alone does not automatically entitle a party to an injunction. Actual evidence is still required.
Compensatory damages cover the financial losses caused by the breach: lost profits, the diminished value of the trade secret, and costs incurred because of the unauthorized disclosure. Under the Defend Trade Secrets Act, damages can also include unjust enrichment gained by the misappropriator that isn’t already captured by the lost-profit calculation.6Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings A court can also measure damages as a reasonable royalty for the unauthorized use.
When misappropriation is willful and malicious, the DTSA allows exemplary damages up to double the compensatory award. Attorney fees can be awarded to the prevailing party when the misappropriation was willful or when a claim was brought in bad faith.6Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings
Some NDAs include a liquidated damages clause that sets a predetermined payout for breach, sidestepping the need to prove actual losses. These clauses are enforceable only if actual damages would be difficult to calculate and the predetermined amount is a reasonable estimate of the harm rather than a punitive figure. Courts evaluate both conditions as of the time the contract was signed, not at the time of breach.
Signing, Storing, and Ending the Agreement
An NDA can be signed on paper or electronically. Federal law provides that a contract or signature cannot be denied legal effect solely because it is in electronic form.7Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity Platforms like DocuSign and Adobe Sign satisfy this standard. Every party should receive a fully executed copy containing all signatures.
Storage matters more than most people realize. The disclosing party needs the signed agreement available if a breach surfaces, potentially years later. Encrypted cloud storage or a physical fireproof safe both work. Organizations managing many NDAs at once should track expiration dates so they know when obligations lapse.
Most well-drafted NDAs include a return-or-destroy clause requiring the receiving party to give back or permanently delete all confidential materials once the project ends or the agreement terminates. Destruction typically covers not just the original documents but any notes, analyses, or summaries derived from the confidential information. The receiving party may be required to certify in writing that everything has been destroyed and no copies remain. Standard exceptions allow retention of copies required by law, regulation, or internal document-retention policies, and copies stored in routine backup systems that are not readily accessible. Any retained materials remain subject to the NDA’s confidentiality obligations even after the agreement’s active term expires.