What Is a Confidentiality Clause? Elements, Limits, and Breach

A confidentiality clause is a contract provision that binds one or more parties to keep certain information secret. It appears in employment contracts, settlement agreements, business partnerships, and standalone nondisclosure agreements, and it protects everything from trade secrets to the dollar amount of a lawsuit payout. Federal law sets outer limits on what these clauses can require, and violating one can trigger injunctions, monetary damages, and in trade secret cases, double damages plus attorney fees.

What the Clause Actually Protects

Nearly any commercially valuable information can be designated confidential, but most of what gets covered falls into a few buckets.

Business information is the most frequent target: customer lists, sales figures, supplier pricing, financial projections, and marketing strategies. Federal regulations define confidential business information broadly to include anything related to trade secrets, production, purchases, customer identification, and income or expenditure data whose disclosure could cause substantial competitive harm.1eCFR. 19 CFR 201.6 – Confidential Business Information

Trade secrets get special treatment. Under federal law, a trade secret includes any financial, business, scientific, technical, or engineering information — formulas, designs, prototypes, methods, processes, source code, compilations — as long as the owner has taken reasonable steps to keep it secret and the information derives economic value from not being publicly known.2Office of the Law Revision Counsel. 18 US Code 1839 – Definitions That second requirement matters. If a company does nothing to restrict access to information, it loses the ability to claim trade secret protection even with a confidentiality clause in place.

Personal and legal information makes up a third category. Performance reviews, health records, salary details, and the specifics of legal disputes can all be covered. In settlement agreements the protected material is often the existence of the dispute itself, the terms of resolution, and the payment amount. Unpatented inventions, research data, and engineering designs are routinely protected too, since these assets are most vulnerable before they receive formal legal protection.

Where You’ll See One

Employment Contracts

Employers include confidentiality provisions to keep workers from sharing proprietary data during and after employment. These clauses cover information employees access as part of the job: client lists, internal processes, pricing models, upcoming product plans.

Settlement Agreements

When parties resolve a legal dispute, the settlement agreement almost always includes a confidentiality clause. It prevents both sides from discussing the nature of the dispute, the settlement terms, and any payment. For defendants, this avoids the publicity of an admission; for plaintiffs, it’s often the trade-off for a larger payout. Breaching one can require the violating party to return the settlement payment in full, which makes these provisions unusually high-stakes.

Standalone Nondisclosure Agreements

NDAs are expanded, standalone confidentiality agreements. They show up most often when companies explore mergers, acquisitions, joint ventures, or other transactions requiring the exchange of sensitive financial and operational data. If the deal falls through, the NDA keeps either side from walking away with the other’s proprietary information.

Mutual Versus Unilateral

A unilateral agreement protects only the disclosing party and is typical in employer-employee relationships, investor pitches, and consultant engagements where information flows one way. A mutual (or bilateral) agreement protects both sides and is standard in merger discussions, franchise negotiations, and joint ventures. The distinction matters because in a mutual agreement, both parties carry the risk of a breach claim, not just the recipient.

What a Solid Clause Contains

A confidentiality clause that actually holds up has several distinct parts working together.

  • A definition of what counts as confidential. Some agreements list specific categories; others use a catch-all covering anything marked “confidential” plus anything a reasonable person would understand to be sensitive. Vague or overly broad definitions can backfire, because courts have struck down clauses that sweep in information the disclosing party never actually treated as secret.
  • The receiving party’s obligations. The recipient typically must protect the information using at least a reasonable degree of care and may use it only for the specific purpose outlined in the agreement.
  • Standard exclusions. Most agreements carve out information that was already publicly available, was already in the recipient’s possession before disclosure, was independently developed without reference to the confidential material, or was received from a third party with no obligation of secrecy.
  • Duration. For general business information, two to five years is typical. For trade secrets, the obligation often runs indefinitely, or more precisely, for as long as the information qualifies as a trade secret.
  • Return or destruction of materials. When the agreement ends, the receiving party is usually required to return all copies of confidential information or destroy them and provide written certification. Some agreements allow limited retention of electronic copies created by automatic backup systems, but only if those copies remain subject to the confidentiality obligations.

Federal Limits You Can’t Contract Around

Whistleblower Immunity

The Defend Trade Secrets Act requires every employer to include a whistleblower immunity notice in any contract or agreement that governs trade secrets or confidential information. The notice must tell workers they cannot be held criminally or civilly liable for disclosing a trade secret in confidence to a government official or attorney for the purpose of reporting a suspected legal violation, or in a court filing made under seal.3Office of the Law Revision Counsel. 18 US Code 1833 – Procedures for Seizure of Property

An employer can satisfy this either by including the notice directly or by cross-referencing a separate policy document covering reporting procedures. The penalty for skipping it is meaningful: an employer who fails to provide the notice loses the right to recover exemplary damages or attorney fees in any trade secret lawsuit against that employee.3Office of the Law Revision Counsel. 18 US Code 1833 – Procedures for Seizure of Property If you sign a confidentiality agreement at work and see no mention of whistleblower rights, that’s a sign the agreement wasn’t drafted carefully.

Sexual Harassment and Assault Claims

Since December 2022, the Speak Out Act has made predispute nondisclosure and nondisparagement clauses unenforceable when the underlying dispute involves sexual assault or sexual harassment that allegedly violates federal, tribal, or state law. The word “predispute” is critical. A confidentiality clause you signed when hired cannot later be used to silence you about harassment, but a confidentiality clause in a settlement signed after the dispute arose can still be enforceable. The law preserves the right of employers and employees to protect trade secrets and proprietary information, so it doesn’t void an entire NDA, only the portions that would prevent disclosure of sexual misconduct claims.4Office of the Law Revision Counsel. 42 US Code 19403

Court Orders and Subpoenas

No confidentiality clause overrides a court order, subpoena, or regulatory demand. If you receive a subpoena for information covered by a confidentiality agreement, you have to comply. Well-drafted agreements include a compelled disclosure provision requiring the receiving party to notify the disclosing party promptly before responding, giving them a chance to seek a protective order. If your agreement lacks that language, you should still notify the other party as a practical matter, but the subpoena takes priority.

When a Clause Won’t Hold Up

Not every confidentiality clause survives a legal challenge. Courts have refused to enforce clauses so broad they effectively prevent someone from working in their field, particularly when the definition of “confidential information” covers general knowledge and skills the person developed over a career. A clause claiming everything an employee ever learned on the job is confidential will struggle in court, because that amounts to a noncompete disguised as a confidentiality obligation.

Other enforceability problems include a missing or inadequate definition, an unreasonably long duration for non-trade-secret information, and, in some jurisdictions, lack of consideration. When someone signs at the start of employment, the job itself is the consideration. When an employer asks a current employee to sign a new, more restrictive agreement mid-employment, some courts require additional consideration beyond merely keeping the job. The rules vary significantly by jurisdiction.

Confidentiality provisions that restrict employees from discussing wages, working conditions, or workplace safety can also be struck down, because federal labor law protects employees’ rights to engage in those conversations. A clause broad enough to arguably cover those topics risks being found overbroad even if the employer never intended to reach them.

What a Breach Costs

Violating a confidentiality clause is a breach of contract, and the remedies range from money to court orders to forfeiture of benefits received under the agreement.

Monetary Damages

The most straightforward remedy is compensatory damages to cover the actual financial losses caused by the unauthorized disclosure. In trade secret cases, the Defend Trade Secrets Act allows recovery of both actual losses and any unjust enrichment the breaching party gained from using the information.5Office of the Law Revision Counsel. 18 US Code 1836 – Civil Proceedings A court can also award damages measured as a reasonable royalty for the unauthorized use. Some agreements include a liquidated damages provision, a predetermined dollar amount, which sidesteps the often-difficult task of proving exact losses from leaked information.

When trade secret misappropriation is willful and malicious, a court can award exemplary damages up to twice the compensatory amount.5Office of the Law Revision Counsel. 18 US Code 1836 – Civil Proceedings That multiplier makes intentional breaches far more expensive than accidental ones.

Injunctive Relief

When money alone cannot undo the harm, because the information is still spreading for example, a court can issue an injunction ordering the breaching party to stop disclosing and to take affirmative steps to protect the information, such as returning or destroying confidential materials.5Office of the Law Revision Counsel. 18 US Code 1836 – Civil Proceedings In emergencies, the wronged party can seek a temporary restraining order without notifying the other side first, but only by showing through specific facts that immediate and irreparable injury will occur before the other party can be heard. A TRO granted without notice expires within 14 days unless extended.6Legal Information Institute. Federal Rules of Civil Procedure Rule 65

Attorney Fees

In general breach-of-contract cases, each side pays its own legal costs unless the agreement includes a prevailing party clause shifting fees to the loser. Trade secret cases are different. Under the DTSA, a court can award reasonable attorney fees to the prevailing party when the misappropriation was willful and malicious, or when a claim was brought or opposed in bad faith.5Office of the Law Revision Counsel. 18 US Code 1836 – Civil Proceedings This cuts both ways. Filing a frivolous trade secret claim can result in the defendant recovering legal costs from you.

Other Consequences

Context shapes consequences beyond the courtroom. An employee who breaches a confidentiality clause typically faces immediate termination. In a settlement agreement, a breach can require the violating party to forfeit or return the entire settlement payment. And even where formal legal action doesn’t follow, a breach can damage business relationships and professional reputation in ways no court order repairs.