A do-not-disclose agreement, more commonly called a non-disclosure agreement or NDA, is a legally binding contract that creates a confidential relationship between the people or businesses who sign it. The document spells out what information stays private, who is allowed to see it, how long the secrecy lasts, and what the owner can do if someone leaks it. These contracts show up in job offers, vendor relationships, merger talks, investor pitches, and settlement negotiations, and the details on the page are the difference between real protection and a document that falls apart the first time it’s tested.
What the Agreement Actually Contains
Every workable NDA starts by naming the parties. The document needs each signer’s full legal name or registered business name and a mailing address where legal papers can be served. When a company signs, the individual executing the agreement should have actual authority to bind that entity. Sloppy identification here can hand a breaching party an easy escape in court.
The core of the contract is the definition of confidential information. Vague language like “all business information” invites disputes. Stronger agreements list specific categories: customer lists, pricing models, source code, financial projections, manufacturing processes, or whatever the disclosing party actually needs to protect. The definition should make clear that confidential information includes material shared verbally, in writing, and through physical or virtual access to facilities.
A well-drafted agreement also identifies the “permitted purpose,” meaning the specific reason the receiving party gets access in the first place. If you share financial projections so a potential investor can evaluate a deal, the agreement should say so. That language prevents the recipient from quietly repurposing your data for something you never agreed to.
Sharing With Advisors and Employees
The receiving party almost always needs to loop in accountants, lawyers, or key employees. Good agreements handle this with a “need to know” clause: the receiving party can share confidential information with representatives directly involved in the permitted purpose, provided those representatives are bound by confidentiality obligations at least as protective as the NDA itself. The receiving party typically stays on the hook for any breach by its representatives, which creates a strong incentive to keep the circle small.
One-Way and Mutual Versions
A unilateral NDA protects information flowing in one direction. One party discloses, the other receives, and only the receiver has secrecy obligations. This is the standard structure in employment settings, where a company gives a new hire access to internal systems, trade secrets, or client databases.
A mutual NDA protects both sides. Each party is simultaneously discloser and receiver. This structure dominates merger discussions, joint ventures, and any negotiation where both sides need to open their books. If you’re evaluating a potential partner’s financial health while they evaluate yours, you both need the same protection.
What the Agreement Cannot Cover
No NDA can lock up information that’s already freely available. Standard exclusions cover data that is already public through news reporting, government filings, or other open sources. If the receiving party can show it already had the information before signing, confidentiality obligations don’t attach to that knowledge. The same goes for information the receiving party develops on its own without using the disclosing party’s data, or information that becomes available through a third party who had no duty to keep it secret.
These carve-outs reflect a principle embedded in trade secret law. Under the Uniform Trade Secrets Act, adopted in some form by the vast majority of states, information qualifies for trade secret protection only if it derives real economic value from being kept secret and the owner takes reasonable steps to maintain that secrecy. If either condition fails, the NDA can’t manufacture protection that the underlying law wouldn’t provide.
Subpoenas and Court Orders
A receiving party hit with a subpoena or court order demanding protected information has to comply. The NDA doesn’t override a judge’s authority. What the agreement can do is require the receiving party to notify the disclosing party as soon as possible after receiving the subpoena, giving the owner a chance to seek a protective order or fight the disclosure. Many agreements set a specific notice window.
Whistleblower and Reporting Channels
Several federal laws carve out territory that no NDA can touch. Under the Defend Trade Secrets Act, any person who discloses a trade secret to a government official or an attorney for the sole purpose of reporting a suspected legal violation is immune from criminal and civil liability. If the disclosure is made in a court filing, the document must be filed under seal. Every contract with an employee that governs trade secrets or confidential information must include a notice of this immunity. An employer who skips the notice forfeits the right to recover exemplary damages or attorney fees in any action against that employee under the DTSA. The notice requirement applies to contractors and consultants, not just traditional employees.1Office of the Law Revision Counsel. 18 U.S. Code 1833 – Exceptions to Prohibitions
Securities law adds another limit. No person may take any action to prevent an individual from communicating directly with SEC staff about a possible securities law violation, including enforcing or threatening to enforce a confidentiality agreement against someone making such a report.2eCFR. Staff Communications with Individuals Reporting Possible Securities Law Violations
Sexual Assault and Harassment Claims
Since December 2022, federal law has made pre-dispute non-disclosure clauses unenforceable when the underlying dispute involves sexual assault or sexual harassment. The Speak Out Act targets agreements signed before the dispute arose. If an employee signed a broad NDA on their first day of work and later experienced harassment, the NDA cannot be used to silence them about that harassment.3Congress.gov. Speak Out Act – Public Law 117-224 Settlement agreements signed after allegations are made remain enforceable, and the law doesn’t disturb NDA provisions that protect legitimate trade secrets. State and local laws may provide broader protections.
What Makes the Agreement Legally Binding
An NDA is a contract, so it needs the same building blocks any contract needs: an offer, acceptance, and consideration. Consideration means each side gives up something of value. In a job-offer scenario, the employment itself is usually enough. For an existing employee signing a new NDA, the picture gets murkier. Some states accept continued employment as adequate consideration, but others require something extra like a bonus, a raise, or a promotion. Failing to provide adequate consideration is one of the most common reasons NDAs get thrown out.
Both parties need legal capacity to sign, meaning each signer is at least eighteen, mentally competent, and not acting under duress or fraud. If someone was pressured into signing or misled about what the document actually says, a court can void the agreement.
An NDA also cannot be used to conceal criminal activity or obstruct a law enforcement investigation. Courts consistently refuse to enforce confidentiality clauses that serve as a shield for illegal conduct. Agreements whose restrictions are so broad they effectively prevent someone from earning a living in their field face serious enforceability problems in many jurisdictions.
Severability
Even a flawed NDA isn’t necessarily dead on arrival. Most well-drafted agreements include a severability clause, which tells the court that if one provision is unenforceable, the rest of the contract survives. Many courts will “blue pencil” the offending language, striking or narrowing the problematic provision rather than voiding the whole document. A severability clause won’t save a fundamentally overreaching NDA, but it gives a judge room to preserve the reasonable parts.
Severance Agreements and the NLRB
Employers bundling a non-disclosure clause into a severance package should know about a 2023 National Labor Relations Board decision. In McLaren Macomb, the Board ruled that simply offering a severance agreement requiring employees to broadly waive their rights under federal labor law violates the National Labor Relations Act. The case targeted provisions that prohibited employees from disparaging the employer and from disclosing the agreement’s terms. Employees have a federally protected right to engage in collective activity for mutual aid or protection, and an NDA that chills those rights is unenforceable regardless of whether the employee actually signs.4National Labor Relations Board. Board Rules that Employers May Not Offer Severance Agreements Requiring Employees to Broadly Waive Labor Law Rights5Office of the Law Revision Counsel. 29 U.S. Code 157 – Right of Employees as to Organization, Collective Bargaining, Etc.
How Long the Obligation Lasts
A good agreement addresses two distinct timeframes: how long the parties will be sharing information, and how long the secrecy obligation lasts after the relationship ends. A consulting engagement might last two years, but the duty to keep the information confidential could extend five or ten years beyond the final day of work. For information that qualifies as a true trade secret, some agreements impose no time limit at all. A trade secret retains protection for as long as it stays secret and retains economic value, so putting an expiration date on the obligation can actually destroy the underlying legal protection the NDA was meant to preserve.
When the agreement ends, the receiving party is typically required to return all physical documents and permanently destroy any digital copies, then certify in writing that they’ve done so. Failing to follow these exit procedures can be a standalone breach, even if the receiving party never actually disclosed anything to a third party. The best agreements spell out what “destruction” means for electronic files, including copies stored in email archives, cloud backups, and collaboration platforms.
Remedies When Someone Leaks
When someone violates an NDA, the injured party has several possible paths to recovery, none of them automatic.
The most urgent remedy is an injunction ordering the breaching party to stop disclosing protected information. A court can issue a temporary restraining order on an emergency basis at the start of a case, sometimes without advance notice to the other side, to freeze the situation while the litigation gets underway. Even if the NDA contains a clause stating that breach would cause irreparable harm, courts treat that as a factor rather than a guarantee; the moving party still needs actual evidence.
Money damages are the other main lever. Under the Defend Trade Secrets Act, a court can award damages for actual losses caused by misappropriation, plus any unjust enrichment the breaching party gained. If the misappropriation was willful and malicious, the court can double the damages. Reasonable attorney fees go to the prevailing party when the misappropriation was willful or when a claim was brought in bad faith.6Office of the Law Revision Counsel. 18 U.S. Code 1836 – Civil Proceedings
Proving actual dollar losses from a confidentiality breach is notoriously difficult, which is why some NDAs include a liquidated damages clause specifying a preset amount. Courts will enforce these clauses only if actual damages would be hard to calculate and the preset amount reflects a reasonable estimate of the likely harm. A figure pulled out of thin air, or one wildly disproportionate to any realistic loss, will be struck down as an unenforceable penalty.
In the United States, each side normally pays its own legal costs. NDAs can override this default with a “prevailing party” clause requiring the losing side to cover the winner’s reasonable attorney fees. These clauses add real deterrent value because the breaching party faces not only damages but also the bill for the other side’s legal team.
Signing Electronically
NDAs signed electronically are just as enforceable as those signed with ink. Federal law provides that a signature or contract cannot be denied legal effect solely because it’s in electronic form.7Office of the Law Revision Counsel. 15 U.S. Code 7001 – General Rule of Validity For the signature to hold up, both parties need to consent to conducting the transaction electronically. The signer should also be informed of the right to request a paper copy and the option to withdraw consent. An email chain showing both parties discussed and agreed to the terms can serve as evidence of authenticity, though dedicated e-signature platforms create a much cleaner record.