A non-disclosure agreement is a legally binding contract in which one or more parties agree to keep specified information private and not share it with outsiders. It creates a confidential relationship, usually between a business and an employee, contractor, investor, or potential partner, and gives the party sharing sensitive information a legal remedy if the other side leaks it. NDAs show up most often during hiring, contractor engagements, investor pitches, merger talks, and joint ventures.
One-Way or Mutual: Which Form You Need
NDAs come in two basic forms, and choosing the wrong one can leave a party unprotected.
A unilateral (one-way) NDA applies when only one side is sharing sensitive information. This is the standard setup when a company hires a contractor, brings on a new employee, or pitches a product to an investor. The disclosing party gets protection; the receiving party accepts restrictions.
A mutual (bilateral) NDA is used when both sides plan to share confidential information with each other. Joint ventures, merger discussions, and partnership negotiations almost always call for a mutual agreement because both entities are exposing financials, technical data, or business strategy. Using a one-way NDA in a two-way relationship leaves one party’s information completely unprotected.
NDAs are sometimes confused with non-compete clauses. They are not the same thing. A non-compete restricts where you can work after leaving a company; an NDA restricts what you can say about information you learned. The Federal Trade Commission has described NDAs as “well-established means to protect proprietary and other sensitive information.”1Federal Trade Commission. FTC Announces Rule Banning Noncompetes
What Goes Inside a Working NDA
Several provisions do the real work, and getting them right is the difference between a contract a court will enforce and one that falls apart when you need it.
Who Is Bound and What Is Protected
Every NDA has to clearly identify the parties and define what counts as “confidential information.” That definition is the single most important provision in the document. Vague language is the fastest route to an unenforceable agreement. A strong definition names specific categories: financial records, customer lists, product designs, software code, marketing strategies, manufacturing processes. The more concrete the description, the easier it is to prove a breach later.
How Long the Obligation Lasts
The term clause sets the length of the secrecy obligation. Most NDAs run between three and five years, though genuine trade secrets can warrant indefinite protection. The clock typically starts when the agreement is signed and keeps running after the business relationship ends. Shorter durations fit information that loses value quickly; longer terms fit deeply proprietary data that takes years to become obsolete.
Return or Destruction of Materials
A frequently overlooked clause addresses what happens to confidential materials when the agreement expires or the relationship ends. Strong NDAs require the receiving party to return all documents, files, and copies, or to destroy them in a way that makes the information unrecoverable. Many agreements also require written certification that destruction is complete. Common exceptions let the receiving party keep electronic backups created through routine IT processes and copies needed for legal compliance or pending litigation.
Governing Law and Venue
The governing law clause picks which state’s law applies to disputes, and the venue clause picks which court will hear the case. Without these, the parties can end up fighting in an inconvenient or unfavorable jurisdiction. Specifying exclusive jurisdiction also prevents a breaching party from shopping for a friendlier court.
What an NDA Cannot Cover
Even a well-drafted NDA cannot lock down every piece of information discussed between the parties. Certain categories are exempt from confidentiality obligations as a matter of law.
- Publicly available information. Anything already in the public domain, such as published research, news reports, or issued patents, cannot be treated as confidential. If information becomes public later through no fault of the receiving party, it typically loses protected status as well.
- Prior knowledge. If the receiving party can show they already had the information before signing, they are not bound as to that specific data.
- Independent development. Information the receiving party develops on their own, without relying on the disclosed material, falls outside the NDA’s reach.
- Court orders and legal process. A party served with a subpoena or court order has to comply, even if that means disclosing otherwise protected information. Most NDAs explicitly acknowledge this.
These exclusions exist to keep NDAs from being used to suppress information that legitimately belongs to the receiving party or that the legal system needs access to.
What Makes an NDA Enforceable
Signing an NDA does not automatically mean a court will enforce it. Several conditions have to be met, and this is where many agreements fail when tested.
Consideration
Like any contract, an NDA needs consideration, meaning both parties receive something of value. When an NDA is signed as part of onboarding, the job itself is the consideration. It gets trickier when an employer asks a current employee to sign one mid-employment. In that situation, continued employment alone may not be enough in every jurisdiction, and additional consideration such as a bonus, raise, or promotion may be necessary.
Reasonable Scope
Courts will not enforce an NDA that sweeps too broadly. A definition of confidential information that essentially covers “everything the employee ever learns” is a red flag. The scope has to be tailored to the disclosing party’s legitimate business interests. Courts generally look at whether the protected information is genuinely secret, whether the time period is reasonable, and whether the restrictions are unduly burdensome on the receiving party. An agreement that tries to classify publicly available industry knowledge as confidential is unlikely to survive challenge.
The Disclosing Party’s Own Conduct
This one catches companies off guard: if the disclosing party doesn’t take reasonable steps to keep the information secret, a court may refuse to enforce the NDA. Sharing “confidential” data in all-hands meetings, leaving sensitive documents in unlocked common areas, or granting broad access without tracking who sees what can all undermine enforceability. The agreement on paper has to match the reality on the ground.
The Whistleblower Notice Employers Keep Forgetting
The Defend Trade Secrets Act of 2016 created a federal requirement that trips up employers who overlook it. Any contract with an employee that governs the use of trade secrets or confidential information must include a notice of whistleblower immunity. The notice has to inform the employee that they cannot be held criminally or civilly liable for disclosing a trade secret to a government official or an attorney for the purpose of reporting a suspected violation of law, or in a court filing made under seal.2Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions
The notice also has to explain that an employee who files a retaliation lawsuit may share the trade secret with their attorney and use it in court, provided any documents containing the secret are filed under seal.2Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions
The penalty for skipping this notice is real. An employer that fails to include it, or at least a cross-reference to a company policy document containing this information, forfeits the right to recover exemplary damages and attorney fees in any trade secret misappropriation lawsuit against that employee.2Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions This is one of the most commonly missed requirements in employment NDAs, and it costs employers leverage when they need it most.
Where Federal and State Law Override an NDA
NDAs once operated with few external limits. Recent legislation has imposed sharp boundaries, especially around workplace harassment and discrimination.
The Speak Out Act
Enacted in 2022, the Speak Out Act makes pre-dispute nondisclosure and nondisparagement clauses unenforceable when the underlying dispute involves sexual assault or sexual harassment. The key word is pre-dispute. An NDA signed at the start of employment cannot later be used to silence an employee who experiences harassment. Confidentiality provisions in settlement agreements reached after a dispute arises remain permissible. The law also explicitly preserves the right to protect trade secrets and proprietary information, so standard business NDAs are unaffected.3Congress.gov. Text – S.4524 – 117th Congress (2021-2022) Speak Out Act
Tax Consequences for Harassment Settlements
Under Section 162(q) of the Internal Revenue Code, employers cannot deduct settlement payments or attorney fees related to sexual harassment or sexual abuse if the settlement is subject to an NDA. This forces a choice: keep the settlement confidential and lose the tax deduction, or drop the NDA and deduct the payment as a business expense. On large settlements, the lost deduction can add tens of thousands of dollars to the employer’s actual cost.4Office of the Law Revision Counsel. 26 USC 162 – Trade or Business Expenses
State-Level Restrictions
A growing number of states have passed their own restrictions on NDAs in harassment and discrimination contexts. Some prohibit confidentiality provisions in settlement agreements that would prevent disclosure of factual information about harassment claims. Others void NDAs that restrict an employee from discussing discriminatory or unfair employment practices unless specific safeguards are built in, such as applying the restriction equally to both sides and preserving the employee’s right to report to government agencies. The details vary considerably by state, and the trend is toward greater transparency.
What Happens When Someone Breaches an NDA
When someone violates an NDA, the disclosing party has several legal options. The right remedy depends on whether the leak is ongoing, how much damage has already occurred, and what the agreement itself provides for.
Injunctions to Stop the Leak
The most urgent remedy is usually an injunction, a court order forcing the breaching party to stop further disclosure immediately. Under the Defend Trade Secrets Act, courts can grant injunctions to prevent actual or threatened misappropriation and can require affirmative steps to protect the trade secret.5Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings Getting one typically requires showing that the harm is ongoing or imminent and that monetary damages alone would not be adequate.
Monetary Damages
If the breach has already caused financial harm, the disclosing party can recover damages for actual losses caused by the misappropriation, plus any unjust enrichment the breaching party gained from using the information. When misappropriation is willful and malicious, the court may award exemplary damages of up to twice the compensatory amount.5Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings Some NDAs also include liquidated damages clauses that set a predetermined penalty for each violation, removing the need to prove exact financial losses in court.
Attorney Fees
Under the DTSA, a court may award reasonable attorney fees to the prevailing party in cases involving willful and malicious misappropriation or bad faith claims.5Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings Many NDAs go further with a “prevailing party” clause that shifts all litigation costs to whichever side loses, regardless of whether the breach was willful. That provision discourages frivolous breach claims and gives the disclosing party a more realistic path to full recovery.
Signing, Cost, and Record-Keeping
Once the terms are finalized, execution is straightforward. Both parties, or their authorized representatives, sign the document. Digital signatures are widely accepted and legally valid for NDAs. Each signature should be dated to establish when the confidentiality obligations took effect.
Notarization is not required for an NDA to be enforceable. A signed agreement between parties with adequate consideration is enough. Notarization can still be useful in high-stakes situations where a party might later claim they never signed, because it provides independent verification of identity and signature.
Each party should keep a complete copy. For businesses, that means storing the executed agreement where legal counsel and compliance teams can access it. Attorney fees to draft or review a standard business NDA typically run from roughly $400 to $500 as a flat fee, with complex or heavily negotiated agreements costing more. Many businesses start with a template from a legal service platform and then have an attorney customize the provisions, which reduces cost while still producing a document tailored to the specific relationship.