Non-Disclosure Agreement (NDA) (Australia)

A Non-Disclosure Agreement (NDA) in Australia obliges the receiving party to keep specified confidential information secret and limits its use to the agreed purpose, with the obligations enforceable under the Corporations Act 2001 (Cth). It restricts disclosure and use of designated confidential information between the disclosing and receiving parties.

Under Australian common law, an NDA is enforceable as a contract provided it meets the basic requirements of offer, acceptance, consideration, and certainty of terms. Unlike some jurisdictions, Australia has no single federal NDA statute; enforceability is governed by the common law of the relevant state or territory, supplemented at the federal level by the Competition and Consumer Act 2010 (Cth) (which may affect unfair contract terms) and the Privacy Act 1988 (Cth) (which applies wherever the Confidential Information includes personal information about identifiable individuals).

In addition to contractual enforcement, Australian law recognises a broader equitable doctrine of confidence — derived from the equity courts and affirmed by the High Court in cases such as Moorgate Tobacco Co Ltd v Philip Morris Ltd (1984) 156 CLR 414 — which may protect confidential information even in the absence of a written agreement. However, a well-drafted NDA provides far greater certainty and enforceability than relying on equitable obligations alone, as it defines precisely what is confidential, how it may be used, and what remedies are available upon breach.

A one-way (unilateral) NDA — such as this template — is appropriate where only one party is sharing information. A mutual NDA is used where both parties will disclose confidential information to each other.

The legal framework governing the Non-Disclosure Agreement (NDA) (Australia) in Australia draws on several key statutes and regulatory bodies. Under the Corporations Act 2001 (Cth), the Australian Securities and Investments Commission (ASIC) regulates companies and financial services. Section 127 of the Corporations Act 2001 governs company execution of documents. The Australian Competition and Consumer Commission (ACCC) enforces the Competition and Consumer Act 2010 (Cth). The Australian Taxation Office (ATO) administers the Goods and Services Tax under the A New Tax System (Goods and Services Tax) Act 1999. The Federal Court of Australia and Supreme Courts of each state have jurisdiction over corporate disputes. Parties executing a Non-Disclosure Agreement (NDA) (Australia) in Australia should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Corporations Act 2001 (Cth) sets the foundational requirements.

A Non-Disclosure Agreement is appropriate in a wide range of commercial and professional situations in Australia. You should use an NDA whenever you are sharing information that has real commercial value and that you wish to prevent from entering the public domain or being used for any purpose other than the one you have authorised.

The most common circumstances in which an Australian NDA is required include: discussions with a prospective business partner, investor, or joint venture partner before a formal agreement is reached; negotiations for the purchase or sale of a business (due diligence), where the buyer requires access to financial records, customer data, and operational information; engaging contractors, consultants, or freelancers who will have access to proprietary systems, source code, or client information; licensing negotiations where trade secrets or patentable inventions are discussed; and employment relationships where senior employees, executives, or technical staff have access to confidential business strategies.

An NDA is particularly valuable when intellectual property is being shared with a third party prior to a patent application being filed, since disclosure without confidentiality protection can constitute prior art that undermines patent protection under the Patents Act 1990 (Cth). Similarly, in the context of creative industries, NDAs protect undisclosed scripts, concepts, or designs before formal IP protection is sought.

Australian businesses should also consider an NDA in the context of franchise arrangements, where the franchisor's system, manual, and operational procedures are proprietary; and in mergers and acquisitions transactions, where detailed financial, operational, and customer information must be shared during the due diligence process but the transaction may ultimately not proceed.

For situations where both parties will be sharing confidential information with each other — such as in a joint venture or partnership exploration — a mutual NDA provides bilateral protection and avoids the need for two separate one-way agreements.

A well-drafted Non-Disclosure Agreement for use in Australia should contain several key provisions that distinguish it from NDAs used under other legal systems.

Australian and English case law has directly shaped how confidentiality obligations are enforced. In Moorgate Tobacco Co Ltd v Philip Morris Ltd (1984) 156 CLR 414, the High Court of Australia confirmed that Australian equity recognises a distinct cause of action for breach of confidence that is independent of contract — meaning confidentiality obligations can be enforced even without a written NDA, provided the information was disclosed in circumstances where confidence was reasonably expected. The practical lesson is that a written NDA supplements, but does not entirely replace, the equitable duty of confidence. In Coco v AN Clark (Engineers) Ltd [1969] RPC 41, Megarry J articulated the three foundational elements of the equitable duty of confidence (applied consistently by Australian courts): (1) the information must have the necessary quality of confidence; (2) it must have been imparted in circumstances importing an obligation of confidence; and (3) there must be an unauthorised use to the detriment of the disclosing party. Australian courts — including the Federal Court in cases concerning trade secrets, source code, and client lists — continue to apply the Coco framework. In Del Casale v Artedomus (Aust) Pty Ltd [2007] NSWCA 172, the NSW Court of Appeal held that a former employee's use of confidential customer information to solicit the employer's clients after resignation constituted a breach of both contractual and equitable obligations of confidence. The court emphasised that customer relationship data and pricing information are protectable confidential information even without a formal NDA, but that a well-drafted written agreement provides far greater evidentiary certainty about the scope of the obligation and the remedies available.

The definition of Confidential Information is the most critical clause in any NDA. It should be drafted with sufficient breadth to cover all genuinely sensitive information while being specific enough to give the Receiving Party clear notice of what is protected. Australian courts will scrutinise overly vague definitions, and information that is not adequately described may not receive protection. The definition should clearly state what is excluded — information already in the public domain, information independently developed by the Receiving Party, and information disclosed by a third party without restriction.

The obligations clause sets out precisely what the Receiving Party may and may not do with the Confidential Information. Under Australian law, this typically includes obligations to maintain confidentiality, to use the information only for the specified Purpose, to restrict access to authorised personnel, and to promptly notify the Disclosing Party of any unauthorised disclosure.

The Privacy Act 1988 (Cth) compliance clause is important for Australian NDAs. Where the Confidential Information includes personal information about identified individuals — such as customer lists, employee records, or medical data — the Receiving Party must handle that information in accordance with the 13 Australian Privacy Principles (APPs). APP 6 restricts use and disclosure, APP 8 imposes requirements for cross-border disclosure, and APP 11 requires reasonable security measures.

The governing law and jurisdiction clause must specify an Australian state or territory. Australian courts — including the Federal Court and state Supreme Courts — have broad jurisdiction to enforce NDAs and to grant injunctive relief. The choice of governing state affects which courts will hear disputes and how the NDA is interpreted.

The remedies clause acknowledges that damages alone may be inadequate in the event of a breach and expressly preserves the Disclosing Party’s right to seek injunctive relief from the courts. Australian courts have broad powers to grant both interlocutory and final injunctions to prevent further disclosure of confidential information.

Additional compliance elements for a Non-Disclosure Agreement (NDA) (Australia) used in Australia include: Under the Corporations Act 2001 (Cth), the Australian Securities and Investments Commission (ASIC) regulates companies and financial services. Section 127 of the Corporations Act 2001 governs company execution of documents. The Australian Competition and Consumer Commission (ACCC) enforces the Competition and Consumer Act 2010 (Cth). The Australian Taxation Office (ATO) administers the Goods and Services Tax under the A New Tax System (Goods and Services Tax) Act 1999. The Federal Court of Australia and Supreme Courts of each state have jurisdiction over corporate disputes. Forms-legal.com provides this template as a starting point for Australia-compliant documentation.

Australian NDAs fail to protect confidential information for a predictable set of reasons. Understanding these mistakes before signing an NDA is essential for businesses and individuals seeking meaningful legal protection.

1. Defining Confidential Information too broadly or too vaguely. Clauses that attempt to protect all information disclosed by either party give the Receiving Party no clear notice of what is actually confidential. Australian courts will not enforce obligations that are unreasonably vague. Blanket definitions have been challenged and narrowed by courts interpreting the NDA against the Disclosing Party.

2. No carve-outs for information already in the public domain. Every valid NDA must exclude from its scope information that is or becomes publicly available through no fault of the Receiving Party, information already known to the Receiving Party before disclosure, and information independently developed by the Receiving Party. Without these standard exclusions, the NDA may be unenforceable.

3. Failing to include a purpose limitation. An NDA without a clearly defined Purpose for which the Confidential Information is shared allows ambiguity about whether subsequent uses constitute a breach. The Receiving Party should be permitted to use the information only for the specific evaluation or transaction purpose and nothing else.

4. No Privacy Act 1988 (Cth) compliance clause. Where the Confidential Information includes personal information about identifiable individuals, the Receiving Party must comply with the 13 Australian Privacy Principles (APPs). Failing to include an APP compliance obligation in the NDA exposes the Disclosing Party to risk that the Receiving Party will mishandle personal data, potentially triggering regulatory action by the Office of the Australian Information Commissioner (OAIC).

5. Omitting injunctive relief preservation. Australian courts, as affirmed in cases applying the Moorgate Tobacco Co Ltd v Philip Morris Ltd (1984) 156 CLR 414 equitable framework, have broad jurisdiction to grant urgent injunctions to prevent threatened breaches of confidence. An NDA that does not expressly preserve the right to seek injunctive relief may lead the Receiving Party to argue that damages are an adequate remedy. Always include a clause acknowledging that damages alone may be inadequate and expressly preserving equitable relief.

6. No return or destruction obligation. An NDA that does not require the Receiving Party to return or certify destruction of Confidential Information on termination leaves the Disclosing Party information permanently at risk. established standards requires written certification of destruction within a specified period after the Purpose is complete or the NDA terminates.

7. Inadequate term and post-term obligations. An NDA that expires after 12 months provides very limited protection for trade secrets that may remain commercially sensitive for years or decades. Confidentiality obligations for genuinely sensitive information should survive termination for a minimum of two to five years.

8. Using a one-way NDA when a mutual one is needed. Where both parties will be disclosing confidential information, a one-way NDA protects only the Disclosing Party. As confirmed in Del Casale v Artedomus (Aust) Pty Ltd [2007] NSWCA 172, even without a mutual NDA the equitable duty of confidence may apply, but contractual obligations provide far greater certainty. Use a mutual NDA where both parties will share sensitive information.

9. Failure to address compelled disclosure. An NDA must include a provision addressing what happens if the Receiving Party is compelled by a court order or regulatory body to disclose the Confidential Information. The standard approach requires the Receiving Party to give prompt written notice to the Disclosing Party and cooperate in seeking a protective order before making the compelled disclosure.

10. Failure to execute properly for corporate parties. Under section 127 of the Corporations Act 2001 (Cth), a company can execute a document without a common seal if two directors sign, or a director and company secretary sign together. An NDA signed by a single director without authority may not bind the company. Always confirm the authority of signatories and attach a board resolution authorising execution.