Do You Need an NDA in India? What the Indian Contract Act Says About Confidentiality (2026)

What gives an NDA legal force in India

The Indian Contract Act, 1872 is the foundational statute. Sections 10 and 23 set the baseline: a valid contract requires free consent, lawful consideration, and an object that is not contrary to public policy. A confidentiality agreement that meets those requirements is a binding contract.

Section 27 is the pressure point. It declares agreements in restraint of trade void — and courts read this broadly. The Supreme Court of India has consistently held that Section 27 admits only one statutory exception: agreements made with the seller of goodwill restricting competition within specified local limits. That exception does not apply to employee NDAs or standard commercial confidentiality deals.

Courts have carved out a judicially recognised carve-out, however: post-contractual confidentiality obligations on genuinely proprietary information are treated as distinct from restraints on trade, and they survive Section 27 scrutiny. The key is precision — an NDA that sweeps up general industry knowledge, publicly available information, or ordinary professional skill will be read as a restraint and struck down. An NDA that protects a specific formula, a defined customer list, or a named technical process stands on much firmer ground.

Unilateral vs mutual NDAs: which structure fits your situation

A unilateral NDA runs in one direction — one party discloses, the other receives and agrees to keep the information confidential. Startups sharing pitch decks with investors, employers providing trade processes to new hires, and companies briefing contractors under a statement of work all typically use this structure.

A mutual NDA binds both parties symmetrically. Technology partnerships, joint venture negotiations, and merger discussions usually call for mutual arrangements because both sides expose sensitive information during the process. The drafting discipline required is higher: each party's obligations must be defined with the same specificity, and asymmetric carve-outs (for instance, different exceptions applying to each side) need explicit language rather than ambiguous boilerplate.

Neither structure is inherently stronger. Enforceability depends on the precision of the defined confidential information and the duration of the restriction — not on whether obligations flow one way or both ways.

The trade secret protection gap

India's absence of a dedicated trade secrets statute is a real structural gap. Countries such as the United States have the Defend Trade Secrets Act and the Uniform Trade Secrets Act at the state level. The European Union has its Trade Secrets Directive. India has neither.

Protection in India comes from three overlapping but imperfect sources. First, the NDA itself — a contractual remedy for breach. Second, the Information Technology Act, 2000 and its associated rules, which address unauthorised access to computer systems and data but do not define trade secrets as a property category. Third, equitable doctrine — a party who discloses confidential information received in a relationship of trust may seek an injunction and damages in equity, following the principle that courts of equity act in personam against a conscience bound by confidence.

The practical consequence: if you share proprietary technical information with a joint venture partner under nothing but a handshake, you have a weak equitable claim at best and an uncertain statutory claim. An NDA gives you a contractual cause of action with agreed remedies, which is markedly easier to enforce than an equitable or tortious claim in the Commercial Courts established under the Commercial Courts Act, 2015.

What a defensible NDA must contain under Indian law

A precise definition of confidential information

Broad definitions backfire. If the agreement says "all information shared between the parties," a court applying Section 27 analysis may treat the agreement as a blanket restraint. Define the subject matter by category — trade formulae, customer account data, proprietary source code, manufacturing processes — and consider attaching a schedule listing specific items. Information that is already in the public domain at the date of disclosure should be carved out expressly.

A reasonable duration

Indian courts apply the test of reasonableness when examining time-bound restrictions. Perpetual confidentiality obligations on information that will naturally enter the public domain within a few years invite challenge. Two to five years is a common and defensible range for most commercial contexts. Technical secrets with genuinely long commercial lives can carry longer terms — but if you write "in perpetuity," expect scrutiny.

Permissible disclosure carve-outs

The agreement should acknowledge that the receiving party may be compelled to disclose by law, court order, or regulatory requirement. Without this carve-out, the receiving party faces a conflict between contractual and legal obligations, which Indian courts resolve by reading down the contract rather than holding the statutory obligation in abeyance.

Governing law and dispute resolution

Most commercial NDAs in India specify Indian law and designate a seat of arbitration under the Arbitration and Conciliation Act, 1996. Specifying a High Court with original jurisdiction (Delhi, Bombay, Calcutta, or Madras) as the forum for interim relief pending arbitration is practical — it allows a party to seek an injunction quickly without waiting for the arbitral tribunal to be constituted.

Employee NDAs and the post-employment restraint problem

Employer–employee NDAs are common, but non-compete clauses in employment contracts are almost uniformly void under Section 27 once employment ends. Indian courts have repeatedly refused to enforce post-termination restrictions that prevent a former employee from working in their field.

Confidentiality obligations are different. A clause requiring a former employee not to disclose a specific customer database or a named process formula — without restricting where they work — is a confidentiality obligation, not a trade restraint. Drafted that way, it survives Section 27. Mixed clauses that blend non-compete with confidentiality are treated as severable in some High Court decisions, with the restraint struck and the confidentiality surviving; in others, the entire clause falls. Keeping the obligations separate avoids that ambiguity.

When you actually need one

Founders sharing a business concept with potential co-founders: get a mutual NDA signed before detailed technical discussions. A handshake and good faith provide no contractual remedy if the relationship breaks down.

Companies hiring freelancers or agencies with access to product roadmaps, unreleased features, or client data: a unilateral NDA is a minimum. The IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, under the Information Technology Act, impose additional contractual obligations when personal data is shared with data processors — the NDA alone does not satisfy those requirements, but it anchors the broader data-handling agreement.

Corporate acquisitions and due diligence: standard practice globally, and the same applies in India. Target companies routinely share financial projections, customer contracts, and proprietary processes during due diligence. An NDA signed at the outset of the process, before any data room access, is non-negotiable.

A practical starting point is a well-structured non-disclosure agreement for India, which can be adapted to the specific relationship and information type before consulting a lawyer about jurisdiction-specific customisation.

Enforcement: what happens when someone breaches

Remedies for breach of a confidentiality agreement in India are primarily contractual. The Agreement should specify liquidated damages — a pre-agreed sum that the breaching party pays on disclosure. Under Section 74 of the Indian Contract Act, the court awards reasonable compensation not exceeding the stipulated penalty, but actual proof of loss is not required where the nature of the breach makes assessment difficult.

Injunctive relief is available under the Specific Relief Act, 1963 (as amended in 2018). Courts in India are generally willing to grant temporary injunctions in clear cases of threatened disclosure, particularly where the information is technical and the harm from disclosure would be immediate and irreversible. The Commercial Courts Act, 2015 designates dedicated courts for commercial disputes above a specified pecuniary limit, which means NDA litigation between businesses typically proceeds in a court with dedicated commercial case management — faster than ordinary civil proceedings.

The bottom line

An NDA in India works — provided it is drafted with discipline. India's Section 27 jurisprudence demands that the agreement protect genuinely proprietary information, not suppress ordinary professional knowledge. The absence of a trade secrets statute means the NDA carries the full weight of protection; a weak or over-broad one leaves the disclosing party with little more than a breach of contract claim and contested damages. Write it tightly, define the subject matter specifically, keep the duration reasonable, and keep confidentiality obligations cleanly separate from any non-compete language.