Employee Confidentiality Agreement Spain (Acuerdo de Confidencialidad de Empleado)

An Employee Confidentiality Agreement Spain (Acuerdo de Confidencialidad de Empleado) is a binding written contract between a Spanish employer (empresario) and an employee (trabajador) under which the employee agrees not to disclose, use for personal benefit, or share with third parties any confidential business information, trade secrets, or proprietary data belonging to the employer, both during and after the employment relationship. The agreement is governed principally by Article 5.a of the Estatuto de los Trabajadores (Real Decreto Legislativo 2/2015, de 23 de octubre — ET), which establishes as a basic employee duty the obligation to comply with the orders and instructions of the employer in the ordinary exercise of its management powers and to carry out the agreed work with due diligence and good collaboration; by Ley 1/2019, de 20 de febrero, de Secretos Empresariales (LSE), transposing EU Directive 2016/943 into Spanish law; and by Ley Orgánica 3/2018 (LOPDGDD) supplementing RGPD on employee personal data handling.

The Ley 1/2019 de Secretos Empresariales defines a secreto empresarial in Article 1 as any information that is secret (not generally known in the sector), has commercial value because of its secrecy, and has been the subject of reasonable steps to maintain that secrecy. The LSE Articles 3 through 5 distinguish lawful from unlawful acquisition, use, and disclosure of trade secrets. Article 5 specifically covers disclosure by persons who accessed the secret through the performance of their duties — i.e. employees — making the LSE the primary statute governing post-employment confidentiality obligations.

Article 21 of the Estatuto de los Trabajadores additionally governs non-competition and exclusivity obligations (pactos de no competencia y exclusividad) that may accompany employee confidentiality agreements, permitting post-contractual non-compete clauses of up to 2 years for technical workers and 6 months for other workers, provided the employer pays adequate economic compensation (compensación económica adecuada) during the restriction period. The Tribunal Supremo Sala de lo Social has confirmed that non-compete clauses without compensation are void under Article 21.2 ET.

The Constitución Española 1978 Article 20 protects freedom of expression (libertad de expresión), which the Tribunal Constitucional has balanced against employer confidentiality interests in a series of rulings — particularly in digital communications and whistleblowing contexts. The Ley 2/2023, de 20 de febrero, Reguladora de la Protección de las Personas que Informen sobre Infracciones Normativas y de Lucha contra la Corrupción (Whistleblowing Law) provides whistleblower protection and limits the extent to which employee confidentiality agreements may be used to suppress reporting of illegal conduct.

Employee data processed under the employment relationship — including names, salaries, performance records, and contact details — falls under RGPD Article 9 special category protection where health data is involved, and under LOPDGDD Article 87 which recognises employees' right to digital privacy in the workplace. The Agencia Española de Protección de Datos (AEPD) has published specific workplace privacy guidelines addressing monitoring of employee communications, access to work devices, and data retention periods for HR records.

The legal framework governing the Employee Confidentiality Agreement Spain (Acuerdo de Confidencialidad de Empleado) in Spain draws on several key statutes and regulatory bodies. Under the Estatuto de los Trabajadores (ET) RDL 2/2015, Spanish employment law governs contracts, dismissals, and working conditions. The Tesorería General de la Seguridad Social (TGSS) administers social security contributions. The Servicio Público de Empleo Estatal (SEPE) manages unemployment benefits. The Inspección de Trabajo y Seguridad Social enforces labour compliance. The Juzgados de lo Social hear employment disputes under the Ley Reguladora de la Jurisdicción Social (Ley 36/2011). Parties executing a Employee Confidentiality Agreement Spain (Acuerdo de Confidencialidad de Empleado) in Spain should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Estatuto de los Trabajadores (RDL 2/2015) art. 5.a; Ley 1/2019 de Secretos Empresariales sets the foundational requirements.

An Employee Confidentiality Agreement Spain is needed whenever an employer hires or already employs individuals who have access to sensitive business information, customer data, proprietary technology, pricing strategy, or other commercially valuable non-public information.

The agreement is needed when hiring senior managers (directivos), technical specialists (ingenieros, desarrolladores), sales employees with access to customer lists (listados de clientes), or finance staff with access to unpublished financial data. The Estatuto de los Trabajadores Article 5.a general duty of loyalty provides baseline protection, but a written Employee Confidentiality Agreement Spain creates explicit, specific, and easily enforceable obligations backed by Ley 1/2019 LSE remedies.

An Employee Confidentiality Agreement Spain is needed when an employee will access the employer's customer database (base de datos de clientes) containing personal data — the agreement should incorporate data protection obligations under RGPD and LOPDGDD, specifying that the employee processes personal data only within the scope of their duties and in compliance with the employer's data protection policy.

The agreement is needed when an employee is transferred to a new role involving access to trade secrets or strategic information not previously accessible, when a contractor or temporary worker (trabajador de Empresa de Trabajo Temporal — ETT) is given access to the employer's systems, or when a business partner's employees are granted access to the employer's confidential information under a joint project.

An Employee Confidentiality Agreement Spain is needed when a company is preparing for a sale (M&A process) and key management employees must be briefed on the transaction — NDAs prevent premature market disclosure that could violate CNMV insider trading rules under Ley 6/2023 del Mercado de Valores.

The agreement is also needed when an employer has suffered a previous confidentiality breach — an employee sharing customer lists or pricing data with a competitor — and wishes to implement enforceable written protections going forward, including clear post-employment restrictions within the limits of Estatuto de los Trabajadores Article 21.

Parties in Spain should prepare a Employee Confidentiality Agreement Spain (Acuerdo de Confidencialidad de Empleado) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under the Estatuto de los Trabajadores (ET) RDL 2/2015, Spanish employment law governs contracts, dismissals, and working conditions. The Tesorería General de la Seguridad Social (TGSS) administers social security contributions. The Servicio Público de Empleo Estatal (SEPE) manages unemployment benefits. The Inspección de Trabajo y Seguridad Social enforces labour compliance. The Juzgados de lo Social hear employment disputes under the Ley Reguladora de la Jurisdicción Social (Ley 36/2011). Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.

A valid Employee Confidentiality Agreement Spain under the Estatuto de los Trabajadores and Ley 1/2019 de Secretos Empresariales must contain the following essential elements.

Identification of Parties: Full name of the employer (empresario) — company name, NIF, and registered address — and the employee (trabajador) — full name, DNI or NIE, and job title (puesto de trabajo) and professional category (grupo profesional) under the applicable sector convenio colectivo. The date and reference of the underlying employment contract (contrato de trabajo) to which this agreement is ancillary should be stated.

Definition of Confidential Information: A thorough definition of información confidencial covering: trade secrets under Ley 1/2019 LSE Article 1; customer and supplier lists (listados de clientes y proveedores); pricing data and commercial strategies; technical processes, formulas, software source code, and inventions; financial data not published in cuentas anuales; and any information marked as confidential by the employer. The definition should identify categories specific to the employer's business sector.

Scope of Obligations: Clear statement that the employee must: (1) maintain strict confidentiality regarding all defined confidential information; (2) use confidential information solely for the performance of employment duties; (3) not copy, transmit, or store confidential information on personal devices or non-employer systems; and (4) promptly notify the employer of any actual or suspected breach of confidentiality or unauthorised access to employer systems.

Duration: The confidentiality obligation during the employment term is absolute and tied to the Estatuto de los Trabajadores Article 5.a duty of loyalty. Post-employment duration — typically 2 to 5 years — must be specified and must comply with Ley 1/2019 LSE Article 5 for trade secrets and Código Civil Article 1255 for other confidential information.

Non-Compete Clause (if included): Post-contractual non-compete restriction under Estatuto de los Trabajadores Article 21.2 — maximum 2 years for técnicos titulados, 6 months for other workers — with clear statement of adequate economic compensation (compensación económica adecuada) payable by the employer during the restriction period. Without compensation, the clause is void under ET Article 21.2.

Data Protection Obligations: Employee acknowledgment of RGPD and LOPDGDD obligations — processing personal data only within the scope of employment, following the employer's data protection policy, and reporting personal data breaches to the employer's data protection officer (Delegado de Protección de Datos — DPD) or data protection contact within the required 72-hour window under RGPD Article 33.

Return of Materials: Obligation to return all physical and electronic copies of confidential information upon termination of employment, including files stored on work computers, cloud storage (almacenamiento en la nube), and personal devices used for work purposes under the BYOD (bring your own device) policy.

Remedies: Reference to civil remedies under Ley 1/2019 LSE Articles 9 through 11 and Código Civil Articles 1101 and 1106 — damages, injunctions (medidas cautelares), and publication of judgment. Serious breach may also constitute just cause for disciplinary dismissal (despido disciplinario) under Estatuto de los Trabajadores Article 54 for breach of good faith and breach of contractual obligations.

Whistleblower Protection: Express acknowledgment that the confidentiality obligations do not restrict the employee's right to report suspected illegal conduct through the employer's internal channel (canal interno de denuncias) or to the relevant authority, protected under Ley 2/2023 Reguladora de la Protección de las Personas que Informen sobre Infracciones Normativas.

Forms-legal.com provides this Employee Confidentiality Agreement Spain template as a starting point for HR documentation. Each agreement should be reviewed by a qualified abogado laboralista to confirm compliance with the applicable sector convenio colectivo, the employee's specific role, and the employer's data protection obligations under LOPDGDD.

Under the Estatuto de los Trabajadores (ET) RDL 2/2015, Spanish employment law governs contracts, dismissals, and working conditions. The Tesorería General de la Seguridad Social (TGSS) administers social security contributions. The Servicio Público de Empleo Estatal (SEPE) manages unemployment benefits. The Inspección de Trabajo y Seguridad Social enforces labour compliance. The Juzgados de lo Social hear employment disputes under the Ley Reguladora de la Jurisdicción Social (Ley 36/2011).