Non-Disclosure Agreement — Mutual (Kenya)
MUTUAL NON-DISCLOSURE AGREEMENT
Law of Contract Act Cap. 23 | Data Protection Act No. 24 of 2019
THIS MUTUAL NON-DISCLOSURE AGREEMENT ("Agreement") is made on [Agreement Date]
BETWEEN:
(1) [Party One Name] (ID/BRS: [Party One ID/BRS]), of [Party One Address], represented by [Party One Representative] ("Party One"); and
(2) [Party Two Name] (ID/BRS: [Party Two ID/BRS]), of [Party Two Address], represented by [Party Two Representative] ("Party Two").
Party One and Party Two are together referred to as the "Parties" and each individually as a "Party".
RECITALS
A. The Parties wish to explore and evaluate the following: [Disclosure Purpose] (the "Purpose").
B. In connection with the Purpose, each Party (as Disclosing Party) may disclose, and the other Party (as Receiving Party) may receive, Confidential Information.
C. The Parties wish to set out the terms on which Confidential Information will be disclosed and protected.
1. DEFINITIONS
1.1 "Confidential Information" means any and all information or data — whether written, oral, electronic, or in any other form — disclosed by one Party (the "Disclosing Party") to the other Party (the "Receiving Party") that: (a) is designated as confidential at the time of disclosure; (b) is of a nature that a reasonable person would understand it to be confidential; or (c) relates to the business, operations, financial position, technology, customers, suppliers, know-how, trade secrets, intellectual property, and strategies of the Disclosing Party. Confidential Information includes but is not limited to: business plans, financial projections, technical specifications, software source code, algorithms, product designs, customer lists, pricing information, and personnel data. Additional specific confidential information: [Additional Confidential Information Types].
1.2 Confidential Information does not include information that: (a) is or becomes publicly available through no fault of the Receiving Party; (b) was known to the Receiving Party prior to disclosure, without any obligation of confidence; (c) is independently developed by the Receiving Party without reference to the Confidential Information; or (d) is required to be disclosed by law, court order, or a regulatory authority, provided that the Receiving Party gives the Disclosing Party prompt written notice and cooperates with the Disclosing Party to seek a protective order.
1.3 "Purpose" has the meaning given in Recital A.
1.4 Personal data inclusion: [Includes Personal Data]. Where Confidential Information includes personal data regulated under the Data Protection Act No. 24 of 2019 administered by the Office of the Data Protection Commissioner (ODPC), the Parties shall execute a separate Data Processing Agreement as required by Section 43 of that Act.
2. CONFIDENTIALITY OBLIGATIONS
2.1 Each Party as Receiving Party undertakes to the Disclosing Party to: (a) keep all Confidential Information strictly secret and confidential; (b) use the Confidential Information solely for the Purpose; (c) not disclose, copy, or reproduce Confidential Information to or for any third party without the prior written consent of the Disclosing Party; (d) restrict access to Confidential Information to its directors, officers, employees, and professional advisers who have a genuine need to know the information for the Purpose and who are bound by equivalent confidentiality obligations; and (e) apply at least the same standard of care to protect the Confidential Information as it applies to its own confidential information of similar sensitivity, and in any event no less than reasonable care.
2.2 Each Party shall promptly notify the other Party upon becoming aware of any actual or suspected unauthorised disclosure, access to, or use of Confidential Information, and shall cooperate with the Disclosing Party to mitigate the effects of such breach.
2.3 Upon request by the Disclosing Party, or upon termination of this Agreement, the Receiving Party shall promptly return or certify the secure destruction of all Confidential Information (in all forms and formats) belonging to the Disclosing Party, and shall confirm such return or destruction in writing.
3. TERM
3.1 This Agreement commences on the date first written above and continues for a disclosure period of [Disclosure Period] year(s), unless terminated earlier by either Party on 30 days' written notice.
3.2 The confidentiality obligations in Clause 2 shall survive termination or expiry of this Agreement for a period of [Confidentiality Survival Period] from the date of termination or expiry, or in the case of information constituting a trade secret, indefinitely.
4. INTELLECTUAL PROPERTY
4.1 Nothing in this Agreement transfers or licences any intellectual property right from the Disclosing Party to the Receiving Party. Each Party retains all right, title, and interest in its own intellectual property, including registered rights under the Industrial Property Act No. 3 of 2001 administered by the Kenya Industrial Property Institute (KIPI), and copyright under the Copyright Act Cap. 130 administered by the Kenya Copyright Board (KECOBO).
4.2 The Receiving Party shall not apply for any patent, trademark, or other intellectual property right based on or derived from the Disclosing Party's Confidential Information without the prior written consent of the Disclosing Party.
5. REMEDIES
5.1 Each Party acknowledges that a breach of this Agreement may cause the Disclosing Party irreparable harm for which monetary damages may not be an adequate remedy. Accordingly, the Disclosing Party is entitled to seek urgent injunctive relief from the High Court of Kenya under Order 40 of the Civil Procedure Rules, in addition to all other remedies available at law or in equity under the Judicature Act Cap. 8.
5.2 In addition to injunctive relief, the Disclosing Party may claim damages for loss suffered as a result of any breach of this Agreement.
6. GENERAL
6.1 This Agreement is governed by the laws of Kenya, including the Law of Contract Act Cap. 23 and the equitable principles received under the Judicature Act Cap. 8.
6.2 Disputes shall be resolved by: [Dispute Resolution], in [Governing County].
6.3 No Party may assign its rights or obligations under this Agreement without the other Party's prior written consent.
6.4 This Agreement constitutes the entire agreement between the Parties on the subject of confidentiality and supersedes all prior agreements, representations, and understandings on the same subject.
6.5 This Agreement may be executed in counterparts, each of which constitutes an original, and together they constitute one and the same document.
IN WITNESS WHEREOF, the Parties have signed this Mutual Non-Disclosure Agreement on the date first written above.
Party One — Authorised Signatory
________________
Signature
Party Two — Authorised Signatory
________________
Signature
Witness
________________
Signature
What Is a Non-Disclosure Agreement — Mutual (Kenya)?
A Non-Disclosure Agreement — Mutual in Kenya protects sensitive information by binding the parties to defined confidentiality obligations. It restricts disclosure and use of designated confidential information between the disclosing and receiving parties.
The legal enforceability of a Mutual NDA in Kenya rests on the Law of Contract Act Cap. 23, which governs the formation and enforcement of all contracts in Kenya. For the Mutual NDA to be binding, it must satisfy the requirements of Section 2 of Cap. 23: offer and acceptance, consideration, capacity of the parties, and legality of purpose. The consideration in a mutual NDA is the reciprocal promise of each party to maintain the confidentiality of the other's information — each party's undertaking serves as consideration for the other's reciprocal undertaking, making the agreement binding without any monetary payment.
The Data Protection Act No. 24 of 2019, administered by the Office of the Data Protection Commissioner (ODPC), intersects with the Mutual NDA where the confidential information disclosed includes personal data — for example, customer lists, employee records, or patient information. Where one party discloses personal data to the other in the context of the NDA, the receiving party becomes a Data Processor under Section 43 of the Data Protection Act, and the parties must also execute a Data Processing Agreement (DPA) as required by the Act. The Mutual NDA should therefore be drafted to complement — and not conflict with — any DPA obligations where personal data is involved. The ODPC registers data controllers and processors under the Data Protection (Registration of Data Controllers and Data Processors) Regulations 2021.
Intellectual property protection is a critical overlay on the Mutual NDA framework in Kenya. The confidential information shared under an NDA frequently includes trade secrets, know-how, technical data, software source code, and business plans that may or may not be protectable as registered intellectual property under the Industrial Property Act No. 3 of 2001 (administered by the Kenya Industrial Property Institute, KIPI), the Copyright Act Cap. 130 (administered by the Kenya Copyright Board, KECOBO), or the Trade Marks Act Cap. 506. The Mutual NDA provides contractual protection for confidential information regardless of whether it qualifies for statutory intellectual property protection, and is therefore broader in scope than registered IP rights alone.
Kenya's High Court — Commercial and Tax Division — has consistently enforced well-drafted NDA provisions, granting injunctive relief to restrain imminent breaches of confidence, and awarding damages for actual loss caused by unauthorised disclosure or use of confidential information. The Judicature Act Cap. 8 incorporates English common law equitable principles into Kenyan law, including the equitable duty of confidence that supplements contractual NDA obligations. The principles of breach of confidence developed in English case law — including the landmark Coco v AN Clark (Engineers) Ltd [1969] RPC 41 — are applicable in Kenyan courts by virtue of the reception of English common law under the Judicature Act.
A Mutual NDA should be clearly distinguished from a confidentiality clause within a larger contract (such as a services agreement or employment contract), from a non-compete clause (which restricts competition rather than disclosure), and from a trade secret protection policy (which is an internal governance document). Forms-legal.com provides this Kenya Mutual NDA template as a practical starting point for businesses entering confidential commercial discussions.
When Do You Need a Non-Disclosure Agreement — Mutual (Kenya)?
A Mutual Non-Disclosure Agreement is needed in Kenya at the earliest stage of any business discussion or relationship where both parties will share sensitive commercial information and where neither party can fully protect its interests using a unilateral NDA.
A Mutual NDA is needed when two companies are exploring a potential merger, acquisition, joint venture, or strategic partnership, and each party must share financial projections, customer data, technology documentation, or business strategies with the other during the due diligence process. Investment bankers, financial advisers, and advocates enabling such transactions in Nairobi routinely require all parties to execute a Mutual NDA before any confidential data room is opened.
A Mutual NDA is required when two technology companies, startups, or research institutions are evaluating a co-development, licensing, or technology transfer arrangement and each intends to share proprietary technical information — including software source code, algorithms, hardware designs, or clinical data — with the other. The Industrial Property Act No. 3 of 2001 protects registered patents administered by the Kenya Industrial Property Institute (KIPI), but technical know-how and trade secrets not registered as patents require contractual protection under a Mutual NDA.
A Mutual NDA is needed when a Kenyan business is in discussions with a foreign investor, supplier, or distribution partner that requires access to the business's customer lists, pricing, and operational data, while the foreign party is simultaneously sharing its own proprietary product information, financial terms, and market strategy.
A Mutual NDA is required when two regulated financial institutions — banks, insurance companies, or investment funds — are sharing supervisory or commercial information as part of a proposed transaction, given that both parties are subject to confidentiality obligations under their respective regulatory frameworks administered by the Central Bank of Kenya (CBK) under the Banking Act Cap. 488 or the Capital Markets Authority (CMA) under the Capital Markets Act (Cap. 485A).
A Mutual NDA is needed when an employer and a senior employee or executive consultant are negotiating the terms of a new engagement, and both parties need to share business-sensitive information to assess the suitability of the arrangement, before a formal employment contract or consultancy agreement is executed.
What to Include in Your Non-Disclosure Agreement — Mutual (Kenya)
A valid and enforceable Mutual Non-Disclosure Agreement under the Law of Contract Act Cap. 23 in Kenya must include the following essential elements.
Parties: Full legal names, Business Registration Service (BRS) registration numbers or National ID numbers, registered addresses, and the names of the authorised signatories for each party. Both parties must have full legal capacity to contract under Section 11 of the Law of Contract Act Cap. 23. Where a party is a company, the signatory must have actual or ostensible authority under the Companies Act No. 17 of 2015.
Definition of Confidential Information: A precise definition of what constitutes Confidential Information under the agreement. The definition should cover both written and oral disclosures, technical data, business plans, financial information, customer and supplier lists, software and algorithms, pricing and cost structures, and any other information designated as confidential by the disclosing party. Standard exclusions from confidentiality — information that is publicly available, independently developed by the receiving party, or disclosed under a legal obligation — must be expressly stated to avoid ambiguity.
Purpose: The specific purpose for which the Confidential Information may be disclosed and used — for example, 'to evaluate a potential co-development agreement between the parties' or 'to conduct due diligence in connection with a potential acquisition.' Restricting the use of Confidential Information to the specified purpose is a critical control mechanism in the Mutual NDA and limits the risk of the receiving party using the information for unrelated commercial advantage.
Obligations of the Receiving Party: Each party's obligations as a receiving party, including: keeping the Confidential Information secret; using the information only for the agreed purpose; not disclosing the information to any third party without the disclosing party's prior written consent; restricting access to the information to employees, officers, and professional advisers who need to know the information for the agreed purpose, and who are themselves bound by equivalent confidentiality obligations; and notifying the disclosing party promptly upon becoming aware of any actual or suspected unauthorised disclosure.
Standard of Care: The standard of care required to protect Confidential Information — typically 'reasonable care' as applied by the High Court of Kenya, which requires measures at least equivalent to those the receiving party applies to protect its own confidential information of similar sensitivity.
Term and Survival: The period during which disclosures may be made (typically one to three years), and the period for which the confidentiality obligations survive the termination or expiry of the agreement. Trade secrets and highly sensitive technical information may attract a perpetual or indefinitely surviving confidentiality obligation under the agreement.
Return and Destruction of Information: An obligation on each party to return or certify the destruction of the other party's Confidential Information upon request or upon termination of the NDA, and to confirm such return or destruction in writing. The Data Protection Act No. 24 of 2019 and the ODPC's requirements for data deletion and return should be reflected in this clause where personal data is involved.
Remedies: An acknowledgment that breach of the Mutual NDA would cause irreparable harm not adequately compensable by damages, entitling the non-breaching party to seek urgent injunctive relief from the High Court of Kenya under the Civil Procedure Act Cap. 21 and Order 40 of the Civil Procedure Rules, in addition to any available damages.
Governing Law and Dispute Resolution: Kenyan law as the governing law, with disputes resolved by the High Court of Kenya or arbitration before the Nairobi Centre for International Arbitration (NCIA) under its Commercial Arbitration Rules.
Forms-legal.com provides this Kenya Mutual NDA template as a strong starting point for businesses protecting confidential information shared in commercial discussions. For transactions involving particularly sensitive technology, personal data regulated by the ODPC, or complex multi-party arrangements, legal review by an advocate admitted to the Law Society of Kenya (LSK) is recommended before execution.
Under the Companies Act No. 17 of 2015, the Registrar of Companies at the Office of the Attorney General maintains the register of Kenyan companies. Section 3 of the Law of Contract Act (Cap. 23) governs contractual obligations. The Competition Authority of Kenya (CAK) enforces the Competition Act No. 12 of 2010. The Kenya Revenue Authority (KRA) administers corporate tax under the Income Tax Act (Cap. 470). The High Court of Kenya has unlimited original jurisdiction under Article 165 of the Constitution of Kenya 2010.
Cite this page
Reference this free template in an article, syllabus, or research note:
Forms Legal. (2026). Non-Disclosure Agreement — Mutual (Kenya) (Kenya) [Legal document template]. Forms Legal. https://forms-legal.com/kenya/business/contracts/mutual-non-disclosure-agreement-kenya
"Non-Disclosure Agreement — Mutual (Kenya) (Kenya)." Forms Legal, 2026, https://forms-legal.com/kenya/business/contracts/mutual-non-disclosure-agreement-kenya.
@misc{formslegal-mutual-non-disclosure-agreement-kenya,
author = {{Forms Legal}},
title = {Non-Disclosure Agreement — Mutual (Kenya) (Kenya)},
year = {2026},
howpublished = {\url{https://forms-legal.com/kenya/business/contracts/mutual-non-disclosure-agreement-kenya}},
note = {Free legal document template}
}Frequently Asked Questions
The key difference between a mutual (bilateral) NDA and a one-way (unilateral) NDA in Kenya lies in the direction of confidentiality obligations. In a one-way NDA, only one party — the receiving party — undertakes to keep the other party's information confidential. This is appropriate where only one party is disclosing sensitive information: for example, where an inventor shares a business concept with a potential investor, or where a company shares its proprietary system design with a software developer. In a mutual NDA, both parties simultaneously undertake to keep each other's information confidential, recognising that the flow of confidential information is genuinely two-directional. This is appropriate for joint venture discussions, merger and acquisition due diligence, technology partnerships, and any other arrangement where both parties need to share sensitive information to evaluate the proposed transaction. From a drafting perspective under the Law of Contract Act Cap. 23, a mutual NDA has the advantage that each party's promise to maintain confidentiality serves as consideration for the other party's reciprocal promise, removing any potential challenge on consideration grounds. A one-way NDA that is not executed as a deed requires some other form of consideration — such as a nominal payment, access to a system, or the commencement of a business relationship — to be enforceable.
The duration of a Non-Disclosure Agreement in Kenya — both the period during which disclosures may be made and the period for which confidentiality obligations survive — should be tailored to the nature of the information and the commercial context. Under the Law of Contract Act Cap. 23, there is no statutory maximum or minimum term for an NDA, and the courts will enforce whatever term the parties have agreed, provided it is not contrary to public policy. For general commercial negotiations — for example, merger discussions, supplier negotiations, or investment discussions — a disclosure period of one to two years and a confidentiality survival period of two to five years after termination is standard in Kenyan commercial practice. For highly sensitive technical information — such as proprietary software source code, pharmaceutical formulations, or manufacturing processes — a longer survival period of five to ten years, or even a perpetual obligation, may be appropriate where the information retains commercial value for an extended period. For information that constitutes a trade secret as recognised under the common law principles received into Kenyan law via the Judicature Act Cap. 8 — information that derives its commercial value specifically from its secrecy — a perpetual confidentiality obligation is defensible, as the obligation mirrors the indefinite protection that trade secret status affords. The Limitation of Actions Act Cap.
An NDA containing post-employment confidentiality obligations can be enforced against a former employee in Kenya, provided the obligations are reasonable in scope and duration and comply with the Employment Act No. 11 of 2007. The Employment and Labour Relations Court (ELRC), which has exclusive jurisdiction over employment disputes under Article 162 of the Constitution of Kenya 2010, will apply a reasonableness test to post-employment restraints. The ELRC has held that a post-employment confidentiality obligation protecting genuinely confidential information — such as specific trade secrets, proprietary technical know-how, or customer-specific pricing — is enforceable as a reasonable protection of a legitimate business interest under the Law of Contract Act Cap. 23. However, a confidentiality clause that is so broadly drafted as to prevent the employee from using general skills, knowledge, and experience acquired in the normal course of employment will be treated as an unreasonable and unenforceable restraint of trade. The key distinction drawn by Kenyan courts is between the employer's confidential information (protectable) and the employee's personal skill set and general professional knowledge (not protectable by a confidentiality clause). Post-employment non-compete clauses — which prevent a former employee from working for a competitor — are treated as even more restrictive than confidentiality clauses and are subject to a more stringent reasonableness test in terms of geographic scope, duration, and the legitimate interest protected.
The stamp duty position of a Mutual NDA in Kenya under the Stamp Duty Act Cap. 480 depends on whether the NDA falls within one of the taxable instrument categories listed in the Schedule to the Act. A standalone Mutual NDA that does not involve the transfer of property, shares, or other dutiable assets, and does not create an interest in land, generally does not attract ad valorem stamp duty under the Stamp Duty Act Cap. 480. However, some categories of agreements listed in the Schedule to the Stamp Duty Act attract a nominal fixed stamp duty — currently KES 200 — as an 'agreement' or 'memorandum of agreement.' In practice, many commercial Mutual NDAs in Kenya are not formally stamped, and unstamped NDAs are admissible in evidence before Kenyan courts on payment of the outstanding duty and penalty at the time of use in proceedings. The Kenya Revenue Authority (KRA) Stamp Duty Office administers stamp duty assessment and collection. Where an NDA is accompanied by or forms part of a larger transaction — for example, a joint venture agreement, a technology licence, or a share purchase agreement — the stamp duty position should be assessed for the transaction as a whole by an advocate or tax adviser. For NDAs intended for use in cross-border transactions or to be submitted to foreign courts or regulatory authorities, notarisation and apostille under the Hague Apostille Convention (to which Kenya acceded in 2022) may be required, though this is separate from the domestic stamp duty requirement.
A party whose Mutual NDA has been breached in Kenya has access to several remedies under the Law of Contract Act Cap. 23, the equitable jurisdiction of the High Court, and — where personal data is involved — the Data Protection Act No. 24 of 2019. The primary remedy for a threatened or imminent breach of an NDA is an injunction — a court order restraining the breaching party from making or continuing unauthorised disclosures. The High Court of Kenya has power under Order 40 of the Civil Procedure Rules to grant temporary injunctions on an urgent application (ex parte in extreme cases) where: there is a serious question to be tried; the balance of convenience favours granting the injunction; and damages would not be an adequate remedy. A permanent injunction may be granted after the full hearing of the case. Damages are available to compensate for actual financial loss caused by the breach of the NDA, including loss of competitive advantage, lost business opportunities, and the cost of mitigating the effects of the disclosure. The assessment of damages in NDA breach cases can be technically complex, and the High Court may appoint an expert to assist in quantification. An account of profits — requiring the breaching party to disgorge profits made through the use of confidential information — is available as an equitable remedy under the Judicature Act Cap. 8. Where the breach involves misuse of personal data contrary to the Data Protection Act No.
This template is provided for informational purposes only and does not constitute legal advice. Laws vary by jurisdiction and change over time. Consult a qualified attorney for advice specific to your situation.Full disclaimer
Found an error? Let us knowRelated Documents
You may also find these documents useful:
Confidentiality Agreement (Kenya)
A Kenya Confidentiality Agreement (mutual or one-way) protecting trade secrets, business information, and personal data, compliant with the Law of Contract Act Cap. 23 and the Data Protection Act No. 24 of 2019.
Founder Agreement (Kenya)
A Kenya Founder Agreement establishing equity split, roles, vesting schedules, IP assignment, and exit provisions for co-founders of a company registered under the Companies Act No. 17 of 2015.
Co-Development Agreement (Kenya)
A Kenya Co-Development Agreement for joint development of products, software, or real estate projects, compliant with the Law of Contract Act Cap. 23, Companies Act No. 17 of 2015, and Data Protection Act No. 24 of 2019.
Investment Agreement (Kenya)
A Kenya Investment Agreement governing equity or debt investment in a Kenyan company, compliant with the Capital Markets Act Cap. 485A, Companies Act No. 17 of 2015, and Capital Markets (Securities) (Public Offers, Listing and Disclosures) Regulations 2002.
Outsourcing Agreement (Kenya)
A Kenya Outsourcing Agreement governing the provision of business process or IT services by a service provider to a client, compliant with the Law of Contract Act Cap. 23, the Data Protection Act No. 24 of 2019, and the Employment Act No. 11 of 2007.