Non-Disclosure Agreement (Kenya)

A Non-Disclosure Agreement (NDA) in Kenya is a legally binding contract under which one or more parties agrees to keep designated confidential information secret and to refrain from using or disclosing that information without the disclosing party's prior written consent. Known interchangeably as a Confidentiality Agreement or Secrecy Agreement, the NDA is one of the most frequently used commercial documents in Kenya's business landscape, spanning technology, finance, manufacturing, and professional services.

The legal foundation of a Kenya NDA rests on the Law of Contract Act (Cap. 23), which is the received English law of contract as applied in Kenya — incorporating common law principles of offer, acceptance, consideration, and intention to create legal relations. Because Kenyan contract law is predominantly judge-made common law supplemented by the Law of Contract Act Cap. 23, confidentiality obligations are enforceable through the High Court (Commercial Division) or, for disputes below KES 1,000,000, the Small Claims Court established under the Small Claims Court Act No. 2 of 2016.

The Data Protection Act No. 24 of 2019, enforced by the Office of the Data Protection Commissioner (ODPC), adds a critical statutory dimension to confidentiality arrangements involving personal data. Where confidential information includes personal data — names, identification numbers, financial details, health information, or biometric data — the NDA must be consistent with the data protection principles in Section 25 of the Data Protection Act: lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; and integrity and confidentiality. Breach of the Data Protection Act can result in regulatory penalties from the ODPC independently of any contractual remedies.

In practice, Kenya NDAs are used in a wide range of commercial contexts: when negotiating a potential merger or acquisition involving BRS-registered companies; when a founder shares a business concept with prospective investors registered with the Capital Markets Authority (CMA); when a technology company engages a subcontractor to develop proprietary software; when an employer onboards a new employee who will access trade secrets; and when a licensor discloses technical specifications to a potential licensee.

A Kenya NDA may be unilateral (one party discloses, one party receives) or mutual/bilateral (both parties disclose and receive confidential information in the course of a business relationship). The appropriate structure depends on the commercial purpose. In investor-founder discussions, a unilateral NDA is common. In joint venture negotiations or technology cross-licensing discussions, a mutual NDA better reflects the symmetric flow of information.

Breaches of a Kenya NDA are actionable before the High Court of Kenya (Commercial Division) in Nairobi or the relevant Environment and Land Court (ELC) if the confidential information concerns land or property. Remedies include a prohibitory injunction restraining further disclosure, damages for loss suffered, an account of profits where the receiving party has commercially exploited the disclosed information, and an order for delivery up or destruction of documents containing the confidential information. The Nairobi Centre for International Arbitration (NCIA) provides an alternative forum for confidential dispute resolution, commonly chosen in commercial NDAs to preserve business relationships.

The legal framework governing the Non-Disclosure Agreement (Kenya) in Kenya draws on several key statutes and regulatory bodies. Under the Companies Act No. 17 of 2015, the Registrar of Companies at the Office of the Attorney General maintains the register of Kenyan companies. Section 3 of the Law of Contract Act (Cap. 23) governs contractual obligations. The Competition Authority of Kenya (CAK) enforces the Competition Act No. 12 of 2010. The Kenya Revenue Authority (KRA) administers corporate tax under the Income Tax Act (Cap. 470). The High Court of Kenya has unlimited original jurisdiction under Article 165 of the Constitution of Kenya 2010. Parties executing a Non-Disclosure Agreement (Kenya) in Kenya should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Law of Contract Act Cap. 23 sets the foundational requirements.

A Kenya Non-Disclosure Agreement is required whenever a party intends to share sensitive business, technical, or personal information with another party and wishes to control the use and further disclosure of that information.

An NDA is required before sharing a new business concept, product design, or proprietary algorithm with a potential business partner, investor, or acquirer. Without a signed NDA, the disclosing party has no contractual remedy if the recipient exploits the information for their own benefit — a risk highlighted repeatedly in High Court of Kenya commercial judgments.

An NDA is needed when engaging a third-party service provider — a software developer, accountancy firm, marketing agency, or management consultant — who will access client databases, financial records, or internal strategies. The Data Protection Act No. 24 of 2019 additionally requires a Data Processing Agreement where the service provider processes personal data on behalf of the disclosing party, and the NDA can be structured to satisfy both requirements simultaneously.

An NDA is required when an employer onboards a new employee in a senior, technical, or client-facing role. While Section 46 of the Employment Act No. 11 of 2007 imposes a general duty of fidelity on employees, a written confidentiality agreement provides more specific and enforceable obligations. The Kenya Employment Contract template on forms-legal.com includes an embedded confidentiality clause, but a standalone NDA is preferred where the confidentiality obligations need to survive termination of employment for a defined period.

An NDA is needed during due diligence for an acquisition of a private limited company registered with BRS, where the target company discloses financial accounts, customer contracts, intellectual property details, and employee records. The NDA governs the use of all disclosed materials and provides a clear destruction or return obligation if the transaction does not proceed.

Preparing an NDA before any substantive discussion takes place — rather than retrospectively — confirms the disclosing party's rights are protected from the first disclosure. Courts in Kenya will not imply confidentiality obligations retroactively, and relying on the general law of confidence without a written agreement carries significant evidentiary risk in NCIA arbitration and High Court proceedings.

A Kenya Non-Disclosure Agreement must include the following essential elements to be effective and enforceable under Kenyan law.

Parties: Full legal names and addresses of the disclosing party and the receiving party. For corporate parties, the BRS registration number (format: PVT-XXXXXXXX for private limited companies) confirms the entity's legal standing. National Identity Card (NIC) numbers should be recorded for individual parties.

Definition of Confidential Information: A precise and thorough definition of what constitutes confidential information covered by the NDA. The definition should be broad enough to capture unwritten disclosures (oral, visual, or demonstrated information marked as confidential) while excluding information that is publicly available, already known to the recipient, independently developed without reference to the disclosed information, or rightfully received from a third party without restriction.

Permitted Purpose: A statement of the specific purpose for which confidential information may be used. Courts in Kenya and the ODPC both apply the principle of purpose limitation — information disclosed for due diligence in a potential acquisition cannot be repurposed for competitive intelligence.

Duration of Confidentiality Obligations: The period during which the receiving party must maintain confidentiality. Unlike some jurisdictions, Kenyan courts do not automatically invalidate perpetual confidentiality obligations for genuine trade secrets; however, for general commercial information, a defined term of 3 to 5 years is common and more easily enforced in practice.

Permitted Disclosures: Exceptions permitting the receiving party to disclose to employees, agents, or advisers on a need-to-know basis, provided such persons are bound by equivalent obligations. Disclosure required by law, court order, or the ODPC must also be carved out.

Data Protection Compliance: Where confidential information includes personal data as defined in Section 2 of the Data Protection Act No. 24 of 2019, the NDA should include obligations consistent with the Act's data protection principles and the ODPC's registration requirements. The receiving party must not process personal data outside the permitted purpose.

Remedies and Injunctive Relief: An acknowledgment that breach will cause irreparable harm entitling the disclosing party to seek an emergency injunction from the High Court (Commercial Division) in Nairobi without the need to demonstrate quantifiable damages — consistent with the equitable jurisdiction of the High Court.

Governing Law and Jurisdiction: Kenya law shall govern the NDA, with disputes referred to the courts of Kenya, specifically the High Court (Commercial Division), or to the Nairobi Centre for International Arbitration (NCIA) under the Arbitration Act No. 4 of 1995 (revised 2022).

Return or Destruction: An obligation on the receiving party to return or destroy all documents and materials containing confidential information upon demand or upon termination of the relationship. Forms-legal.com recommends specifying a clear timeline — typically 14 days from demand — to avoid disputes about compliance.

Additional compliance elements for a Non-Disclosure Agreement (Kenya) used in Kenya include: Under the Companies Act No. 17 of 2015, the Registrar of Companies at the Office of the Attorney General maintains the register of Kenyan companies. Section 3 of the Law of Contract Act (Cap. 23) governs contractual obligations. The Competition Authority of Kenya (CAK) enforces the Competition Act No. 12 of 2010. The Kenya Revenue Authority (KRA) administers corporate tax under the Income Tax Act (Cap. 470). The High Court of Kenya has unlimited original jurisdiction under Article 165 of the Constitution of Kenya 2010. Forms-legal.com provides this template as a starting point for Kenya-compliant documentation.