Employee Non-Disclosure Agreement (Pakistan)

An Employee Non-Disclosure Agreement in Pakistan imposes a duty of confidence over the information exchanged, limiting its disclosure and providing remedies for breach.

The Contract Act 1872, enacted during British rule and retained as Pakistani law after independence in 1947, governs the formation, validity, and enforcement of all contracts including NDAs. Section 27 of the Contract Act 1872 renders void agreements in restraint of trade — however, Pakistani courts have consistently distinguished between restraint of trade (void) and confidentiality obligations (valid), holding that an NDA protecting genuine confidential information does not constitute an unlawful restraint of trade. The Lahore High Court, Sindh High Court, and Islamabad High Court have each upheld employee NDAs in commercial disputes, particularly in the pharmaceutical, IT, banking, and FMCG sectors.

The Prevention of Electronic Crimes Act 2016 (PECA), which criminalises unauthorised access to information systems and the disclosure of electronically stored data, provides criminal law reinforcement for NDAs covering digital confidential information — a particularly important consideration given the prevalence of data breaches, corporate espionage, and cyber-theft in Pakistan's growing technology sector. Section 3 of PECA 2016 criminalises unauthorised access to any information system; Section 6 criminalises unauthorised copying or transmission of data. An employee who breaches an NDA by forwarding confidential files via WhatsApp, email, or USB drive may face both civil liability under the Contract Act 1872 and criminal prosecution under PECA 2016 before the Federal Investigation Agency (FIA) Cybercrime Wing.

For technology companies, software development firms, and IT-enabled services (ITES) businesses in Pakistan's Lahore, Karachi, and Islamabad technology clusters, the employee NDA is the primary legal tool protecting source code, algorithms, client project specifications, and software architecture from disclosure to competitors or use in competing freelance projects. Pakistan's freelancing industry — ranked among the world's largest by platforms such as Upwork and Fiverr — creates particular risks of employees simultaneously working on competing client projects, making strong NDA provisions essential.

In the pharmaceutical and healthcare sector, regulated by the Drug Regulatory Authority of Pakistan (DRAP) under the Drugs Act 1976, employee NDAs protect confidential drug formulations, clinical trial data, and regulatory dossiers submitted to DRAP for drug registration. In the banking sector regulated by the State Bank of Pakistan (SBP), employees handling customer data are subject to banking secrecy obligations under the Banking Companies Ordinance 1962, which are reinforced by employee NDAs. Financial institutions subject to the Anti-Money Laundering Act 2010 and the Financial Monitoring Unit (FMU) STR reporting requirements must confirm NDAs do not inadvertently restrict mandatory regulatory disclosures.

The Securities and Exchange Commission of Pakistan (SECP) regulates listed companies on the Pakistan Stock Exchange (PSX) and requires that price-sensitive information — merger plans, earnings projections, regulatory filings — be kept confidential until official disclosure under the Securities Act 2015 and the Listed Companies (Code of Corporate Governance) Regulations 2019. Employees in corporate finance, legal, and executive roles who access such information must be covered by NDAs that are consistent with SECP's insider trading prohibition. A breach of both the NDA and the insider trading rules simultaneously exposes the employee to civil liability under the Contract Act 1872 and regulatory sanction by SECP.

Pakistan's Personal Data Protection Bill — which, as of 2025, has been drafted under the Ministry of Information Technology and Telecommunication — will, upon enactment, impose additional obligations on employers regarding employee data and the data of clients whose records employees access. Employee NDAs should be drafted anticipating the Personal Data Protection framework, confirming that confidentiality obligations covering client personal data align with the consent, purpose limitation, and data security requirements of the forthcoming legislation. The National Cyber Security Policy 2021 issued by the Ministry of Information Technology additionally provides guidance on organisational data protection practices that employee NDAs must support.

An Employee Non-Disclosure Agreement in Pakistan is required whenever an employer needs legal protection for confidential business information that employees will access in the course of their duties.

An Employee NDA is needed at the commencement of employment for any role involving access to commercially sensitive information — including sales data, pricing strategies, client contracts, supplier terms, product development roadmaps, or proprietary software. Technology companies in Pakistan's Lahore, Karachi, and Islamabad IT hubs routinely require all developers, project managers, and business analysts to sign NDAs before accessing client systems or proprietary codebases.

An Employee NDA is required when onboarding senior executives, directors, and key managerial personnel who will have access to the company's strategic plans, merger and acquisition targets, financial projections, and board-level information. Listed companies on the Pakistan Stock Exchange (PSX) must take particular care because insider information — governed by the Securities Act 2015 and SECP Regulations — may be covered by both the NDA and the insider trading prohibition.

An Employee NDA is needed when engaging contractors, freelancers, and part-time consultants who access confidential systems or client data but are not full-time employees. Pakistan's large freelancing economy means many companies engage individuals who simultaneously work for multiple clients — an NDA clearly defines the confidentiality obligations even in the absence of an exclusive employment relationship.

An Employee NDA is required when an employee is being promoted to a role with access to more sensitive information — such as transfer to the research and development (R&D) team, the legal department, or the finance and accounts division. A fresh NDA or an addendum to the existing employment contract should be executed at the time of promotion.

An Employee NDA is needed when a company is undergoing a due diligence process in connection with a potential acquisition, merger, or investment round — employees involved in preparing data rooms must be reminded of their confidentiality obligations, and new or updated NDAs should be executed to cover information shared in the due diligence context.

An Employee NDA is required for staff employed in regulated industries where confidentiality is a statutory requirement — banking employees subject to the Banking Companies Ordinance 1962 banking secrecy provisions, insurance industry employees subject to the Insurance Ordinance 2000, and telecommunications staff at Jazz, Telenor Pakistan, Ufone, and Zong who handle subscriber data protected under the Pakistan Telecommunication (Re-organisation) Act 1996 and PTA regulations. In these sectors the NDA reinforces statutory duties and provides a contractual enforcement mechanism independent of regulatory prosecution.

An Employee NDA is needed when staff are engaged to work on government contracts — whether with federal ministries, provincial departments, or state-owned enterprises such as Pakistan International Airlines (PIA), Pakistan Steel Mills, or National Database and Registration Authority (NADRA) — where classified government information, sensitive personal data of citizens, or national security-related materials may be accessed. Government procurement contracts administered under the Public Procurement Regulatory Authority (PPRA) Rules 2004 typically require confidentiality clauses in all sub-contracts and employment arrangements.

A valid Employee Non-Disclosure Agreement in Pakistan under the Contract Act 1872 and the Prevention of Electronic Crimes Act 2016 must contain the following essential elements to be legally effective and commercially protective.

Definition of Confidential Information: A thorough definition specifying what information is covered — trade secrets, client lists, pricing data, financial records, technical specifications, source code, business strategies, supplier terms, employee salary data, and any information designated as confidential by the employer. The definition should extend to information received orally, in writing, or in electronic form, and should explicitly cover information stored in the employer's information systems protected under PECA 2016. Courts in Lahore and Karachi have narrowed the scope of NDAs where the definition of confidential information was excessively vague — precision is essential.

Exclusions from Confidential Information: Standard carve-outs for information that is in the public domain through no breach by the employee, independently developed by the employee without reference to the employer's confidential information, or received from a third party without restriction. These exclusions are necessary for the NDA to be enforceable — an NDA that purports to cover publicly available information will be struck down or narrowed by Pakistani courts applying principles of reasonableness under the Contract Act 1872.

Obligations During Employment: The employee's duty to keep all confidential information strictly secret, to use it only for authorised employment purposes, not to copy or extract it without authorisation, and to comply with the employer's IT security policy and data handling procedures. This section should reference the employer's Acceptable Use Policy for information systems, consistent with PECA 2016 compliance requirements.

Post-Employment Obligations: The duration of the confidentiality obligation after termination of employment — typically one to three years for general confidential information, and indefinite for trade secrets and business methodologies. Pakistani courts have upheld post-employment NDA obligations of up to three years where the employer demonstrated a legitimate commercial interest, consistent with the distinction between restraint of trade (void under Section 27 of the Contract Act 1872) and confidentiality (valid).

Return of Confidential Materials: An obligation for the employee to return or destroy all confidential materials — documents, electronic files, USB drives, laptops, and access credentials — upon termination of employment or on demand. The return obligation should cover both physical and electronic copies, consistent with the employer's obligations under the Personal Data Protection Bill (pending enactment in Pakistan as of 2025) and existing privacy frameworks under the Electronic Transactions Ordinance 2002.

Remedies for Breach: A clear statement that breach of the NDA will cause irreparable harm to the employer for which damages may be an inadequate remedy, entitling the employer to seek injunctive relief from the High Court of competent jurisdiction under Order 39 of the Code of Civil Procedure 1908, in addition to damages under the Contract Act 1872 and criminal prosecution under PECA 2016 before the FIA Cybercrime Wing. Including a liquidated damages clause — specifying a pre-agreed sum for breach — provides the employer with a simpler enforcement mechanism without needing to prove actual loss.

Permitted Disclosures: A clause permitting disclosure required by law — such as compliance with court orders, FBR tax audit requirements under the Income Tax Ordinance 2001, SBP regulatory reporting obligations under the Banking Companies Ordinance 1962, or FIA and SECP investigations — without breach of the NDA. This carve-out is essential to avoid the NDA being used to obstruct lawful regulatory processes, which would itself be unlawful and expose the employer to contempt of court or obstruction charges.

Governing Law and Jurisdiction: The NDA should specify Pakistani law — the Contract Act 1872 and PECA 2016 — as the governing law, and designate the courts of the province where the employer's principal office is located (Lahore High Court for Punjab, Sindh High Court for Sindh, Islamabad High Court for ICT) as the jurisdiction for disputes. For multinational employers with regional headquarters in Dubai or Singapore, an arbitration clause specifying the Karachi Centre for International Arbitration (KCIA) or Singapore International Arbitration Centre (SIAC) is increasingly common in Pakistan's corporate sector.

Stamp Duty and Execution Formalities: The NDA should be executed on non-judicial stamp paper of the value prescribed under the Stamp Act 1899 — typically PKR 100 to PKR 200 depending on the province — and witnessed by two witnesses as required for formal contracts. Many Pakistani employers execute the NDA as a schedule to the main employment contract on a single stamped document to avoid questions about separate stamp duty on standalone NDAs.

Forms-legal.com provides this Employee Non-Disclosure Agreement (Pakistan) template as a practical starting point for protecting employer confidential information. The template reflects the requirements of the Contract Act 1872, PECA 2016, Copyright Ordinance 1962, and applicable SBP and SECP regulations. Employers should customise the definition of confidential information to their specific industry and obtain legal review from a qualified Advocate enrolled at a provincial Bar Council — Lahore Bar, Sindh Bar, or Islamabad Bar — before signing.