Non-Disclosure Agreement (UAE)

A Non-Disclosure Agreement (NDA) in the United Arab Emirates is a binding contract governed by the UAE Civil Code (Federal Law No. 5 of 1985) that obliges one or both parties to keep specified information confidential and to refrain from disclosing it to unauthorised third parties. Article 125 of the Civil Code establishes that a contract forms when offer and acceptance meet on the essential terms, and Article 246 requires both parties to perform in good faith, making a clearly drafted confidentiality undertaking enforceable before the Dubai Courts, the Abu Dhabi Judicial Department, and other onshore courts of the UAE.

The UAE confidentiality framework draws on statutory and commercial principles. The UAE Civil Code (Federal Law No. 5 of 1985) governs formation, validity, and the obligation to compensate for breach under Articles 282 and 389, while the Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) applies where the parties are merchants acting in the course of trade and supplements the Civil Code on commercial obligations. The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), administered by the UAE Data Office, imposes additional duties whenever confidential information includes personal data, requiring a lawful basis for processing, purpose limitation, and security measures proportionate to the risk.

The Ministry of Economy and the Department of Economic Development in each emirate recognise NDAs as a normal precaution before sharing trade secrets, proprietary technology, or business strategies with potential partners, investors, or employees. An NDA protects information that may not yet qualify for registered intellectual property — business methods, customer lists, pricing models, and unpublished inventions — from misappropriation, complementing the protection available under the Federal Law on Industrial Property (Federal Law No. 11 of 2021) and the Copyright Law (Federal Decree-Law No. 38 of 2021).

UAE NDAs generally fall into three forms. A unilateral NDA binds only the receiving party, common in employer-employee relationships and investor meetings. A mutual NDA, such as this template, binds both parties equally and suits joint ventures and M&A due diligence between mainland LLCs and free-zone entities. A multilateral NDA involves three or more parties and arises in consortium tenders. Neither the Ministry of Economy nor any free-zone registrar requires NDAs to be filed, so enforcement depends entirely on the drafted terms and on each party having authority to bind its entity under the Commercial Companies Law (Federal Decree-Law No. 32 of 2021).

Free-zone arrangements may displace onshore federal law. Where an NDA is governed by DIFC or ADGM law, the DIFC Courts and the ADGM Courts apply common-law breach of confidence principles, the DIFC Data Protection Law (DIFC Law No. 5 of 2020) or the ADGM Data Protection Regulations 2021 replace the federal PDPL, and disputes may be heard in English under those courts' procedures. The Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021) permits electronic execution, giving electronic signatures the same effect as wet-ink signatures, which suits the fast-moving deal flow of the UAE technology and venture sectors. For cross-border NDAs, choosing UAE law together with arbitration under the Federal Arbitration Law (Federal Law No. 6 of 2018) provides enforceability across the more than 170 states party to the New York Convention, making the United Arab Emirates a commercially strong seat for confidentiality disputes.

A Non-Disclosure Agreement in the United Arab Emirates is needed whenever confidential information will pass between parties and the disclosing side requires enforceable protection under the UAE Civil Code (Federal Law No. 5 of 1985) against unauthorised use or disclosure.

Pre-investment discussions between startups and venture capital funds or family offices require an NDA before any pitch deck, financial projection, or business plan is shared. Fund managers licensed by the Securities and Commodities Authority (SCA) routinely execute NDAs as part of due diligence before reviewing target financials, and free-zone funds in the DIFC operate under equivalent confidentiality practice supervised by the Dubai Financial Services Authority.

Employment relationships in the UAE often involve NDAs alongside confidentiality clauses in the employment contract regulated by the Labour Law (Federal Decree-Law No. 33 of 2021) and Cabinet Resolution No. 1 of 2022. The Ministry of Human Resources and Emiratisation (MOHRE) recognises that employers may require standalone NDAs to protect trade secrets, client lists, and proprietary processes, particularly in technology, finance, and pharmaceutical roles.

Joint venture negotiations between mainland LLCs and free-zone entities require an NDA before disclosing market entry plans, regulatory strategies, or proprietary technology. The Ministry of Economy encourages confidentiality protections as a condition of cross-border collaboration, and a related service agreement or consultancy agreement should cross-reference the NDA so that confidentiality obligations stay consistent across contracts.

Merger and acquisition transactions involving UAE-incorporated companies require an NDA during preliminary due diligence, before the buyer accesses financial records, customer contracts, and employee data protected by the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). UAE law firms advise both buyers and sellers to execute the NDA at the earliest stage to prevent leaks that could affect listed share prices on the Dubai Financial Market or the Abu Dhabi Securities Exchange.

Technology licensing arrangements covered by the Federal Law on Industrial Property (Federal Law No. 11 of 2021) require an NDA before the licensor reveals source code, algorithms, or technical specifications. Government procurement participants may also need an NDA where subcontractors access classified or commercially sensitive tender material, and the Federal Tax Authority (FTA) expects taxpayers to keep audit-related information confidential, which an NDA can reinforce between a business and its tax advisers.

A UAE Non-Disclosure Agreement compliant with the UAE Civil Code (Federal Law No. 5 of 1985) and aligned with the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) must contain the following elements. The forms-legal.com UAE NDA template addresses each component in a structure accepted by the Dubai Courts, the Abu Dhabi Judicial Department, and arbitral tribunals seated in the United Arab Emirates.

Party identification must record the full legal name of each party, the trade licence number issued by the relevant Department of Economic Development or free-zone registrar for corporate entities, or the Emirates ID number for individuals, and the registered address. Where a party signs through a representative, the agreement should confirm the representative's name, role, and authority to bind the entity under the Commercial Companies Law (Federal Decree-Law No. 32 of 2021).

Definition of Confidential Information should be precise and category-based. UAE courts give effect to clearly drafted obligations but are reluctant to enforce undertakings so broad that they prevent the receiving party from using general business knowledge. Best practice defines confidential information by category — technical data, financial records, customer databases, marketing strategies, source code, and trade secrets — and excludes information that is publicly available, independently developed, or lawfully obtained from a third party.

Purpose and scope must state the specific reason for disclosure, such as evaluating a proposed joint venture, performing services under a service agreement, or conducting M&A due diligence. Restricting use to the stated purpose prevents the receiving party from exploiting the information for an unrelated commercial advantage, consistent with the good-faith duty in Article 246 of the Civil Code.

Obligations of the receiving party must specify the standard of care, typically reasonable care or the same care the party applies to its own confidential information, and prohibit disclosure to anyone other than authorised representatives who have a genuine need to know and are bound by equivalent obligations. Where the information includes personal data, the receiving party must comply with the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), including security and cross-border transfer restrictions overseen by the UAE Data Office.

Duration and survival must set the disclosure period during which information may be exchanged and the survival period during which obligations continue after termination. UAE market practice ranges from two to five years for commercial NDAs, with longer or indefinite protection for trade secrets that retain their confidential character.

Return or destruction must require the receiving party, on termination or written request, to return or destroy all confidential information, including copies, notes, and electronic records, and to certify destruction if asked. This reduces the risk of residual data and supports compliance with the data minimisation principle of the PDPL.

Remedies for breach must recognise that compensation may be inadequate for disclosure of trade secrets and that the disclosing party may seek interim and precautionary measures from the competent courts, together with compensation under Articles 282 and 389 of the Civil Code. A liquidated damages clause is permitted, subject to the court's power under Article 390 to adjust the figure to reflect actual loss.

Governing law and dispute resolution must state that UAE law applies and identify the forum — the Dubai Courts, the Abu Dhabi Courts, the DIFC Courts, or the ADGM Courts — or an arbitral institution such as the Dubai International Arbitration Centre (DIAC) under the Federal Arbitration Law (Federal Law No. 6 of 2018). General provisions should also confirm that no intellectual property licence is granted by disclosure, that the agreement may be assigned only with consent, that unenforceable terms are severable, and that the document is the entire agreement, amendable only in writing.

Completing a Non-Disclosure Agreement for the United Arab Emirates is straightforward when each field is matched to the correct legal detail. Work through the template in order and keep supporting documents, such as trade licences and authority letters, to hand.

Start with the parties. Enter the full legal name of each party exactly as it appears on the trade licence issued by the relevant Department of Economic Development or free-zone registrar. Record the trade licence number for companies or the Emirates ID number for individuals, then add the registered address. Accuracy here matters because the Commercial Companies Law (Federal Decree-Law No. 32 of 2021) requires that the signatory hold authority to bind the entity, so confirm board approval or a power of attorney before signing.

Enter the date of the agreement in DD/MM/YYYY format, the standard date format used across the UAE. The date fixes the start of the confidentiality period and the point from which obligations run.

Describe the purpose of disclosure in specific commercial terms, for example evaluating a proposed joint venture, reviewing financials for an acquisition, or assessing a technology licence. A precise purpose limits how the receiving party may use the information and supports the good-faith requirement of Article 246 of the UAE Civil Code (Federal Law No. 5 of 1985).

List the categories of confidential information rather than relying on a single broad phrase. Identify financial records, customer databases, pricing models, source code, and trade secrets as applicable. Category-based definitions are easier to enforce before the Dubai Courts and the Abu Dhabi Judicial Department than vague catch-all wording.

Set the confidentiality period. Two to five years is common for commercial NDAs, while trade secrets may warrant longer protection. State the period clearly so there is no doubt about when obligations end.

Select the governing courts that fit your relationship: the Dubai Courts or the Abu Dhabi Courts for onshore matters, or the DIFC Courts or ADGM Courts where a party is established in those free zones, because those courts apply common-law principles and their own data protection regimes.

Finally, arrange signature. Both parties should sign through an authorised representative. Electronic signatures are valid under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021). Download the completed agreement as PDF or Word, and keep a signed copy with each party's records.

A Non-Disclosure Agreement in the United Arab Emirates draws its force from the UAE Civil Code (Federal Law No. 5 of 1985), which governs the formation and performance of contracts. Article 125 confirms that a contract forms when offer and acceptance meet on the essential terms, Article 246 imposes a duty to perform in good faith, and Article 257 establishes that the contract is the law of the parties, giving effect to freely agreed confidentiality terms.

Where the parties are merchants acting in trade, the Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) supplements the Civil Code and governs commercial obligations, evidence, and limitation periods. The authority of a corporate signatory is governed by the Commercial Companies Law (Federal Decree-Law No. 32 of 2021), so the person signing should hold board authorisation or a valid power of attorney; an agreement signed without authority risks being unenforceable against the entity.

Remedies for breach are set by Articles 282 and 389 of the UAE Civil Code, which require the party in breach to compensate the injured party for loss actually suffered and profit of which it was deprived, provided the loss is a natural result of the breach. Where the parties agree liquidated damages, Article 390 allows the court to adjust the figure to match the actual loss. The competent courts may grant attachment and conservatory measures under the Civil Procedure Law to preserve the position pending judgment.

When confidential information includes personal data, the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), administered by the UAE Data Office, requires a lawful basis for processing, purpose limitation, security measures, and restrictions on transfer outside the UAE. Free-zone parties are instead subject to the DIFC Data Protection Law (DIFC Law No. 5 of 2020) or the ADGM Data Protection Regulations 2021. Electronic execution is valid under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021), and arbitration, where chosen, is governed by the Federal Arbitration Law (Federal Law No. 6 of 2018).

A UAE Non-Disclosure Agreement is the first line of protection for trade secrets and confidential business information. The following errors frequently weaken NDAs or leave the disclosing party exposed.

1. Vague or overbroad definition of confidential information. An NDA that purports to cover all information shared in any context is hard to enforce, because UAE courts are reluctant to restrain the use of general business knowledge. Define confidential information by category — technical data, customer lists, pricing, source code, financial projections — and exclude publicly available or independently developed information.

2. No carve-out for legally required disclosure. An NDA with no exception for disclosure compelled by a UAE court, the Federal Tax Authority, or another regulator places the receiving party in an impossible position. The agreement should permit such disclosure while requiring prompt notice to the disclosing party.

3. Ignoring the Personal Data Protection Law. When the shared information includes personal data, the NDA must impose the receiving party's duties under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), including security measures and limits on transfer outside the UAE. An NDA silent on data protection can expose the disclosing party to regulatory liability.

4. Signing without corporate authority. Under the Commercial Companies Law (Federal Decree-Law No. 32 of 2021), a signatory must have authority to bind the entity. An NDA signed by an employee without board authorisation or a power of attorney may not bind the company, leaving the disclosing party without an enforceable counterparty.

5. Survival period too short. An NDA that ends confidentiality obligations at the same time as the relationship fails to protect trade secrets disclosed during the engagement. UAE practice is a two-to-five year survival period, with indefinite protection for genuine trade secrets.

6. No governing law or forum clause. An NDA without a clear choice of UAE law and a forum — the Dubai Courts, Abu Dhabi Courts, DIFC Courts, ADGM Courts, or a DIAC arbitration seat — invites costly jurisdictional argument, especially in cross-border deals.

7. Relying on an unadjustable penalty. Parties sometimes set a large fixed penalty expecting it to be paid in full, but Article 390 of the UAE Civil Code (Federal Law No. 5 of 1985) lets the court adjust liquidated damages to the actual loss. Frame the clause as a genuine pre-estimate of loss rather than a punitive figure.