One-Way Non-Disclosure Agreement (UAE)

A one-way Non-Disclosure Agreement in the United Arab Emirates is a unilateral confidentiality contract that binds only the receiving party to protect proprietary information disclosed by the disclosing party. Unlike a mutual NDA, where both parties assume reciprocal obligations, a one-way NDA creates an asymmetric obligation: the disclosing party reveals sensitive material; the receiving party is bound to keep it confidential, to use it only for the stated purpose, and to return or destroy it on demand. The agreement is enforceable as a binding contract under the UAE Civil Code (Federal Law No. 5 of 1985), and the underlying information may also be protected as a trade secret under the Federal Law on Industrial Property and Trade Secrets (Federal Law No. 11 of 2021).

The commercial context for a one-way NDA in the UAE is broad. Startups and scale-ups seeking capital from venture capital funds, family offices, and sovereign wealth funds supervised by the Securities and Commodities Authority (SCA) routinely require investors to sign a one-way NDA before accessing pitch decks, financial models, and technology architecture documents. Technology licensors sharing source code, algorithms, or product roadmaps with potential licensees in the UAE use one-way NDAs to prevent the receiving party from exploiting proprietary information if the licence negotiation fails. Government tender participants may require subcontractors to sign one-way NDAs before accessing commercially sensitive specification documents prepared by the procuring entity.

The UAE Civil Code (Federal Law No. 5 of 1985) provides the contractual foundation. Article 125 establishes that a contract is formed when offer and acceptance coincide on the essential terms, Article 246 requires the receiving party to perform its obligations in good faith, and Articles 282 and 389 provide compensation for loss caused by breach. The Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) supplements the Civil Code in commercial contexts, setting rules for commercial obligations and evidence.

The Federal Law on Industrial Property and Trade Secrets (Federal Law No. 11 of 2021), administered by the Ministry of Economy, provides a parallel statutory layer of protection. Article 63 prohibits unauthorised acquisition, use, or disclosure of trade secrets and treats such conduct as an unfair commercial practice, enabling the injured party to seek statutory remedies alongside or in addition to the contractual NDA claim. The Ministry of Economy coordinates enforcement and may act against systematic trade secret misappropriation even absent a contractual agreement, but the existence of a well-drafted one-way NDA significantly strengthens the disclosing party's position before the Dubai Courts or the Abu Dhabi Judicial Department.

Where the confidential information includes personal data, the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), administered by the UAE Data Office, imposes additional obligations on the receiving party. The PDPL requires a lawful basis for processing, purpose limitation, appropriate security, and restrictions on cross-border transfer. Free-zone entities in the DIFC and the ADGM are instead subject to the DIFC Data Protection Law (DIFC Law No. 5 of 2020) and the ADGM Data Protection Regulations 2021 respectively. Electronic execution of the one-way NDA is valid under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021), which gives electronic signatures the same legal effect as wet-ink signatures before the courts of the United Arab Emirates.

A one-way Non-Disclosure Agreement in the United Arab Emirates is the correct instrument whenever only one party is disclosing sensitive information and that party needs enforceable protection against unauthorised use or disclosure under the UAE Civil Code (Federal Law No. 5 of 1985).

Pre-investment disclosures are the most common trigger. Founders pitching to angel investors, early-stage venture capital funds, or family offices licensed or regulated by the Securities and Commodities Authority (SCA) should secure a signed one-way NDA before sharing any financial projection, customer list, or proprietary technology detail. Free-zone funds in the DIFC apply equivalent practice under the DIFC Data Protection Law framework, and the ADGM Courts have upheld unilateral confidentiality undertakings in investment contexts.

Technology and software evaluations require a one-way NDA when a developer, software vendor, or platform provider grants access to source code, technical architecture, or unreleased product features to a potential client or partner. The Federal Law on Industrial Property and Trade Secrets (Federal Law No. 11 of 2021) reinforces protection for algorithmic know-how and proprietary methods disclosed in such evaluations, but only where the parties have documented their confidentiality expectations — which a one-way NDA delivers.

Employer-initiated pre-employment and recruitment processes in the UAE sometimes require candidates, consultants, or recruitment agencies to sign a one-way NDA before accessing internal job descriptions, remuneration benchmarking data, or business restructuring plans. The Labour Law (Federal Decree-Law No. 33 of 2021) and Cabinet Resolution No. 1 of 2022 govern the employment relationship, and a standalone one-way NDA complements any confidentiality clause in the subsequent employment contract regulated by the Ministry of Human Resources and Emiratisation (MOHRE).

Government and semi-government procurement processes in Abu Dhabi and Dubai sometimes require subcontractors and advisers to sign one-way NDAs before accessing commercially sensitive contract specifications, pricing data, or sensitive infrastructure details. Pharmaceutical and healthcare companies sharing clinical trial data, drug formulations, or patient analytics with research partners or contract research organisations in the UAE also rely on one-way NDAs, given the sensitivity of the data and the additional obligations imposed by the Ministry of Health and Prevention.

Finally, any scenario where a business engages an external consultant, auditor, or adviser through a service agreement or consultancy agreement should include a one-way NDA — or a confidentiality annex — to protect client data, pricing information, and proprietary processes that are necessarily revealed during the engagement.

A one-way Non-Disclosure Agreement for the United Arab Emirates, compliant with the UAE Civil Code (Federal Law No. 5 of 1985) and the Trade Secrets Law (Federal Law No. 11 of 2021), must contain the following components. The forms-legal.com UAE one-way NDA template addresses each element in a structure that the Dubai Courts, the Abu Dhabi Judicial Department, and arbitral tribunals seated in the UAE recognise.

Party identification must record the full legal name of the disclosing party and the receiving party exactly as it appears on the trade licence issued by the relevant Department of Economic Development or free-zone registrar, or the Emirates ID for individuals. The signatory's name, role, and authority to bind the entity should also be recorded, as the Commercial Companies Law (Federal Decree-Law No. 32 of 2021) requires that the person executing the agreement holds valid board authorisation or a power of attorney.

Definition of Confidential Information must be category-based to be enforceable before UAE courts. Listing business plans, financial records, customer databases, pricing models, source code, formulas, and trade secrets by category is considerably more robust than a broad catch-all. The definition should include information in all forms — written, oral, electronic, and visual — and should state that information does not need to be marked as confidential to qualify, provided it would reasonably be understood as such.

Purpose restriction is the central element that distinguishes a one-way NDA from a general prohibition. The agreement must state the precise commercial purpose — for example, evaluating a proposed investment, performing services under a service agreement, or assessing a technology licence — and restrict the receiving party from using the confidential information for any other purpose. This purpose-limitation principle mirrors the requirement of the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and is consistent with Article 246 of the Civil Code.

Obligations of the receiving party must include: maintaining at least the same standard of care the party applies to its own confidential information; restricting disclosure to authorised representatives who have a genuine need to know and are bound by equivalent obligations; and prohibiting any reverse engineering, copying, or exploitation of the information outside the permitted purpose.

Duration and survival must set the period during which the confidentiality obligation runs. Two to five years is standard commercial practice in the UAE for operational NDAs. Trade secrets may warrant perpetual protection subject to the information retaining its confidential character. The agreement should state explicitly that obligations survive termination of the relationship.

Return and destruction provisions must require the receiving party to return or destroy all confidential information, including electronic copies, notes, and summaries, on written request or at the end of the Purpose, and to certify destruction.

Remedies must recognise that damages alone may not be adequate where trade secrets are at stake. The agreement should preserve the disclosing party's right to seek precautionary measures from the competent courts and to pursue parallel claims under Federal Law No. 11 of 2021 alongside the contractual damages remedy.

Governing law and dispute resolution must choose UAE law as the substantive law and identify the forum — the Dubai Courts, the Abu Dhabi Courts, the DIFC Courts, the ADGM Courts, or an arbitral institution such as the Dubai International Arbitration Centre (DIAC) under the Federal Arbitration Law (Federal Law No. 6 of 2018). Arbitration offers confidentiality advantages that align with the nature of an NDA dispute.

Completing a one-way Non-Disclosure Agreement for use in the United Arab Emirates is straightforward. Work through each field in order, keeping trade licence documents and authority confirmations to hand.

Begin by entering the full legal name of the disclosing party exactly as it appears on the trade licence issued by the relevant Department of Economic Development or free-zone authority — for example, a DED Dubai licence for a mainland LLC, or a DMCC or DIFC registry entry for a free-zone company. Record the licence number and registered address. Then enter the same information for the receiving party.

Confirm that the person who will sign on behalf of each company holds board authorisation or a valid power of attorney consistent with the Commercial Companies Law (Federal Decree-Law No. 32 of 2021). An agreement signed by an unauthorised representative risks being unenforceable against the entity.

Enter the date of the agreement in DD/MM/YYYY format, the standard date format throughout the UAE. This date starts the confidentiality clock.

Describe the purpose of disclosure with commercial precision. Rather than writing simply "business discussions", specify the exact purpose — for example, "evaluation of a potential Series A investment in the Disclosing Party's fintech platform" or "assessment of the Disclosing Party's logistics software for potential licensing by the Receiving Party". Precision limits how the receiving party may use the information and directly supports the Article 246 good-faith obligation of the UAE Civil Code (Federal Law No. 5 of 1985).

List the categories of confidential information that will be shared. Include specific categories such as financial models, customer contracts, technical documentation, source code, and trade secrets, rather than relying on a generic phrase. Category-based definitions are easier to enforce before the Dubai Courts and the Abu Dhabi Judicial Department.

Set the confidentiality period. Two to five years is standard for commercial one-way NDAs in the UAE. For information qualifying as a trade secret under Federal Law No. 11 of 2021, consider extending or removing the end date.

Select the governing courts that best fit the commercial relationship: Dubai Courts or Abu Dhabi Courts for onshore matters, or the DIFC Courts or ADGM Courts for free-zone parties. Signature should be obtained from the authorised representative of each party. Electronic signatures are valid under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021). Download the completed agreement as PDF or Word and retain a signed copy.

A one-way Non-Disclosure Agreement in the United Arab Emirates draws legal force from multiple statutes that operate in parallel.

The UAE Civil Code (Federal Law No. 5 of 1985) is the foundational source. Article 125 confirms contract formation when offer and acceptance meet on the essential terms. Article 246 imposes a duty of good faith in performance, which the receiving party must observe throughout the confidentiality period. Articles 282 and 389 entitle the disclosing party to compensation for loss actually suffered and profit of which it was deprived as a natural result of breach. Article 390 allows the court to adjust any agreed penalty sum to match the actual loss.

The Federal Law on Industrial Property and Trade Secrets (Federal Law No. 11 of 2021) provides a statutory layer of protection for trade secrets, complementing the contractual NDA. Article 63 of that law prohibits the unauthorised acquisition, use, or disclosure of a trade secret and enables the Ministry of Economy and the courts to impose civil and criminal sanctions. A one-way NDA that identifies trade secrets by category strengthens enforcement under this statute.

The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), administered by the UAE Data Office, applies when the confidential information includes personal data. The receiving party must maintain a lawful processing basis, apply appropriate security measures, and comply with cross-border transfer restrictions. Free-zone entities are subject instead to the DIFC Data Protection Law (DIFC Law No. 5 of 2020) or the ADGM Data Protection Regulations 2021.

Corporate authority to execute the NDA is governed by the Commercial Companies Law (Federal Decree-Law No. 32 of 2021). The signatory must hold board authorisation or a valid power of attorney, otherwise the obligation may not bind the entity. Electronic signatures are valid under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021). Where arbitration is chosen, the Federal Arbitration Law (Federal Law No. 6 of 2018), based on the UNCITRAL Model Law, governs proceedings, and awards are enforceable across the 170-plus states party to the New York Convention.

A one-way Non-Disclosure Agreement protects valuable proprietary information, and the following errors frequently undermine its effectiveness in the United Arab Emirates.

1. Failing to restrict use to the stated purpose. An NDA that prohibits disclosure but does not expressly restrict the receiving party from using the information for its own business advantage misses the essential protection. Always include an explicit use restriction tied to the defined purpose.

2. Vague definition of confidential information. Courts in the UAE will enforce obligations that are clear and defined, but hesitate to restrain the use of general business knowledge. Define confidential information by category — financial data, source code, customer records, pricing — rather than relying on a broad sweep clause.

3. No carve-out for legally required disclosure. If a UAE court, the Federal Tax Authority (FTA), or another regulator orders the receiving party to disclose, the party must comply. An NDA without a carve-out for compelled disclosure puts the receiving party in breach through no fault of its own. The clause should permit disclosure but require prompt prior notice to the disclosing party.

4. Ignoring trade secret protection under Federal Law No. 11 of 2021. Where the disclosed information qualifies as a trade secret, explicitly saying so in the NDA activates statutory remedies under Federal Law No. 11 of 2021, including Ministry of Economy enforcement and criminal sanctions for deliberate misappropriation.

5. Not addressing personal data. When the confidential information includes customer records or employee data, the NDA must impose obligations consistent with the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Silence on this point can expose the disclosing party to regulatory liability for sharing personal data with a receiving party that has no contractual governance obligations.

6. Signing without verifying authority. Under the Commercial Companies Law (Federal Decree-Law No. 32 of 2021), a signatory without board authorisation or a power of attorney cannot bind the company. Always confirm the signing authority before treating the NDA as executed.

7. Forgetting the return and destruction obligation. Without an express clause, the receiving party has no contractual obligation to return or delete confidential information after the relationship ends, creating ongoing risk of misuse.