Non-Disclosure Agreement (NDA)

A Non-Disclosure Agreement (NDA) in the United States restricts how the parties may disclose or use the confidential information they exchange. It restricts disclosure and use of designated confidential information between the disclosing and receiving parties.

NDAs operate within a legal framework anchored by the Defend Trade Secrets Act of 2016 (DTSA, 18 U.S.C. Sections 1831-1839) at the federal level and the Uniform Trade Secrets Act (UTSA) adopted by forty-eight states. While these statutes protect information meeting the legal definition of a trade secret, an NDA extends contractual protection to a broader category of confidential business information that may not qualify as a trade secret under statutory definitions. Critically, courts evaluating trade secret claims examine whether the owner took reasonable measures to maintain secrecy, and a signed NDA constitutes strong evidence of such measures.

NDAs come in two primary forms. A unilateral (one-way) NDA protects information flowing from one party to another, commonly used in employer-employee relationships, contractor engagements, and vendor arrangements. A mutual (bilateral) NDA protects information exchanged by both parties simultaneously, standard in business negotiations, partnership discussions, and merger and acquisition due diligence. The choice between unilateral and mutual depends on whether one or both parties will disclose sensitive information during the relationship.

An NDA is distinct from a non-compete agreement, which restricts competitive activity, and a non-solicitation agreement, which prevents recruiting employees or customers. While these restrictive covenants are often combined in employment contexts, each addresses a different legal risk and carries different enforceability standards across jurisdictions.

An NDA is essential whenever sensitive business information will be shared with parties who are not otherwise bound by a duty of confidentiality. A company is hiring a freelance developer, designer, or consultant who will access proprietary source code, system architecture, database schemas, or business processes during the engagement. The NDA should be executed before any project materials are shared, ideally as part of the independent contractor agreement.

A startup or established business is entering due diligence with potential investors, acquirers, or merger partners who will review financial statements, cap tables, customer metrics, revenue projections, and pending litigation details. An NDA with a defined survival period of three to five years protects both parties if the transaction does not proceed. A manufacturer is sharing proprietary formulations, production methods, or tooling specifications with a contract manufacturer or supply chain partner who could potentially replicate the product.

An employer is onboarding new employees who will access trade secrets, customer lists, pricing strategies, or unreleased product information. The NDA should be included in the onboarding packet alongside the offer letter and signed before the employee's start date. A company is engaging a marketing agency, PR firm, or data analytics provider that will receive access to customer databases, campaign performance metrics, or competitive intelligence.

Two businesses are exploring a potential joint venture, licensing arrangement, or distribution partnership that requires sharing market research, sales data, and strategic plans before formalizing the relationship. A software company is providing beta access or API documentation to potential integration partners who will see proprietary architecture and feature roadmaps.

The definition of confidential information is the foundation of any enforceable NDA and must be specific enough to put the receiving party on clear notice of what is protected. Courts have invalidated overly vague definitions, so list specific categories including trade secrets, source code, algorithms, customer and vendor lists, pricing models, financial projections, marketing strategies, employee data, technical specifications, prototypes, and any information designated as confidential at the time of disclosure. Include both written and oral disclosures, as well as information observable during facility visits.

Standard exclusions must carve out information that is publicly available through no fault of the receiving party, was known to the receiving party prior to disclosure, is independently developed without reference to confidential materials, or is received from a third party without restriction. Under the DTSA whistleblower immunity provision (18 U.S.C. Section 1833(b)), the agreement must notify the receiving party that disclosures to government officials for reporting suspected legal violations are protected, or the disclosing party forfeits the right to exemplary damages and attorney fees in DTSA actions.

The duration clause should specify both the agreement term and the survival period for confidentiality obligations after termination. Two to three years is standard for general business information, while trade secret protections may extend indefinitely consistent with UTSA provisions. The permitted use clause must restrict the receiving party to using confidential information solely for the stated purpose and prohibit reverse engineering, competitive analysis, or commercial exploitation.

The remedies section should establish that the disclosing party is entitled to injunctive relief under Federal Rule of Civil Procedure 65 without demonstrating irreparable harm, in addition to actual and consequential damages. Include a return or destruction of materials clause requiring the receiving party to surrender or certify destruction of all confidential materials upon termination. Specify governing law, dispute resolution procedures, and the prevailing party's entitlement to attorney fees. Both parties must sign and date the agreement, with the disclosing party retaining the original executed copy.

Two foundational authorities define the scope and limits of U.S. trade-secret NDA protection. First, Kewanee Oil Co. v. Bicron Corp., 416 U.S. 470 (1974), settled a critical constitutional question: the Supreme Court unanimously held that state trade-secret law is not preempted by federal patent law, confirming that information not patented — or not patentable — can still receive strong legal protection under state trade-secret statutes and contractual NDAs. The decision affirmed that trade-secret protection serves independent policy goals (encouraging research sharing within organisations, maintaining commercial ethics) that complement rather than conflict with the patent system. Second, the Defend Trade Secrets Act of 2016 (DTSA, 18 U.S.C. Section 1836) created a federal civil cause of action for trade-secret misappropriation, enabling multi-district litigation without relying on varying state UTSA provisions. Under the DTSA, a plaintiff who proves misappropriation may recover actual damages, unjust enrichment, and — for wilful and malicious misappropriation — exemplary damages of up to twice the actual damages plus attorney fees. Critically, 18 U.S.C. Section 1833(b) grants immunity from DTSA liability for disclosures made in confidence to government officials or in court filings for reporting suspected legal violations; an NDA that fails to include this immunity notice forfeits the right to exemplary damages and attorney fees in any subsequent DTSA action.

Non-disclosure agreements in the United States fail to protect confidential information with regularity because of the following avoidable drafting and execution errors.

1. Defining confidential information too vaguely. Overly broad definitions — "all information shared between the parties" — have been struck down or limited by courts as lacking specificity. An NDA must define the categories of protected information precisely: source code, customer lists, pricing models, unreleased product specifications, and financial projections. Courts evaluating misappropriation claims under the Defend Trade Secrets Act (18 U.S.C. Section 1836) and state UTSA provisions consistently look for evidence that the owner identified what was confidential and treated it as such.

2. Omitting the DTSA whistleblower immunity notice. Under 18 U.S.C. Section 1833(b), every NDA must notify the receiving party that disclosure of a trade secret to a government official or attorney for reporting a suspected legal violation is immune from liability. Failure to include this language forfeits the disclosing party's right to exemplary damages (up to double actual damages) and attorney fees in any DTSA trade secret action — an expensive oversight confirmed by practice since the DTSA took effect in 2016.

3. Failing to mark documents as confidential at the time of disclosure. Many NDAs require that information be marked or identified as confidential at or near the time of disclosure for protection to attach. Sharing documents without confidentiality labels and then claiming protection years later often fails at the threshold stage. Establish a consistent practice of marking sensitive materials and following up oral disclosures with written confirmation.

4. Setting an unrealistically short confidentiality period. An NDA that terminates confidentiality obligations two years after signing may allow a well-funded competitor to wait out the clock before launching a competing product using the disclosed information. The Supreme Court in Kewanee Oil Co. v. Bicron Corp., 416 U.S. 470 (1974) confirmed that indefinite protection is available for genuine trade secrets. Match the duration to the commercial half-life of the information: two to three years for general business plans, indefinite for true trade secrets.

5. Signing only after confidential information has already been shared. The NDA must be executed before any disclosure. Verbal pitches, demo sessions, or exploratory meetings held before execution create a window during which disclosed information has no contractual protection — a mistake that surfaces frequently in investor negotiations and early-stage partnership discussions.

6. Using a unilateral NDA when both parties will share information. A one-way NDA that binds only one party leaves the other party's disclosures unprotected. In most business negotiations and joint ventures, both parties disclose sensitive information simultaneously, making a mutual NDA the appropriate instrument.

7. Not including a return-or-destroy clause. Without a return or certified destruction obligation upon termination, the receiving party may retain copies indefinitely, including in backup systems and email archives. The NDA should require return or certified destruction of all confidential materials within a specified period after termination.

8. Allowing exceptions that are too broad. Poorly drafted exclusions — such as "information known in the industry" — swallow the protection. The independent development exception should require documented prior knowledge or genuinely parallel development without reference to the disclosed materials.

9. No specific remedy provision for breach. An NDA that relies solely on general contract law damages provides weak protection because proving actual monetary loss from a disclosure is notoriously difficult. The agreement should expressly state that the parties acknowledge irreparable harm and consent to injunctive relief under Federal Rule of Civil Procedure 65 in addition to actual and exemplary damages.

10. Failing to account for employee and subcontractor recipients. Most NDAs bind the named parties but do not address employees, consultants, and subcontractors of the receiving party who inevitably see the confidential information. Require the receiving party to bind all internal recipients to confidentiality obligations at least as restrictive as those in the NDA, and to remain vicariously liable for any breach by those recipients.