What an NDA actually does
A non-disclosure agreement (NDA) is a contract about information. It usually says what information must be kept confidential, why the recipient may use it, who else may receive it, and what should happen when the relationship ends.
An NDA can be sensible before a product discussion, a freelance engagement, due diligence, or an employment conversation. But it should not quietly become a restriction on ordinary professional knowledge, independent work, or future clients. Read it as a set of operational rules: what can I receive, what can I do with it, who can I tell, and for how long?
Anatomy of an NDA
Start here when the document is in front of you. Each heading below identifies what the clause usually controls and the practical question to ask.
Confidential information
Defines the material covered: for example, business plans, customer information, technical material, financial data, conversations, or documents marked confidential.
Check: Is the definition clear enough to tell what is covered? Does it cover every conversation or only identified information?
Exclusions
Lists information that is not confidential, often including information already known to you, publicly available information, lawfully received third-party information, and independently developed work.
Check: Are the exclusions stated clearly, and can you reasonably show that one applies if needed?
Permitted purpose and use
Limits why you may use the information, such as evaluating a proposed project or performing a defined service.
Check: Is the purpose specific enough to be workable, without preventing normal work needed to evaluate the opportunity?
Permitted recipients
Controls whether you may share information with colleagues, advisers, contractors, or affiliates who need it for the permitted purpose.
Check: Can you involve the people who genuinely need to know, and does the agreement say what safeguards apply?
Duration and survival
Separates the agreement's term from the period during which confidentiality duties continue after discussions or services end.
Check: When does each obligation begin and end? Is an indefinite period tied to a clearly defined category of information?
Return, deletion, or destruction
Says what to do with files, notes, copies, and materials when asked or when the relationship ends.
Check: Can you comply in practice, including with backups, legal records, and documents held by permitted advisers?
Remedies and governing terms
May describe the response to an alleged breach and identify the governing law, forum, or dispute process.
Check: Does the clause add promises, costs, or procedural burdens beyond the confidentiality obligation itself?
A practical NDA review checklist
Work through these checks before signing. Tick only what the written agreement actually says; do not fill gaps with assumptions.
- 1
Identify both parties and their roles
Confirm who is disclosing information, who is receiving it, and whether the NDA is mutual. The labels should match the transaction, not just the title page.
- 2
Draw the boundary around confidential information
Look for a definition that a reasonable reader can apply. Broad phrases such as “all information, whether or not marked” need context and usable exclusions.
- 3
Check the allowed purpose
The permitted purpose should describe the specific discussion, evaluation, or project. If it is vague, ask how it will be interpreted in day-to-day work.
- 4
Confirm how information may be shared
Make sure the agreement allows necessary internal teams and advisers, subject to appropriate confidentiality duties where relevant.
- 5
Read the clock carefully
Find the agreement term and any surviving confidentiality period. A long or indefinite duty deserves a clear reason and a precise subject matter.
- 6
Look beyond the confidentiality heading
Search for non-compete, non-solicitation, intellectual-property, penalty, fee-shifting, or injunctive-relief language. These can materially change the practical risk.
- 7
Check whether you can comply operationally
Consider copies, cloud storage, advisers, employee access, legal retention, and returning or deleting material. A promise you cannot perform is a problem even if it sounds routine.
Mutual vs. unilateral NDA
The useful question is not which form is “better,” but whether the obligation matches the expected flow of information.
| Topic | Mutual NDA | Unilateral NDA |
|---|---|---|
| Who is bound | Both parties protect the other party's confidential information. | Usually only the recipient is bound to protect the discloser's information. |
| Typical context | Exploratory business discussions, collaborations, or diligence where both sides may share sensitive material. | A company shares information with a consultant, candidate, supplier, or prospective customer. |
| What to verify | That duties are genuinely reciprocal and that each side's permitted purpose works in practice. | That the recipient is not accepting restrictions that go beyond protecting the disclosed information. |
Clauses that deserve extra attention
These provisions often decide whether an NDA is a focused confidentiality arrangement or a much broader commitment.
Residuals or retained knowledge
A residuals clause may address information a person remembers without referring to documents. Its wording can affect the practical boundary between protected information and general know-how.
Clarify: Ask what information is excluded, who may rely on residual knowledge, and whether the clause sits comfortably with the rest of the NDA.
Compelled disclosure
The agreement may address a subpoena, regulator request, or other legal obligation to disclose information.
Clarify: Check whether notice is required where legally permitted and whether the clause allows only the disclosure that is required.
Return or destruction
An absolute deletion promise can be hard to meet if records exist in backups, security systems, or files that must be retained.
Clarify: Ask whether archival copies, routine backups, and legally required records are addressed realistically.
Remedies, costs, and penalties
An NDA may state that a party can seek court orders, damages, legal costs, or a contractual penalty after an alleged breach.
Clarify: Identify exactly what the clause promises. The availability and scope of any remedy can depend on the governing law and facts.
Non-compete or non-solicitation language
These are different from a promise not to disclose information. They can affect work, hiring, customers, or business opportunities after the relationship ends.
Clarify: Ask whether the restriction is necessary for confidentiality at all, and what activities, people, territory, and time period it covers.
Example NDA clause, explained in plain English
Illustrative sample only — not taken from a contract
“The Recipient may use Confidential Information solely to evaluate the proposed business relationship and may disclose it only to its representatives who need to know it for that purpose and are bound by confidentiality obligations no less protective than those in this Agreement.”
Plain English
You may use the information only to assess the proposed relationship. You may share it with people working for you who genuinely need it, but they must also be under comparable confidentiality duties.
Why it matters
This clause sets two boundaries at once: purpose and people. It is more useful when “proposed business relationship” is specific enough to cover the actual evaluation or work being discussed.
Question to ask
If you need to involve a subcontractor, investor, accountant, or lawyer, does “representatives” clearly include that person or organisation?
Red flags to pause on
These phrases are not automatically invalid. They are signals to read the surrounding wording, understand the operational effect, and ask for clarification where needed.
“All information disclosed at any time, in any form, is confidential forever.”
The scope and duration may be too broad to apply predictably, especially if the agreement has no meaningful exclusions.
Next step: Ask for defined exclusions and a duration that is explained by the kind of information at issue.
“Recipient shall not engage in any competing activity.”
This is not a standard confidentiality promise. It may function as a separate restriction on future work or business activity.
Next step: Ask why it is included in an NDA and request a precise definition of the restricted activity, if it remains.
“Recipient shall return or destroy all copies, including all backups, immediately.”
The promise may be impossible to perform literally in ordinary IT and record-retention systems.
Next step: Clarify treatment of automated backups, compliance records, and material held by permitted advisers.
“Recipient agrees that monetary damages are inadequate and will pay all legal fees.”
The provision may add remedies or costs beyond the core duty of confidentiality.
Next step: Identify the exact commitment and obtain advice where the potential exposure or governing law makes it material.
Questions worth asking before you sign
These are clarification and negotiation prompts, not demands that every NDA must contain.
- Can we state the permitted purpose in a sentence that matches the actual project or discussion?
- Can we confirm that information already known, public, lawfully received from another source, or independently developed is excluded?
- Who may receive the information internally or through advisers, and what practical safeguards are expected?
- Can the confidentiality period be defined separately from the term of the agreement?
- Does the return or deletion obligation allow ordinary backups and legally required record retention?
- Is there any non-compete, non-solicitation, intellectual-property, penalty, or fee provision that belongs in a different agreement or needs separate discussion?
A realistic scenario: the freelance product designer
A startup sends a freelance product designer an NDA before an introductory call. It defines confidential information as anything discussed, contains no exclusion for independently developed work, and says the duty lasts forever. It also says the designer must not work for any competitor.
The designer does not need to decide whether each clause would be enforceable to spot the practical issues. Before signing, they can ask for a defined project purpose, normal exclusions, a clear confidentiality period, and removal or separate treatment of the non-compete restriction. If the startup is sharing a specific secret process, a focused and carefully scoped confidentiality duty may make sense. A broad bar on future client work is a different commercial question.
What the contract says vs. what may depend on your jurisdiction
What the contract says
The wording can show the information covered, the allowed purpose, recipients, duration, return or deletion duties, and any stated remedy or dispute process. This guide is designed to help you identify and explain those promises in plain English.
What may depend on your jurisdiction
Whether a term is enforceable, whether a remedy is available, how a court reads a non-compete or penalty, and which disclosure duties override confidentiality can depend on the governing law, forum, facts, and mandatory local rules. An NDA is not a substitute for checking those questions in the relevant jurisdiction.
When professional legal review may be appropriate
A first-pass review may be enough for a simple, low-stakes NDA. Consider qualified legal advice when the consequences of getting it wrong are higher or the agreement does more than protect information.
- You are sharing or receiving valuable source code, product plans, customer data, regulated information, or trade secrets.
- The NDA includes a non-compete, non-solicitation, intellectual-property assignment, penalty, indemnity, or unusual cost provision.
- The parties, information, or expected use span more than one country or legal system.
- You have been asked to accept an indefinite obligation, immediate deletion requirement, or a remedy whose practical exposure you cannot assess.
Frequently asked questions
Is every NDA the same?
No. Many use familiar headings, but the definition of confidential information, permitted use, duration, recipients, remedies, and extra restrictions can differ substantially.
Can an NDA cover information that is already public?
The agreement should say how public information is treated. A clear exclusion helps distinguish information that must be protected from information that is already generally available.
Does an NDA stop me from using my general skills?
Read the actual wording. A focused NDA should identify confidential information and permitted use; broader language about competition, clients, or remembered knowledge may require separate attention.
Should confidentiality always last forever?
The answer depends on the information, the agreement, and the applicable law. A long or indefinite obligation is easier to understand and assess when the protected subject matter is precise and the reason for the duration is clear.
Can Lawyerless review my NDA?
You can paste or upload an NDA for a plain-language first-pass explanation of its clauses, potential risks, and points worth reviewing. Lawyerless provides informational support, not legal representation or jurisdiction-specific legal advice.
Explore related contract concepts
Confidentiality clause
A focused explainer on confidentiality obligations in contracts.
Confidential information clause
How contracts define the information that receives protection.
Governing law clause
Why the chosen law matters when a dispute or interpretation question arises.
Non-compete clause
A separate restriction that may appear alongside an NDA.
Understanding NDAs
The contract-type explainer for a broader introduction to NDAs.
Review your NDA before you sign
Paste or upload your NDA for a plain-language first pass through its confidentiality terms, risks, and clauses worth reviewing.
Analyze My NDASources and methodology
This educational guide explains common NDA drafting concepts and practical reading questions. It does not state what any clause will mean or whether it will be enforceable in a particular jurisdiction. The background sources below support the general discussion of confidential information and trade-secret protection; the guide does not replace professional advice for a specific document.
- WIPO: Trade Secrets
Overview of confidential business information, trade secrets, and the use of confidentiality agreements as a protective measure.
- WIPO: How to Protect Trade Secrets?
Practical overview of access controls, confidentiality measures, independent development, and differences between legal systems.