Non-disclosure agreements: what they can and cannot do
What an NDA covers, the carve-outs every one contains, one-way versus mutual, and why a breach of confidentiality is unusually hard to prove.
· 6 min read
Why the document carries so much weight in India
A non-disclosure agreement is a contract, governed by the Indian Contract Act, 1872 like any other, in which one or both parties undertake to keep specified information confidential and to use it only for a stated purpose.
The fact that explains why the drafting matters so much here is that India has no standalone trade secrets statute. There is no registration for a trade secret, no statutory term of protection, and no statutory definition of what qualifies. Protection for commercially sensitive information rests on a combination of contract, the equitable obligation of confidence that can arise from a relationship, and provisions of general law that may apply to particular conduct.
The consequence is direct: for most businesses, the contract is the protection. Where a patent or a registered trademark gives a right that exists independently of any agreement and operates against the world, confidential information generally gives a right only against the person who agreed to keep it confidential. Someone with no relationship to you who obtains the same information independently is, as a rule, not restrained by your NDA.
That asymmetry frames everything that follows. It is also why an NDA is often signed as a formality and then relied upon as though it were an absolute barrier, which is the mismatch this explanation is concerned with. This describes how these agreements operate; it is not advice on any particular agreement or disclosure.
The definition clause does the work
The most consequential clause in an NDA is the one defining what counts as confidential information, and it is usually the least read.
Two approaches are common. One defines confidential information broadly — everything disclosed in connection with the purpose, in any form. The other defines it narrowly by requiring information to be marked or designated as confidential, sometimes with a mechanism for confirming oral disclosures in writing within a period.
Each has a real cost. A broad definition captures everything, including material the recipient may already have had or may later obtain legitimately, which makes the obligation harder to comply with and, at the point of enforcement, harder to establish with precision. A marking requirement is administratively demanding and creates a gap for anything disclosed and not marked, which in practice is most of what is said in a meeting.
The related clause is the permitted purpose. An NDA that only restricts disclosure, and does not restrict use, permits a recipient to use the information for their own ends provided they tell nobody. Where the concern is a counterparty using what they learn rather than repeating it, the use restriction is the operative provision and its absence is a substantive gap rather than a drafting nicety.
A third clause worth locating governs onward disclosure — to employees, advisers, affiliates — and whether the recipient is responsible for their compliance.
The carve-outs, and why they are not loopholes
Every properly drafted NDA excludes categories of information from the obligation, and the exclusions are consistent enough to be listed.
Information already in the public domain, or which enters it other than through the recipient's breach. Information the recipient already possessed before disclosure. Information the recipient develops independently without reference to the disclosure. Information received from a third party who was not under an obligation of confidence. And disclosure required by law, by a court, or by a regulator, usually with an obligation to notify the disclosing party where permitted.
These are frequently read as the other side's escape routes. They are closer to the opposite: they are what makes the obligation enforceable at all. An agreement purporting to restrain a party from disclosing information that is already public asks for something no court can sensibly grant and undermines the credibility of the whole clause. Confining the obligation to information that is genuinely confidential and genuinely came from the discloser is what makes the restraint coherent.
The independent development carve-out is the one with the largest practical consequence, and it deserves attention when a business is relying on an NDA to protect an approach rather than a specific dataset. If the other side can arrive at the same result on their own, the agreement does not stop them, and the difficulty is that establishing whether they did is precisely the sort of question that is expensive to litigate and rarely clear.
One-way, mutual, and two different clocks
A one-way agreement imposes obligations on one party as recipient; a mutual agreement imposes them on both, each acting as discloser and recipient. The choice normally follows the direction of information flow, and a discussion that begins one-way often becomes mutual in substance once both sides start explaining their positions — which is an argument for looking at the direction of flow rather than at who initiated the conversation.
The distinction more often missed concerns duration, because two separate periods operate and they are routinely conflated.
The first is the term of the agreement: the period during which disclosures made are covered by it. The second is the duration of the confidentiality obligation itself: how long the recipient must keep information confidential after receiving it. These are different, and an agreement with a term of two years may impose a confidentiality obligation lasting well beyond it, or — if drafted carelessly — may cause the obligation to lapse when the term ends, which is almost never what the discloser intended.
Related clauses worth locating are the survival provision, which states which obligations continue after termination, and the return-or-destroy provision governing what happens to materials at the end, including any carve-out permitting retention of archival copies or copies held on backup systems, which is a genuine practical necessity rather than a concession.
What enforcement actually requires
The gap between holding a signed NDA and obtaining a remedy under it is wider than most signatories expect, and the reason is evidential rather than legal.
To succeed, a claimant generally has to establish a sequence: that the information was in fact confidential and not within any carve-out; that it was disclosed to the recipient under the agreement, which means identifying what was disclosed and when; that the recipient disclosed or used it in breach; and that loss followed, in an amount capable of being established.
Each link is difficult, and the middle two are the hardest. Confidential information leaves no trace when it is used. A competitor who launches a similar product is not evidence of breach on its own, given the independent development carve-out. And where the claimant's records do not show precisely what was disclosed on what date, the first link is weak before anything else is examined — which is the strongest practical argument for keeping a disclosure log alongside the agreement.
Because of this, the remedy pursued is often an injunction restraining further use or disclosure rather than damages, since prevention does not require quantification of loss.
On liquidated damages: a clause fixing a sum payable on breach does not automatically produce that sum. The Contract Act's provisions on compensation for breach govern, and a stipulated amount is examined as to whether it represents reasonable compensation or a penalty.
What an NDA cannot do
Five limits are worth stating explicitly, because each of them is regularly assumed away.
It cannot protect information disclosed before it was signed. An NDA signed after a first meeting does not retrospectively cover that meeting unless it expressly says so, and a clause extending coverage to prior disclosures is a specific thing that has to be included.
It cannot operate as a general restraint on the other party's trade. Section 27 of the Contract Act declares agreements in restraint of trade void, subject to a narrow statutory exception concerning the sale of goodwill, and an obligation framed as confidentiality but drafted so as to prevent a person from working in a field faces that provision. Confidentiality and non-solicitation obligations have been treated differently from a blanket restraint, and how a particular clause fares depends on its wording and the facts.
It cannot remove an employee's general skill, knowledge and experience. The line between confidential information belonging to an employer and the accumulated competence of the person is a recurring question, and it is decided on facts rather than by drafting.
It cannot substitute for a registrable right. Where something is patentable or registrable as a design or a trademark, confidentiality is a different and generally weaker form of protection, and premature public disclosure can affect registrability.
And it cannot override a legal obligation to disclose, which is why that carve-out is standard.
Common questions
Does an NDA protect information I shared in an earlier meeting before it was signed?
Not unless the agreement says so. An NDA covers disclosures within its scope and term, and coverage of disclosures made before signature is something that has to be expressly included, often by defining the term as commencing from a stated earlier date or by referring to prior discussions. Where that language is absent, the earlier disclosure generally sits outside the agreement, which is why the sequence of signature and disclosure matters.
Can an NDA stop a former employee from joining a competitor?
An obligation framed as confidentiality but operating to prevent a person from working in a field faces section 27 of the Contract Act, which declares agreements in restraint of trade void subject to a narrow exception concerning the sale of goodwill. Indian courts have treated confidentiality and non-solicitation obligations differently from a blanket restraint on employment. There is also a distinction between an employer's confidential information and the employee's own general skill and knowledge, which is decided on facts rather than by how the clause is worded.
If the other side develops something similar, is that a breach?
Not on its own. Nearly every NDA carves out information the recipient develops independently without reference to the disclosure, and a similar product is consistent both with breach and with independent development. Establishing which occurred is an evidential exercise, typically requiring evidence about what was disclosed, when, and what the other side already had or was working on. This is the carve-out with the largest practical consequence for anyone relying on an NDA to protect an approach rather than a specific dataset.
Is a clause fixing damages for breach of confidentiality effective?
A stipulated sum does not automatically become payable. The Contract Act's provisions on compensation for breach govern, and a fixed amount is examined as to whether it amounts to reasonable compensation or is in the nature of a penalty. Partly because of this, and partly because quantifying loss from a disclosure is difficult, the remedy actually pursued in confidentiality disputes is frequently an injunction restraining further use or disclosure rather than a monetary claim.
Related pages