Businesses often need to share sensitive information with employees, contractors, investors, potential buyers, and business partners. A non-disclosure agreement, commonly called an NDA, establishes obligations concerning that information. A confidentiality breach occurs when someone violates an applicable duty to protect information, such as by sharing it without permission or using it for an unauthorized purpose.
The consequences can extend beyond the disclosure itself. A business may lose negotiating leverage, face unfair competition, damage customer relationships, or lose the benefit of research and development. A recipient accused of breaching an NDA may face demands to stop using information, return materials, pay damages, or defend a lawsuit.
For example, a business considering a sale may give a prospective buyer access to nonpublic customer pricing and profit margins under an NDA that permits use only to evaluate the transaction. If the buyer abandons the deal and uses that information to undercut the business’s customer contracts, the conduct may violate the agreement even if the information was never publicly disclosed.
What Does a Non-Disclosure Agreement Protect?
An NDA is a contract governing the handling of information covered by its terms. It may be a standalone agreement or part of an employment, consulting, licensing, purchase, or other business agreement. A one-way NDA generally protects information shared by one party; a mutual NDA imposes obligations on both parties when they exchange covered information.
Depending on the agreement, protected information may include:
- Financial information: nonpublic revenues, profit margins, forecasts, and financing plans.
- Customer and supplier information: purchasing histories, negotiated prices, contract terms, and business requirements.
- Technical information: software code, product designs, formulas, testing results, and manufacturing methods.
- Strategic information: acquisition plans, proposed transactions, marketing strategies, and product launch plans.
The agreement’s definition controls the starting point for analysis. Some agreements require information to be marked confidential or require written confirmation after an oral disclosure. Others cover information that a reasonable recipient would understand to be confidential. A business should not assume that every sensitive document falls within an NDA simply because the parties signed one.
What Obligations Can an NDA Impose?
The precise duties depend on the language the parties agreed to. Issues that often require review include:
- Disclosure restrictions: who may receive the information and under what conditions.
- Use restrictions: whether information may be used only for a defined purpose, such as evaluating a transaction or performing contracted services.
- Security obligations: what precautions the recipient must take to prevent unauthorized access or disclosure.
- Responsibility for representatives: whether the recipient is responsible for disclosures or misuse by employees, advisers, affiliates, or subcontractors.
- Return or destruction requirements: what must happen to documents, copies, notes, and electronic records when the relationship ends or a request is made.
- Duration: when the agreement begins, how long particular duties last, and whether some duties survive termination.
These obligations should not be assumed to exist in every NDA. An agreement that restricts disclosure may not contain the same restrictions on use as an agreement that expressly addresses both. Permission to share information with an adviser also does not necessarily authorize sharing it with an unrelated competitor.
What Must Be Proven for a Breach Claim?
Although the governing law may organize the requirements differently, a contract claim generally requires establishing an enforceable obligation, a breach of that obligation, and the requirements for the requested relief.
1. An Enforceable Confidentiality Obligation
The claimant must establish an enforceable agreement binding the person or business being sued. This includes identifying the relevant parties, the terms they accepted, and the consideration supporting the agreement. Consideration means the legally sufficient exchange supporting a contract; what qualifies depends on the circumstances and governing law.
A signature can be important evidence, but it does not resolve every enforceability question. Issues may include whether the signer had authority, whether the terms are sufficiently definite, whether a later agreement changed the obligations, and whether the restriction conflicts with applicable law.
2. Information Covered by the Obligation
The claimant must identify the information involved and explain why the agreement protects it. The timing of the disclosure, marking requirements, stated purpose, and contractual exclusions may all matter.
For example, an NDA may exclude information already lawfully known to the recipient, independently developed without using the protected information, publicly available through no breach, or lawfully obtained from another source. Whether an exclusion applies depends on the actual wording and supporting evidence.
3. Conduct That Violated the Agreement
The claimant must connect particular conduct to a particular obligation. A breach may involve unauthorized disclosure, prohibited use, inadequate safeguards, or failure to return materials when required.
An intentional effort to harm the business is not necessarily required for a contract breach. An accidental disclosure may violate an NDA if it breaches the duty the recipient undertook. Conversely, the fact that someone had access to information or later joined a competitor does not itself prove a violation.
4. A Basis for the Requested Remedy
A claim seeking compensatory damages requires proof of recoverable loss caused by the breach. Evidence of a disclosure does not establish that every later lost customer or decline in revenue resulted from it.
A request for an injunction has separate requirements. Difficulty calculating financial harm may be relevant, but it does not automatically establish entitlement to a court order.
Is Every Confidentiality Breach Trade Secret Misappropriation?
No. A confidentiality agreement may protect information that does not meet the legal definition of a trade secret. A contract claim focuses on the parties’ enforceable promises. A trade secret claim separately requires information that has economic value from secrecy, reasonable measures to protect it, and qualifying misappropriation.
The same conduct may support both claims, but neither automatically establishes the other. Information does not become a trade secret merely because an NDA calls it confidential. Likewise, the absence of an NDA does not necessarily eliminate trade secret protection if the legal requirements and an appropriate basis for liability otherwise exist. See 18 U.S.C. § 1839.
The distinction matters because trade secret statutes provide remedies that may not be available for an ordinary contract breach. A business cannot automatically recover statutory exemplary damages or a defendant’s profits simply by proving that an NDA was violated.
What Defenses and Limitations May Apply?
Common issues include whether the agreement was enforceable, the information was covered, disclosure or use was authorized, an exclusion applied, or the confidentiality period had ended. A recipient may also dispute whether the alleged conduct occurred or whether it caused the claimed loss.
An NDA is not automatically a noncompete agreement. It generally addresses information rather than prohibiting someone from working for a competitor. However, a restriction that effectively prevents lawful competition or sweeps in ordinary skills and experience may raise enforceability concerns. Courts examine the substance and governing law, not merely the document’s title.
A confidentiality label also does not necessarily prevent disclosure required by law, a subpoena, or a court order. The recipient may have contractual duties to give notice, cooperate in seeking protection, or limit the disclosure. Those requirements must be evaluated alongside the legal demand and any restriction on providing notice.
Damages and Other Civil Remedies
The available relief depends on the contract, the governing law, and the evidence. An agreement may contain liability limits, damages exclusions, or procedures that affect recovery.
Compensatory Damages
These are intended to compensate for loss caused by the breach. Potential measures include:
- Direct financial losses: losses flowing directly from the violation, where legally recoverable and supported by evidence.
- Lost profits: profits lost because of the breach, established with sufficient certainty. Gross sales and hoped-for future business are not the same as proven lost profits.
- Consequential losses: additional losses resulting from the breach, subject to requirements such as foreseeability, causation, and adequate proof. Contractual exclusions may limit these damages.
- Reasonable mitigation expenses: qualifying expenses incurred to reduce or address the harm, where recoverable. Not every internal investigation expense or litigation cost is automatically compensable.
These categories may overlap and do not permit duplicate recovery. A claimant generally must take reasonable steps to avoid preventable additional losses.
Liquidated Damages
Some agreements specify an amount or formula payable for a breach. This is called a liquidated-damages provision. Its enforceability depends on the governing law, including the distinction between a permissible estimate of difficult-to-measure loss and an unenforceable penalty.
A stated amount is not automatically enforceable because both parties signed the agreement. Nor should it automatically be added to actual damages for the same injury.
Punitive or Exemplary Damages
Punitive damages generally are not available for an ordinary breach of contract merely because the conduct was deliberate. A separate legal basis and the required additional proof are necessary.
For example, the federal Defend Trade Secrets Act permits exemplary damages for willful and malicious trade secret misappropriation. Those statutory remedies require proving the trade secret claim; they do not follow automatically from an NDA breach. See 18 U.S.C. § 1836(b)(3).
Injunctions and Return of Information
An injunction is a court order requiring someone to do—or stop doing—something. Depending on the circumstances, relief may restrict further disclosure or use and require appropriate steps to return or protect information.
An NDA may state that a breach causes irreparable harm or that the parties may seek an injunction. Such language does not make a court order automatic. In federal court, preliminary relief requires a showing of likely success, likely irreparable harm without relief, a favorable balance of hardships, and consistency with the public interest. See Winter v. Natural Resources Defense Council, Inc., 555 U.S. 7 (2008).
Return or deletion obligations must also be coordinated with legal duties to preserve evidence. Deleting disputed files without an appropriate preservation process may create additional problems.
Attorney’s Fees
Each side generally pays its own attorney’s fees unless a contract, statute, or recognized exception provides otherwise. An NDA may contain a fee-recovery provision, but its wording and applicability require review. Winning the dispute does not automatically make every legal expense recoverable.
What Evidence Matters?
Relevant evidence may include the signed agreement and amendments, records of what was disclosed, confidentiality markings, access logs, emails, file transfers, and communications about permitted use. Financial records and customer testimony may help establish whether the alleged breach caused actual losses.
For the recipient, records showing prior knowledge, independent development, permission, or a lawful outside source may be important. Both sides should preserve relevant electronic records rather than wiping devices or deleting disputed materials. Investigations should respect legal limits on access to personal accounts, third-party systems, and devices.
How Long Does a Business Have to File Suit?
The deadline for an NDA claim depends on the governing law and the nature of the claim. Contract claims do not automatically follow the same filing period or discovery rule as trade secret claims. Continuing disclosure or use also should not be assumed to restart the deadline.
The agreement may require notice, an opportunity to cure, mediation, or arbitration. Whether those procedures apply—and whether urgent court relief remains available—depends on the wording. Prompt evaluation can help preserve evidence and address ongoing harm without overlooking contractual requirements.
Talk to a Business Litigation Attorney
If you believe an employee, contractor, prospective buyer, or business partner has violated a confidentiality obligation, or you are facing allegations that you breached an NDA, contact Waxman Litigation to discuss your options. Early evaluation can help identify the information and obligations at issue, preserve evidence, assess potential defenses, and determine what remedies the facts support.
This page provides general information only and is not legal advice. Reading it does not create an attorney-client relationship. The enforceability of an agreement, available remedies, and filing deadlines depend on the agreement, the facts, and the governing law.