Non-Disclosure Agreements: Terms and Use Checks

What a Non-Disclosure Agreement Protects

An NDA, also called a confidentiality agreement, protects information through the obligations the parties agree to undertake. A one-way NDA places confidentiality obligations on the recipient of one party’s information. A mutual NDA imposes obligations on both sides when each discloses protected information. Identify who discloses what before choosing the structure.

IP Australia’s NDA guidance recommends signing before disclosure and marking shared materials confidential. Its guidance explains the instrument’s use. Enforceability of a particular agreement depends on its terms and applicable law.

Confidentiality and legal professional privilege require separate assessments. An NDA does not create privilege over an ordinary commercial document. In Esso Australia Resources v Commissioner of Taxation, the High Court adopts the dominant-purpose test for common-law privilege. Assess the communication and its legal purpose under the applicable privilege rules before releasing it.

The recipient’s promise also leaves the solicitor’s authority to disclose client material to a separate client confidentiality assessment. Keep that decision in the matter file. An NDA does not itself transfer intellectual property (IP) ownership. IP Australia treats confidentiality, ownership and licensing as distinct issues in its collaboration guidance.

Define the Information, Purpose and Recipients

Define the protected information and permitted use around the transaction the parties actually contemplate. Confirm the legal identities of the discloser and recipient, including which entity holds the information and which entity needs access. A trading name or group description can hide a mismatch between the intended recipient and the contracting party.

Use a disclosure schedule to connect the agreement to the material without reproducing the secrets in the NDA itself. Identify document classes, the relevant business or project and the disclosure channel. Address information already provided if the agreement is intended to cover it. Record that choice expressly instead of assuming a later signature fixes earlier disclosure.

Work through these drafting decisions before release:

• Define whether oral disclosures and demonstrations are covered, and whether written confirmation or marking is required.
• Address notes, extracts and analyses derived from protected information, including copies held by advisers.
• State the permitted evaluation or negotiation purpose. Decide whether implementation, development or commercial use requires a separate agreement.
• Identify which staff, affiliates and external advisers may receive information, with a need-to-know limit where agreed.
• Specify the recipient’s responsibility for onward disclosure and the obligations required of additional recipients.

An adviser’s inclusion in a permitted-recipient definition does not itself make that adviser a party to the NDA. Decide whether the contracting recipient must procure compliance or obtain a separate undertaking. Record the people or approved roles allowed access so the drafting can be implemented.

Use the wider contract review to check governing law, dispute provisions and consistency with existing transaction documents. If discussions become a project, a joint venture agreement addresses the operative commercial arrangement. Keep its permissions consistent with the NDA.

Set Exceptions, Duration and Remedies

Set the exceptions and duration so the recipient can identify which obligations apply to each disclosure. Address public information, material already lawfully held and information independently developed without using the protected material. Define what evidence supports an exception and how information lawfully received from another source is treated. Avoid an exception that lets a recipient rely on its own breach to establish public availability.

Provide a process for legally required disclosure. Check the actual court order, statutory notice or other obligation, including its scope and any available protection. Any contractual notice or cooperation requirement must accommodate legal restrictions on notifying the discloser. State who handles the request and how disclosure is limited to what the law requires.

Protected reporting also needs separate treatment. Under section 1317AB of the Corporations Act 2001, contractual remedies cannot be enforced against a person for a disclosure qualifying under Part 9.4AAA. Check the qualifying conditions before assessing a proposed demand. Drafting must preserve applicable statutory protections, including any restriction on identifying a whistleblower.

Separate the period in which information may be disclosed from the period during which obligations continue. Ending negotiations or closing a data room need not end agreed confidentiality obligations. Specify the trigger and survival wording. Address ownership and any no-licence provision separately from the limited permission needed to evaluate the information.

A broad prohibition can raise restraint-of-trade questions. In Maggbury v Hafele, the High Court considers perpetual restrictions after information becomes public through the discloser’s own actions. The majority applies restraint-of-trade principles and rejects the restraints in issue. Assess the chosen scope and duration under the governing law instead of treating “forever” as automatically enforceable.

Check any indemnity, agreed payment or unusual remedy for its trigger and scope. A clause acknowledging possible injunctive relief does not guarantee a court order. For a stipulated payment, assess the penalty doctrine in light of Paciocco v ANZ and the commercial interests the provision protects. Calling a payment liquidated damages does not settle that assessment.

Fictional Due-Diligence Disclosure

Harbour Manufacturing proposes to give a potential investor customer pricing and margin information to evaluate an equity investment. Its draft permits use for “any business opportunity” and disclosure to every group company. The investor’s competing subsidiary could receive the pricing within that wording, undermining Harbour’s intended control.

A revised draft confines use to evaluating the proposed investment. It identifies the approved evaluation team and professional advisers, with agreed controls on further recipients. Before release, the lawyer tests that wording against the data-room access list. A narrower purpose still needs matching access permissions to control the actual disclosure.

Execute and Control the Disclosure

Complete execution and the agreed release conditions before sharing protected information. Use a handover that connects the signed terms to each release.

1. Confirm the parties and signing authority. Check whether the instrument is an agreement or deed and apply the execution requirements for the entity and governing law.
2. Compare the final execution version with the approved terms. Resolve missing signatures, schedules or release conditions before granting access.
3. Save the complete signed instrument and permitted-recipient record. Assign a person to approve additions or changes to access.
4. Configure the disclosure channel to match the terms. Limit access to approved recipients and apply the agreed controls on copying, downloading and onward sharing.
5. Record each release. Identify the document version, recipient and permitted purpose, preserving access logs and relevant communications.
6. Give recipients the incident contact and close-out instructions. Explain the agreed return or destruction process and any lawful retention exception.

If an unapproved adviser requests access, obtain the required approval or undertaking before adding them. If a recipient needs to use the material for a new project, resolve the permission before that use begins. Updating the access list alone does not amend the NDA.

Verify the handover against a sample release. The signed instrument, approved access list and release record must identify the same recipient and purpose. Investigate an unexplained download or forwarded attachment even when the original signatory has signed the correct version.

Respond to a Suspected Breach and Close the Arrangement

Preserve evidence of the suspected use or disclosure before deciding what response the NDA supports. Retain the signed instrument and the exact material released. Preserve access records, communications and evidence of the alleged onward use, including who obtained it and how. Contain further access while preserving records needed to assess what happened.

Identify the obligation relied on and compare the evidence with its exceptions and permitted purpose. Assess whether urgent relief is needed to prevent further harm, which parties are bound and what the relevant court can order. Separate a contractual demand from a statutory or equitable remedy. A leak allegation alone does not establish liability or compensation.

For a claimed lost sale, preserve the customer communications and pricing evidence that connect the alleged disclosure to that loss. Consider other explanations for the customer’s decision and any contractual limits on recovery. The value of the whole transaction is not automatically the loss caused by disclosure.

At close-out, identify surviving obligations and send the return or destruction request the agreement permits. Address derived analyses and copies held by permitted recipients, alongside backups and lawful retention duties. Record the basis and access restrictions for material retained. A recipient’s confirmation is evidence of what they say they have done, not proof that every residual copy is gone.

Close the disclosure arrangement when the release record reconciles with the agreed return, destruction and retention outcomes. Keep unresolved copies or disputed uses assigned for follow-up, with the supporting evidence preserved for the lawyer’s assessment.