How to Write a Non-Disclosure Agreement That Actually Protects You

What Is a Non-Disclosure Agreement?

A non-disclosure agreement is a contract that tells the receiving party what information must stay private, how that information may be used, who may access it, and what happens if the information is misused.

You should think of an NDA as a protection tool, not a complete business contract. It protects information. It does not usually cover payment terms, ownership percentages, service deadlines, project deliverables, partnership duties, or breach remedies for a larger deal. If your issue involves a broken agreement, you may need language closer to Breach of Contract Demand Letter.

When You Should Use an NDA

You should consider using an NDA when you are sharing information that is not public and could harm you if it were disclosed or used without permission.

Common NDA situations include:

• You are discussing a possible business partnership.
• You are showing a product design, prototype, formula, process, or software idea.
• You are giving a consultant access to client lists, pricing, or strategy.
• You are reviewing a vendor, supplier, manufacturer, or distributor.
• You are hiring an employee or contractor.
• You are sharing financial statements, marketing plans, customer information, or internal reports.
• You are discussing a possible sale, merger, licensing deal, or investment.

A trade secret can include many types of business, scientific, technical, economic, or engineering information, but the owner must take reasonable measures to keep it secret and the information must have value because it is not generally known.

Step 1: Identify the Parties Correctly

Start by naming each party clearly.

Use the full legal name of the business or person signing the NDA. If one side is an LLC, corporation, nonprofit, or partnership, use the official legal name instead of a nickname or website name.

Example:

This Non-Disclosure Agreement is entered into by and between [Disclosing Party Legal Name], located at [Address], and [Receiving Party Legal Name], located at [Address], effective as of [Date].

If both sides will disclose information, call them “Party A” and “Party B,” or say each party may be a “Disclosing Party” when it shares information and a “Receiving Party” when it receives information.

Step 2: State the Purpose of the NDA

Your NDA should explain why the information is being shared. This is important because it limits what the receiving party can do with the information.

Weak purpose:

To discuss business.

Stronger purpose:

To evaluate a potential distribution partnership between the parties.

Even stronger purpose:

To allow the receiving party to review confidential pricing, customer, product, and operational information solely for the purpose of evaluating a potential distribution partnership.

If you are sending the NDA before a formal request or proposal, connect it to a clear written purpose. You can model the surrounding communication after Business Proposal Letter for Services.

Step 3: Define Confidential Information Clearly

This is the heart of the NDA. Do not make the definition so vague that it becomes hard to enforce.

You can define confidential information to include:

• business plans
• customer lists
• vendor lists
• pricing
• marketing strategy
• source code
• formulas
• product designs
• prototypes
• financial records
• trade secrets
• research
• technical processes
• sales data
• unpublished reports
• passwords or access credentials
• private communications
• non-public contract terms

Example:

“Confidential Information” means non-public information disclosed by the Disclosing Party to the Receiving Party, whether in written, oral, electronic, visual, or physical form, including business plans, customer lists, pricing, financial information, marketing strategy, software, designs, prototypes, formulas, processes, technical data, vendor information, and any other information that a reasonable person would understand to be confidential based on its nature or the circumstances of disclosure.

Step 4: Include Standard Exclusions

A strong NDA should also say what is not confidential.

Standard exclusions usually include information that:

• is already public through no fault of the receiving party;
• was already known by the receiving party before disclosure;
• is independently developed without using the confidential information;
• is lawfully received from another source without a duty of confidentiality;
• must be disclosed because of a court order, subpoena, law, or government request.

These exclusions make the NDA more balanced. They also help prevent disputes over information the recipient did not actually get from you.

Step 5: Limit How the Information Can Be Used

Your NDA should say the receiving party may only use the confidential information for the stated purpose.

Example:

The Receiving Party may use the Confidential Information only for the Purpose stated in this Agreement and may not use it for any personal, commercial, competitive, or unauthorized purpose.

This clause matters because misuse is often more dangerous than disclosure. For example, someone may not publicly reveal your customer list, but they might use it to compete against you, contact your customers, copy your strategy, or build a competing product.

Step 6: Limit Who May See the Information

Your NDA should say who is allowed to access the confidential information.

Common permitted recipients include:

• employees who need to know;
• contractors who need to know;
• attorneys;
• accountants;
• financial advisors;
• business advisors;
• board members;
• representatives bound by confidentiality duties.

Example:

The Receiving Party may disclose Confidential Information only to its employees, contractors, advisors, attorneys, accountants, or representatives who have a legitimate need to know for the Purpose and who are bound by confidentiality obligations at least as protective as this Agreement.

Step 7: Set a Reasonable Duration

For ordinary confidential business information, many NDAs use a fixed period, such as two, three, or five years. For trade secrets, the obligation often lasts as long as the information remains a trade secret under applicable law.

Example:

The confidentiality obligations in this Agreement continue for three years from the Effective Date. However, for any information that qualifies as a trade secret, the obligations continue for as long as the information remains a trade secret under applicable law.

Avoid saying “forever” for every type of information unless an attorney has reviewed the language. A more practical approach is to separate ordinary confidential information from true trade secrets.

Step 8: Add Return or Destruction Requirements

Your NDA should explain what happens when the relationship ends or when you ask for the information back.

Example:

Upon request or upon termination of discussions, the Receiving Party must promptly return or securely destroy all Confidential Information, including copies, notes, summaries, and extracts, except for records retained for legal compliance, routine backups, or legal holds. Any retained copies remain subject to this Agreement.

This section helps you regain control after a vendor review, pitch meeting, employment relationship, consulting project, or partnership discussion ends.

Step 9: Add Whistleblower and Government-Reporting Carve-Outs

Your NDA should not block lawful reporting to government agencies. This is especially important for employees, contractors, consultants, and regulated companies.

The Defend Trade Secrets Act includes whistleblower immunity language for certain confidential disclosures to government officials or attorneys for reporting or investigating suspected legal violations. It also requires employers to provide notice of that immunity in contracts governing trade secret or confidential information with employees, including contractors and consultants.

You can include language like this:

Nothing in this Agreement prohibits any individual from reporting a possible violation of law to a government agency, cooperating with a government investigation, participating in a legal proceeding, or making a disclosure protected by law.

For companies subject to securities laws, SEC Rule 21F-17 concerns agreements or policies that may impede someone from communicating with the SEC about possible securities-law violations. The SEC states that Rule 21F-17 issues can involve NDAs, confidentiality agreements, severance agreements, internal policies, procedures, and guidance documents.

Step 10: Do Not Confuse an NDA With a Noncompete

An NDA restricts the use or disclosure of information. A noncompete restricts where someone can work or whether they can compete after leaving a job or business relationship.

Those are different restrictions.

The FTC’s broad Noncompete Rule is not in effect and is not enforceable, according to the FTC’s own rule page, but noncompetes remain heavily affected by state law and enforcement actions.

Your NDA should not secretly act like a noncompete. If the clause is so broad that it prevents someone from working in their field, it may create legal problems.

Step 11: Add Remedies and Severability

Your NDA should explain what can happen if the receiving party breaches the agreement.

Common remedies include:

• injunctive relief;
• damages;
• attorney fees if allowed by law and included in the agreement;
• return or destruction of materials;
• court orders preventing further use or disclosure.

Example:

The Receiving Party agrees that unauthorized use or disclosure of Confidential Information may cause irreparable harm for which money damages may be inadequate. The Disclosing Party may seek injunctive relief, damages, and any other remedies available under applicable law.

Also add a severability clause:

If any provision of this Agreement is found unenforceable, the remaining provisions remain in effect, and the unenforceable provision may be modified to the minimum extent necessary to make it enforceable.

Sample Non-Disclosure Agreement You Can Adapt

Non-Disclosure Agreement

This Non-Disclosure Agreement is entered into by and between [Disclosing Party Legal Name], located at [Address], and [Receiving Party Legal Name], located at [Address], effective as of [Effective Date].

1. Purpose

The parties wish to discuss and evaluate [describe purpose, such as “a potential business partnership,” “a consulting relationship,” “a vendor proposal,” “a product development project,” or “an investment opportunity”]. Confidential Information may be used only for this purpose.

2. Confidential Information

“Confidential Information” means non-public information disclosed by the Disclosing Party to the Receiving Party, whether in written, oral, electronic, visual, or physical form, including business plans, customer lists, vendor lists, pricing, financial information, marketing strategy, software, source code, designs, prototypes, formulas, processes, technical data, research, trade secrets, and any other information that a reasonable person would understand to be confidential based on its nature or the circumstances of disclosure.

3. Exclusions

Confidential Information does not include information that the Receiving Party can show:
(a) is or becomes public through no breach of this Agreement;
(b) was already known to the Receiving Party before disclosure;
(c) was independently developed without use of the Confidential Information;
(d) was lawfully received from another source without a duty of confidentiality; or
(e) must be disclosed by law, subpoena, court order, or government request, subject to the notice provisions below when legally permitted.

4. Use and Protection

The Receiving Party may use Confidential Information only for the Purpose stated in this Agreement. The Receiving Party must protect the Confidential Information using at least reasonable care and no less care than it uses to protect its own similar confidential information.

5. Limited Disclosure

The Receiving Party may disclose Confidential Information only to employees, contractors, advisors, attorneys, accountants, or representatives who need to know the information for the Purpose and who are bound by confidentiality obligations at least as protective as this Agreement.

6. Compelled Disclosure

If the Receiving Party is required by law, subpoena, court order, or government request to disclose Confidential Information, the Receiving Party will provide prompt written notice to the Disclosing Party when legally permitted and will reasonably cooperate with efforts to seek confidential or protective treatment.

7. Return or Destruction

Upon request or upon the end of discussions, the Receiving Party must promptly return or securely destroy all Confidential Information, including copies, notes, summaries, and extracts, except for records retained for legal compliance, routine backups, or legal holds. Any retained copies remain subject to this Agreement.

8. Duration

The obligations in this Agreement continue for [two, three, or five] years from the Effective Date. For information that qualifies as a trade secret, the obligations continue for as long as the information remains a trade secret under applicable law.

9. No License or Ownership Transfer

This Agreement does not transfer ownership of any Confidential Information, intellectual property, invention, copyright, trademark, patent, trade secret, business idea, or other right. No license is granted except the limited right to use the Confidential Information for the Purpose.

10. Government Reporting and Protected Rights

Nothing in this Agreement prohibits any person from reporting a possible violation of law to a government agency, cooperating with a government investigation, participating in a legal proceeding, or making any disclosure protected by law. Nothing in this Agreement restricts rights that cannot lawfully be waived.

11. DTSA Notice

An individual will not be held criminally or civilly liable under any federal or state trade secret law for disclosure of a trade secret that is made in confidence to a government official or to an attorney solely for the purpose of reporting or investigating a suspected violation of law, or that is made in a complaint or other document filed under seal in a lawsuit or other proceeding.

12. Remedies

The Receiving Party agrees that unauthorized use or disclosure of Confidential Information may cause irreparable harm for which money damages may be inadequate. The Disclosing Party may seek injunctive relief, damages, and any other remedies available under applicable law.

13. Severability

If any provision of this Agreement is found unenforceable, the remaining provisions remain in effect, and the unenforceable provision may be modified to the minimum extent necessary to make it enforceable.

14. Governing Law

This Agreement is governed by the laws of [State], without regard to conflict-of-law rules.

15. Entire Agreement

This Agreement is the complete agreement between the parties regarding Confidential Information and supersedes prior discussions or understandings on that subject.

16. Signatures

Disclosing Party: ___________________________
Name: ___________________________
Title: ___________________________
Date: ___________________________

Receiving Party: ___________________________
Name: ___________________________
Title: ___________________________
Date: ___________________________

Email Message to Send With an NDA

Subject: Non-Disclosure Agreement for Review

Dear [Name],

I am sharing the attached Non-Disclosure Agreement so we can discuss [briefly describe purpose] while protecting confidential business information.

Please review the agreement and let me know if you have any questions or requested changes. Once it is signed, I will be able to share the relevant information needed for our discussion.

Thank you for your time and consideration.

Sincerely,
[Your Name]

For more professional request wording, see Official Request Letter Samples.

Common NDA Mistakes to Avoid

Do not make these common mistakes:

• using a vague definition of confidential information;
• failing to state the business purpose;
• trying to protect public information;
• leaving out standard exclusions;
• using a perpetual term for everything;
• forgetting return-or-destruction language;
• failing to include whistleblower or government-reporting carve-outs;
• using an NDA to hide unlawful conduct;
• making the NDA act like a noncompete;
• letting the wrong person sign for a company;
• forgetting to keep a signed copy.

If a breach already happened, your next step may be a formal demand letter. For that situation, see Breach of Contract Demand Letter or Demand Letter for Small Claims Court.

What to Attach to an NDA

Depending on your situation, you may attach:

• a project description;
• a proposal summary;
• a list of covered materials;
• a document schedule;
• a data room access policy;
• a return-or-destruction checklist;
• a list of authorized representatives;
• a written purpose statement;
• a consulting or vendor scope of work.

If money or payment terms are part of the larger relationship, keep those terms in a separate agreement or letter. For payment-related wording, see Business Payment Request Letter for a Partial Payment.

FAQ: How to Write a Non-Disclosure Agreement

Do you need a lawyer to write an NDA?

You can start with a sample NDA for a simple situation, but you should consider legal review if the information is highly valuable, the agreement involves employees, the deal crosses state or country lines, the recipient is an investor, or the information includes trade secrets, software, health data, financial records, or regulated information.

What is the most important part of an NDA?

The most important part is the definition of confidential information. If you define it too broadly, the NDA may look unreasonable. If you define it too narrowly, important information may be left out.

Should an NDA be mutual or one-way?

Use a one-way NDA when only one side shares confidential information. Use a mutual NDA when both sides will share confidential information. If you are preparing for partnership talks, review Write Winning Partnership Letters Today before sending your NDA.

How long should an NDA last?

For ordinary business information, two to five years is common. For true trade secrets, the duty can continue as long as the information remains a trade secret under applicable law.

Can an NDA protect an idea?

An NDA can help protect non-public details about an idea, such as technical plans, business strategy, financial data, designs, prototypes, customer lists, or formulas. It is harder to protect a vague idea that is not documented, specific, or confidential.

Can an NDA stop someone from reporting illegal conduct?

No. An NDA should not block lawful reporting to government agencies, whistleblower activity, or legally protected rights. The DTSA includes immunity provisions for certain confidential trade secret disclosures made to government officials or attorneys for reporting or investigating suspected legal violations.

Can an NDA stop employees from discussing wages?

A confidentiality clause should not be written to unlawfully stop covered employees from discussing wages or protected workplace issues. The NLRB says covered employees have rights to communicate about wages with coworkers and others.

Is an NDA the same as a noncompete?

No. An NDA protects information. A noncompete restricts work or competition. The FTC states that its Noncompete Rule is not currently in effect or enforceable, but noncompetes may still be restricted by state law and enforcement actions.

What should you do if someone violates your NDA?

Collect proof of the signed NDA, the confidential information shared, the disclosure or misuse, and the harm caused. Then consider sending a formal demand letter. You can start with Breach of Contract Demand Letter.

Sources

• Cornell Law School, 18 U.S.C. § 1839, trade secret definition.
• Cornell Law School, 18 U.S.C. § 1833, DTSA whistleblower immunity notice.
• SEC, Whistleblower Protections and Rule 21F-17 guidance.
• NLRB, employee rights to discuss wages.
• FTC, Noncompete Rule status.

Short Disclaimer

This article is for general informational and educational purposes only and is not legal advice. NDA laws, employment rules, trade secret protections, whistleblower rights, and noncompete restrictions vary by jurisdiction and situation. Consult a licensed attorney before using an NDA for high-value information, employees, contractors, regulated industries, or complex business transactions.