NDA Guide for Small Businesses — When and How to Use Non-Disclosure Agreements

What is an NDA?

A non-disclosure agreement (NDA) — also called a confidentiality agreement — is a legal contract that creates an obligation of confidentiality between two or more parties. It prevents the receiving party from disclosing or using confidential information shared with them, except for the agreed purpose.

NDAs are one of the most commonly used business documents — and also one of the most frequently misunderstood. They are not a guarantee of confidentiality, but they do create a legal basis for enforcing it if information is misused.

When does your business need an NDA?

You should consider an NDA whenever you are sharing information that you would not want disclosed to third parties or used for purposes other than the one you intend. Common situations include:

• Discussing a potential business partnership or joint venture
• Sharing financial information with a potential investor or buyer
• Working with a freelancer or contractor who will see confidential business information
• Negotiating a new supplier or service agreement
• Sharing a product concept, business plan or technical specification
• Discussions with potential employees before a formal offer is made

Mutual vs one-way NDAs

A one-way (unilateral) NDA creates confidentiality obligations on only one party — typically the recipient of information. These are appropriate when only one party is sharing confidential information.

A mutual (bilateral) NDA creates confidentiality obligations on both parties. These are appropriate when both sides will be sharing confidential information — for example, in a potential joint venture where both parties share business plans and financial data.

Many businesses default to mutual NDAs even when a one-way NDA would be more appropriate. This can create unnecessary obligations on your side — particularly if you end up in discussions about a similar project with a different party.

What a good NDA should include

• A clear definition of what constitutes "confidential information" — and what is excluded (such as information already in the public domain)
• The purpose for which confidential information may be used
• Who the receiving party may share information with (employees, professional advisers)
• The duration of the obligation — how long confidentiality is maintained
• The consequences of breach
• The governing law and jurisdiction
• Return or destruction of information on request

How enforceable are NDAs in the UK?

NDAs are enforceable under English law, provided they are properly drafted and reasonable in scope. Courts will not enforce NDAs that are excessively broad, that attempt to prevent disclosure of information that is already in the public domain, or that seek to conceal illegal activity.

If someone breaches an NDA, the remedies available include an injunction (a court order preventing further disclosure) and damages for loss caused by the breach. Obtaining an injunction quickly can be critical — once confidential information has been disclosed, the damage is often difficult to reverse.

The strength of an NDA depends on how well it is drafted and how clearly the confidential information is identified. Vague NDAs are harder to enforce.

Common mistakes

Not having an NDA in place before discussions begin. The purpose of an NDA is to protect information before it is shared — not after. By the time something has been disclosed without protection, the NDA is redundant.

Using a template that is too vague. Generic NDA templates often define "confidential information" so broadly as to be meaningless, or so narrowly as to miss key information. The definition needs to fit the situation.

Thinking an NDA alone is enough. An NDA creates a legal obligation, but it does not prevent someone from breaching it — it just gives you legal recourse if they do. For particularly sensitive information, consider what information you actually need to share and with whom, rather than relying entirely on an NDA.

When an NDA is not the right tool

An NDA is not a substitute for proper IP protection — registering trade marks, protecting patents or ensuring IP ownership is correctly assigned through employment and contractor contracts. It also cannot protect information that is already in the public domain or that the other party already knows independently.

Buzz Legal drafts NDAs as part of our commercial contracts service. Contact us to discuss what you need.