Are NDAs Enforceable? Scope, Federal Limits, and Enforcement

Nondisclosure agreements are enforceable when they are drafted as valid contracts, protect information that genuinely qualifies as confidential, and impose limits a court considers reasonable. They fail when any of those pieces is missing, and several federal and state laws override them entirely in specific situations regardless of what the document says.

What Makes an NDA a Valid Contract

An NDA has to satisfy the same basic requirements as any other contract: a clear offer and acceptance, identification of both parties, and signatures showing agreement to the terms.1Legal Information Institute. Contract Those elements are usually straightforward. The piece that trips agreements up is consideration.

Consideration means each side has to give something of value. For a new hire, the job itself counts. For a business partner, access to proprietary information during merger talks can be enough. The calculus gets harder when an employer asks an existing employee to sign an NDA mid-employment. Some courts accept continued employment as sufficient consideration, and others view it skeptically, especially when the employer holds all the bargaining power. An NDA handed to you after you’ve already started working sits in that gray zone.

NDAs come in two forms, and the difference affects enforceability. A unilateral NDA protects one party’s information, which is the standard setup when an employer shares trade secrets with an employee or a company discloses data to a contractor. A mutual NDA binds both sides equally and shows up in joint ventures, merger negotiations, and technology partnerships where each party is exposing sensitive information. Mutual agreements tend to be easier to enforce because the reciprocal obligations create stronger consideration on both sides.

The Confidential Information Has to Be Real

The definition of “confidential information” is the heart of any NDA, and vagueness here is the single most common reason these agreements fail in court. The protected information has to be genuinely secret, specifically identified, and valuable enough to justify restrictions on the other party.

Courts consistently refuse to enforce NDAs covering information that was already publicly available, was known to the receiving party before the agreement, came from an independent third party with no obligation of secrecy, or was developed independently without using the protected material. Well-drafted NDAs include those carve-outs as standard exclusions because their absence makes the whole agreement look unreasonable.

Legitimate confidential information typically includes proprietary manufacturing processes, unpublished formulas, customer lists, internal financial projections, and marketing strategies. What it does not include is an employee’s general skills and professional knowledge gained through ordinary work experience. An NDA that effectively prevents someone from using their own expertise in a future job is asking for trouble in court.

Scope and Duration Have to Be Reasonable

Even when the confidential information is properly defined, an NDA still has to impose reasonable restrictions. Courts look at three dimensions: how long the obligation lasts, what information it covers, and how broadly it reaches geographically.

Duration matters more than most people realize. Confidentiality obligations for general business information commonly run between one and five years, and the time frame should track how long the information actually stays valuable. A two-year restriction on a marketing plan that will be outdated in six months is harder to justify than a three-year restriction on a proprietary algorithm. Courts are wary of open-ended obligations and routinely reject perpetual NDAs for ordinary business information. The exception is genuine trade secrets, which courts will protect indefinitely as long as the information remains secret.

The scope of information covered must be narrowly drawn. An NDA that classifies everything shared between the parties as confidential, without distinguishing between proprietary data and routine business communications, is almost certainly too broad. Categories should be specific enough that both parties can tell what’s covered and what isn’t. Geographic restrictions are less common in NDAs than in non-compete agreements, but they occasionally appear when the information relates to specific sales territories or regional operations.

What Happens When an NDA Goes Too Far

When an NDA’s restrictions are too aggressive, the outcome depends heavily on where you are. Courts don’t handle overbroad agreements the same way, and the difference can mean the gap between a narrowed but still enforceable agreement and one that gets thrown out entirely.

Many states follow some version of the “blue pencil” doctrine, which lets a court strike or narrow the offending provision while keeping the rest of the agreement intact. A judge might shorten a five-year restriction to two years, or limit an overly broad definition of confidential information to something more reasonable. Arizona, Connecticut, Indiana, and Maryland take this approach.

A smaller group of states, including Nebraska, Wisconsin, and Wyoming, follow the “red pencil” rule, which is far less forgiving. Under this approach, a court won’t rewrite the agreement at all. If a restriction is overbroad, the entire clause fails. Companies that draft aggressive NDAs assuming a court will trim them down later can lose the whole agreement in a red-pencil state.

Even in blue-pencil states, courts don’t have unlimited authority to rewrite contracts. They’ll modify a provision only when the valid portions can stand on their own and the employer appears to have acted in good faith. An NDA that looks designed to be oppressive from the start, particularly one presented on a take-it-or-leave-it basis with no room for negotiation, is more likely to be struck down entirely.

When Federal Law Overrides the Agreement

No NDA can override the law. An agreement designed to conceal illegal activity, obstruct a criminal investigation, or prevent someone from reporting a crime to law enforcement is unenforceable on its face. Several federal statutes go further and carve out specific categories of communication that an NDA cannot restrict.

Sexual Assault and Harassment Claims

The federal Speak Out Act, signed into law on December 7, 2022, makes pre-dispute NDAs unenforceable when the underlying claim involves sexual assault or sexual harassment. The statute is direct: no nondisclosure or nondisparagement clause agreed to before the dispute arises can be judicially enforced in cases where the alleged conduct violates federal, tribal, or state law.2Office of the Law Revision Counsel. 42 US Code 19403 – Limitation on Judicial Enforceability of Nondisclosure and Nondisparagement Contract Clauses Relating to Sexual Assault Disputes and Sexual Harassment Disputes An employee who signed an NDA as part of their initial hiring cannot be silenced about harassment or assault that occurs afterward.

The Act does not affect agreements reached after a dispute has already arisen, such as confidentiality provisions in a settlement. It also does not interfere with trade secret protections, so an employer can still protect genuinely proprietary information even when the broader NDA provisions fail.3Congress.gov. Public Law 117-224 – Speak Out Act Nearly 20 states have enacted their own laws in this area, and some go further than the federal statute, so the most restrictive applicable law controls.

Reporting to the SEC

Federal securities regulations prohibit any person from impeding someone from communicating directly with the SEC about a possible securities law violation, including by enforcing or threatening to enforce a confidentiality agreement.4eCFR. 17 CFR 240.21F-17 – Staff Communications With Individuals Reporting Possible Securities Law Violations The SEC has taken the position that the mere existence of restrictive language in an NDA can violate this rule, even if the company never actually tries to enforce it. The agency has also held that requiring employees to waive their right to a whistleblower monetary award violates the rule, even when the agreement expressly permits participation in government investigations.

Talking About Wages and Working Conditions

The National Labor Relations Act protects employees’ rights to discuss wages and working conditions with coworkers.5National Labor Relations Board. Your Right to Discuss Wages An NDA provision that restricts those conversations can violate federal labor law. This protection applies to most private-sector employees, whether or not they are part of a union.

The Required Trade Secret Immunity Notice

The Defend Trade Secrets Act requires employers to include a specific notice in any contract that governs trade secrets or confidential information. That notice must inform the employee that they are immune from criminal and civil liability for disclosing a trade secret to a government official or attorney for the purpose of reporting a suspected legal violation, or in a court filing made under seal.6Office of the Law Revision Counsel. 18 USC 1833 – Applicability to Other Laws

The penalty for skipping this notice falls on the employer. An employer that fails to include it loses the ability to recover exemplary damages (up to double actual damages) and attorney fees in any later trade secret misappropriation lawsuit against that employee. Cross-referencing a separate policy document that explains the company’s reporting procedures satisfies the requirement, but the notice obligation itself is not optional.6Office of the Law Revision Counsel. 18 USC 1833 – Applicability to Other Laws

What Enforcement Actually Looks Like

When an enforceable NDA is breached, the wronged party can pursue court orders, money, or both.

An injunction is a court order that prohibits the breaching party from continuing to use or share the confidential information. This is often the most urgent remedy because once a trade secret is out, the damage compounds quickly. Many NDAs state that any breach would cause “irreparable harm,” which makes it easier to establish that money alone can’t fix the problem. Under the Defend Trade Secrets Act, courts can grant injunctions to prevent actual or threatened misappropriation of trade secrets, though the order cannot prevent someone from taking a new job based solely on what they know.7Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings

Monetary damages compensate for the financial harm caused by the breach, including lost profits, the diminished value of the trade secret, and any unjust enrichment the breaching party gained from using the information. When a trade secret is willfully and maliciously misappropriated, the DTSA allows courts to award exemplary damages up to double the actual damages, plus reasonable attorney fees.7Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings Those enhanced remedies are available to the employer only if the NDA included the required DTSA immunity notice.

Some NDAs include a liquidated damages clause that sets a predetermined dollar amount for a breach, which exists because the actual harm from a confidentiality breach can be genuinely difficult to calculate. Courts enforce these when the harm was hard to estimate at signing and the stated amount is roughly proportional to the anticipated damage. A clause that sets an astronomical figure unrelated to any realistic measure of harm will be treated as an unenforceable penalty, leaving the wronged party to prove actual damages instead.