Non-Disclosure Agreement in India — Drafting and Enforcement

A Non-Disclosure Agreement is the most basic and most frequently misused commercial document in Indian business. It is executed routinely — for business discussions, vendor negotiations, employee onboarding, investor conversations and technology partnerships — but rarely drafted with the precision required to be enforceable when it matters. The Indian Contract Act, 1872 provides the foundational enforceability framework. There is no standalone trade secrets legislation in India, which makes the NDA the primary contractual instrument for protecting confidential information.

Legal Basis for NDA Enforcement in India

An NDA is a contract and is enforceable under the Indian Contract Act, 1872. Section 73 provides that a party who suffers loss from breach of a contract is entitled to receive compensation. Section 74 permits liquidated damages — a pre-agreed sum payable on breach — provided it represents a genuine pre-estimate of loss and not a penalty. Injunctive relief is available through civil courts under Order 39 of the Civil Procedure Code, 1908. Unlike non-compete obligations, which are subject to the Section 27 restraint of trade doctrine, confidentiality obligations are not in restraint of trade and can be enforced without temporal limitation for genuine trade secrets. Commercial disputes exceeding the specified value threshold are heard by Commercial Courts established under the Commercial Courts Act, 2015, which provides significantly faster timelines than ordinary civil courts.

Defining Confidential Information — The Critical Drafting Challenge

An NDA is only as effective as its definition of Confidential Information. A definition that is too broad — "all information disclosed in connection with the parties' discussions" — may be challenged as unenforceable because it cannot be meaningfully applied: a party cannot be expected to maintain as confidential information that is publicly known, information they received from third parties without restriction, or information they independently developed. A definition that is too narrow fails to protect the actual sensitive information being disclosed. The definition should identify the categories of information being disclosed — technical specifications, source code, customer lists, financial projections, business plans, trade processes — and may also include a marking convention: physical documents marked "Confidential" and oral disclosures confirmed in writing within a defined period.

Exclusions from Confidentiality Obligations

Standard NDA exclusions that Indian courts have consistently recognised include: information that is or becomes publicly known through no fault of the receiving party; information already known to the receiving party before disclosure (as evidenced by written records predating the NDA); information independently developed by the receiving party without reference to the disclosed information; and information disclosed by a third party without confidentiality obligations. Mandatory disclosure exclusions are also standard: a receiving party cannot be contractually prohibited from complying with a court order, regulatory requirement, or statutory obligation to disclose. However, the NDA should require the receiving party to provide prompt notice to the disclosing party before making any legally compelled disclosure, to allow the disclosing party to seek a protective order.

Duration of Confidentiality Obligations

A common drafting error is specifying a very short confidentiality period — two or three years — for information that constitutes genuine trade secrets. A customer database, a proprietary algorithm, a manufacturing process, a business model developed over years, is not adequately protected by a two-year confidentiality obligation. Indian law does not require a time limit on confidentiality obligations for trade secrets. For technical trade secrets and proprietary business information, confidentiality obligations should continue indefinitely or for as long as the information remains non-public. Standard terms (commercial discussions, pricing information) can carry shorter limitations — five to seven years is reasonable. The NDA should distinguish between categories of confidential information and apply appropriate durations.

Remedies for NDA Breach

Breach of an NDA entitles the disclosing party to: compensation for actual losses suffered under Section 73 of the Contract Act; liquidated damages at the pre-agreed rate under Section 74 (if the amount is a genuine pre-estimate of loss); and injunctive relief under Order 39 CPC to restrain continued or threatened breach. The injunction is frequently the most important remedy — once confidential information has been further disclosed, damages may be inadequate to compensate. An Indian court will grant a temporary injunction under Order 39 where the applicant demonstrates a prima facie case of breach or threatened breach, irreparable harm, and a balance of convenience in favour of the injunction. An acknowledgment in the NDA that breach would cause irreparable harm strengthens this application. The information disclosing party should also pursue specific performance of obligations of return or destruction of confidential materials under the Specific Relief Act, 1963.

Employee NDAs — Specific Considerations

Employees must execute NDAs as part of their employment agreements — a separate standalone NDA is acceptable but less efficient than incorporating confidentiality provisions into the employment agreement itself. The key Indian law consideration is Section 27 of the Contract Act: while confidentiality obligations are not in restraint of trade, a combined confidentiality and non-compete clause in an employment agreement must be carefully structured. The confidentiality obligation — which survives employment — is valid without time limit for trade secrets. The non-compete — which operates post-employment — is subject to Section 27 and must be reasonable in scope, geography and duration to have any prospect of enforcement. These are separate obligations and must be treated as such in the agreement.