Alex is Sprintlaw's co-founder and a legal technology leader. He holds law and media degrees from the University of Sydney and has been recognized by Australasian Lawyer, Lawyers Weekly and the Sydney Young Entrepreneur Awards for his work building Sprintlaw and improving access to business legal support.
Signing a one-way non-disclosure agreement (NDA) can seem like a routine part of doing business, especially for startups, founders, and operators eager to move quickly. But treating an NDA as a simple formality can lead to major headaches later. Many business owners make the mistake of assuming all NDAs are the same or that they always protect the party sharing information. In reality, the specific terms in a one-way NDA can expose your business to unexpected risks, restrict your future activities, or even create legal disputes if not reviewed carefully.
This guide is for US startups, founders, and small business owners who want to understand what a one-way NDA really covers, which terms project most, and how to avoid common pitfalls. We will explain the basics of NDAs under US law, highlight the key commercial terms to review, and provide practical checklists, examples, and state-specific caveats. By the end, you will know what to look for before signing, how to spot red flags, and when it makes sense to get professional legal help.
What Is a One Way Non-Disclosure Agreement?
A one-way non-disclosure agreement (sometimes called a unilateral NDA) is a contract in which only one party shares confidential information and the other party agrees to keep it secret. This is different from a mutual NDA, where both sides share information and both are bound by confidentiality obligations. One-way NDAs are common in situations such as:
- Pitching your business idea to an investor
- Sharing a prototype or product design with a manufacturer or contractor
- Discussing sensitive business plans with a potential partner or service provider
- Hiring a consultant to review proprietary processes or data
In a typical one-way NDA, the disclosing party is the business or individual providing confidential information, and the receiving party is the person or company agreeing to keep it confidential. The NDA sets out what information is protected, how it must be handled, and what happens if it is disclosed without authorization.
There is no single federal law that governs NDAs in the United States. Instead, NDAs are contracts governed by state law. This means the enforceability and interpretation of an NDA can vary depending on which state's law applies. Some states, like California, have specific rules limiting what can be protected and how long confidentiality obligations can last. Others may allow broader terms. Always check which state law governs your NDA and be aware of any local rules or industry-specific requirements that could impact your agreement.
Key Commercial Terms to Review Before Signing
Not all NDAs are created equal. Before you sign a one-way NDA, carefully review these key commercial terms to ensure your business is protected and you are not taking on unnecessary risk:
- Definition of Confidential Information: How does the NDA define what is confidential? Does it include only written information, or also oral discussions and electronic communications? Are there clear exclusions for information that is already public, known to the receiving party, or independently developed?
- Purpose of Disclosure: Does the NDA specify why the information is being shared (for example, to evaluate a potential partnership or investment)? Is the purpose narrowly defined, or so broad that it could restrict your normal business activities?
- Obligations of the Receiving Party: What steps must the receiving party take to protect the information? Are they required to use reasonable care, or at least the same care they use for their own confidential data? Are there requirements for limiting access to employees or contractors?
- Term and Duration: How long does the confidentiality obligation last? Is there a specific time period (such as two or five years), or is the obligation perpetual? Unlimited terms can be risky and may not be enforceable in all states, especially for information that is not a trade secret.
- Exclusions and Exceptions: Are there standard exclusions for information that is public, already known, independently developed, or required to be disclosed by law (such as in response to a subpoena)? Are these exclusions clearly worded?
- Return or Destruction of Information: Does the NDA require the receiving party to return or destroy confidential materials upon request or at the end of the relationship? Is there a process for certifying destruction?
- Remedies and Liability: What happens if there is a breach? Does the NDA specify remedies such as injunctive relief (a court order to stop disclosure), monetary damages, or attorney fees? Are there any limitations or unusual penalties?
- Governing Law and Jurisdiction: Which state's law applies, and where will disputes be resolved? This can affect your rights and the cost of enforcing the NDA. If the other party is in another state, consider whether the chosen jurisdiction is practical for your business.
Use a checklist to review each of these terms before signing. If anything is unclear, unusually strict, or missing, ask for clarification or changes. Do not assume that all NDAs are standard or non-negotiable, many terms can and should be negotiated to fit your specific situation.
Common Mistakes and Risks in One Way NDAs
Even experienced founders and operators can make mistakes when reviewing NDAs. Here are some of the most common pitfalls to watch for, along with practical examples:
- Overbroad Definitions: Some NDAs define confidential information so broadly that it covers all communications, regardless of relevance. For example, an NDA might state that "all information disclosed in any form" is confidential, which could restrict your ability to use information you already knew or that is public knowledge.
- Missing Exclusions: If the NDA does not clearly exclude information that is public, independently developed, or received from another source, you could be unfairly restricted. For instance, a consultant might sign an NDA that lacks these exclusions and later be accused of breaching confidentiality for using general industry knowledge.
- Unclear Duration: NDAs with no end date or with perpetual obligations can be hard to manage and may not be enforceable in every state. For example, California law generally does not enforce perpetual confidentiality obligations for information that is not a trade secret.
- Unreasonable Remedies: Some NDAs impose excessive penalties, such as high liquidated damages or automatic payment of attorney fees for any breach, even minor ones. This can create significant financial risk for your business.
- No Carve-Outs for Legal Disclosure: If the NDA does not allow disclosure when required by law, you could be in a position where you must choose between violating the NDA or violating a court order or government regulation.
- Signing Without Review: Rushing to sign an NDA without reading it carefully or comparing it to your checklist can lead to agreeing to terms that harm your business. For example, a founder may sign an NDA with a potential investor that restricts future fundraising or partnerships.
Here is a practical example: A startup founder is asked to sign a one-way NDA before pitching to a large corporation. The NDA defines confidential information as "all information disclosed, regardless of form," and has no end date. Later, the corporation claims that the founder cannot discuss their own business idea with other investors, arguing it is covered by the NDA. If the NDA had included clear exclusions and a reasonable duration, this dispute could have been avoided.
To avoid these risks, always review the NDA line by line, ask questions about anything that seems unusual, and do not be afraid to negotiate terms that do not make sense for your business. If you are considering a business sale, pay special attention to confidentiality terms that could impact future transactions or your ability to talk with other buyers.
Checklist: What to Do Before Signing a One Way NDA
Use this checklist before signing any one-way non-disclosure agreement:
- Identify the Parties: Confirm that the correct legal names of both the disclosing and receiving parties are listed. If you are signing on behalf of a company, make sure the company is the party, not you personally.
- Review the Definition of Confidential Information: Is it clear and not overly broad? Does it include oral, written, and electronic information? Are there reasonable exclusions?
- Check the Purpose: Is the reason for sharing information specific and accurate? Avoid overly broad purposes that could restrict your business.
- Understand the Obligations: What must the receiving party do to protect the information? Are the standards reasonable and practical?
- Confirm the Duration: How long do confidentiality obligations last? Is there a clear end date or event? For example, two to five years is common for most business NDAs.
- Look for Exclusions: Are there standard carve-outs for public information, prior knowledge, independent development, or legal requirements?
- Review Return/Destruction Clauses: What happens to confidential information at the end of the relationship? Is there a process for certifying destruction or return?
- Assess Remedies: Are there penalties, damages, or attorney fees that seem excessive or one-sided? Are the remedies balanced?
- Check Governing Law and Jurisdiction: Which state law applies, and is the jurisdiction practical for your business? If you operate in multiple states, consider the implications.
- Keep a Copy: Save a signed copy of the NDA and any related correspondence for your records. Store it in a secure location with your other key contracts.
Following this checklist can help you spot red flags and avoid signing an NDA that could create problems for your business later.
State Law Caveats and Industry-Specific Rules
Because NDAs are governed by state contract law, the rules can vary significantly depending on which state law applies to your agreement. Here are some important state law caveats and industry-specific considerations:
- California: California law generally prohibits NDAs from restricting the use of information that is not a trade secret or that is already public. Perpetual confidentiality obligations are rarely enforced for non-trade secret information. California also limits the enforceability of NDAs in employment settings, especially after recent changes to state law.
- New York: New York courts typically enforce NDAs if the terms are reasonable and not overly broad. However, NDAs that attempt to restrict general knowledge or skills may be limited.
- Texas: Texas law allows NDAs but requires that the definition of confidential information be specific and not overly broad. Texas courts may refuse to enforce NDAs that are vague or attempt to cover information that is not truly confidential.
- Illinois: Illinois recognizes NDAs and will generally enforce them if they are reasonable in scope and duration. However, Illinois law requires clear definitions and reasonable time limits, especially in employment contexts.
- Industry-Specific Rules: In regulated industries such as healthcare (HIPAA), finance (GLBA), or government contracting, there may be additional federal or state requirements for confidentiality. NDAs in these sectors should be reviewed for compliance with applicable regulations.
Always check which state law is listed as governing law in your NDA and consider how local rules might affect your rights and obligations. If you operate in multiple states or are dealing with parties in other jurisdictions, make sure the NDA does not create conflicting obligations.
For example, a tech startup in California might sign an NDA with a New York investor. If the NDA specifies New York law, the startup could be subject to broader confidentiality obligations than would be enforceable under California law. This could affect the startup's ability to raise funds or discuss its business with other investors.
When to Negotiate or Seek Legal Review
Not every NDA requires a full legal review, but there are situations where negotiation or professional advice is strongly recommended. Consider negotiating or consulting an attorney if:
- The NDA involves a large deal, sensitive technology, or valuable intellectual property.
- The terms are unusual, unclear, or seem one-sided in favor of the other party.
- You are unsure about the meaning of any clause or how it might affect your business operations.
- The other party refuses to make reasonable changes or insists on perpetual obligations.
- The NDA is governed by the law of a state you are not familiar with, or you have operations in multiple states.
- You have had issues with NDAs or confidentiality disputes in the past.
- The NDA is being used in a regulated industry with additional compliance requirements.
For example, if you are sharing a proprietary software design with a potential overseas manufacturer, you may want to add specific language about how your information will be protected and what recourse you have if there is a breach. Or if an investor asks for an NDA with unlimited duration, you might negotiate a reasonable time limit, such as two to five years, or specify that only trade secrets are protected indefinitely.
Legal review can also help you spot terms that conflict with other agreements, such as employment contracts, consulting agreements, or partnership deals. In some industries, there may be additional rules about confidentiality, such as in healthcare, finance, or government contracting. An attorney can help you understand how these rules interact with your NDA and whether any additional disclosures or compliance steps are needed.
Remember, the cost of a quick review is often much less than the potential cost of a dispute, lost business opportunity, or litigation over a poorly drafted NDA.
FAQs
Is a one-way NDA enforceable in every state?
One-way NDAs are generally enforceable in most US states as long as the terms are reasonable and not overly broad. However, some states have specific rules about what can be protected and for how long. For example, California limits the use of NDAs to protect information that is not already public or generally known, and perpetual obligations are rarely enforced for non-trade secrets. Always check which state law applies and whether there are any local restrictions before signing.
How long should confidentiality obligations last in a one-way NDA?
The duration of confidentiality obligations should be reasonable for the type of information being shared. Common terms range from one to five years for most business information. Perpetual obligations (no end date) are sometimes used for trade secrets, but may not be enforceable in all states. It is best to set a clear end date or event that triggers the end of the obligation, and to specify that only trade secrets are protected indefinitely if needed.
What happens if the receiving party breaches the NDA?
If the receiving party breaches the NDA, the disclosing party can seek remedies such as injunctive relief (a court order to stop further disclosure) and, in some cases, monetary damages. The specific remedies available depend on the terms of the NDA and the applicable state law. Some NDAs also include provisions for attorney fees or liquidated damages, so it is important to review these clauses before signing. Keep in mind that proving damages from a breach can be difficult, so strong remedies in the NDA can help enforce your rights.
Can I use a template NDA, or should I always have a custom agreement?
Template NDAs can be a useful starting point, but they may not cover all the specific needs of your business or the deal at hand. Always review any template carefully and adapt it to fit your situation. For important deals, or if you have concerns about the terms, consider having an attorney review or customize the agreement to ensure it is enforceable and protects your interests.
Do NDAs cover information that is already public?
Most NDAs specifically exclude information that is already public, was known before disclosure, or is independently developed without reference to the confidential information. If your NDA does not include these exclusions, you should ask for them to be added to avoid being unfairly restricted. Without these exclusions, you could be accused of breaching the NDA for using information that is widely available or part of your existing knowledge.
Key Takeaways
- One-way non-disclosure agreements are common in US business, but the terms can vary widely and have significant consequences if not reviewed carefully.
- Always review the definition of confidential information, duration, exclusions, remedies, and governing law before signing any NDA.
- Common mistakes include signing overbroad or unclear NDAs, missing standard exclusions, and agreeing to perpetual obligations that may not be enforceable.
- Use a checklist to review each NDA, keep good records, and do not hesitate to negotiate or seek legal review for important deals or unusual terms.
- State law can affect enforceability and interpretation, so always check which law applies to your NDA and consider any industry-specific rules.
Before you sign a one-way non-disclosure agreement, take the time to review the key terms and protect your business interests. If you have questions or need help reviewing or negotiating an NDA, contact our team at (888) 449-8437 or team@sprintlaw.com. Where legal services are required, they are delivered by licensed lawyers at trusted US law firms through the Sprintlaw platform.








