Non-Disclosure Agreement: What To Review Before Signing

Non-disclosure agreements (NDAs) are a staple of business deals in the United States. Whether you are a founder pitching an idea, a small business owner hiring a contractor, or a startup negotiating with a potential partner, you are likely to encounter NDAs early and often. Many business owners assume NDAs are standard forms that can be signed quickly. In reality, failing to review NDA terms can expose your business to unexpected risks, including broad liability, loss of intellectual property, or even legal disputes in distant states.

Common mistakes include agreeing to vague or overly broad definitions of confidential information, missing critical exclusions, or overlooking how state law affects enforceability. This guide answers what to review before signing a non-disclosure agreement, how state law and industry rules can change your obligations, and practical steps to protect your business. We also cover real-world examples, a detailed checklist, and common pitfalls to avoid.

What Is a Non-Disclosure Agreement?

An NDA is a legally binding contract that requires one or more parties to keep certain information secret. NDAs are used in a variety of business contexts, such as:

• Presenting a startup idea to investors or accelerators
• Negotiating with suppliers, distributors, or manufacturers
• Hiring employees, freelancers, or consultants who will access sensitive data
• Exploring mergers, acquisitions, or joint ventures
• Sharing proprietary technology, code, or business plans with third parties

NDAs can be mutual (both parties agree to protect each other's information) or one-way (only one party is bound). The main goal is to prevent unauthorized use or disclosure of confidential information, such as trade secrets, customer lists, marketing strategies, or technical know-how.

At the federal level, there is no single law that governs all NDAs. Instead, contract law is primarily determined by each state. Some industries, like healthcare and finance, may also have federal or state confidentiality requirements layered on top. For example, HIPAA regulates health information, while GLBA applies to financial data. Always consider both the general contract rules and any industry-specific regulations that may apply to your NDA.

Key Clauses To Review in an NDA

Before signing, carefully review these key NDA clauses to understand your rights and obligations:

1. Definition of Confidential Information: Is the definition specific or does it include everything the other party shares? For example, an NDA that defines confidential information as "all information disclosed" could cover even public or trivial facts. Ask for a definition that is limited to non-public, proprietary, or specifically identified materials.
2. Obligations of the Receiving Party: What must you do to protect the information? Are you required to use "reasonable efforts" or "best efforts"? The difference matters. "Best efforts" is a higher bar and may require extraordinary measures. Make sure the standard is practical for your business.
3. Exclusions: Are there carve-outs for information that is already public, independently developed, or received from a third party? For example, if you already know something before signing, you should not be restricted from using it. Exclusions are critical to avoid accidental breaches.
4. Term and Duration: How long do your confidentiality obligations last? Some NDAs require confidentiality for 2-5 years, others are indefinite (especially for trade secrets). For example, a tech startup might want a 3-year NDA for business plans, but an indefinite term for source code or algorithms.
5. Permitted Disclosures: Can you share the information with employees, contractors, or advisors? If so, do they also need to sign NDAs? Make sure the agreement allows you to operate your business without constant legal risk.
6. Return or Destruction of Information: Are you required to return or destroy confidential materials at the end of the relationship? If so, how do you certify compliance, especially with digital files or backups?
7. Remedies and Liability: What happens if there is a breach? Does the NDA specify damages, injunctions, or other remedies? Are there limits on liability, or could you be responsible for indirect or consequential damages? For example, a clause requiring you to pay for all losses, including lost profits, can be risky for small businesses.
8. Governing Law and Jurisdiction: Which state's law applies, and where would any disputes be resolved? This can affect your rights and the NDA's enforceability. For example, a New York-based startup may not want to resolve disputes in Texas courts.

Reviewing these clauses can help you spot red flags and negotiate better terms. If you are unsure about any provision, seek legal advice before signing.

Example: A founder is asked to sign an NDA with a potential investor. The NDA defines confidential information as "all information disclosed in any form." The founder later realizes this could include information already in the public domain, such as their company's website. By negotiating for exclusions, the founder avoids being restricted from using publicly available information.

Common NDA Mistakes and How To Avoid Them

NDAs are often signed in a rush, but overlooking key terms can create serious risks. Here are common mistakes and how to avoid them:

• Agreeing to an Overbroad Scope: If the NDA covers all information, you may be restricted from using knowledge you already have or information that is not confidential. Always ask for a clear, specific definition and reasonable exclusions.
• Missing the Duration: Some NDAs require confidentiality forever, which may not be practical or enforceable for all types of information. For example, business plans or marketing strategies may only need protection for a few years. Make sure the duration matches the sensitivity of the information.
• Ignoring State Law Differences: State laws affect enforceability. For example, California generally voids NDAs that restrict employee mobility or contain non-compete clauses, while Texas courts may enforce broader NDAs. Always check which state law applies.
• Accepting Unlimited Liability: Some NDAs make you liable for all losses, including indirect damages or lost profits. This can be catastrophic for a small business. Look for clauses that limit your liability to direct damages or a reasonable cap.
• Not Considering Third Parties: If you need to share information with employees or advisors, make sure the NDA allows it and that those individuals are also bound by confidentiality. Otherwise, you could breach the NDA unintentionally.
• Signing Without Review: Never sign an NDA without reading and understanding all terms. If you are unsure, seek a legal review. Even standard NDAs can contain hidden risks.
• Overlooking Return/Destruction Obligations: Some NDAs require you to return or destroy all copies of confidential information. In practice, deleting digital files and backups can be challenging. Make sure the requirements are feasible and clarify how compliance will be certified.
• Assuming All NDAs Are Enforceable: Not all NDA terms will hold up in court, especially if they are overly broad or conflict with state law. For example, an NDA that tries to prevent whistleblowing or reporting harassment may be void under state or federal law.

Example: A small business owner signs an NDA with a large vendor. The NDA requires the owner to pay for "any and all losses" if confidential information is leaked, including lost profits. Later, a minor breach occurs, and the vendor claims massive damages. If the owner had negotiated a liability cap, the risk would have been limited.

State Law Issues and Enforceability

NDAs are generally enforceable in most US states, but state law can significantly impact their scope and validity. Here are some state-specific considerations:

• California: California is known for strong employee mobility laws. NDAs that include non-compete or non-solicitation clauses are often void. California also limits NDAs that restrict employees from discussing workplace harassment or discrimination. If your NDA is governed by California law, avoid including non-compete language and ensure confidentiality terms are reasonable and specific.
• New York: New York courts generally enforce NDAs if they are reasonable in scope and duration. However, NDAs that are overly broad or against public policy (such as those restricting whistleblowing) may be struck down. New York also has specific rules about NDAs in settlement agreements involving harassment or discrimination.
• Texas: Texas law is more favorable to enforcing NDAs, but courts may refuse to enforce agreements that are vague or overly broad. Texas also requires that NDAs be supported by consideration (something of value exchanged).
• Illinois: Illinois requires NDAs to be reasonable in scope, duration, and geographic area. Overly broad NDAs may be partially or entirely unenforceable. Illinois also restricts NDAs in cases of workplace harassment or discrimination.
• Washington: Washington state has laws limiting NDAs that prevent employees from discussing sexual harassment or illegal acts in the workplace. NDAs that attempt to silence employees in these areas may be void.

Some states also have laws that limit the use of NDAs in employment or settlement agreements, especially in cases involving harassment, discrimination, or retaliation. For example, several states prohibit employers from using NDAs to prevent employees from discussing workplace harassment or discrimination claims. Federal law, such as the Defend Trade Secrets Act (DTSA), also provides some protection for whistleblowers who disclose trade secrets to report legal violations.

Practical tip: Always check which state law governs your NDA. If you are dealing with a party in another state, negotiate for your home state's law and courts if possible. If the other party insists on their state, review local rules or seek legal advice to understand your risks.

Checklist: What To Do Before Signing an NDA

Use this practical checklist before you sign any non-disclosure agreement:

• Read the entire NDA carefully. Do not rely on summaries or assurances from the other party.
• Confirm the definition of confidential information is clear, specific, and not overly broad.
• Check for reasonable exclusions, such as information that is public, independently developed, or received from others.
• Review the duration of confidentiality obligations. Is it appropriate for the type of information?
• Understand your obligations to protect the information. Are you required to use reasonable or best efforts?
• Identify who within your business can receive the information and whether they are also bound by confidentiality.
• Check for any restrictions on using information you already know or develop independently.
• Review remedies and liability clauses. Are there limits on damages or liability? Is there a liability cap?
• Confirm the governing law and jurisdiction are acceptable for your business. Consider the practicalities of resolving disputes in another state.
• Review return or destruction clauses. Can you realistically comply, especially with digital files and backups?
• Consider whether you need legal review, especially for high-value, complex, or unusual NDAs.
• Check for state or industry-specific rules that may affect enforceability, such as laws on harassment or whistleblowing.

Example: A SaaS startup is asked to sign an NDA with a Fortune 500 company. The NDA is governed by New York law, covers all information disclosed, and requires destruction of all digital files within 10 days of termination. The startup negotiates for a narrower definition of confidential information, adds reasonable exclusions, and requests 30 days to destroy digital files, with certification by email. This negotiation helps the startup avoid unworkable obligations and legal risk.

When To Seek Legal Review of an NDA

While many NDAs are simple, there are situations where legal review is strongly recommended. Consider seeking legal advice if:

• The NDA is part of a significant business deal, such as a merger, acquisition, or major partnership.
• The agreement contains complex or unusual terms, such as non-compete, non-solicitation, or broad liability clauses.
• You are unsure about the meaning or impact of certain clauses, especially regarding liability or remedies.
• The NDA is governed by the laws of a state with unique requirements (such as California, Illinois, or New York).
• The other party is a large company or has significant bargaining power.
• You have concerns about how confidential information will be handled, especially with digital data or international transfers.
• The NDA interacts with other agreements, such as employment contracts, consulting agreements, or licensing deals.

Even if you are comfortable with standard NDAs, a brief review by a qualified attorney can help you spot hidden risks and negotiate better terms. Legal review is especially important for founders and small businesses who may not have in-house legal resources. For example, a founder negotiating with a large tech company may face NDAs with aggressive terms, and a lawyer can help level the playing field.

Example: An early-stage startup is offered an NDA by a potential acquirer. The NDA includes a non-compete clause and requires the startup to pay for all damages, including lost profits. The founder seeks legal review, and the attorney negotiates to remove the non-compete and add a liability cap. This protects the startup from future legal exposure if the deal does not proceed.

FAQs

Is an NDA always enforceable in the US?

NDAs are generally enforceable, but their validity depends on state law and the specific terms. Courts may refuse to enforce NDAs that are overly broad, vague, or against public policy. Some states limit NDAs in cases involving harassment, discrimination, or whistleblowing. Always check local rules and avoid relying solely on standard templates.

Can an NDA restrict me from working in my industry?

NDAs are meant to protect confidential information, not to prevent you from working in your field. However, some NDAs include non-compete or non-solicitation clauses that may restrict your future employment or business activities. These clauses are subject to strict scrutiny in many states, especially California, and may not always be enforceable. If you see non-compete language, seek legal advice before signing.

What happens if I accidentally breach an NDA?

If you breach an NDA, the other party may seek remedies such as damages, injunctions, or specific performance. The consequences depend on the NDA's terms and applicable state law. Some NDAs limit liability or specify certain remedies, while others allow for broader damages. If you believe you have breached an NDA, seek legal advice promptly to assess your options and minimize risk.

Do I need a lawyer to sign an NDA?

You are not legally required to have a lawyer review every NDA, but legal review is recommended for complex, high-value, or unusual agreements. A lawyer can help you understand your obligations, spot red flags, and negotiate better terms. For standard NDAs, a careful review using a checklist may be sufficient, but do not hesitate to seek help if you are unsure.

Can I use the same NDA template for every deal?

Using the same NDA template for every deal can be risky. Each business relationship is different, and state laws or industry rules may require changes. Always tailor your NDA to the specific situation, and review the governing law, scope, and exclusions each time. When in doubt, seek legal advice to ensure your NDA is fit for purpose.

Key Takeaways

• NDAs are common in US business, but should be reviewed carefully before signing.
• Key terms to check include the definition of confidential information, exclusions, duration, liability, and governing law.
• State law can impact the enforceability and scope of an NDA, so always check which state's law applies and whether there are local restrictions.
• Common mistakes include agreeing to overly broad terms, missing duration limits, overlooking liability clauses, and failing to consider third-party disclosures.
• Legal review is recommended for complex, high-value, or unusual NDAs, or when dealing with unique state law issues.
• Always use a checklist and tailor your NDA to each business relationship to avoid hidden risks.

If you have questions about a non-disclosure agreement or need help reviewing or negotiating NDA terms, contact our team at (888) 449-8437 or team@sprintlaw.com. Where legal services are required, they are delivered by licensed lawyers at trusted US law firms through the Sprintlaw platform.