One-Way Non-Disclosure Agreement: Clauses, Risks And Review Points For US Businesses

US startups and small businesses regularly face the challenge of sharing sensitive information with investors, contractors, suppliers, or potential partners. Whether you are pitching a new product, discussing a merger, or outsourcing development, you want to protect your business secrets. A one-way non-disclosure agreement (NDA) is often the first line of defense. But using a generic NDA or misunderstanding its terms can leave your information exposed, create legal risks, or even damage business relationships.

Common mistakes include assuming all NDAs are the same, overlooking state-specific rules, failing to define what is confidential, or not keeping records of what was shared. Others sign NDAs without reading the fine print or believe an NDA guarantees absolute protection. This guide explains what a one-way NDA is, how it works under US law, what clauses project, state law caveats, practical review checklists, and when to seek legal help. We also highlight real-world examples and common pitfalls so you can use NDAs with confidence.

What Is a One-Way Non-Disclosure Agreement?

A one-way non-disclosure agreement (sometimes called a unilateral NDA) is a legal contract where only one party discloses confidential information and the other party agrees to keep it secret. This is different from a mutual NDA, where both sides exchange confidential information and agree to protect each other's secrets. One-way NDAs are most common when a business is sharing sensitive information with someone who is not expected to share their own confidential information in return.

For example, imagine a startup founder wants to pitch a new app idea to a potential investor. The founder asks the investor to sign a one-way NDA before sharing the business plan and technical details. The investor agrees not to disclose or misuse the information, but the founder is not bound to keep anything confidential because the investor is not sharing their own secrets.

One-way NDAs are also used when hiring contractors, outsourcing development, sharing product designs with manufacturers, or discussing a potential acquisition. In each case, only one party is providing confidential information, and the other is expected to keep it private.

In the US, there is no single federal law that governs NDAs. Instead, state contract law applies, and the rules can vary. For example, California law is known for being strict about what can be protected and may limit NDAs that are too broad or restrict employee rights. Federal law, such as the Defend Trade Secrets Act (DTSA), may apply if trade secrets are involved, but most NDA disputes are handled under state law. Always check which state law will apply to your NDA, especially if the parties are in different states.

Key Clauses in a One-Way NDA

Not all NDAs are created equal. The specific terms in your NDA will determine how well your information is protected and how enforceable the agreement is. Here are the most important clauses to review:

• Definition of Confidential Information: This clause should clearly define what information is protected. It can include written, oral, electronic, or physical materials. Some NDAs only protect information labeled as "confidential," while others cover anything that should reasonably be considered confidential. For example, a software company might define confidential information as "all source code, technical documentation, business plans, and customer lists provided to the recipient."
• Obligations of the Receiving Party: This section explains what the recipient must do to protect the information. Typical obligations include not disclosing the information to others, not using it for their own benefit, and taking reasonable steps to keep it secure. For example, a contractor may be required to store files in a password-protected folder and not email them to third parties.
• Exclusions: Most NDAs exclude information that is already public, already known by the recipient, or independently developed without reference to the confidential information. Exclusions should be specific and not so broad that they undermine the NDA. For example, "Confidential Information does not include information that is or becomes publicly available through no fault of the recipient."
• Term and Duration: The NDA should state how long the confidentiality obligations last. Many NDAs set a term of two to five years, but some may last indefinitely for trade secrets. For example, "The recipient shall maintain confidentiality for a period of three years from the date of disclosure." Some states may limit how long NDAs can last, especially with employees.
• Permitted Disclosures: There may be exceptions for disclosures required by law, court order, or to employees, advisors, or affiliates who need to know the information (and who are also bound by confidentiality). For example, "The recipient may disclose confidential information to its legal counsel, provided such counsel is bound by confidentiality obligations."
• Remedies for Breach: This clause explains what happens if the NDA is broken. It may allow for injunctive relief (a court order to stop disclosure), monetary damages, or both. For example, "The disclosing party is entitled to seek injunctive relief and damages in the event of a breach."
• Governing Law and Jurisdiction: The NDA should specify which state's law applies and where any disputes will be resolved. This is especially important if the parties are in different states. For example, "This agreement shall be governed by the laws of the State of Delaware."
• Return or Destruction of Materials: Many NDAs require the recipient to return or destroy confidential materials at the end of the relationship. For example, "Upon termination of this agreement, the recipient shall return or destroy all confidential information within 10 days."
• Notice Requirements: Some NDAs require the recipient to notify the disclosing party if they are compelled by law to disclose confidential information. For example, "The recipient must promptly notify the disclosing party of any legal requirement to disclose confidential information."
• Assignment: This clause states whether the NDA can be transferred to another party. For example, "Neither party may assign this agreement without the prior written consent of the other party."

Always read each clause carefully and make sure you understand your obligations before signing or sending an NDA. If you are using a template, customize it for your specific situation and state law.

State Law Caveats and Industry Rules

NDAs are contracts, and contract law is primarily governed by state law in the US. This means the enforceability of your NDA, and even what can be protected, may vary depending on which state law applies. Here are some important state law caveats and industry-specific considerations:

• California: California law is especially strict about NDAs that attempt to restrict employee mobility or cover up workplace misconduct. Under California law, NDAs cannot prevent employees from reporting illegal activity or moving to a new job. The state also limits the use of NDAs to protect information that is not a true trade secret.
• New York: New York courts generally enforce NDAs, but they will not enforce agreements that are overly broad or attempt to protect information that is not actually confidential. NDAs must be reasonable in scope and duration.
• Texas: Texas law allows for strong protection of trade secrets, but the NDA must be clear and reasonable. Texas courts may refuse to enforce NDAs that are vague or attempt to cover information that is already public.
• Illinois: Illinois has adopted the Uniform Trade Secrets Act, which provides strong protection for trade secrets, but the NDA must be specific about what is protected and cannot restrict lawful whistleblowing.
• Federal Law: The Defend Trade Secrets Act (DTSA) provides a federal cause of action for trade secret misappropriation, but you still need to take reasonable steps to keep information secret, such as using NDAs. The DTSA also requires NDAs with employees or contractors to include a notice about whistleblower immunity.
• Industry Rules: In some industries, such as healthcare or finance, additional confidentiality rules may apply under federal or state law (such as HIPAA or GLBA). NDAs should not conflict with these industry-specific requirements.

Always check which state law applies to your NDA and whether there are any industry-specific rules that affect confidentiality. If the parties are in different states, consider which state law is most favorable and specify it in the NDA. If you are dealing with highly regulated industries, make sure your NDA does not conflict with other legal obligations.

Checklist: What to Review Before Signing or Sending a One-Way NDA

Whether you are the disclosing party (sharing information) or the receiving party (being asked to keep information confidential), use this checklist to review a one-way NDA:

• Is the definition of confidential information clear, specific, and appropriate for your business?
• Are the recipient's obligations reasonable and practical? Can you or the other party realistically comply?
• Are the exclusions (such as public information or prior knowledge) fair and not overly broad?
• How long do the confidentiality obligations last? Is the term reasonable for your industry and state?
• Does the NDA allow for required disclosures (such as to regulators or by court order)?
• Are there clear remedies if the NDA is breached (such as injunctive relief or damages)?
• Which state law applies, and where would disputes be resolved? Is this favorable for your business?
• Does the NDA require return or destruction of confidential materials at the end of the relationship?
• If you are the recipient, do you have systems in place to track and secure confidential information?
• Is the NDA tailored to your specific situation, or is it a generic template that may not fit?
• Does the NDA comply with any industry-specific rules or federal requirements (such as DTSA whistleblower notice)?

It is also a good idea to keep a record of what information you share under the NDA, including dates, recipients, and copies of documents. This can help if you ever need to enforce the NDA or prove a breach. For example, if you are pitching to multiple investors, keep a log of what you shared and when, and who signed the NDA.

Practical tip: If you are asked to sign an NDA, do not be afraid to ask for changes if a clause seems unfair or unclear. Negotiating NDA terms is common in business, and a reasonable party will usually be open to discussion.

Common Mistakes and Real-World Examples

NDAs are widely used, but mistakes are common. Here are some real-world examples and pitfalls to watch for:

• Using a Generic Template: A founder downloads a free NDA template online and sends it to a contractor. The template is based on UK law and does not specify which US state law applies. Later, a dispute arises, and the NDA is difficult to enforce because it is not tailored to US or state law.
• Failing to Define Confidential Information: An NDA simply states "all information is confidential" without specifics. In court, the recipient argues they did not know what was supposed to be confidential. The court refuses to enforce the NDA because it is too vague.
• Overly Broad Exclusions: An NDA excludes any information "known to the recipient." The recipient claims they already knew the business plan details, even though they learned them from the disclosing party. The NDA is undermined by the broad exclusion.
• Not Keeping Records: A startup shares technical drawings with a manufacturer under an NDA but does not keep a record of what was shared. When the manufacturer uses the drawings to make a similar product, the startup struggles to prove what was disclosed and when.
• Ignoring State Law Requirements: An employer in California uses an NDA that attempts to prevent employees from discussing workplace harassment. The NDA is unenforceable under California law, and the employer faces legal consequences.
• Assuming NDAs Cover Everything: A business owner believes an NDA will prevent a contractor from using general skills or knowledge gained during the project. In reality, NDAs only protect specific confidential information, not general know-how.
• Not Including Whistleblower Notice: An NDA with an employee does not include the required whistleblower immunity notice under the DTSA. This can affect enforceability and expose the business to penalties.

To avoid these mistakes, always tailor your NDA to your situation, specify what is confidential, comply with state and federal requirements, and keep good records. If in doubt, seek legal review before signing or sending an NDA.

When to Seek Legal Review or Customization

Many businesses use NDA templates, but these may not fit your needs or comply with state law. Here are situations where it is worth considering a legal review or custom NDA:

• You are sharing highly sensitive or valuable information (such as trade secrets, source code, or customer lists).
• The other party is in a different state or country, raising questions about which law applies and where disputes will be resolved.
• You are dealing with investors, large companies, or government agencies that may have their own NDA requirements or negotiation teams.
• The NDA will be used with employees or contractors, especially in states with strict rules on confidentiality, whistleblowing, or non-compete agreements.
• You want to include special terms (such as non-solicitation, non-circumvention, or specific remedies for breach).
• You are unsure about the meaning, scope, or impact of certain clauses (such as exclusions, duration, or assignment).
• You operate in a regulated industry (such as healthcare or finance) and need to help support compliance with federal or state confidentiality rules.

An attorney can help you understand your rights and obligations, spot hidden risks, and make sure the NDA is enforceable in your state. They can also help you negotiate changes if you are asked to sign an NDA that seems unfair or overly restrictive. For example, if you are a startup negotiating with a large company, their NDA may be heavily weighted in their favor. A legal review can help you identify and negotiate more balanced terms.

Remember, legal services in the US are regulated at the state level, and requirements can vary. While many NDAs are straightforward, a tailored agreement can save you time, money, and stress if a dispute arises. If you are using NDAs with multiple parties or across different states, consider a review to ensure consistency and enforceability.

FAQs

Is a one-way NDA always enforceable in the US?

No, a one-way NDA is not always enforceable. Enforceability depends on state contract law, the specific terms of the NDA, and whether the information qualifies as confidential or a trade secret. NDAs that are too broad, vague, or attempt to restrict legal rights (such as whistleblowing) may be struck down by courts. Always check which state law applies and consider legal review for important agreements.

How long should confidentiality obligations last in a one-way NDA?

The duration of confidentiality obligations can vary. Many NDAs set a term of two to five years, but some obligations (especially for trade secrets) may last as long as the information remains confidential. Make sure the term is reasonable for your industry and specific situation. Some states may limit the duration for certain types of information, especially with employees.

What happens if someone breaches a one-way NDA?

If someone breaches a one-way NDA, the disclosing party may be able to seek remedies such as injunctive relief (a court order to stop further disclosure) and monetary damages. However, proving a breach can be challenging, especially if there is no clear record of what was disclosed. Courts will also consider whether the NDA was fair and enforceable under state law.

Can I use a one-way NDA with employees or contractors?

Yes, but extra care is needed. Some states have strict rules about NDAs with employees, especially regarding workplace misconduct or non-compete clauses. Make sure the NDA is limited to legitimate business interests and does not attempt to prevent employees from reporting illegal activity or moving to a new job. Review state law or seek legal advice before using NDAs with staff or contractors.

Do I need to mark every document as confidential under a one-way NDA?

It depends on the NDA terms. Some NDAs require information to be marked as "confidential" to be protected, while others cover all information that should reasonably be considered confidential. For clarity and best practice, mark sensitive documents as confidential and keep records of what was shared under the NDA.

Key Takeaways

• A one-way non-disclosure agreement is a practical tool for protecting confidential business information when only one party is sharing secrets.
• Key clauses to review include the definition of confidential information, obligations, exclusions, duration, permitted disclosures, and remedies.
• Enforceability depends on state law and the specific terms of the NDA. Overly broad or vague NDAs may not be upheld in court.
• Keep detailed records of what is disclosed under an NDA and consider legal review for important or high-risk situations.
• NDAs are helpful but not a substitute for other security measures or trade secret protections.

If you have questions about one-way non-disclosure agreements or need help reviewing or drafting an NDA tailored to your business, contact our team at (888) 449-8437 or team@sprintlaw.com. Where legal services are required, they are delivered by licensed lawyers at trusted US law firms through the Sprintlaw platform.