How to Write an NDA: Step-by-Step Guide for Enforceable Agreements

Step 2: Define Confidential Information Carefully

The definition of confidential information is often the most important part of an NDA.

Rather than using broad language such as “all information shared,” describe the specific categories of information that require protection.

Examples include:

• Business plans
• Financial information
• Customer data
• Technical specifications
• Product roadmaps
• Marketing strategies
• Proprietary processes

The agreement should also identify information that is not considered confidential, such as:

• Publicly available information
• Information already known by the receiving party
• Independently developed information
• Information legally obtained from third parties

Specific definitions create clarity and help prevent future disputes.

Step 3: Specify Obligations of the Receiving Party

Next, define how the receiving party must protect confidential information.

The NDA should explain:

• How information must be stored
• Who may access it
• How it can be used
• Whether it can be shared internally

Most agreements require the receiving party to use reasonable care to safeguard confidential information and prevent unauthorized disclosure.

For example, the NDA may require confidential information to be:

• Stored securely
• Shared only on a need-to-know basis
• Used solely for the stated business purpose
• Protected using appropriate security controls

Clearly defining these obligations helps both parties understand their responsibilities.

Step 4: Define Permitted Disclosures

Not every disclosure constitutes a breach of an NDA.

The agreement should specify circumstances where disclosure is allowed.

Common examples include:

• Disclosure to employees with a legitimate business need
• Disclosure to contractors or consultants working on the project
• Disclosure to legal, tax, or financial advisors
• Disclosure required by law, regulation, or court order

The NDA should also establish any conditions that apply to these disclosures, such as requiring recipients to maintain equivalent confidentiality protections.

Defining permitted disclosures helps balance confidentiality with practical business operations.

Step 5: Set Duration of Confidentiality

Every NDA should clearly state how long confidentiality obligations will remain in effect.

Common approaches include:

• Confidentiality during the agreement term only
• Confidentiality for a fixed period after disclosure (such as two to five years)
• Extended protection for trade secrets

Shorter periods may be easier to negotiate but provide less long-term protection. Longer periods offer stronger protection but may create compliance challenges.

For many commercial agreements, a two- to five-year confidentiality period strikes an appropriate balance between protection and practicality.

Step 6: Define Remedies for Breach

An NDA should clearly explain the consequences of unauthorized disclosure.

Common remedies include:

• Monetary damages
• Injunctive relief
• Specific performance
• Recovery of legal costs where permitted

Injunctive relief is particularly important because it allows the disclosing party to seek immediate court action to prevent further disclosure of confidential information.

Well-defined enforcement provisions improve the effectiveness of the agreement and help deter breaches.

Step 7: Add Standard Legal Clauses

In addition to confidentiality obligations, NDAs typically include several standard legal provisions.

Common clauses include:

• Governing law
• Jurisdiction
• Dispute resolution procedures
• Assignment rights
• Amendment requirements
• Force majeure provisions
• Return or destruction of information

These clauses establish how the agreement will be interpreted and enforced if disputes arise.

Although often overlooked, standard legal provisions play an important role in protecting both parties.

Step 8: Review for Practicality Before Signing

Before finalizing the NDA, review the agreement from an operational perspective.

Ask:

• Are the definitions clear and specific?
• Can both parties realistically comply with the obligations?
• Are confidentiality periods reasonable?
• Are disclosure exceptions properly documented?
• Are enforcement provisions appropriate?

An NDA that is overly restrictive or difficult to follow may be harder to enforce and more likely to face resistance during negotiations.

When sensitive intellectual property, significant commercial value, or regulatory obligations are involved, legal review can help ensure the agreement is clear, enforceable, and aligned with business objectives.

Best Practices for Creating an NDA

While every non-disclosure agreement is different, certain drafting principles consistently improve clarity, enforceability, and ease of negotiation.

Use Clear and Specific Language

Avoid overly broad definitions and legal jargon wherever possible. Clearly describe the categories of information being protected and the obligations expected from the receiving party.

State Exclusions Explicitly

Every NDA should clearly identify information that is not protected, such as publicly available information, independently developed information, and information already known to the receiving party.

Ensure Proper Execution

An NDA only becomes legally effective when properly executed by the parties involved. Verify legal entity names, authorized signatories, and signature requirements before execution.

Include a Return or Destruction Clause

When the business relationship ends, confidential information should either be returned or securely destroyed. Including this requirement reduces the risk of unauthorized retention or future misuse.

Consult Legal Counsel When Necessary

Templates can provide a useful starting point, but legal review is particularly valuable when sensitive intellectual property, regulatory requirements, international parties, or significant commercial risks are involved.

Common Mistakes While Creating an NDA and How to Avoid Them

Even well-intentioned NDA drafts can contain mistakes that reduce enforceability or create operational challenges. Understanding these common pitfalls can help organizations create stronger agreements.

Vague Definitions of Confidential Information

One of the most common drafting mistakes is defining confidential information too broadly.

For example:

“All information shared between the parties.”

This language creates ambiguity and may be difficult to enforce. Instead, identify specific categories such as technical information, customer data, financial information, product plans, and business strategies.

Indefinite Duration (The Forever Trap)

Many organizations assume confidentiality should last forever. While perpetual protection may be appropriate for trade secrets, courts are often less receptive to unlimited confidentiality obligations for ordinary commercial information.

A clearly defined period—such as three to five years—often provides a more practical and enforceable approach.

Incorrect Party Names

Using informal business names, outdated entity names, or incomplete legal names can create unnecessary disputes.

Always verify the full legal names of all parties before execution.

No Injunctive Relief Clause

Monetary damages may not adequately compensate for the disclosure of sensitive information.

An injunctive relief clause allows the disclosing party to seek immediate court intervention to prevent ongoing or threatened disclosure of confidential information.

Forgetting the Return or Destroy Clause

Without clear instructions, confidential information may remain in emails, file systems, backups, or employee records long after a relationship ends.

A return-or-destroy clause establishes a clear process for handling confidential information once the NDA expires or the relationship terminates.