Business registration & legal
What Is a Non-Disclosure Agreement? NDA Meaning, Types and Key Clauses (2026)
Non-disclosure agreement meaning explained: mutual vs one-way NDAs, key clauses with sample wording, the DTSA notice and 2026 limits on employee NDAs.

Contents (11)
- 1. What a non-disclosure agreement means
- 2. When a small business actually needs an NDA
- 3. Mutual vs one-way NDAs
- 4. The key clauses, with sample wording
- 5. The DTSA whistleblower notice: the clause most templates miss
- 6. Limits on NDAs with employees in 2026
- 7. NDAs vs non-competes after the FTC rule
- 8. What happens if someone breaks an NDA
- 9. How to put an NDA in place
- 10. Common NDA mistakes small businesses make
- 11. What to do next
If you're about to share a product idea, a recipe, client list, pricing or code with someone outside your business, you've probably been told to "get an NDA first." This guide explains what a non-disclosure agreement actually means in US law, when a small business needs one, the difference between mutual and one-way NDAs, and the clauses that do the real work, with sample wording. It also covers the limits that catch owners out in 2026: the federal whistleblower notice, harassment and labor-law rules, state restrictions, and how NDAs differ from non-competes now that the FTC's ban has been withdrawn.
Quick answer
A non-disclosure agreement (NDA), also called a confidentiality agreement, is a contract in which one or both parties promise to keep defined information secret and use it only for an agreed purpose. It's enforceable like any contract, but it can't stop people reporting possible crimes to the government, discussing sexual harassment covered by a pre-dispute NDA, or, for most employees, talking about pay and working conditions.
One-way NDA: only one side shares secrets. Mutual NDA: both sides do
Employers who skip the DTSA whistleblower notice lose double damages and attorney fees against employees
Pre-dispute NDAs can't silence sexual harassment or assault claims (Speak Out Act, 2022)
An NDA is not a non-compete; the FTC's non-compete ban was removed on February 12, 2026
Typical duration: 2–5 years, and indefinitely for trade secrets
What a non-disclosure agreement means
A non-disclosure agreement is a contract. One party (the disclosing party) shares information, and the other (the receiving party) promises to keep it confidential, to use it only for a stated purpose, and to return or destroy it when asked. Lawyers often call it a confidentiality agreement, a confidential disclosure agreement (CDA) or a proprietary information agreement; the label doesn't change how a court reads it.
The NDA's job is to create a clear, provable duty of secrecy where none would otherwise exist. Without one, a freelancer or potential partner who learns your plans in a meeting generally has no legal obligation to keep quiet unless the information qualifies as a trade secret and they knew it was confidential. With one, any use or disclosure outside the agreed purpose is a breach of contract, and you have a written record that you took reasonable steps to protect the information, which is itself one of the tests for trade secret protection under the federal Defend Trade Secrets Act and state trade secret laws.
What an NDA doesn't do is make information secret by magic. If the information is already public, independently developed by the other side, or so vague that nobody can tell what's covered, the NDA protects very little. And no NDA can override laws that protect reporting to regulators or discussing certain workplace issues. We cover those limits below.
When a small business actually needs an NDA
You don't need an NDA to have a coffee with a potential customer. You do need one when you're about to hand over something that would hurt you if it walked out the door. Common situations:
| Situation | Who signs | Type | What it protects |
|---|---|---|---|
| Pitching a product to a manufacturer or developer | The manufacturer or developer | One-way | Designs, specs, prototypes, pricing |
| Hiring a freelancer or agency | The contractor | One-way (often inside the service contract) | Client data, code, marketing plans |
| Exploring a partnership, joint venture or merger | Both companies | Mutual | Financials, customer lists, strategy |
| Selling your business | Buyer (and sometimes seller) | Mutual or one-way | Books, contracts, staff details |
| Onboarding an employee | Employee | One-way, inside an employment or confidentiality agreement | Trade secrets, customer data, internal processes |
| Licensing a recipe, formula or software | Licensee | One-way | The recipe, formula or source code |
Investors are the main exception. Most angel investors and venture funds won't sign an NDA just to hear a pitch, because they see many similar ideas. Share a deck that doesn't reveal your real secrets, and save the NDA for due diligence.

Mutual vs one-way NDAs
The first decision is whether only one side, or both sides, will share confidential information.
One-way (unilateral) vs mutual (bilateral) NDA
| One-way NDA | Mutual NDA | |
|---|---|---|
Who shares secrets | Only the disclosing party | Both parties |
Who is bound | Only the receiving party | Both parties, equally |
Typical use | Freelancers, employees, manufacturers, licensees | Partnerships, joint ventures, M&A talks, vendor integrations |
Negotiation | Usually signed as offered | Often negotiated clause by clause |
Risk for you | Low if you're the discloser | You take on the same duties you impose |
Who shares secrets
- One-way NDA
Only the disclosing party
- Mutual NDA
Both parties
Who is bound
- One-way NDA
Only the receiving party
- Mutual NDA
Both parties, equally
Typical use
- One-way NDA
Freelancers, employees, manufacturers, licensees
- Mutual NDA
Partnerships, joint ventures, M&A talks, vendor integrations
Negotiation
- One-way NDA
Usually signed as offered
- Mutual NDA
Often negotiated clause by clause
Risk for you
- One-way NDA
Low if you're the discloser
- Mutual NDA
You take on the same duties you impose
A one-way NDA is right when the information flows in one direction, such as when you show a contract manufacturer your product design. It's also the normal form inside employment and contractor agreements.
A mutual NDA fits when both sides will open their books. It feels more balanced, and sophisticated counterparties often insist on it, but read it as the receiving party too: every obligation you impose on them applies to you. If you'll mostly be receiving, look carefully at the definition of confidential information and the remedies.
A multilateral NDA binds three or more parties to one set of terms. It's useful in consortium projects where each member shares with all the others, and saves signing several separate agreements.
The key clauses, with sample wording
Every NDA, however short, needs the same handful of clauses. The sample wording below is a plain-English illustration to help you read and compare agreements, not a ready-to-sign template; adapt it with a lawyer for anything valuable.
| Clause | What it does | Sample wording (illustrative) | What to watch |
|---|---|---|---|
| Parties | Names who is bound | "This Agreement is between Brightline Foods LLC ('Discloser') and Delta Packaging Inc. ('Recipient')." | Use full legal entity names; add affiliates only if they'll receive information |
| Definition of confidential information | Sets what's covered | "All non-public business, technical and financial information disclosed by Discloser, in any form, including recipes, supplier pricing and product plans." | Too broad ("all information") is harder to enforce; too narrow misses things |
| Marking requirement | Says whether information must be labeled | "Oral disclosures are covered if identified as confidential at the time and summarized in writing within 30 days." | Strict marking rules can leave verbal disclosures unprotected |
| Exclusions | Lists what isn't confidential | "Information that is or becomes public without Recipient's fault, was already known, is independently developed or is received lawfully from a third party." | Standard and fair; insist on written proof of prior knowledge |
| Purpose and use limits | Restricts how information can be used | "Recipient will use Confidential Information solely to evaluate a packaging supply relationship." | A vague purpose lets the recipient use your information for other projects |
| Permitted disclosures | Who inside the recipient can see it | "Only employees and advisers who need to know and are bound by duties at least as protective." | Make the recipient responsible for their people's breaches |
| Required by law | Handles subpoenas and court orders | "Recipient may disclose if legally required, after prompt notice where lawful, and only what is required." | Must not block reporting to regulators (see below) |
| Duration | How long the duty lasts | "Obligations survive 3 years after the last disclosure; trade secrets remain protected while they qualify as trade secrets." | A fixed end date on a trade secret can forfeit its protection |
| Return or destruction | What happens at the end | "On request, Recipient will return or destroy all Confidential Information and certify that in writing." | Allow for backup copies that can't practically be deleted |
| Remedies | What you can do after a breach | "Discloser may seek an injunction in addition to damages, without posting a bond where permitted." | Courts decide remedies; this clause supports, but doesn't guarantee, an injunction |
| Whistleblower notice | Required federal immunity notice (employees and contractors) | "Nothing in this Agreement prevents you from reporting possible violations of law to a government agency, and 18 U.S.C. § 1833(b) gives you immunity for certain confidential disclosures of trade secrets." | Without it you lose double damages and fee recovery under the DTSA |
| Governing law and venue | Which state's law and courts apply | "This Agreement is governed by the laws of Texas, and disputes will be heard in Travis County." | Some states, like California, override out-of-state choices for local employees |
Watch for two clauses that often sneak in. A residuals clause lets the recipient use anything its staff remember unaided, which can swallow the whole agreement; strike it or narrow it. A non-solicitation or non-compete clause turns an NDA into something bigger, and is subject to state limits on restraints of trade.
Rule changes that shape NDAs and non-competes
May 11, 2016
Defend Trade Secrets Act: whistleblower notice required in new or updated employee agreements
Dec 7, 2022
Speak Out Act: pre-dispute NDAs unenforceable for sexual harassment and assault disputes
Feb 21, 2023
NLRB's McLaren Macomb decision limits broad confidentiality in severance agreements
Jan 1, 2024
California makes entering into or enforcing employee non-competes unlawful
Aug 20, 2024
Federal court sets aside the FTC non-compete rule (Ryan LLC v. FTC)
Feb 12, 2026
FTC's non-compete rule formally removed from the Code of Federal Regulations
The DTSA whistleblower notice: the clause most templates miss
The Defend Trade Secrets Act of 2016 gives individuals immunity from civil and criminal liability when they disclose a trade secret in confidence to a federal, state or local government official, or to a lawyer, solely to report or investigate a suspected violation of law, or in a court filing made under seal. It also lets someone suing for retaliation share the trade secret with their lawyer and use it in court under seal.
The part that matters for employers is the notice requirement. Any contract with an employee that governs the use of trade secrets or confidential information, and that is entered into or updated after May 11, 2016, must tell the employee about this immunity. You can include the notice in the agreement itself or cross-reference a written policy you give the employee that explains how to report suspected violations of law. The statute defines "employee" to include contractors and consultants, so the notice belongs in freelancer agreements too.
If you leave it out, the NDA isn't void, but you lose two powerful remedies against that worker under the DTSA: exemplary damages of up to 2 times damages for willful and malicious misappropriation, and recovery of your attorney fees. In a trade secret lawsuit, the fee award alone can be worth more than the damages, so this is a one-sentence fix with real money attached.
Defend Trade Secrets Act at a glance
May 11, 2016
Notice required in employee agreements signed or updated after
up to 2 times damages
Exemplary damages for willful misappropriation
3 years
Time limit to sue after discovery
Includes
Contractors and consultants
count as employees for the notice
Limits on NDAs with employees in 2026
Employee NDAs are where most of the legal tension sits, because confidentiality protects legitimate business secrets but can also be used to hide misconduct. Four sets of rules now shape what you can include.
Federal: the Speak Out Act on harassment and assault
The Speak Out Act, signed on December 7, 2022, makes nondisclosure and non-disparagement clauses agreed to before a dispute arises judicially unenforceable with respect to a sexual assault or sexual harassment dispute, where the conduct is alleged to have broken federal, tribal or state law. In practice, a confidentiality clause in an offer letter or handbook acknowledgment can't be used to silence an employee about harassment. The Act expressly preserves employers' ability to protect trade secrets and proprietary information, and it doesn't reach confidentiality terms negotiated in a settlement after a claim has been made, although state laws may.
Federal: the National Labor Relations Act
Most non-supervisory employees, union or not, have a right under Section 7 of the National Labor Relations Act to discuss wages, hours and working conditions with each other and with outsiders. In McLaren Macomb (February 2023), the National Labor Relations Board held that offering severance agreements with broad confidentiality and non-disparagement clauses can itself violate the Act.
That decision's status in 2026 is unsettled but still binding. In February 2025 the NLRB's acting general counsel rescinded the 2023 guidance memo that applied McLaren Macomb, signaling it isn't an enforcement priority. However, guidance memos don't change Board law, and in April 2026 the Board still applied McLaren Macomb to strike down a non-disparagement clause, with two members saying they'd be open to reconsidering it in a future case. The practical advice is unchanged: keep employee confidentiality clauses focused on genuine business information, and don't bar staff from discussing pay or working conditions. Supervisors and managers aren't covered by Section 7.

State laws
States add their own layers, and the strictest one where your employee works usually wins. California is the most demanding. Under Government Code § 12964.5 (the Silenced No More Act), any non-disparagement or confidentiality term in an employment or separation agreement that restricts discussing unlawful acts in the workplace must include a carve-out stating, in substance, that nothing prevents the employee from discussing or disclosing information about unlawful acts in the workplace, such as harassment or discrimination. When you offer a separation agreement, you must tell the employee they can consult a lawyer and give them at least 5 business days to do so. In settlements of harassment or discrimination claims, California allows the amount to stay confidential and the claimant's identity to be protected at their request, but not the underlying facts.
Several other states, including New York, New Jersey, Illinois and Washington, have their own restrictions on NDAs covering discrimination, harassment or other illegal conduct. If you have employees in more than one state, have a lawyer review your standard agreements against each state's rules.
NDAs vs non-competes after the FTC rule
Owners often blur three different restrictions. Keeping them separate matters, because the law treats them very differently.
NDA vs non-solicitation vs non-compete
| NDA / confidentiality | Non-solicitation | Non-compete | |
|---|---|---|---|
What it restricts | Sharing or using confidential information | Poaching your clients or staff | Working for or starting a competitor |
Can the person take a competing job? | Yes | Yes | No, for the stated time and area |
Enforceable in California? | Yes (with required carve-outs) | Very limited for employees | No, void for employees |
Enforceable in Minnesota? | Yes | Yes | No (since July 1, 2023) |
Federal ban? | No | No | No — FTC rule vacated, removed Feb 12, 2026 |
What it restricts
- NDA / confidentiality
Sharing or using confidential information
- Non-solicitation
Poaching your clients or staff
- Non-compete
Working for or starting a competitor
Can the person take a competing job?
- NDA / confidentiality
Yes
- Non-solicitation
Yes
- Non-compete
No, for the stated time and area
Enforceable in California?
- NDA / confidentiality
Yes (with required carve-outs)
- Non-solicitation
Very limited for employees
- Non-compete
No, void for employees
Enforceable in Minnesota?
- NDA / confidentiality
Yes
- Non-solicitation
Yes
- Non-compete
No (since July 1, 2023)
Federal ban?
- NDA / confidentiality
No
- Non-solicitation
No
- Non-compete
No — FTC rule vacated, removed Feb 12, 2026
In April 2024 the Federal Trade Commission adopted a rule that would have banned most non-competes nationwide. A federal court in Texas set it aside in Ryan LLC v. FTC in August 2024, before it took effect. On September 5, 2025, the Commission voted 3–1 to drop its appeals and accept that ruling, and a final rule removing the non-compete rule from the Code of Federal Regulations took effect on February 12, 2026. So there is no federal non-compete ban.
That doesn't mean non-competes are safe. The FTC now challenges them case by case as unfair methods of competition: it ordered a pet cremation company, Gateway Services, to stop enforcing non-competes in November 2025, and pest-control company Rollins to stop enforcing them against more than 18,000 employees in April 2026. It has also sent warning letters to healthcare employers and staffing firms.
State law still decides most cases. California voids non-competes for employees and, since January 1, 2024, makes it unlawful to enter into or try to enforce them, even if signed in another state; employers had to notify affected staff by February 14, 2024. Minnesota bans them for employees and independent contractors, with exceptions for the sale or dissolution of a business. North Dakota and Oklahoma also void most employee non-competes, and many other states restrict them by income level, notice requirements or job type.
The lesson for small businesses: rely on a well-drafted NDA and, where allowed, a non-solicitation clause to protect what matters, rather than a non-compete that may be unenforceable. Minnesota's statute, for example, expressly leaves NDAs and non-solicitation agreements untouched.
What happens if someone breaks an NDA
If the receiving party leaks or misuses your information, you'll usually start with a written demand to stop and return it. If that fails, your options in court include:
- An injunction, a court order to stop using or disclosing the information. This is often the most valuable remedy because money can't un-leak a secret. Under the DTSA, an injunction can't stop someone from taking a new job; it can only restrict what they do with your information.
- Damages for your actual loss and the other side's unjust gain, or a reasonable royalty for unauthorized use.
- Exemplary damages of up to 2 times damages and attorney fees under the DTSA if the misappropriation was willful and malicious, provided you gave employees the whistleblower notice.
Federal trade secret claims must be filed within 3 years of when you discovered the misappropriation, or should have with reasonable diligence; contract claims follow your state's limitation period. Gather evidence early: the signed NDA, what you sent and when, and how you protected it.
For a small business, the realistic value of an NDA is often deterrence and leverage rather than a lawsuit. Litigation is expensive, and many disputes settle once a lawyer's letter points to a signed agreement.
How to put an NDA in place
Six steps to a usable NDA
- 1
Decide what you'll actually share
List the specific information: a design file, supplier price list, source code. If you can't name it, you can't define it in the NDA.
- 2
Choose one-way or mutual
One-way when only you disclose; mutual when both sides will open their books.
- 3
Draft or adapt the agreement
Start from a reputable template or your lawyer's form. Tailor the definition, purpose, duration and governing law to this deal.
- 4
Add the required notices
For employees and contractors, include the DTSA whistleblower notice, a carve-out for reporting to government agencies and, in California and similar states, the unlawful-acts carve-out.
- 5
Sign before you disclose
Both parties sign (e-signatures are valid under federal and state law) before any confidential information changes hands. Keep the signed copy.
- 6
Act like it's confidential
Mark documents, limit access, share through controlled folders and log what you sent. Courts look at whether you treated the information as secret.
Timing is the most common failure. An NDA signed after you've already shown your prototype may not cover what you disclosed earlier unless it says so expressly. If a conversation has already started, add a clause covering "information disclosed on or after [date of first meeting]."
Common NDA mistakes small businesses make
- Defining confidential information as "everything." Courts may refuse to enforce a definition so broad that the recipient can't tell what's covered. Be specific, then add a reasonable catch-all.
- No purpose clause. Without one, the recipient may argue they could use your information for any project.
- Signing the other side's mutual NDA without reading it as a recipient. You may be agreeing to obligations, remedies or a forum you'd never accept.
- Putting a fixed end date on trade secrets. Keep trade secret protection running for as long as the information qualifies.
- Forgetting contractors. Freelancers often see more than employees. Put confidentiality and IP ownership terms in every contractor agreement; our 1099 vs W-2 guide explains how to classify them correctly.
- Using an NDA to hide misconduct. It won't hold up, and in some states it's a separate violation.
- Treating the NDA as a non-compete. If you need to stop competition, that's a different agreement with very different legal rules.
Official and primary sources
- 18 U.S.C. § 1833 — DTSA whistleblower immunity and noticeText of the notice requirement
- 42 U.S.C. § 19403 — Speak Out ActPre-dispute NDAs and harassment claims
- FTC — Removal of the Non-Compete Rule (Federal Register)Effective February 12, 2026
- FTC — Noncompete enforcementCurrent case-by-case actions
- California CRD — Agreements limitations FAQGov. Code § 12964.5 and CCP § 1001
- Minnesota Statutes § 181.988Non-compete ban and what it leaves alone
- SEC Rule 21F-17No impeding reports to the SEC
What to do next
Before your next meeting with a manufacturer, partner or freelancer, write down exactly what you'll share, then pick a one-way or mutual NDA and tailor the definition, purpose and duration. If you're still setting up the business, our how to start a business guide shows where contracts fit among registration, tax IDs and licences, and the LLC registration guide explains how forming an entity keeps contract liability away from your personal assets. When you're ready to quote the work that follows, the free quotation generator creates a professional quote in minutes.
This is general information, not legal or tax advice — confirm on the official source or with a professional.
Frequently asked questions
A non-disclosure agreement is a contract in which one or both sides promise to keep specific information secret and use it only for an agreed purpose. If the receiving side leaks or misuses the information, the owner can sue for breach of contract, ask a court to stop further disclosure and, where trade secrets are involved, claim damages under federal and state trade secret laws.
Yes, if it meets normal contract rules: both sides agree, there is something of value exchanged (such as access to information, a job or a deal), the confidential information is defined reasonably, and the terms don't break the law. Courts refuse to enforce clauses that try to stop people reporting crimes, talking to regulators, or, under federal law, discussing sexual harassment or assault covered by a pre-dispute NDA.
Most business NDAs protect ordinary confidential information for two to five years after disclosure. Trade secrets, such as formulas, source code or customer data, are usually protected for as long as they remain secret, because a fixed end date can destroy their trade secret status. Check both dates in your NDA: how long the parties will keep sharing information, and how long the duty of secrecy survives.
An NDA stops someone from sharing or using your confidential information; it doesn't stop them working for a competitor. A non-compete stops someone working in a competing business for a period. NDAs are enforceable in every state, while non-competes are void for most workers in California, Minnesota, North Dakota and Oklahoma and restricted elsewhere. The FTC's 2024 nationwide ban was vacated and removed in February 2026.
Under the federal Speak Out Act of December 2022, an NDA or non-disparagement clause signed before a dispute arises can't be enforced to silence you about sexual assault or sexual harassment that allegedly broke federal, tribal or state law. States such as California go further and protect discussion of any unlawful workplace conduct. A confidentiality term in a settlement signed after a claim has more room, but states still limit it.
Not always. Many small businesses use a well-drafted template for routine conversations with freelancers, suppliers or potential partners, as long as they tailor the definition of confidential information, the purpose and the duration. Use a lawyer for employee agreements in strict states like California, for deals involving valuable trade secrets, and whenever the other side sends you their NDA with unusual terms.
Sources & verification
Figures on this page were checked against the sources below when it was last reviewed on 7 October 2026. Each rate and limit is stored once with its own official source and review date, and official update channels are monitored daily so changes are picked up. How we verify
- 1.18 U.S.C. § 1833 — Exceptions to prohibitions (DTSA whistleblower immunity and notice) — Legal Information Institute, Cornell Law School (U.S. Code) · accessed 7 October 2026
- 2.18 U.S.C. § 1836 — Civil proceedings — Legal Information Institute, Cornell Law School (U.S. Code) · accessed 7 October 2026
- 3.42 U.S.C. § 19403 — Speak Out Act — Legal Information Institute, Cornell Law School (U.S. Code) · accessed 7 October 2026
- 4.Revision of the Negative Option Rule, Withdrawal of the CARS Rule, Removal of the Non-Compete Rule — Federal Trade Commission (Federal Register) · accessed 7 October 2026
- 5.Federal Trade Commission Files to Accede to Vacatur of Non-Compete Clause Rule — Federal Trade Commission · accessed 7 October 2026
- 6.Noncompete enforcement — Federal Trade Commission · accessed 7 October 2026
- 7.17 CFR § 240.21F-17 — Staff communications with individuals reporting possible securities law violations — Legal Information Institute, Cornell Law School (Code of Federal Regulations) · accessed 7 October 2026
- 8.Employment, Separation, and Settlement Agreements: Limitations FAQ — California Civil Rights Department · accessed 7 October 2026
- 9.Attorney General Bonta Reminds Employers and Workers That Noncompete Agreements Are Not Enforceable Under California Law — California Department of Justice · accessed 7 October 2026
- 10.Minnesota Statutes § 181.988 — Covenants not to compete void — Minnesota Office of the Revisor of Statutes · accessed 7 October 2026
- 11.Will the NLRB Revisit McLaren Macomb? — Venable LLP · accessed 7 October 2026
- 12.Non-disclosure agreement (NDA) — Legal Information Institute, Cornell Law School · accessed 7 October 2026
MSMETOOLS is an independent platform and is not affiliated with any government agency, ministry or department.
Tools for this
Business Plan Generator (US)
Create a professional business plan for US investors and banks.
Invoice Generator
Create professional invoices with tax, logo and custom details.
Quotation Generator
Create professional quotes for clients.
Related guides
How to Start an LLC in 2026: Steps, State Fees & CostsRead guide
LLC vs Sole Proprietorship (2026): Taxes, Costs & LiabilityRead guide
Letter of Intent Meaning: Binding vs Non-Binding LOIs (2026)Read guide
Delaware LLC (2026): $110 Filing, $400 Annual Tax GuideRead guide Official links open the government site in a new tab.