Non-disclosure agreements are among the most commonly signed — and most commonly misunderstood — legal documents in business. Millions of NDAs are signed every year, yet many people who sign them have only a vague understanding of what exactly would constitute a breach, what the consequences are, and what to do if they suspect a violation.
Whether you've shared confidential information with a business partner and suspect they've leaked it, or you've signed an NDA and aren't sure where the boundaries are, this guide covers the practical reality of NDA breaches.
What an NDA Actually Protects
Before discussing breaches, it's important to understand what a non-disclosure agreement is designed to protect. An NDA creates a legal obligation for one or both parties to keep specified information confidential. The scope of that obligation depends entirely on the agreement's terms.
Most NDAs protect some combination of:
- Trade secrets — proprietary processes, formulas, algorithms, or business methods
- Business information — financial data, customer lists, pricing strategies, marketing plans
- Technical information — product designs, source code, engineering specifications
- Negotiation details — merger discussions, partnership terms, investment amounts
- Personnel information — employee compensation, organizational changes, hiring plans
The key is the NDA's definition of confidential information. A well-drafted NDA clearly defines what's covered. A poorly drafted one uses vague language that creates ambiguity — which often becomes the central issue in breach disputes.
The Five Most Common Types of NDA Breaches
1. Direct Disclosure to Unauthorized Parties
The most straightforward breach: sharing confidential information with someone who isn't authorized to receive it under the NDA.
Examples:
- Telling a competitor about a company's unreleased product features
- Sharing financial projections with a journalist
- Forwarding confidential documents to a friend or family member
- Discussing deal terms at an industry conference
This type of breach is the easiest to identify but can be surprisingly difficult to prove — especially when the disclosure was verbal rather than written.
2. Unauthorized Use of Confidential Information
Many NDAs restrict not just disclosure but also use of confidential information. Using protected information for your own benefit — even without sharing it with others — can constitute a breach.
Examples:
- Using a former employer's customer list to solicit clients for your new business
- Applying proprietary manufacturing techniques learned under NDA at a competing company
- Building a product that replicates confidential design specifications
- Using confidential pricing data to undercut the discloser in a bidding process
This category is particularly common in employment and contractor contexts, where someone moves from one company to a competitor.
3. Failure to Implement Required Safeguards
Some NDAs include specific requirements for how confidential information must be stored, transmitted, and protected. Failing to meet these requirements can be a breach even if no actual disclosure occurs.
Examples:
- Storing confidential files on an unsecured personal device
- Sending protected information via unencrypted email when the NDA requires encryption
- Failing to restrict access within your organization to only those who need it
- Not destroying confidential materials after the NDA's term expires
4. Accidental or Negligent Disclosure
Not all breaches are intentional. Careless handling of confidential information can still constitute a violation.
Examples:
- Leaving confidential documents visible on a screen during a video call
- Accidentally including protected information in a presentation shared with an unauthorized audience
- Failing to redact confidential details from a document before sharing it publicly
- Losing an unencrypted laptop or USB drive containing confidential files
Whether an accidental disclosure constitutes an actionable breach depends on the NDA's language. Some agreements impose strict liability (any disclosure is a breach, regardless of intent), while others require willful or grossly negligent conduct.
5. Exceeding the Scope of Permitted Use
Many NDAs allow the receiving party to use confidential information for a specific purpose — such as evaluating a potential business deal. Using the information for any other purpose, even internally, can be a breach.
Examples:
- Receiving product specifications to evaluate a partnership, then using them to develop a competing product
- Sharing investor deck information received for due diligence with your marketing team
- Using confidential information from a failed deal in a subsequent negotiation with a different party
How to Tell If an NDA Has Been Breached
Detecting a breach often starts with circumstantial evidence rather than a smoking gun. Watch for these warning signs:
Market signals:
- A competitor launches a product suspiciously similar to your unreleased design
- Your confidential pricing is undercut with unusual precision
- Business strategies you shared under NDA appear in a competitor's marketing materials
Internal signals:
- A former employee or contractor starts soliciting your clients shortly after leaving
- Confidential information appears in places it shouldn't — social media, industry forums, news articles
- A potential partner you shared information with suddenly loses interest and launches a similar venture
Digital signals:
- Unauthorized access logs showing confidential files were accessed or downloaded by the receiving party
- Metadata in leaked documents pointing back to the receiving party
- Email forwards or screenshots shared beyond the authorized circle
What to Do If You Suspect a Breach
Step 1: Review Your NDA
Re-read the agreement carefully. Determine:
- Does the information that was disclosed fall within the NDA's definition of confidential information?
- Did the NDA include any exceptions (publicly available information, independently developed knowledge, required legal disclosures)?
- What remedies does the NDA specify — liquidated damages, injunctive relief, indemnification?
- Is there a dispute resolution clause (arbitration, mediation, specific jurisdiction)?
- Has the NDA's term expired?
Step 2: Preserve Evidence
Before contacting the other party or taking legal action, document everything:
- Save copies of any communications showing the breach
- Screenshot social media posts, articles, or other public disclosures
- Record dates, times, and details of any conversations about the disclosure
- Preserve access logs, email headers, and document metadata
- Do not alter or delete any relevant files or communications
Step 3: Assess the Damage
Quantify the harm the breach has caused or may cause:
- Lost revenue from compromised business advantages
- Cost of mitigating the disclosure (additional security measures, public relations)
- Damage to competitive position or business relationships
- Potential exposure of additional confidential information
Step 4: Send a Cease and Desist
In many cases, the first step is a formal cease and desist letter demanding that the breaching party:
- Stop disclosing or using the confidential information immediately
- Return or destroy all copies of confidential materials
- Confirm in writing that they have complied
This puts the other party on notice and creates a documented record that you acted to protect your rights.
Step 5: Consider Legal Action
If the breach is significant and the other party doesn't comply, your legal options typically include:
- Injunctive relief — a court order prohibiting further disclosure (often the most urgent remedy)
- Compensatory damages — recovery of actual financial losses
- Liquidated damages — the pre-agreed amount specified in the NDA
- Specific performance — a court order requiring the breaching party to take specific actions
- Attorney's fees — if the NDA includes a fee-shifting provision
Legal Consequences of an NDA Breach
Financial Liability
The breaching party may be liable for:
- Actual damages — provable financial losses directly caused by the breach
- Consequential damages — indirect losses that were foreseeable at the time the NDA was signed
- Liquidated damages — the fixed amount specified in the NDA (if included and enforceable)
- Unjust enrichment — any profits the breaching party gained from the confidential information
Injunctive Relief
Courts can issue temporary restraining orders and preliminary injunctions to prevent ongoing or imminent disclosure. This is often the most valuable remedy because it stops the bleeding — financial damages can't undo the harm of widespread disclosure.
Criminal Liability
While breaking a civil NDA is not a crime, the underlying conduct can have criminal implications. The federal Defend Trade Secrets Act (DTSA) and the Economic Espionage Act impose criminal penalties — including fines and imprisonment — for trade secret theft. If the NDA breach involves stealing trade secrets for commercial advantage, criminal prosecution is possible.
Common Defenses Against NDA Breach Claims
If you're accused of breaching an NDA, several defenses may apply:
- The information was already public — if the information was publicly available before or independently of your disclosure, the NDA typically doesn't apply
- Independent development — you developed the same information independently, without using the confidential materials
- Legal compulsion — you were required to disclose by court order, subpoena, or regulatory obligation
- The NDA is unenforceable — the agreement was too broad, lacked consideration, or was signed under duress
- The term expired — the confidentiality obligations ended before the alleged breach occurred
- Authorized disclosure — the discloser consented to the sharing, even if informally
How to Write an NDA That's Actually Enforceable
Many NDA breach disputes arise because the original agreement was poorly drafted. To create an NDA that holds up in court:
Be specific about what's confidential. Broad language like "all information shared between the parties" is harder to enforce than specific categories: "financial projections, customer lists, product roadmaps, and source code shared during the evaluation period."
Define the permitted purpose. Specify exactly what the receiving party can use the information for — and prohibit all other uses.
Include appropriate remedies. Specify liquidated damages, the right to seek injunctive relief, and whether the prevailing party recovers attorney's fees.
Set a reasonable duration. Courts are more likely to enforce NDAs with defined, reasonable time periods (two to five years) than those with indefinite terms — unless the information qualifies as a trade secret.
Address what happens after termination. Require the return or destruction of confidential materials when the NDA ends.
Choose the right scope. A mutual NDA protects both parties. A unilateral NDA protects only the discloser. Match the structure to the relationship.
Key Takeaways
NDA breaches range from careless mistakes to deliberate theft of trade secrets. The key points to remember:
- A breach requires violating a specific obligation in the NDA — not just any disclosure of information
- Both disclosure and unauthorized use can constitute a breach
- Document everything and preserve evidence before taking action
- The NDA's specific language determines your rights and remedies
- Courts can issue injunctions to stop ongoing breaches quickly
- A well-drafted NDA is your best protection — vague agreements create disputes
If you need to protect confidential information in a business relationship, create an NDA that clearly defines the scope, obligations, and consequences from the start. The time to think about breach scenarios is before you sign — not after the damage is done.