What clauses are required in a European Union Non-Disclosure Agreement?

European Union law requires specific provisions including: Trade Secret Definition (EU Trade Secrets Directive), Lawful Acquisition & Exceptions, GDPR Data Processing Provisions. contract.diy automatically includes all mandatory clauses with proper legal citations when generating your Non-Disclosure Agreement.

What terms are prohibited in a European Union Non-Disclosure Agreement?

Under European Union law, certain provisions are void or unenforceable, including: Waiver of data subject rights under GDPR; Absolute prohibition on reverse engineering of publicly available products. contract.diy is built to avoid these terms and will warn you if your description suggests including something that's not legally permissible.

How does contract.diy ensure my Non-Disclosure Agreement complies with European Union law?

Every generated contract goes through 10 automated compliance checks specific to European Union. These cover mandatory provisions, prohibited terms, proper citations, and formation requirements. Any issues are flagged before you download.

Can I use this Non-Disclosure Agreement template outside of European Union?

This template is specifically tailored to European Union law. Using it in another jurisdiction may result in missing requirements or including provisions that don't apply. We recommend generating a new contract with the correct jurisdiction selected for full compliance.

enhanced

Non-Disclosure Agreement for European Union

Generate a non-disclosure agreement that complies with European Union law — with 9 mandatory clauses and 10 compliance checks built in.

Generate This Contract

Free to start · No account required

Key legal considerations

Generate an NDA compliant with EU law. Key requirements: 1. TRADE SECRETS DIRECTIVE (2016/943): Define confidential information using the EU three-part test: (a) secret, (b) commercial value because secret, (c) reasonable protective steps taken. Reference lawful acquisition exceptions under Article 3 (independent discovery, reverse engineering of public products, etc.). 2. GDPR COMPLIANCE: MANDATORY. Any personal data in confidential information must be handled per GDPR. Include provisions for data subject rights, breach notification, and data processing agreements where applicable. 3. WHISTLEBLOWER PROTECTION: The EU Whistleblower Directive (2019/1937) and Article 5 of the Trade Secrets Directive protect disclosures of wrongdoing. Do NOT restrict whistleblowing rights. 4. REVERSE ENGINEERING: Under the Trade Secrets Directive, observation, study, disassembly, or testing of publicly available products is a lawful means of acquiring information. Be careful with blanket reverse engineering bans. 5. eIDAS: Electronic signatures are valid under the eIDAS Regulation. Qualified electronic signatures have the equivalent effect of handwritten signatures. 6. ROME I / BRUSSELS I: Specify governing law and jurisdiction per Rome I (EC 593/2008) and Brussels I (EU 1215/2012) Regulations. 7. MEMBER STATE VARIATION: NDA law varies by member state. Some countries require specific formalities. Recommend selecting specific country for enhanced compliance.

What's required

Mandatory clauses for a valid non-disclosure agreement under European Union law.

Trade Secret Definition (EU Trade Secrets Directive)
Directive (EU) 2016/943, Article 2(1)
Lawful Acquisition & Exceptions
Directive (EU) 2016/943, Articles 3, 5
GDPR Data Processing Provisions
Regulation (EU) 2016/679 (GDPR), Articles 5, 28, 30, 32, 33
Return and Destruction of Confidential Information
Directive (EU) 2016/943; GDPR Article 17
Electronic Signature (eIDAS Compliance)
Regulation (EU) No 910/2014 (eIDAS), Article 25
Applicable Law (Rome I Regulation)
Regulation (EC) No 593/2008 (Rome I)
Severability
General contract law principle; Directive 93/13/EEC
Entire Agreement
GDPR Data Processing Notice
Regulation (EU) 2016/679 (GDPR)

What's prohibited

Terms and provisions that are void or unenforceable under European Union law.

Waiver of data subject rights under GDPR
GDPR rights (access, rectification, erasure, portability, objection) are inalienable and cannot be waived by contract. Any provision purporting to waive or limit a data subject's GDPR rights is void under Article 7(4) and recital 42 of the GDPR.
Regulation (EU) 2016/679, Articles 7(4), 12-22; CJEU case law
Absolute prohibition on reverse engineering of publicly available products
Article 3(1)(b) of the EU Trade Secrets Directive permits acquisition of trade secrets through observation, study, disassembly, or testing of a product that has been made publicly available or lawfully obtained. Contractual provisions that entirely prohibit reverse engineering of publicly available products may conflict with this provision, though their enforceability depends on member state implementation.
Directive (EU) 2016/943, Article 3(1)(b)
Restriction on whistleblowing or reporting illegal activity
The EU Trade Secrets Directive (Article 5) and the EU Whistleblower Directive (2019/1937) protect disclosures made for the purpose of revealing misconduct, wrongdoing, or illegal activity. NDA provisions that restrict whistleblowing are unenforceable.
Directive (EU) 2016/943, Article 5; Directive (EU) 2019/1937

Legal references

Key statutes and regulations that govern non-disclosure agreements in European Union.

EU Trade Secrets Directive
Directive (EU) 2016/943
Harmonised EU framework for trade secret protection. Defines trade secrets (three-part test: secrecy, commercial value, reasonable protective steps), lawful/unlawful acquisition, and remedies for misappropriation. Implemented by all member states.
View →
General Data Protection Regulation (GDPR)
Regulation (EU) 2016/679
GDPR applies to all processing of personal data. NDAs involving personal data must comply with GDPR principles including purpose limitation, data minimisation, and security.
View →
EU Whistleblower Directive
Directive (EU) 2019/1937
Protects persons who report breaches of EU law. NDA provisions cannot restrict whistleblowing rights.
View →
eIDAS Regulation
Regulation (EU) No 910/2014
Electronic signature framework for the EU. Ensures electronic signatures are not denied legal effect.
General Data Protection Regulation
Regulation (EU) 2016/679
EU-wide data protection regulation; applies to all processing of personal data.
View →