Yes — NDAs hold up in court when they are properly drafted and signed by the right parties. Courts treat NDAs like any other binding contract, and they enforce them regularly. But a poorly written NDA is almost the same as having no NDA at all.
Here is the core problem. Under the Defend Trade Secrets Act (DTSA) of 2016, the owner of a trade secret must take reasonable steps to keep information secret. If your NDA is vague, overbroad, or missing key clauses, a court can throw it out — and your trade secrets may lose their protected status entirely. About 45% of American workers report being bound by an NDA, and a Vanderbilt Law Review study found that 87.1% of CEO contracts contain NDAs. That means millions of agreements are floating around — and many of them would not survive a legal challenge.
Here is what you will learn in this article:
- 📜 The exact federal and state laws that govern NDA enforceability — and the consequences when those rules are broken
- ⚖️ Real court cases where NDAs led to massive verdicts, settlements, and prison time
- 🚫 The specific drafting mistakes that cause courts to throw NDAs out
- 🗺️ How states like California, Texas, New York, and Washington treat NDAs differently
- ✅ Step-by-step do’s and don’ts so your NDA actually holds up when it matters
What Is an NDA and Why Does It Exist?
A non-disclosure agreement (NDA) is a legal contract that stops one or both parties from sharing certain information with outsiders. The idea is simple: you share something valuable — like a trade secret, a business plan, or customer data — and the other person agrees not to reveal it.
NDAs exist because businesses need to share sensitive information to operate. A company interviewing a job candidate may need to explain its technology. Two companies exploring a merger need to open their books. An inventor pitching to investors must reveal the idea before getting funded. Without an NDA, none of these conversations are safe.
The legal weight of an NDA comes from basic contract law. Every valid contract requires three things: an offer, acceptance, and consideration (something of value exchanged by both sides). If any of those three elements is missing, the contract may be unenforceable.
Types of NDAs
Not all NDAs are the same. The type of NDA you use depends on the direction of the information flow and the relationship between the parties.
Unilateral vs. Mutual NDAs
| Feature | Unilateral NDA | Mutual NDA |
|---|---|---|
| Who shares info | One party only | Both parties |
| Who has obligations | Only the receiving party | Both parties equally |
| Common use | Employer-employee, investor pitch, hiring a consultant | Mergers, joint ventures, partnerships |
| Negotiation time | Shorter | Longer |
| Enforceability risk | Higher (can appear one-sided) | Lower (balanced obligations) |
A unilateral NDA is a one-way street. One party shares the secrets, and the other party promises to keep them quiet. This is common in employment settings: the company gives the employee access to trade secrets, and the employee signs a promise not to disclose them.
A mutual NDA goes both ways. Both parties share sensitive information and both agree to keep it confidential. You see these in merger talks, joint ventures, and partnership negotiations where each side needs to evaluate the other’s financials, technology, or strategy.
Employment NDAs
Employment NDAs protect an employer’s proprietary information during and after the working relationship. These cover trade secrets, client lists, pricing strategies, marketing plans, and internal processes. The key issue with employment NDAs is that many states view them as potential restraints on trade, which means courts apply extra scrutiny to their scope and duration.
Business and Commercial NDAs
These are used between companies — for example, during due diligence in an acquisition, a licensing deal, or a vendor relationship. Courts tend to be more lenient with business-to-business NDAs because they do not restrict an individual’s ability to earn a living.
Settlement NDAs
Settlement NDAs are attached to lawsuit resolutions. They prevent both parties from discussing the terms of the settlement or the underlying dispute. These have drawn intense public scrutiny since the #MeToo movement, and both federal and state laws have carved out major exceptions for NDAs that attempt to silence victims of sexual harassment or assault.
The Federal Laws That Govern NDAs
Two major federal laws shape how NDAs are enforced across the country.
The Defend Trade Secrets Act (DTSA) of 2016
Before 2016, trade secret theft was handled entirely under state law. That changed when President Obama signed the Defend Trade Secrets Act, which created a federal cause of action for trade secret misappropriation. This allows the owner of a trade secret to file suit directly in federal court when the secret relates to a product or service in interstate commerce.
The DTSA also created a powerful civil seizure provision. A court can order the physical seizure of property to prevent the spread of a stolen trade secret. But the law comes with a catch. It requires employers to include a whistleblower immunity notice in all NDAs signed after May 11, 2016. This notice tells the employee they are protected from liability if they disclose a trade secret to a government official or an attorney to report a suspected violation of law.
If an employer fails to include this notice, the employer cannot recover attorneys’ fees or punitive damages — even if it wins the case. That single missing paragraph can cost a company hundreds of thousands of dollars.
The Speak Out Act of 2022
President Biden signed the Speak Out Act on December 7, 2022. This law makes pre-dispute NDAs and non-disparagement clauses unenforceable when the underlying dispute involves sexual assault or sexual harassment. The key word is pre-dispute. If the NDA was signed before the harassment or assault occurred, it cannot be enforced to keep the victim silent.
The law does not void the NDA. It does not impose penalties for including NDA language in a contract. It simply makes those provisions judicially unenforceable in court if a sexual assault or harassment dispute arises. Settlement NDAs signed after a dispute arises are not affected by this law.
Congress found that 81% of women and 43% of men have experienced sexual harassment or assault at work, and that NDAs were being used to shield perpetrators. Former Fox News anchor Gretchen Carlson led the lobbying effort and called the broad use of NDAs “inane.”
State-by-State Differences
Federal law sets a floor. State law can go much further — and many states have.
California
California is the toughest state for NDA enforcement. Business and Professions Code Section 16600 voids any contract that restrains a person from engaging in a lawful profession or trade. This means if an NDA effectively acts like a non-compete — by preventing an employee from using general skills or knowledge at a new job — the court will strike it down.
California courts use the California Uniform Trade Secrets Act (CUTSA) to evaluate whether the information in an NDA truly qualifies as a trade secret. If an NDA labels everything the employee ever learned as “confidential,” courts read that as a restraint on lawful work and will invalidate the clause.
| NDA Clause in California | Likely Enforceable? |
|---|---|
| Protects a specific trade secret formula | Yes |
| Covers “all information learned during employment” | No — too broad |
| Prevents discussing workplace harassment | No — state law prohibits this |
| Restricts sharing client lists with reasonable scope | Likely yes, if reasonable |
Texas
Texas enforces NDAs with a reasonable scope, but its courts have a unique twist on consideration. In the case of Eurecat US, Inc. v. Marklund, a Texas appeals court held that “continued employment” alone is not sufficient consideration for an at-will employee’s NDA. The employer must provide new consideration — such as new cash, new benefits, or access to new confidential information — at the time of signing. Without that, the NDA is unenforceable.
If a Texas court finds an NDA is too broad, it may reform the agreement — meaning it narrows the terms instead of throwing the entire NDA out. This differs from California, where overbroad NDAs are more likely to be voided entirely.
New York
New York’s Stop Silencing Survivors Act, amended in 2023, restricts NDAs in settlement agreements involving harassment or discrimination claims. Employers cannot require a complainant to pay liquidated damages for violating a non-disclosure clause. They also cannot require the complainant to make a statement saying they were not subject to discrimination. These protections extend to independent contractors.
Washington
Washington has the most restrictive NDA law in the country. The state bars confidentiality clauses — both pre-dispute and post-dispute — related to discrimination, harassment, retaliation, or assault. Even if the employee requests an NDA, the employer cannot provide one. Washington’s law also retroactively voids blanket NDAs entered as a condition of employment, regardless of when they were signed. Employers who violate this face hefty fines and must pay the employee’s attorneys’ fees.
Other States
Nearly 20 states have passed laws restricting NDAs in the workplace since the #MeToo movement, including Arizona, Colorado, Hawaii, Illinois, Louisiana, Maine, Maryland, Nevada, New Jersey, New Mexico, Oregon, Tennessee, Utah, Vermont, and Virginia. Colorado imposes a $5,000 penalty per violation. New Jersey makes NDAs voidable at the employee’s option. Maine makes most existing NDAs unenforceable unless they resulted from a compensated settlement.
Real Court Cases Where NDAs Mattered
Waymo v. Uber — The $245 Million Trade Secret Battle
In 2017, Alphabet’s self-driving car unit Waymo sued Uber, alleging that former star engineer Anthony Levandowski downloaded over 14,000 confidential files before leaving to start his own company, Otto. Uber then purchased Otto for $680 million and hired Levandowski for $250 million in stock.
The case settled one week into trial for $245 million in Uber shares — about 0.34% of Uber’s $72 billion valuation. In a separate criminal case, Levandowski pleaded guilty to stealing trade secrets. He was sentenced to 18 months in prison, ordered to pay $756,499 in restitution and a $90,000 fine, and faced a $179 million obligation from the civil litigation.
| Action | Consequence |
|---|---|
| Levandowski downloaded 14,000 confidential files | Criminal trade secret theft charge |
| Uber acquired Otto and hired Levandowski | $245 million settlement to Waymo |
| Levandowski pleaded guilty | 18 months prison, $756,499 restitution |
PepsiCo v. Redmond — The Inevitable Disclosure Doctrine
In PepsiCo, Inc. v. Redmond (1995), a PepsiCo executive named William Redmond left the company to work for rival Quaker Oats. Redmond had signed a confidentiality agreement but not a non-compete. PepsiCo argued that Redmond would “inevitably disclose” its trade secrets — including sales strategies, marketing plans, and financial data — simply by doing his new job.
The Seventh Circuit agreed. The court found that unless Redmond had an “uncanny ability to compartmentalize” information, he would rely on PepsiCo’s trade secrets in his new role. The court issued a preliminary injunction preventing Redmond from working in certain capacities for Quaker. This case created the modern inevitable disclosure doctrine, which numerous courts across the country have since adopted.
| Action | Consequence |
|---|---|
| Redmond left PepsiCo for competitor Quaker Oats | PepsiCo sued even without a non-compete |
| Court found inevitable disclosure likely | Injunction blocked Redmond from key duties |
| Precedent set for inevitable disclosure doctrine | Courts nationwide adopted the standard |
The $77 Million Data Center Verdict
In a case involving two data center companies, one party breached an NDA during due diligence negotiations by misusing confidential information. The result was a $77 million verdict in favor of the would-be seller. This case shows that NDAs in business transactions carry serious financial teeth.
The $100 Million Spoiled Groceries Tech Case
A tech startup built a system for predicting spoiled groceries and shared it under an NDA with a national retailer. The retailer killed the pilot program, then launched its own similar system. The startup won a $100 million judgment, though the case was later sent back for retrial. This is a textbook example of why NDAs must include specific language about how shared technology can — and cannot — be used.
Harvey Weinstein and the #MeToo NDAs
Harvey Weinstein used NDAs to keep victims silent for decades. Zelda Perkins, his former assistant, signed an NDA that barred her from disclosing allegations of sexual assault even to doctors — unless the doctor also signed a confidentiality agreement with Miramax. She was required to notify Weinstein’s lawyers before going to the police. These agreements became the catalyst for federal and state NDA reform.
Erica Herman v. Tiger Woods — Testing the Speak Out Act
Erica Herman, Tiger Woods’ former girlfriend and an employee of his, asked a Florida court to release her from an NDA under the Speak Out Act. She argued that being forced to sign the NDA as a condition of employment constituted sexual harassment. The judge ruled against her, finding her claims lacked “factual specificity.” This case shows that the Speak Out Act is not a blank check — claimants must still meet factual thresholds.
What Makes an NDA Enforceable?
For an NDA to survive a court challenge, it must contain several core elements. Missing even one can be fatal.
- Clear definition of confidential information. Protect specific categories — source code, financial models, customer lists — not “everything the company does.”
- Identified parties. The NDA must name the disclosing party and the receiving party. If the wrong entity signs, the NDA can be void.
- Adequate consideration. In employment settings, the job offer itself is often sufficient for new hires. For existing at-will employees, courts in states like Texas require new consideration.
- Reasonable scope and duration. A one-to-five-year duration is typical. Indefinite NDAs are enforceable for trade secrets but risky for general business information.
- DTSA whistleblower notice. Any NDA signed after May 11, 2016, must include notice of immunity for disclosures to government officials or attorneys.
- Carve-outs for legally required disclosures. If a court or government agency orders disclosure, the NDA must account for that.
- Return-or-destroy clause. The NDA should require the return or destruction of confidential materials when the relationship ends.
Reasons Courts Strike Down NDAs
Courts reject NDAs for specific, recurring reasons. Understanding these is the best way to avoid having your agreement thrown out.
Overbroad Language
This is the most common reason NDAs fail. If the NDA defines confidential information as “everything the company does,” a court may find the entire agreement unreasonable and strike it down. The Association of Corporate Counsel warns that courts will not enforce an NDA if the information is not truly confidential or valuable.
NDA Functions as a Non-Compete
In states like California, if an NDA’s practical effect is to prevent someone from working in their field, Section 16600 will void it. In MRO v. Jacobsen, a North Carolina court found the NDA unenforceable because its restrictions on selling certain products and using certain suppliers effectively prevented Jacobsen from working in any capacity.
Lack of Consideration
An NDA needs something of value exchanged. For a new employee, the job itself is usually enough. But for an existing at-will employee, “continued employment” alone may not work. The Texas court in Eurecat v. Marklund ruled that previously provided information or continued at-will employment was not enough.
Information Already Public
An NDA cannot protect information that is already available to the public. If a company fails to take reasonable steps to keep a secret — like leaving documents on unlocked laptops or sharing information without restrictions — the information loses its protected status.
Public Policy Violations
NDAs that try to conceal illegal activity, health hazards, or government wrongdoing are unenforceable. Courts will not help a party hide information the public has a right to know.
Remedies When an NDA Is Breached
If someone breaks your NDA, the law provides several possible remedies.
Injunctive relief is often the first step. A court can issue an order that stops the breaching party from further disclosing or using the information. Many NDAs include language stating that a breach causes “irreparable harm,” which makes it easier to get an injunction.
Monetary damages compensate you for actual losses. These can be measured as the loss in value of the trade secret, lost profits, or increased costs caused by the breach.
Punitive damages are available in extreme cases. The breaching party’s conduct must be so egregious — like fraudulently signing an NDA with no intention of honoring it — that the court wants to send a message.
Nominal damages can be awarded even when no actual financial harm occurred. A California appeals court in Elation Systems v. Fenn Bridge held that the breach of an NDA is a legal wrong in itself. This matters because nominal damages can support a permanent injunction — blocking the breaching party from ever using the information again.
Mistakes to Avoid
These are the specific, common errors that cause NDAs to collapse in court.
Using a generic template. Grabbing a one-size-fits-all NDA from the internet is a recipe for disaster. Every NDA must be tailored to the specific relationship and the type of information being shared.
Vague “confidential information” definitions. If you define secrets as “everything the company does,” courts will likely find the NDA unreasonable and unenforceable. Be specific: name the categories of data (source code, pricing models, customer databases).
Missing the DTSA whistleblower notice. This is a federal requirement for any NDA signed after May 2016. Skipping it means you cannot collect attorneys’ fees or punitive damages even if you win.
No dispute resolution clause. Without a clause explaining how disputes will be resolved — litigation, arbitration, mediation — enforcing the NDA becomes harder and more expensive.
No jurisdiction clause. If the NDA does not say which state’s laws apply, you may end up fighting in a state whose laws make your NDA unenforceable.
Indefinite duration for non-trade-secret info. Courts generally dislike indefinite terms for standard business information. A Kansas court in Augusta Medical Complex, Inc. v. Blue Cross of Kansas refused to enforce a perpetual NDA.
Ignoring the “residuals” clause. Some recipients try to add language allowing them to use any information retained in “unaided memory.” This is a massive loophole that essentially lets someone steal your ideas by claiming they “just remembered” them.
Having the wrong person sign. If the Head of Sales signs but the NDA requires a C-level signature, the agreement can be void.
Missing the no-AI-training clause. In 2026, this is critical. If your NDA does not explicitly prohibit feeding your data into AI models, a counterparty could train a large language model on your proprietary information.
Not requiring return or destruction of materials. When the relationship ends, confidential materials must be returned or destroyed. Omitting this clause risks prolonged exposure and complicates enforcement.
Do’s and Don’ts
Do’s
- Do define confidential information with specific categories. Name the types of data: customer lists, financial projections, source code, marketing strategies. This makes enforcement far more likely.
- Do include the DTSA whistleblower notice in every NDA signed after May 2016. Without it, you forfeit the ability to recover punitive damages and attorneys’ fees under federal law.
- Do tailor the duration to the type of information. Trade secrets can be protected indefinitely. General business information should have a fixed term — typically one to five years.
- Do include a clear dispute resolution clause. Specify whether disputes go to litigation, arbitration, or mediation, and name the jurisdiction.
- Do carve out exceptions for legally required disclosures. Courts expect NDAs to account for court orders and government investigations.
- Do include a no-AI-training clause. In the era of generative AI, explicitly prohibit the use of your data for machine learning or AI model training.
Don’ts
- Don’t use language so broad that it covers general skills, knowledge, or public information. Courts in states like California will void overbroad NDAs entirely.
- Don’t rely on “continued employment” as the sole consideration for existing at-will employees. Texas and other states may find this insufficient.
- Don’t include non-compete or non-solicitation language in your NDA unless you intend to defend it as such. If an NDA secretly functions as a non-compete, it can be thrown out.
- Don’t forget to check which state law will apply. An NDA drafted under Texas law may be unenforceable in California and vice versa.
- Don’t allow inconsistent NDAs across your organization. A shorter duration in one NDA could suggest to a court that the information does not need long-term protection.
- Don’t skip having an attorney review or draft the NDA. Generic internet templates are the number one source of unenforceable agreements.
Pros and Cons of NDAs
Pros
- Protects trade secrets and IP. NDAs create a legal duty of confidentiality, giving you grounds to sue if information is leaked.
- Supports federal claims. Using NDAs is one of the “reasonable measures” required to maintain trade secret status under the DTSA.
- Enables safe business conversations. Mergers, joint ventures, investor pitches, and hiring all require sharing sensitive information. NDAs make those discussions possible.
- Deters employee poaching of clients. Employment NDAs prevent departing workers from taking customer relationships to a competitor.
- Cheap compared to alternatives. An NDA is far less expensive than a patent or trademark and much faster to create.
Cons
- Difficult to prove breaches. Once information is out in the world, tracing who disclosed it and how is often extremely hard.
- Expensive to enforce. Lawsuits are costly. Even with a strong NDA, the cost of pursuing a breach in court can exceed the damages recovered.
- Can restrict employee mobility. Overly broad NDAs may limit a worker’s career options by blocking them from using general skills at a new job.
- False sense of security. Having an NDA does not guarantee your secrets are safe. If you are reckless in protecting your own secrets, the NDA will not save you.
- Evolving state laws create compliance risk. With nearly 20 states changing NDA rules in recent years, employers face a patchwork of regulations that requires constant monitoring.
The Enforcement Process: Step by Step
If you suspect someone has breached your NDA, here is what the process typically looks like.
- Identify the breach. Monitor communications, review documents, and conduct an internal investigation to confirm the violation.
- Send a cease and desist letter. This formal notice tells the breaching party to stop the disclosure immediately. It also creates a written record of your demand.
- Seek an emergency injunction. If the disclosure is ongoing or imminent, file for a temporary restraining order or preliminary injunction to stop the harm while the case proceeds.
- File a lawsuit. Under the DTSA, you can file in federal court if the trade secret relates to interstate commerce. You can also file under your state’s trade secret act.
- Prove the breach. You must show that a valid NDA existed, that the information was confidential, that the other party disclosed or misused it, and that you suffered harm (or are entitled to nominal damages).
- Collect your remedy. Depending on the outcome, you may receive an injunction, monetary damages, punitive damages, or a combination of all three.
Is Violating an NDA a Crime?
Breaking an NDA is usually a civil matter, not a criminal offense. You cannot go to jail for breaching an NDA on its own. The harmed party sues you in civil court for damages.
However, there are exceptions. If the NDA breach also involves theft of trade secrets, the government can bring criminal charges under the Economic Espionage Act (18 U.S.C. § 1831-1839). Anthony Levandowski’s case is a prime example — he was sentenced to 18 months in federal prison for stealing trade secrets from Waymo. Violating a court-issued injunction tied to an NDA can also lead to contempt-of-court charges, which carry potential jail time.
Key Entities and Organizations
- Federal Trade Commission (FTC). Has taken an aggressive stance against non-compete clauses and monitors how NDAs interact with worker mobility.
- Equal Employment Opportunity Commission (EEOC). NDAs cannot prevent employees from filing charges with the EEOC, regardless of what the NDA says.
- Lift Our Voices. The advocacy group co-founded by Gretchen Carlson that has led lobbying efforts for NDA reform, including the Speak Out Act.
- State legislatures. Nearly 20 state legislatures have passed NDA-restricting laws, creating a complex web of compliance requirements for multi-state employers.
FAQs
Can you go to jail for breaking an NDA?
No. Breaking an NDA alone is a civil matter, not criminal. Jail is possible only if the breach also involves criminal trade secret theft or violating a court injunction.
Are NDAs enforceable in California?
Yes, but only if they protect specific trade secrets without restraining lawful work. NDAs that function as non-competes or use overly broad definitions are voided under Section 16600.
Can an employer force you to sign an NDA?
No. You can refuse, but the employer can also refuse to hire you or terminate at-will employment. It is a condition of the job, not a forced obligation.
Does the Speak Out Act apply to all NDAs?
No. It applies only to pre-dispute NDAs involving sexual assault or harassment claims. Settlement NDAs signed after a dispute arises are not affected.
Can an NDA protect public information?
No. Courts will not enforce NDAs covering information that is already publicly available or that the receiving party independently discovered.
Do NDAs need a time limit to be enforceable?
No, not always. Trade secrets can be protected indefinitely. However, NDAs covering general business information should include a fixed duration to avoid enforceability challenges.
Can I still report illegal activity if I signed an NDA?
Yes. The DTSA’s whistleblower immunity protects disclosures to government officials or attorneys for reporting suspected legal violations. Public policy also prevents NDAs from silencing reports of illegal conduct.
Are verbal NDAs enforceable?
No, not in most practical situations. While some states recognize oral contracts, proving the terms of a verbal NDA is nearly impossible, which makes them effectively unenforceable.
Does an NDA expire when the company goes out of business?
No. An NDA survives as long as its terms specify, regardless of whether the company continues to operate. The rights under the NDA may transfer to successors or assignees.
Can you be sued for breaking an NDA if no damage was caused?
Yes. Under California law, even when no actual financial harm occurred, courts can award nominal damages for the breach itself, which can then support a permanent injunction.