An NDA is not useless, but it is oversold. Understanding what it actually does helps you rely on the right things.
What it rests on
India has no standalone trade secrets legislation. Protection comes from:
- Contract, meaning the NDA itself, enforced under the Indian Contract Act, 1872
- The equitable action for breach of confidence, which can apply even without a written agreement where information was imparted in circumstances importing an obligation of confidence
- Copyright, where the material is a protected work such as code or a database
- The Information Technology Act, 2000, where data is taken from a computer resource without authorisation
What an NDA genuinely achieves
- It defines what is confidential, which is the hardest thing to prove later.
- It establishes that the recipient knew the information was confidential, removing the innocence defence.
- It gives a contractual footing for an injunction, which is the only remedy that matters in practice, because damages for leaked information are close to impossible to quantify.
- It creates a deterrent, and it signals professionalism to counterparties.
An NDA cannot un-disclose information. By the time you sue, the information is out. It also cannot restrain someone from using their general skill and knowledge, and courts distinguish sharply between proprietary information and the expertise a person accumulates. And note that many investors will refuse to sign one at all, which is standard practice and not a red flag.
- Confidential information defined by category, not as everything ever disclosed
- Carve-outs for information already public, independently developed or lawfully received
- A permitted purpose, so use outside it is itself a breach
- A defined term, and a survival period for the obligation
- Return or destruction on termination, with a certificate
- A right to injunctive relief, acknowledged as an agreed remedy
- Governing law, seat, and a court named for interim relief
- A marking or notification protocol, so what is confidential is identifiable later
What makes one enforceable
- A specific definition of confidential information, with carve-outs for information already public, independently developed, or lawfully received from a third party
- A defined term, both for the agreement and for the survival of the obligation
- Clear permitted purpose and permitted recipients
- Obligations on return or destruction of material
- An express right to injunctive relief, and an acknowledgement that damages are inadequate
- A workable dispute resolution clause, with a seat you can actually litigate in
Do not attach a non-compete to it and assume that clause travels; as a post-employment restraint it will not. Our note on drafting a non-disclosure agreement in India takes those clauses one at a time.
The statutory teeth people forget
An NDA is not purely a contract remedy. Where confidential material is taken from a computer or a system, the Information Technology Act, 2000 adds a civil claim for compensation against a person who, without permission, accesses, downloads or copies data from a computer resource, and makes the dishonest or fraudulent doing of those acts a criminal offence. More directly relevant to an NDA, Section 72A punishes a person who, while providing services under a lawful contract, has secured access to material containing personal information and discloses it without consent or in breach of a lawful contract, with intent to cause or knowing he is likely to cause wrongful loss or gain. The punishment extends to three years' imprisonment or a fine of up to five lakh rupees, or both. Where an ex-employee or vendor has walked away with a customer database, that is a real lever and it changes the tone of a reply to a notice.
Where you sue, and why it matters
Most NDA disputes are commercial disputes within the Commercial Courts Act, 2015, because the definition expressly covers distribution and licensing agreements, management and consultancy agreements, technology development agreements, agreements for the provision of services, and disputes over intellectual property rights. So where the claim meets the specified value under that Act, it goes before a Commercial Court, which in Bengaluru sits within the City Civil Court establishment, with appeals to the Commercial Appellate Division of the High Court of Karnataka. That brings a faster and stricter procedure, but also a mandatory pre-institution mediation requirement for any commercial suit that does not contemplate urgent interim relief. Since an NDA suit almost always seeks an urgent injunction, the injunction application is not merely the remedy you want, it is what lets you file at once.
Making the injunction obtainable in practice
Courts grant interim injunctions on evidence, not on the existence of a signed NDA. What actually persuades is a record built before the dispute: documents marked confidential, access controls and logs showing who opened what and when, a defined list of what was shared and on what date, and an exit process under which devices are returned and access is revoked on the last working day. Where material has been copied, ask early for the appointment of a commissioner to inspect and secure the recipient's devices, because the evidence disappears quickly.
Two drafting points follow. Give the agreement a governing law and a forum you can actually reach, and think hard before choosing arbitration for a case whose only useful remedy is a fast injunction. And where the relationship is a services engagement rather than a bare exchange of information, the confidentiality clauses belong inside the main contract with the deliverables, payment and IP ownership terms; our note on drafting a service agreement covers how those fit together.
The wider point is that an NDA is one layer. Registered rights, written assignments from every employee and contractor, and sensible access control do more work than the agreement does. Our guide to IP protection for startups puts the NDA in its place among them.