You're about to hand a new contractor the keys to your client list, your course content, or your signature process… but before you do, you want something in writing that says, "This stays between us." This is a totally normal scenario for business owners, and that's where a confidentiality agreement comes in!
But a document only helps if it holds up when you need it. So, the question is: are confidentiality agreements enforceable?
In this blog post, we're walking you through what they are, why small business owners use them, what makes a court take one seriously (or toss it out), and how to tell whether your contract actually needs one.
When Is a Confidentiality Agreement Enforceable?
Confidentiality agreements, also called non-disclosure agreements (NDAs), are generally enforceable in the United States when they meet basic contract requirements, clearly define the confidential information, protect a legitimate business interest, and are reasonable in scope and length. Courts are less likely to enforce a confidentiality agreement that labels everything as confidential, works like a non-compete, or tries to stop someone from reporting illegal activity. Because contract law varies by state, the exact rules depend on where the parties are located and which state's law the confidentiality agreement says applies.
- Valid contract: both parties agree, and something of value is exchanged.
- Clear definition: confidential information is listed by specific category.
- Legitimate interest: the agreement protects things like client lists, pricing, and trade secrets, not public information.
- Reasonable scope: restrictions and time limits match what actually needs protecting.
- Proper acceptance: the agreement is signed or otherwise clearly accepted.
What Is a Confidentiality Agreement (NDA)?
First things first, let's get clear on what a confidentiality agreement, most commonly referred to as a non-disclosure agreement (NDA), even is!
An NDA is a contract where one or both parties agree not to share or misuse certain information, and it usually does three things:
- Defines what's confidential, such as client lists, pricing, processes, unreleased products, or login credentials.
- Limits how that information can be used, typically only for the work or relationship at hand.
- Sets out what happens if someone breaks the agreement, such as returning materials, stopping the disclosure, or paying damages.
NDAs typically come in two forms:
- A one-way (unilateral) NDA protects information flowing in one direction, like when you share your business details with a contractor.
- A mutual NDA protects both sides, which is common when two businesses are exploring a collaboration or joint venture.
Confidentiality terms don't always live in a separate document, either! Many Client Services Agreements and contractor agreements include a confidentiality clause right inside the contract itself.
Why Small Business Owners Use Non-Disclosure Agreements
It's extremely common for larger companies to use NDAs, but they're just as useful for small businesses.
Small business owners use NDAs to protect the information that makes their business valuable before sharing it with someone outside the business. For example, your processes, client relationships, and unreleased ideas are often your biggest assets, and an NDA puts clear boundaries around them.
(For a deeper dive, check out our guide on how NDAs protect your ideas, clients, and content before you share them.)
Here are the most common situations where an NDA (or a confidentiality clause) earns its keep:
- Hiring independent contractors, such as a virtual assistant, OBM, designer, copywriter, etc., who may see client data, passwords, financials, and behind-the-scenes systems. A confidentiality agreement spells out that this information stays private during and after the engagement.
- Protecting intellectual property in development: for example, if you're building a course, a signature framework, or a new product, an NDA helps protect those ideas while you work with developers, editors, or beta testers before launch.
- Exploring partnerships or collaborations: joint ventures, affiliate deals, and brand partnerships often require sharing revenue numbers or audience data, and a mutual NDA lets both sides talk openly.
- Working with clients who share sensitive information: coaches, consultants, and service providers often learn private details about a client's business, and a confidentiality clause shows clients you take protecting their information seriously.
- Talking to potential investors or buyers: if you're pitching your business or exploring a sale, an NDA helps limit how your financials and strategy can be used.
It's important to note, however, that an NDA protects information, NOT general ideas floating around in the market. This means that it won't stop someone from independently coming up with a similar offer.
Overall, it's one layer of protection, and it works best alongside trademarks, copyright, and clear intellectual property terms in your contracts.
Are Confidentiality Agreements Enforceable?
The short answer is yes! Confidentiality agreements are generally enforceable in the United States, as long as they meet basic contract requirements and are reasonable in scope.
It's the big question a lot of people have about NDAs and confidentiality agreements, and it's a good one!
Courts review NDAs all the time and often enforce reasonable ones, but what they WON'T do is enforce an agreement simply because it was signed. They look at what it actually says instead!
When a court reviews a confidentiality agreement, it typically asks questions like these:
- Is it a valid contract? Both parties need to have agreed to it, and there usually needs to be something of value exchanged (lawyers call this "consideration"), such as the engagement itself or payment for services.
- Is the confidential information clearly defined? "Everything you learn while working with me" is much harder to enforce than a specific list of categories.
- Does it protect a legitimate business interest? Client lists, trade secrets, pricing, and proprietary methods usually qualify. Information that's already public usually doesn't.
- Is it reasonable in scope and length? Restrictions should match what you're actually trying to protect.
- Was it properly accepted? A signed agreement puts you on the strongest footing. Electronic signatures and clickwrap acceptances can also carry legal weight, depending on how they're set up and the facts.
Overall, a well-drafted, reasonable confidentiality agreement gives you real leverage if someone misuses your information, but a sloppy or overreaching one can leave you on much weaker footing than you expected.
What Can Make a Confidentiality Agreement Unenforceable?
One of the most common reasons a court refuses to enforce a confidentiality agreement is that it's too broad. Contract law is mostly state law, so the exact rules depend on where you and the other party are located and which state's law the agreement says applies.
With that, however, there are still a few common red flags that come up again and again:
Overly broad definitions of "confidential information"
If your NDA labels everythinggg as confidential, including information that's already public or that the other person knew before working with you, a court may decide it's unreasonable.
Well-drafted confidentiality agreements include standard exclusions for information that is:
- Already publicly available (through no fault of the person who signed)
- Already known to the recipient before the relationship started
- Independently developed without using your information
- Received lawfully from someone else who wasn't bound by confidentiality
Agreements that act like a non-compete
Some states take a close look at confidentiality agreements that are so sweeping they effectively prevent someone from working in their field. California is the best-known example of this!
California law strongly disfavors non-compete restrictions, and California courts have refused to enforce confidentiality provisions drafted so broadly that they operated like a non-compete. If you work with contractors or clients in California, narrow, specific language matters even more.
Unreasonable time limits
How long confidentiality lasts should fit the information!
Protecting genuine trade secrets for as long as they remain secret is common and often upheld, but locking down ordinary business information forever can look unreasonable to some courts, so many agreements use a set period (such as two to five years) for general confidential information and a longer period for trade secrets.
How states handle a bad clause
States also differ on what happens when part of a confidentiality agreement goes too far:
- Some courts trim it: they strike the unreasonable portion and enforce the rest (sometimes called the "blue pencil" approach).
- Some courts rewrite it: they modify the overbroad term to something reasonable and enforce that.
- Some courts toss it: in stricter jurisdictions, an unreasonable restriction can sink the whole provision.
Because you can't always predict which approach will apply, it's smarter to draft reasonably from the start than to count on a court fixing it later. A severability clause (language saying the rest of the contract survives if one part is struck) can help, but it's not a cure-all.
Trying to silence legally protected disclosures
An NDA generally can't stop someone from reporting illegal activity to the government or cooperating with a lawful investigation. Federal law also limits certain confidentiality terms.
For example, the Speak Out Act restricts enforcement of pre-dispute nondisclosure and non-disparagement clauses related to sexual harassment and sexual assault disputes. And under the Defend Trade Secrets Act, if an agreement with an employee or independent contractor doesn't include a required whistleblower immunity notice, the business may lose the ability to recover exemplary damages and attorney's fees from that person in a later federal trade secret lawsuit.
These rules are technical, which is one more reason to use lawyer-drafted language!
Does Your Contract Need a Confidentiality Agreement?
If someone will see information you wouldn't want shared publicly or used against you, your contract should include confidentiality protections. Beyond wondering if confidentiality agreements are actually enforceable, this is the next question many business owners ask!
The real question, however, is usually whether you need a separate NDA or whether a confidentiality clause inside your main contract will do the job.
To determine that, ask yourself:
- Will this person access client data, passwords, financials, or internal systems?
- Am I sharing something unreleased, like a course, product, or framework?
- Do I need protection before we've agreed on the work (for example, during a discovery call or partnership pitch)?
- Is this a collaboration where both of us will share sensitive information?
If you answered yes to the first two, a confidentiality clause in your Client Services Agreement or contractor agreement is often enough. If you answered yes to the last two, a standalone NDA is usually the better fit, because the conversation is happening before (or outside of) a main contract.
Standalone NDA vs. Confidentiality Clause
| Standalone NDA | Confidentiality Clause in Your Contract | |
|---|---|---|
| When it's signed | Before the work or deal is agreed on | When the main contract is signed |
| Best for | Discovery calls, partnership pitches, investor or buyer talks | Ongoing client and contractor relationships |
| Direction | One-way or mutual | Usually tied to the parties and services in that contract |
| Where it lives | Its own separate document | Inside your Client Services Agreement or contractor agreement |
What a Confidentiality Agreement Should Cover
A strong confidentiality agreement clearly defines what's protected, what isn't, how the information can be used, and how long the obligation lasts.
Use this checklist to review your current contracts or any NDA someone asks you to sign:
- Definition of confidential information: specific categories, like client lists, pricing, login credentials, course materials, and business processes
- Exclusions: public information, information already known, information independently developed, and information lawfully received from others
- Permitted use: information can be used only to perform the services or evaluate the stated purpose
- Who else can see it: whether the recipient may share with their own team or subcontractors, and that those people must follow the same rules
- Duration: how long the obligation lasts, including whether it continues after the relationship ends
- Return or destruction: what happens to files, documents, and access when the work wraps up
- Legally required disclosures: what happens if a court or government agency requires disclosure
- Remedies: what you can do if the agreement is broken, such as seeking a court order to stop the disclosure
- Governing law: which state's law applies to the agreement
Here's a simplified example of how a confidentiality obligation might read in a client or contractor agreement:
Contractor agrees to keep Client's Confidential Information private and to use it only to perform the Services under this Agreement. "Confidential Information" includes Client's customer lists, pricing, financial information, login credentials, and unpublished materials. It does not include information that is publicly available, already known to Contractor, independently developed, or lawfully received from a third party. These obligations continue for two (2) years after this Agreement ends, and for any trade secrets, for as long as that information remains a trade secret under applicable law.
NOTE: This sample is for illustration only. The right language depends on your business, the relationship, and where you and the other party are located.
Frequently Asked Questions About Confidentiality Agreements
Is an NDA the same as a confidentiality agreement?
Yes, in most cases! "Non-disclosure agreement" and "confidentiality agreement" are generally used interchangeably. Both are contracts that limit how private information can be shared or used.
Do confidentiality agreements expire?
They can! Many confidentiality agreements protect general business information for a set number of years after the relationship ends, while trade secrets are often protected for as long as they remain secret. If an agreement doesn't say, how long it lasts may depend on state law and the facts.
Is a confidentiality agreement enforceable if it wasn't signed?
Possibly, but you're on weaker footing. A signed confidentiality agreement (or NDA) is the strongest evidence that both parties agreed. Electronic signatures, clickwrap acceptances, and other documented acceptance can also be enforceable depending on how they're set up and the circumstances.
What happens if someone breaks a confidentiality agreement?
If someone breaks a confidentiality agreement, the business may be able to ask a court to order them to stop using or sharing the information and may be able to recover money damages for the harm caused. What's available depends on the agreement's terms, the facts, and the law that applies. Many disputes start with a written demand to stop and return the information before anyone goes to court.
Can an NDA stop someone from reporting illegal activity?
Generally, no! Confidentiality agreements typically can't prevent someone from reporting suspected illegal conduct to government agencies or cooperating with a lawful investigation, and some federal laws limit confidentiality terms in specific situations.
Do independent contractors need to sign a confidentiality agreement?
There's generally no law requiring it, but it's a smart move whenever a contractor will access sensitive business or client information. Including a confidentiality clause in your Independent Contractor Agreement is often the simplest way to cover this.
Is a confidentiality clause in my contract as good as a separate NDA?
For ongoing client and contractor relationships, a well-drafted confidentiality clause is often enough. A standalone NDA is usually the better choice when you need protection before a main contract exists, such as during a pitch or partnership discussion.
Protect Your Business Information With Lawyer-Drafted Contracts
Overall, confidentiality agreements are generally enforceable when they're clear, reasonable, and properly accepted, so the language you use really matters. A DIY agreement copied from the internet might be too vague to protect you or so broad that a court won't enforce it.
That's why The Boutique Lawyer Contract Shop offers attorney-drafted templates built for creative entrepreneurs, coaches, and online business owners!
Our client and contractor agreement templates include confidentiality protections, so you're not starting from scratch. Plus, if you need a separate NDA, our Non-Disclosure Agreement template has you covered there too!
Browse the TBL Contract Template Shop and grab the specific templates that your business needs.
* * *
ABOUT THE AUTHOR, AMBER GILORMO – ATTORNEY AND FOUNDER OF THE BOUTIQUE LAWYER
Amber Gilormo is the cool lawyer behind The Boutique Lawyer – a one-stop contract template shop for creative entrepreneurs, online business owners, coaches, and service providers.
From client agreements to digital product terms and everything in between, our lawyer-drafted templates take the guesswork out of staying legally protected online (no legal jargon required).
Here's how you can stay connected:
🖋️ Let's be pen pals! Subscribe to my email list to receive all of my best biz tips and behind the scenes goodies to keep your business bringing in sales (legally of course).
📄 Binge the blog to get all of the legal information you need about running a business in a way that actually makes sense to your non-legal brain.
👋 Come hang with me on the 'gram! I often do AMA's on stories, so you can submit your specific questions when they come up.