California NDAs — what holds up, what's theater.

What an NDA actually does — and what it doesn't#

A non-disclosure agreement is a contract that obligates one or both parties to keep specified information confidential. What it does: creates a contractual basis for damages if the receiving party discloses or misuses the confidential information, defines the scope of what's protected, and (with appropriate language) supports a request for injunctive relief preventing further disclosure. What it doesn't do: automatically make information a trade secret, override California's strong public-policy limits on restrictive covenants, or substitute for the substantive protections of trade-secret law.

The most common misconception is that an NDA, by itself, protects trade secrets. It doesn't. California's Uniform Trade Secrets Act (CUTSA, Cal Civ Code §§3426–3426.11) protects information that meets the statutory definition of a trade secret regardless of whether an NDA exists — and a poorly drafted NDA can actually undermine trade-secret protection by undercutting the "reasonable efforts to maintain secrecy" element CUTSA requires. NDAs and trade-secret law are complementary, not substitutable. A real confidentiality program uses both.

The other framing fact: NDAs get litigated in two very different contexts. Sophisticated-party context: M&A diligence, licensing negotiations, joint venture exploration. Both sides are commercial actors, the NDA is mutual, and the litigation tends to focus on whether information was actually confidential and whether disclosure caused damage. Employment context: employees and contractors who learn the employer's confidential information during the engagement. The litigation tends to focus on the scope of the NDA (was it overbroad?), the post-Edwards framework on restrictive covenants, and whether the relief sought is really NDA enforcement or disguised non-compete enforcement. Different contexts; different drafting strategies.

The CUTSA framework as backdrop#

California's Uniform Trade Secrets Act is the substantive law that protects confidential business information. CUTSA defines a trade secret (Cal Civ Code §3426.1(d)) as information that derives independent economic value from not being generally known and is the subject of reasonable efforts to maintain secrecy. The statute provides remedies — injunctive relief, damages (including unjust enrichment), attorney's fees in cases of willful and malicious misappropriation.

Two important CUTSA effects on NDA drafting. First: CUTSA preempts state-law claims that overlap with trade-secret claims (the "CUTSA preemption doctrine"). Common-law claims for breach of confidence, unfair competition, conversion of confidential information, and similar theories may be displaced by CUTSA when the underlying facts amount to trade-secret misappropriation. A breach-of-NDA claim is generally not preempted because it's a contract claim, not a tort claim — but the drafting should preserve that distinction. Second: the "reasonable efforts to maintain secrecy" element of CUTSA means that having an NDA program supports trade-secret status — but only if the NDAs are actually used, signed, and operationally maintained. An NDA on file but never enforced doesn't help.

The federal Defend Trade Secrets Act (DTSA, 18 U.S.C. §§1836–1839) adds a parallel federal cause of action, with similar elements but a slightly broader procedural framework (federal jurisdiction, ex parte seizure orders in extreme cases, whistleblower immunity disclosure requirements that need to appear in employment NDAs). Most modern California NDAs include the DTSA whistleblower notice required by §1833(b)(3); agreements that don't include it can lose the ability to seek exemplary damages and attorney's fees under DTSA.

Required elements that hold up at injunction#

Most NDA disputes reach a point where the disclosing party wants injunctive relief — to stop further disclosure, to recover materials, to prevent use of the information. The provisions that support an injunction are different from the ones that support a damages claim. Both matter; the injunction-supporting provisions are easier to overlook.

Definition of confidential information#

The single most-litigated provision. Definitions that are too narrow (a list of specific documents or categories) miss information the parties actually intended to protect. Definitions that are too broad ("all information disclosed by either party") fail under California courts' scrutiny — judges decline to enforce sweeping confidentiality on information that includes publicly known facts. The right approach is a substantive definition (information that is not generally known, is treated as confidential by the disclosing party, and is disclosed in connection with the defined purpose) supplemented by examples and explicit exclusions.

Standard exclusions: information that (a) is or becomes generally known through no fault of the receiving party, (b) is independently developed by the receiving party without use of the confidential information, (c) is rightfully received from a third party without restriction, (d) was already known to the receiving party at the time of disclosure, or (e) is required to be disclosed by law or court order (with notice obligations to the disclosing party where possible).

Purpose limitation#

The agreement should specify the limited purpose for which confidential information is being disclosed — and confine use of the information to that purpose. Without a purpose limitation, the receiving party can argue that any use it makes is permissible because the NDA doesn't prohibit it. The purpose should be drafted with the actual transaction in mind: "evaluation of a potential acquisition," "performance of services under the Master Services Agreement," "discussion of a potential employment relationship."

Term and survival#

Two related but distinct concepts. Term is how long the disclosure obligations run. Survival is whether confidentiality obligations continue after the NDA terminates. California courts are skeptical of perpetual confidentiality on non-trade-secret information; a fixed term (typically 2–5 years for ordinary confidential information, longer or perpetual for trade secrets specifically) is usually more enforceable than indefinite duration. Survival language should specify which obligations continue (return/destruction, no-use, no-disclosure of trade secrets) and which terminate.

Permitted disclosures and required notices#

The agreement should anticipate situations where the receiving party may need to disclose confidential information — legal compulsion, regulatory inquiry, accountants and legal advisors, prospective merger partners under separate NDA. Each permitted disclosure category should specify the conditions (advance notice to the disclosing party where legally permissible, narrowest reasonable scope, confidentiality obligations on the further recipient).

Return or destruction#

On termination or on demand, the receiving party should be obligated to return or destroy confidential information in its possession. Modern drafting addresses electronic copies: "reasonable efforts" to delete from systems, archived backups, and email — recognizing that complete deletion is sometimes impossible, but specifying what the receiving party is obligated to do. Certificates of destruction signed by an officer are common in higher-stakes agreements.

Injunctive relief acknowledgment#

The agreement should explicitly state that breach of the confidentiality obligations would cause irreparable harm not adequately compensable by money damages, and that the disclosing party is entitled to seek injunctive relief. This language doesn't bind the court (which makes its own irreparable-harm finding), but it eliminates one of the elements the disclosing party would otherwise have to prove from scratch, and signals the parties' shared understanding that injunction is on the table.

Mutual vs. unilateral — when each fits#

Unilateral NDAs bind only one party to confidentiality — usually the receiving party. Common in: employment relationships (employee receiving employer's information), vendor relationships (vendor receiving customer's information for a limited project), one-way disclosure scenarios (an inventor disclosing to a potential investor). Cleaner to draft and faster to negotiate when only one side is sharing meaningful information.

Mutual NDAs bind both parties. Common in: M&A diligence (both parties exchange information), partnership negotiations, joint development arrangements, licensing discussions. Symmetric obligations make negotiation faster — neither side argues for asymmetric protection — and reflect the actual flow of confidential information.

The drafting effort isn't usually about choosing mutual vs. unilateral; it's about not defaulting to mutual when the relationship is genuinely unilateral. Mutual NDAs signed in one-way-disclosure scenarios sometimes create reciprocal obligations on the disclosing party that no one actually intended — and that can create litigation opportunity later.

NDAs in employment — the Edwards line and §16600 limit#

California's Cal Bus. & Prof. Code §16600 voids contracts that restrain employees from engaging in lawful profession, trade, or business. The California Supreme Court's decision in Edwards v. Arthur Andersen LLP (2008) confirmed that §16600 is a strong public-policy prohibition on post-employment non-competes, with narrow exceptions (sale of business, dissolution of partnership). AB 1076 (effective 2024) reinforced the prohibition by requiring employers to formally notify current and former employees that any non-compete clauses they signed are unenforceable.

NDAs are different from non-competes, but the line gets blurry. A pure confidentiality obligation — "don't disclose or use the company's confidential information for purposes other than your employment" — is enforceable. A non-solicit of customers using confidential customer information may be enforceable when narrowly drawn. A blanket prohibition on working for competitors or using "any skills or knowledge gained" during employment is an unenforceable non-compete wearing an NDA mask. California courts read employment NDAs strictly, looking for impermissible non-compete effects masquerading as confidentiality protection.

Drafting employment NDAs in California requires care on several points. First: the confidential information definition should be narrowly tailored to actual confidential information, not the employee's general skills and knowledge. Second: the agreement shouldn't restrict the employee from working in their field or industry — only from using the employer's specific confidential information. Third: trade-secret protection (which has independent statutory basis) is enforceable separately from non-competes, and a well-drafted employment NDA preserves CUTSA and DTSA remedies. Fourth: include the DTSA whistleblower immunity disclosure required by 18 U.S.C. §1833(b)(3) to preserve federal exemplary-damages and attorney's-fee remedies.

NDAs in M&A, licensing, and sophisticated-party contexts#

Commercial NDAs between sophisticated parties get less skepticism from California courts than employment NDAs. Both sides are commercial actors, the agreement is genuinely negotiated, and the public-policy concerns that drive §16600 don't apply. The drafting focus shifts from enforceability defense to substantive scope:

M&A diligence NDAs. Mutual, broad confidential-information definition (because financial and operational information flows both ways during diligence), purpose limited to evaluating the transaction, term typically 2–3 years, prohibition on hiring key employees during the term (with carve-outs for unsolicited general advertising), no-trading provision if a public company is involved.

Licensing and partnership NDAs. Tighter purpose limitation, longer term for technical or product information (often 5+ years), explicit treatment of derivative works and improvements, residuals language (sometimes), specific carve-outs for similar work the receiving party may be doing independently.

Investor NDAs. Often the hardest. Professional investors typically refuse to sign NDAs at the early-stage screening level because they see similar pitches frequently and don't want to take on confidentiality obligations across an entire investment thesis. Where investor NDAs are signed (later-stage diligence, term-sheet stage), they tend to be more narrowly tailored than M&A NDAs and carry shorter terms.

Enforcement — injunctions, damages, and CUTSA preemption#

When an NDA is breached, the disclosing party has several potential causes of action. Breach of contract is the direct one — proof of the agreement, breach, and damages. Breach of confidence (a separate common-law claim) and conversion of confidential information may also apply, though CUTSA may preempt depending on whether the information rises to trade-secret status.

Trade-secret misappropriation under CUTSA and DTSA provides parallel federal and state claims with broader remedies — injunctive relief (including ex parte in extreme cases under DTSA), damages including actual loss and unjust enrichment, royalty in lieu of damages where appropriate, exemplary damages up to 2x for willful and malicious misappropriation, and attorney's fees. Most serious NDA enforcement actions plead both breach of contract and trade-secret misappropriation, with the contract claim covering information that doesn't qualify as a trade secret and the statutory claims covering the trade-secret portion.

Injunctive relief is the most-sought remedy in NDA enforcement. The standard requires showing likelihood of success on the merits, irreparable harm (which the agreement's irreparable-harm acknowledgment supports but doesn't guarantee), balance of hardships favoring the moving party, and the public interest. California courts grant preliminary injunctions in clear NDA breach cases with measurable irreparable harm — but they decline when the confidential information is poorly defined, where the breach has already occurred and disclosure is complete, or where the requested relief would effectively impose a non-compete.

Common drafting mistakes that make NDAs theater#

Overbroad scope. "All information disclosed by either party" definitions fail when the information includes publicly known facts. California courts decline to enforce protection for what's not actually confidential.

Perpetual terms on non-trade-secret information. Indefinite confidentiality obligations on ordinary commercial information run afoul of California's reasonableness limits. Fixed terms (2–5 years for ordinary information, longer for trade secrets specifically) are more enforceable.

Missing standard exclusions. NDAs without standard exclusions (publicly known, independently developed, third-party received, prior knowledge, legally compelled) create disputes over information that should never have been confidential in the first place.

Disguised non-competes. Employment NDAs that prohibit using "any skills or knowledge" or that restrict working for competitors are unenforceable under §16600 and the Edwards line, regardless of the "NDA" label.

No injunctive-relief acknowledgment. NDAs that don't include the irreparable-harm acknowledgment force the moving party to build that element from scratch at the preliminary injunction stage, slowing relief and creating opportunities for the breaching party.

Missing DTSA notice. Employment NDAs without the §1833(b)(3) whistleblower immunity disclosure lose access to DTSA exemplary damages and attorney's fees — a meaningful loss in cases of willful misappropriation.

No real return/destruction provision. NDAs that say "return or destroy" without specifying procedure, timeline, or certification produce disputes about whether the receiving party actually complied.

Why same-firm representation matters here#

NDA drafting and NDA enforcement are the same legal analysis viewed from opposite sides of the table. The drafting work has to anticipate the enforcement scenario — what facts will be examined, what provisions will be tested, what relief will be sought. The enforcement work has to evaluate what was drafted, what was actually practiced, and where the gap creates leverage on either side.

Same firm drafts the NDA. Same firm enforces it when breached. That continuity matters more for NDAs than for almost any other contract. NDA enforcement frequently moves fast — preliminary injunction motions on compressed schedules, temporary restraining orders when disclosure is imminent, ex parte seizure orders in extreme DTSA cases. The firm that drafted the agreement already knows the confidentiality framework, already knows what was disclosed and why, and can move from intake to motion practice on a timeline that a new firm couldn't match. Speed is a feature of NDA enforcement that benefits enormously from drafter-enforcer continuity.