NDA in India — Complete Legal Guide 2026
A Non-Disclosure Agreement (NDA), also called a Confidentiality Agreement or Confidential Disclosure Agreement (CDA), is a legally binding contract between two or more parties that establishes a confidential relationship. In India, NDAs are governed primarily by the Indian Contract Act, 1872, supplemented by common law doctrines of breach of confidence and the Information Technology Act, 2000 for digital disclosures.
Legal Basis for NDA Enforcement in India
For an NDA to be enforceable in India, it must satisfy all essential elements of a valid contract under Section 10 of the Indian Contract Act: (1) an offer and acceptance; (2) lawful consideration; (3) parties competent to contract (major, of sound mind, not disqualified by law); (4) free consent (not obtained by coercion, undue influence, fraud, misrepresentation, or mistake); and (5) a lawful object.
Courts in India have consistently held that NDAs are valid contracts. The Bombay High Court, Delhi High Court, and Supreme Court of India have all upheld NDA clauses in various commercial disputes. The key limitation is Section 27 of the Indian Contract Act, which renders void any agreement in restraint of trade. NDAs that go beyond protecting genuine confidential information and instead prevent a party from working in their field of expertise may be struck down partially or wholly.
Mutual vs One-Way NDA — When to Use Which
The choice between a mutual and unilateral NDA depends on the nature of the business relationship and the information flow:
One-Way (Unilateral) NDA is appropriate when the information flow is clearly one-directional. Common use cases: sharing a business idea with a potential investor before a formal pitch; disclosing technical specifications to a vendor for a quotation; sharing source code with a freelance developer; disclosing financial projections to a bank or lender; employee NDAs where the employer discloses proprietary methods.
Mutual (Bilateral) NDA is appropriate when both parties will exchange confidential information. Common use cases: joint venture negotiations where both parties share strategic plans; M&A due diligence; technology partnership where both parties disclose proprietary technology; research collaborations between companies or institutions; any negotiation where both sides share sensitive business information.
Trade Secret Protection in India — The Legal Gap
Unlike the United States (which has the Defend Trade Secrets Act, 2016) or the European Union (which has the Trade Secrets Directive), India does not have a standalone trade secrets law. This makes NDAs even more critical in India, as they are the primary contractual mechanism for protecting trade secrets.
Under Indian common law, the doctrine of breach of confidence can provide protection even without an NDA — but establishing this in court is significantly harder and more expensive than enforcing a written agreement. The DPIIT has circulated draft proposals for a trade secrets framework, but legislative progress has been slow. Until such legislation is enacted, businesses in India should rely on well-drafted NDAs backed by strong employment agreements and IT security policies.
NDAs and the IT Act, 2000 — Digital Confidentiality
When confidential information includes software, source code, databases, or other digital assets, the Information Technology Act, 2000 becomes relevant. Section 43A of the IT Act imposes liability on companies that fail to implement reasonable security practices and procedures for sensitive personal data. Section 72A creates criminal liability for disclosure of information in breach of a lawful contract. Including a reference to the IT Act in an NDA covering digital assets strengthens the legal foundation and signals to the Receiving Party that digital disclosures are covered.
Duration of NDA Obligations — What Is Reasonable?
The duration of confidentiality obligations is one of the most litigated NDA provisions in India. Courts balance two competing interests: the Disclosing Party's interest in protecting valuable information, and the general principle against restraint of trade.
For commercial business information that has a defined lifecycle (product roadmaps, marketing strategies, financial projections), a 2–3 year obligation post-disclosure is standard and generally enforceable. For genuinely proprietary formulas, manufacturing processes, or trade secrets with no natural expiry, an indefinite obligation may be upheld if the information retains its commercial value. For employee NDAs, post-employment confidentiality obligations must be reasonable in scope to avoid being struck down under Section 27 — typically 1–2 years for general employees, longer for senior executives with access to core business secrets.
International NDAs — CISG, UNCITRAL, and Cross-Border Considerations
When one party to an NDA is based outside India, additional considerations apply. India is a signatory to the United Nations Convention on Contracts for the International Sale of Goods (CISG), but for NDAs (which are not contracts for the sale of goods), it is standard practice to expressly exclude CISG to avoid ambiguity. Our generator automatically includes this exclusion for international parties.
Dispute resolution between international parties often uses UNCITRAL Arbitration Rules or institutional arbitration (e.g., ICC, SIAC, LCIA) rather than domestic courts. Our generator defaults to UNCITRAL arbitration with seat in India for international NDAs, which preserves the enforceability of awards under the New York Convention (India is a signatory).
Stamp Duty on NDAs in India
NDAs are agreements attracting stamp duty under the Indian Stamp Act, 1899. The applicable duty varies by state but is generally nominal — most states classify NDAs under "Agreement" and charge between ₹100 and ₹500. An NDA on insufficiently stamped paper is not automatically void, but it cannot be admitted in evidence without payment of the deficit duty (plus a penalty of up to 10 times the deficit). To avoid this issue, always execute NDAs on properly stamped paper or through e-stamping. States like Maharashtra, Karnataka, and Delhi offer convenient e-stamping through SHCIL (Stock Holding Corporation of India Limited) and state portals.
Employee and Freelancer NDAs — Key Differences
Employees have an implied duty of fidelity to their employer under employment law, which covers some confidentiality obligations. However, this implied duty is weaker and harder to enforce than a written NDA. A standalone NDA with employees clearly defines the scope of confidential information, post-employment obligations, and specific consequences of breach. Under Indian labour law, post-employment restrictions (non-compete clauses) are generally not enforceable for ordinary employees, but post-employment confidentiality obligations for specific trade secrets have been upheld by courts.
Freelancers and independent contractors have no implied duty of confidentiality — they are not employees. An NDA is therefore essential before sharing any sensitive information with freelancers. The freelancer NDA should also address intellectual property ownership (ensure the client owns all work product created) and include specific restrictions on disclosure to the freelancer's other clients.
Remedies for NDA Breach in India
Indian law offers several remedies when an NDA is breached. The most immediate and effective remedy is an interim injunction under Order XXXIX of the Code of Civil Procedure, 1908, which can prevent the Receiving Party from using or further disclosing confidential information while the case is pending. Indian courts grant injunctions in NDA breach cases where the three-pronged test is satisfied: prima facie case, balance of convenience in favour of the applicant, and irreparable harm if injunction is not granted.
Damages can be claimed for actual loss suffered. If the NDA contains a valid liquidated damages clause (which is a genuine pre-estimate of loss, not a penalty), the court may award the agreed amount without requiring proof of actual loss. For breaches involving digital information, criminal remedies under Section 72A of the IT Act (imprisonment up to 3 years and/or fine up to ₹5 lakh) are also available.