A non-disclosure agreement, or NDA, is a contract in which one party promises to keep the other party's confidential information secret and use it only for an agreed purpose. Businesses reach for them constantly: before pitching to an investor, sharing customer lists with a contractor, letting a software developer near the source code, or briefing a potential buyer during a sale. The NDA exists because of a basic asymmetry. Once information is out, it cannot be put back. A competitor who has seen your pricing model, your client list or your manufacturing process cannot be made to unsee it, and by the time you can point to measurable loss, the value may be gone.
Enforcement is therefore the point of the document. This article explains how NDA enforcement actually works in Australia: what makes an NDA enforceable in the first place, what counts as a breach, what you can do before you get to court, what a court can order, and what protection remains when there is no signed NDA at all. The material is most relevant at two moments in the life of a business: when you are drafting an NDA and want it to work later, and when information has leaked, or looks about to leak.
The parties and their competing interests
Four sets of actors shape how an NDA dispute plays out, and each brings a different interest to the table:
- The discloser: the business that owns the confidential information, typically trade secrets, customer and supplier lists, pricing, financials or know-how. It wants the definition of confidential information wide and the obligations long.
- The recipient: the investor, contractor, employee or adviser who receives the information. It wants to know exactly what it can and cannot do, and it wants the obligations narrow so it does not trip over them later.
- The court: the independent decision maker that decides whether the NDA is valid, whether it was breached and what remedy fits.
- The lawyer: the professional who converts the dispute into enforceable steps, and usually the first person who can tell you honestly whether the NDA will hold up.
The tension between the first two parties drives every enforcement dispute. The discloser wants maximum protection; the recipient wants freedom to operate. The court sits between them and will not enforce an obligation that goes further than it needs to. Understanding that dynamic matters, because the same drafting that looks protective on paper can turn out to be unenforceable at the moment you need it.
What makes an NDA enforceable
An NDA is a contract like any other, so a court will only enforce it if it is valid and its terms are clear enough to apply. The drafting decisions that determine enforceability are:
- What is confidential: the definition needs to be specific enough that both parties can tell what is protected. A clause covering "all information whatsoever" is so broad that a court may struggle to find a breach of it.
- Who is bound: the NDA must identify the parties and anyone else covered, such as the recipient's employees or related entities.
- How long it lasts: the duration of the obligation should be stated. There is no fixed statutory maximum; the question is what is reasonable in the circumstances, and courts are reluctant to enforce obligations that run indefinitely over information that is no longer secret.
- What the recipient may do with it: the permitted purpose should be spelled out, because use outside that purpose is itself a breach even without any disclosure to a third party.
- Signature: the parties should sign before any information changes hands. At minimum the recipient's signature is essential, and having both parties sign avoids arguments later about whether a binding contract was formed at all. If information is shared first and the NDA is produced afterwards, protection has to rely on implied obligations of confidence, which are harder to prove.
Vagueness is the enemy. If a clause is drafted so loosely that it is impossible to say what is protected, for how long, or what use is banned, then establishing a breach is difficult and the clause may be unenforceable. A court cannot order someone to comply with an obligation it cannot identify.
NDAs inside employment contracts
Where the NDA sits inside an employment contract, the courts treat it as a restraint of trade and the rules are stricter. The party enforcing the restraint must show it goes no further than reasonably necessary to protect its legitimate business interests, and reasonableness is assessed at the time the contract was entered into, not with the benefit of hindsight: Samsung Electronics Australia Pty Ltd v Grenville [2024] NSWSC 608. That is why a confidentiality clause in an employment contract cannot simply say "for life" over everything the employee ever saw. It should be tied to information that is genuinely confidential, such as trade secrets and customer connections, and limited to a sensible period.
At the same time, the courts recognise that a post-employment confidentiality restraint of limited duration is a legitimate way to protect confidential information, precisely because proving an actual leak later is so hard: John Fairfax Publications Pty Ltd v Birt [2006] NSWSC 995, applied in Samsung Electronics Australia Pty Ltd v Grenville.
What counts as a breach
Breach of an NDA comes in two forms, and each triggers a different response.
Actual breach
An actual breach occurs when the recipient has already disclosed or misused the information. The leak might be a former employee handing your client list to a competitor, a contractor publishing your pricing, or an adviser using your business plan for their own deal. The breach is complete the moment the protected information is used outside the permitted purpose, whether or not a third party has yet exploited it. At this point the damage is done, and the question becomes what the court can do about it: compensation for the loss, and in some cases an order that the recipient return or destroy materials derived from the information.
Anticipatory breach
An anticipatory breach is different. It occurs when the recipient has not yet disclosed anything, but has made clear, by words or conduct, that they intend to breach. A supplier who emails to say they plan to reveal your costings to a rival, or an employee who threatens to leak data during a dispute, has put you in the anticipatory breach position. Australian contract law recognises that a party who clearly indicates in advance that they will not perform can be treated as having repudiated the contract, allowing the innocent party to act before the harm occurs: see for example Upside Property Group Pty Ltd v Tekin [2017] NSWCA 336. For an NDA, the significance is practical. An anticipatory breach is the one case where enforcement can prevent the harm entirely, because the court can order the recipient not to disclose.
The first response: before you go to court
Litigation is slow and expensive, so the first response to a suspected breach is usually a written notice. A demand letter should:
- identify the NDA and the clause that has been breached;
- set out precisely what information is involved and what the recipient did with it;
- demand specific action: stop further disclosure, return or destroy copies, give an undertaking not to use the information, and where loss has occurred, compensation;
- set a short deadline for a response.
The letter serves two purposes. It may resolve the dispute cheaply: many recipients, particularly those who breached carelessly rather than deliberately, will comply once the stakes are clear. And if the matter does reach court, the letter is evidence that you took the breach seriously and gave the recipient a chance to remedy it.
For a threatened disclosure, speed matters more than the letter. If the information has not yet been published, every day of delay increases the risk that it will be. A court can move quickly, but only if you ask it to, and the evidence you gather in the first days, who saw what, when, and what was said, is what the court will rely on.
Enforcing through the courts: the remedies
The two primary remedies for breach of an NDA are the injunction and damages, and each suits a different situation.
Injunctions
An injunction is a court order telling a party to do something or, in the NDA context usually, to stop doing something. It is the remedy for threatened or continuing disclosure, because it stops the harm rather than compensating for it. The urgent version, the interlocutory injunction, can be obtained quickly, often within days, and holds the position until trial.
The test an Australian court applies comes from Australian Broadcasting Corporation v O'Neill (2006) 227 CLR 57, as applied in Samsung Electronics Australia Pty Ltd v Grenville [2024] NSWSC 608. The applicant must show:
- there is a serious question to be tried, meaning the claim is not frivolous;
- damages would not be an adequate remedy if the injunction were refused; and
- the balance of convenience favours granting the injunction.
Confidential information cases usually clear the second hurdle easily. If the information is leaked, money paid later cannot restore the competitive advantage that was lost, which is why courts generally grant injunctions to enforce negative contractual promises such as confidentiality obligations: John Fairfax Publications Pty Ltd v Birt [2006] NSWSC 995. The risks are real though. An applicant for an interlocutory injunction usually has to give an undertaking to compensate the other party if the injunction later turns out to have been wrongly granted, and costs can follow the outcome. An injunction application is not something to run without advice.
Where the disclosure is threatened but not yet made, a court can also grant a final injunction at trial that restrains the apprehended conduct in advance, rather than waiting for the leak to happen.
Damages and other money remedies
If the breach has already happened, the usual remedy is damages. For breach of contract, damages compensate for the loss caused by the breach, so you must prove that the disclosure caused measurable harm: lost deals, lost customers, or money spent remediating the problem. That is often genuinely difficult with confidential information, because the main harm is a competitive advantage that is hard to price. In equity, a successful breach of confidence claim can also support equitable compensation, and where the wrongdoer profited from the misuse, an account of profits may be available instead of damages. Which remedy fits your situation is a question for advice, because the evidence required differs.
When there is no NDA: breach of confidence
An NDA is the cleanest protection, but Australian law also protects confidential information without one, through the equitable doctrine of breach of confidence. The elements were restated in NRMA v John Fairfax [2002] NSWSC 563:
- the information must have the necessary quality of confidence, meaning it is not common knowledge;
- it must have been imparted in circumstances importing an obligation of confidence; and
- there must be unauthorised use, actual or threatened, of the information.
Detriment is a further consideration. For an injunction, the New South Wales Court of Appeal has accepted that relief may be available to restrain a breach of confidence even without proof of detriment, though detriment remains relevant to the strength of the claim: NRMA v Geeson [2001] NSWCA 343. There are also defences, most notably disclosure in the public interest.
There is a statutory layer for company insiders as well. Under s 183 of the Corporations Act 2001 (Cth), a person who obtains information because they are, or have been, an officer or employee of a company must not improperly use it to gain an advantage for themselves or someone else, or to cause detriment to the company. The duty expressly continues after the person stops being an officer or employee, which makes it a useful backstop when a former director or senior employee walks out the door with your trade secrets, even if the NDA is silent or missing.
Courts have also recognised the "springboard" principle in this area: a wrongdoer who has used confidential information to gain a head start over competitors can be restrained from exploiting that head start, in some cases even after the underlying information has become public: see the discussion in A.C.M. Services Pty Ltd v Linmac Cranes Australasia Pty Ltd [2008] FCA 76. This matters because it means a leak is not automatically the end of your protection.
Where a lawyer earns their keep
Lawyers matter at three points in the NDA lifecycle. First, at drafting: an NDA that defines the confidential information, the permitted purpose and the duration with precision, and that sits sensibly within an employment contract's restraint structure, is the one a court will enforce. Second, at the first sign of trouble: a lawyer can assess whether the NDA is valid, whether the conduct amounts to an actual or anticipatory breach, and which remedy is realistically available, before you spend money on a fight you cannot win. Third, in the urgent phase: if disclosure is threatened, an application for an interlocutory injunction is a fast-moving, evidence-heavy process that courts can hear on short notice, and getting the affidavit material right the first time is what protects your position.
The economics usually favour early involvement. A demand letter and a negotiated outcome cost a fraction of a trial, and an injunction that stops a leak preserves value that damages can never restore. Most firms, including Artificer Legal, offer an initial consultation so you can get a view on the strength of your position before committing to a strategy.
The decision point comes before the leak
The pattern in NDA enforcement is consistent. The businesses that protect their information successfully are not the ones with the longest agreements; they are the ones that act in the gap between first suspecting a problem and the information becoming public. In that window, a well-drafted NDA and a prompt, well-evidenced response, a letter first, an injunction application if the threat is real, can stop the damage entirely. After the leak, even a successful case is about compensation for value that has already been lost, and proving that value is the hardest evidence you will ever assemble.
So the practical question to sit with is not "is my NDA enforceable?" but "what will I do the day it is tested?" Draft the agreement so a court can enforce it, keep the evidence discipline in place, and take advice early. A conversation about your specific NDA, before you need it, is inexpensive. The alternative, litigating after the client list has walked out the door, is not.