Confidentiality Clause Explained: What It Is & How It Works (2026 Guide)

What Is a Confidentiality Clause in a Contract?

A confidentiality clause is a provision inside a broader contract that legally obligates one or both parties to keep specific information private and not disclose it to third parties without consent. It defines what counts as confidential, restricts how the information may be used, sets a time limit on the obligation, lists standard exceptions, and specifies the remedies available if the clause is broken. Confidentiality clauses appear in employment agreements, services contracts, partnership deals, supplier agreements, and merger documents — anywhere sensitive information changes hands as part of a working relationship.

Key takeaways

• A confidentiality clause is a single provision embedded inside a larger contract; a standalone NDA is a separate document dedicated entirely to confidentiality — both protect the same types of information.
• Every enforceable confidentiality clause must define the protected information, set a purpose limitation, specify duration, and include standard carve-outs for publicly available or independently developed information.
• Courts assess reasonableness: vague definitions, perpetual terms on non-trade-secret data, or clauses that amount to de facto non-competes risk being partially or fully invalidated.
• Trade secrets can be protected indefinitely; non-trade-secret confidential information is typically restricted for two to five years post-termination.
• Breach remedies include injunctive relief, monetary damages, and liquidated damages — but once information is publicly disclosed, it generally cannot be "un-disclosed."

Confidentiality Clause vs. NDA: What's the Difference?

The terms are used interchangeably in casual conversation, but there is a meaningful structural difference worth understanding before you decide which form to use.

A non-disclosure agreement (NDA) is a standalone contract focused entirely on confidentiality. It outlines what information must be kept private, who is bound, the duration of the obligation, and any exceptions. NDAs are commonly used before formal business relationships begin — during negotiations, due diligence, or early project discussions — precisely because no larger contract yet exists to embed a clause into.

A confidentiality clause is a provision within a larger contract, such as an employment agreement, services contract, or partnership deal. It is not a separate document, but it creates a binding obligation to keep certain information private and outlines what information is protected, who is responsible for keeping it confidential, and how long the obligation lasts.

Feature	Confidentiality Clause	Standalone NDA
Form	Single provision inside a larger contract	Separate, self-contained agreement
When used	During an active relationship (employment, services, M&A)	Before or at the start of a relationship (early negotiations, due diligence)
Typical direction	Mutual or unilateral depending on the deal	Often unilateral (one-way), but can be mutual
Scope	Usually narrower; tailored to the specific deal	Often broader; covers all disclosures between parties
Survival	Governed by a survival clause in the larger contract	Stated explicitly in the NDA itself
Common context	Employment agreements, services contracts, vendor deals, M&A	Pre-deal conversations, investor pitches, contractor onboarding

In practice, a mutual NDA and a mutual confidentiality clause embedded in a services contract serve the same function. Courts interpret the substance of the clauses, not the name on the document. For a deeper look at this comparison, see confidentiality vs. NDA: what's the actual difference and our full explainer on what an NDA is.

What a Confidentiality Clause Covers

Confidentiality clauses can appear in virtually any contract where sensitive information is exchanged. Common types of protected information include:

• Trade secrets — formulas, algorithms, software source code, manufacturing processes
• Business plans and financial data — projections, pricing models, budgets, revenue figures
• Client and customer lists — contact details, purchase history, relationship records
• Proprietary methodologies — internal processes, research, frameworks, and know-how
• Personnel information — compensation structures, performance data, HR records
• Deal terms — the existence and contents of the contract itself

Under the federal Defend Trade Secrets Act (DTSA), 18 U.S.C. § 1836 (enacted 2016), a trade secret must be information that derives economic value from not being generally known, and the owner must have taken reasonable measures to maintain its secrecy. The DTSA created a private right of action allowing companies to sue for misappropriation in federal court, with criminal penalties for theft up to $5 million or three times the value of the stolen secret, whichever is greater.

Most U.S. states also have their own trade secret statutes, many modeled on the Uniform Trade Secrets Act (UTSA). Massachusetts, for example, has adopted the UTSA, while New York recognizes trade secrets under common law and the New York General Business Law § 5-1701 et seq. State and federal law can both apply to a single dispute, so your confidentiality clause should reference applicable law explicitly.

The 7 Essential Elements of a Confidentiality Clause

A well-drafted clause addresses each of the following in plain language:

1. Definition of confidential information

Specify what data is protected — trade secrets, financial data, business plans, software code, or client lists — to avoid ambiguity. Broad catch-all definitions ("all information disclosed by either party") can be challenged by courts as unreasonably expansive. A reasonable approach: define confidential information specifically, then add a catch-all for information a reasonable person would recognise as confidential given the context.

2. Purpose limitation

State the one permitted use: "solely for evaluating [the specific engagement]." This prevents the receiving party from using protected data for any purpose beyond the relationship it was disclosed for.

3. Standard of care

Most clauses require the receiving party to protect disclosed information with "at least the same degree of care as it uses for its own confidential information, but no less than reasonable care." Courts treat this as a minimum floor.

4. Duration

Set a clear time limit. Commercial contracts commonly run two to five years after the relationship ends. Trade secrets are frequently protected "for as long as the information remains a trade secret" — meaning indefinitely unless it enters the public domain through no fault of the receiving party.

5. Standard exclusions (carve-outs)

Every enforceable confidentiality clause carves out at least four categories of information that should not be restricted:

Exclusion	What it means
Already public	Information already in the public domain at the time of disclosure
Later becomes public	Information that becomes public through no fault of the receiving party
Prior knowledge	Information the receiving party already knew before disclosure, evidenced by written records
Independent development	Information independently developed by the receiving party without reference to the protected data
Third-party disclosure	Information received from a third party who was not under a confidentiality obligation
Compelled by law	Information required to be disclosed by court order, subpoena, or regulatory authority — typically with a notice obligation to the disclosing party

6. Permitted disclosures

Define who inside the receiving party's organisation may access the information: typically employees and advisors with a "need to know" who are themselves bound by equivalent confidentiality obligations.

7. Remedies for breach

Include express acknowledgment that a breach may cause irreparable harm and that the disclosing party is entitled to seek injunctive relief without proving actual damages. Without this language, obtaining an emergency court order to stop further disclosure is significantly harder. Also consider liquidated damages — a pre-agreed monetary penalty — which is especially useful when actual losses would be difficult to quantify.

How to Add a Confidentiality Clause to Your Contract

The steps below apply whether you are drafting a new agreement from scratch or adding confidentiality terms to an existing template.

1. Identify what you actually need to protect. List specific categories — not "all information" — and assess whether any of it qualifies as a trade secret under the DTSA or your state's UTSA.
2. Choose the right form. If you are starting a new business relationship and no broader contract yet exists, a standalone NDA is usually the better tool. If you are already drafting a services agreement, employment contract, or partnership deal, embed the confidentiality terms as a dedicated section. See our guides on mutual NDAs and IP clauses in contracts for related considerations.
3. Draft the definition precisely. Name the categories of protected information explicitly. If oral disclosures are included, require written confirmation within 10 to 15 business days.
4. Set the duration. Use a fixed post-termination period (two to five years is standard for non-trade-secret information). Add a separate, indefinite term for anything that qualifies as a trade secret.
5. Include the four standard exclusions. Public domain, prior knowledge, independent development, and compelled disclosure. Add a notice-and-cooperation requirement for compelled disclosure — the receiving party must notify you before disclosing and cooperate in seeking a protective order.
6. Add a survival clause. State explicitly that the confidentiality obligations survive the termination or expiration of the broader contract.
7. Specify remedies. Include injunctive relief language, and consider liquidated damages if the nature of the information makes breach losses difficult to prove.
8. Generate a draft, then review it. You can create a services agreement with confidentiality terms or generate a mutual NDA using Pactlio, then have a licensed attorney review the output before signing. For a quick starting point, try the free NDA generator.

Jurisdiction Notes

Confidentiality clause law varies meaningfully across borders. Here is a snapshot of key differences:

Jurisdiction	Key rules
United States (federal)	Defend Trade Secrets Act (DTSA), 18 U.S.C. § 1836 — federal civil and criminal remedy; three-year statute of limitations
United States (California)	California Bus. & Prof. Code § 16600 limits non-competes; courts may invalidate confidentiality clauses that function as de facto non-competes by restricting general skills and knowledge
United Kingdom	Common law protection for confidential information; post-employment clauses must be reasonable in scope and duration; Parliament passed legislation in 2025 banning confidentiality clauses in settlement agreements that silence allegations of harassment or discrimination
European Union	EU Trade Secrets Directive (2016/943) harmonises protection across member states; GDPR (Regulation 2016/679) applies where confidential information includes personal data — see also our DPA and GDPR guide
Canada	Common law applies in all provinces; Ontario and most provinces follow an implied duty of good faith; Quebec has a civil law framework with distinct confidentiality rules
India	No single trade secrets statute; protection flows from contract law (Indian Contract Act, 1872) and common law principles of breach of confidence

For more detail on how contract law principles apply in specific countries, see our guides on contract law in the UK and contract law in Canada.

Common Mistakes to Avoid

• Defining "confidential information" too broadly. A clause that sweeps in all information ever shared — including information that was already public — invites courts to narrow or void the whole provision. Be specific.
• Forgetting oral disclosures. If your business shares sensitive details in meetings or calls, your clause needs to cover oral disclosures, typically with a written-confirmation requirement within a defined window.
• Omitting the survival clause. Without explicit survival language, confidentiality obligations may lapse when the contract ends, leaving your information unprotected at exactly the moment the relationship is most vulnerable.
• Setting an indefinite term on non-trade-secret data. Courts are more likely to enforce time-limited obligations. Reserve perpetual protection for information that genuinely qualifies as a trade secret under applicable law.
• Neglecting the compelled-disclosure procedure. If a regulator or court compels disclosure, your clause should require the receiving party to give you prompt notice (where legally permitted) and cooperate in seeking a protective order.
• Accepting a residuals clause without limits. A residuals clause allows a receiving party to use any information retained in "unaided memory." If you must accept one, carve out trade secrets, source code, customer data, and financial information explicitly.

Sources

• Defend Trade Secrets Act of 2016, Pub. L. 114-153, 18 U.S.C. § 1836: https://www.govinfo.gov/content/pkg/PLAW-114publ153/html/PLAW-114publ153.htm
• EU Trade Secrets Directive 2016/943: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016L0943
• WIPO Guide to Trade Secrets and Innovation, Part III: https://www.wipo.int/web-publications/wipo-guide-to-trade-secrets-and-innovation/en/part-iii-basics-of-trade-secret-protection.html
• Thomson Reuters Practical Law — Confidentiality and Nondisclosure Agreements: https://legal.thomsonreuters.com/en/insights/articles/confidentiality-agreements
• UpCounsel — Understanding a Confidentiality Clause in Contracts: https://www.upcounsel.com/confidentiality-clause
• Ironclad — The Confidentiality Clause: Essential Guidelines: https://ironcladapp.com/journal/contracts/confidentiality-clause
• Sirion — The Essential Guide to Creating Confidentiality and Non-Disclosure Clauses: https://www.sirion.ai/library/contract-clauses/confidentiality-clauses/
• DLA Piper — Confidentiality and Non-Disclosure Agreements: https://www.dlapiper.com/en/insights/publications/2012/06/confidentiality-and-non-disclosure-agreements
• Ward and Smith — Trade Secret Protection in 2025: https://www.wardandsmith.com/articles/trade-secret-protection-in-2025-what-in-house-counsel-need-to-know
• New York General Business Law § 5-1701 (UTSA codification): https://www.nysenate.gov/legislation/laws/GBS/5-1701
• Wikipedia — Non-disclosure agreement: https://en.wikipedia.org/wiki/Non-disclosure_agreement

This article is general information, not legal advice. Laws vary by jurisdiction. Pactlio generates professional drafts for review — have a licensed attorney review anything important.