In business and in law, information is often the most valuable asset in the room. A single pricing model, product roadmap, customer list, invention sketch, or negotiation strategy can be the difference between winning and losing a deal. That is why an NDA (non-disclosure agreement) remains one of the most practical legal tools in South Africa, for businesses of all sizes.
This guide explains what an NDA is, the purpose of an NDA, how NDAs work under South African law, where they are commonly used, what should be in a strong NDA, and how to avoid the common pitfalls that make an NDA difficult to enforce.
What is an NDA?
An NDA (non-disclosure agreement) is a contract in which one party agrees to keep certain information confidential and to use it only for a defined purpose. It is sometimes called a confidentiality agreement.
An NDA can be:
- Unilateral: One party discloses information and the other must keep it confidential (common when a business shares details with a potential employee, contractor, supplier, or investor).
- Mutual: Both parties disclose information and both owe confidentiality obligations (common in partnerships, joint ventures, mergers and acquisitions, and co-development discussions).
The purpose of an NDA
The purpose of an NDA is to reduce risk when information must be shared to move a relationship forward. In practice, an NDA:
- Protects trade secrets and sensitive business information during discussions.
- Encourages open negotiations, because parties can speak freely with guardrails in place.
- Clarifies ownership and permitted use of data, documents, and intellectual property.
- Creates a basis for remedies if confidentiality is breached.
- Strengthens business value by showing that a company takes secrecy seriously, which can matter for investors, buyers, and insurers.
An NDA is not a substitute for good operational controls (like limited access, password protection, and data classification). It is the legal backstop that supports those controls.
The legal standing of an NDA in South Africa
In South Africa, an NDA is generally enforceable as a contract, provided it meets the normal requirements of a valid agreement. Courts typically look at whether the NDA is clear, lawful, and not contrary to public policy.
A few legal principles matter in the South African context:
Contract law basics apply
For an NDA to be enforceable, there should be clear agreement on key terms. Parties must know what information is protected, what they may do with it, and what happens if they breach it.
Reasonableness and public policy
Even where parties “agree to everything,” a term can be challenged if it is overbroad or unfair in a way that offends public policy. NDAs should protect legitimate interests, not operate as an abusive tool to silence people or restrict lawful conduct.
Confidentiality already exists in some relationships
In certain professional and employment relationships, confidentiality duties may exist even without an NDA. However, relying on implied duties can be risky. A written NDA is clear to all parties and easier to enforce.
NDAs must be drafted carefully where rights and reporting obligations exist
Certain disclosures can be legally required or protected, such as cooperating with lawful investigations, complying with subpoenas, reporting criminal conduct, or making protected disclosures. A well-drafted NDA anticipates these realities instead of pretending they do not exist.
Where NDAs are used in South Africa
An NDA is used wherever confidential information is shared. Common examples include:
Employment and contractors
Employers use NDAs to protect client relationships, internal processes, pricing, code, and strategy. Contractors often sign NDAs before receiving access to systems or sensitive documentation.
Startups and investors
Founders may use NDAs when pitching technology, sharing prototypes, or disclosing financials. In reality, many investors prefer to avoid strict NDAs early on, so startups should use NDAs strategically and focus on disclosing only what is necessary.
Mergers, acquisitions, and due diligence
Buyers and sellers exchange extensive confidential information. A strong mutual NDA sets the rules for sharing, storing, and returning that information.
Joint ventures and partnerships
When parties explore a collaboration, NDAs help protect each side’s know-how while allowing feasibility assessments, pricing modelling, or pilot work to proceed uninterrupted.
Suppliers and service providers
Businesses regularly share customer data, operational procedures, and system access with vendors. NDAs sit alongside data processing terms and security requirements.
Intellectual property and product development
NDAs are common before filing patents, before launching products, and when engaging designers, developers, or research partners.
What a strong NDA should include
A good NDA is practical, specific, and enforceable. These are the building blocks that generally matter:
1) A clear definition of “Confidential Information”
Avoid vague wording like “everything we ever say.” Instead, define categories such as financial data, customer information, technical documents, software, business strategies, and non-public know-how.
Also consider whether information must be marked “confidential” to qualify, or whether it is confidential by nature. Overly strict marking rules can create loopholes.
2) Purpose limitation
State why the information is being shared and limit use to that purpose. This is one of the strongest protections in an NDA. It prevents the recipient from using the information to compete or to develop a rival product.
3) Exclusions
Most NDAs exclude information that is:
- Already public (not due to a breach).
- Already known to the recipient before disclosure.
- Independently developed without using the confidential information.
- Disclosed legally under compulsion (with notice where possible).
These exclusions reduce disputes and keep the NDA fair.
4) Handling and security requirements
A modern NDA should cover practical steps such as:
- Who may access the information internally.
- Minimum security measures (passwords, encryption, locked storage).
- Restrictions on copying, downloading, or forwarding.
- Rules for cloud storage and personal devices.
5) Duration
Many NDAs apply for a fixed term (for example, two to five years), with longer protection for trade secrets in some cases. The right duration depends on the type of information. A blanket “forever” clause can be challenged if it is unreasonable for ordinary business information.
6) Return or destruction of information
Include a clear obligation to return or delete information at the end of the relationship, and specify whether backups must be deleted. Consider requiring written confirmation of deletion.
7) Remedies and enforcement
NDAs typically provide for:
- Interdictory relief (urgent court orders to stop further disclosure).
- Damages for losses caused by the breach.
- Costs and legal fees provisions where appropriate.
Be careful with penalty clauses. They can be contested depending on how they are structured. A realistic remedy clause is often more persuasive than a threatening one.
8) Governing law and jurisdiction
For South African parties, specify South African law and appropriate courts. If the deal is cross-border, clarify jurisdiction to avoid later fights about where a dispute must be heard.
What an NDA cannot do
It is important to understand the limits of an NDA.
- It does not protect information that is truly public or easily obtainable through lawful means.
- It does not automatically create intellectual property ownership rights (unless the contract explicitly addresses IP).
- It cannot lawfully prevent certain required disclosures, such as compliance with subpoenas or lawful reporting obligations.
- It cannot rewrite reality if you have already disclosed the secret widely without controls.
Think of the NDA as a legal lock. If you leave the door open, the lock will not save you.
What happens if someone breaches an NDA?
If an NDA is breached, outcomes depend on the severity and whether the harm can be proven.
Common consequences include:
- A demand letter requiring the recipient to stop using or sharing the information and to return or delete it.
- An urgent interdict to prevent further disclosure or exploitation is often the most important remedy.
- Damages claims if financial loss can be shown (lost contracts, diminished value, remediation costs).
- Reputational harm and commercial fallout, especially where clients or regulators are involved.
- Employment discipline where the breach involves an employee, sometimes including dismissal.
In practice, speed matters. The longer a breach continues, the harder it becomes to contain the harm.
Conclusion
An NDA is one of the simplest, most effective legal tools for protecting business information in South Africa. Used correctly, it encourages candid collaboration while reducing the risk of misuse. The key is to draft the NDA with precision, link it to real-world security practices, and ensure the obligations are reasonable and enforceable. Whether you are hiring, partnering, pitching, or negotiating, a well-designed NDA helps you move forward with confidence.
If you want to understand how NDAs are positioned in South African law, the Gawie le Roux Institute of Law offers a law school that turns legal principles into clear understanding.
FAQs
What is NDA non-disclosure agreement?
An NDA (non-disclosure agreement) is a contract that requires a person or business to keep defined information confidential and to use it only for an agreed purpose.
Are NDAs enforceable in South Africa?
Yes, an NDA is generally enforceable as a contract, provided it is clear, lawful, and not contrary to public policy. Enforcement is strongest when the NDA is reasonable in scope and tied to a legitimate confidentiality interest.
What actually happens if you break an NDA?
Consequences can include a demand to stop the breach, an urgent court interdict to prevent further disclosure, claims for damages, and, in employment settings, disciplinary action up to dismissal. The goal is often containment first, compensation second.
What does an NDA not protect?
An NDA does not protect information that is already public, independently developed without using the confidential information, or lawfully obtained elsewhere. It also does not automatically assign intellectual property rights unless the agreement specifically deals with ownership and IP.
Last updated on 11 March 2026.