Non-Disclosure Agreements (NDAs) are a critical part of a technology company’s legal arsenal but are often relegated to a standard template without much thought.  Too often, I’ve seen NDAs sent by sophisticated companies that contain a number of pitfalls that often negate some of the protections that NDAs are relied upon for.  While there are numerous pitfalls to be watched for when drafting and reviewing NDAs, I wanted to highlight a few pitfalls that I frequently encounter that are often missed by both disclosing and receiving parties:

1.  Duration

While it may seem obvious it bears repeating: the duration of a NDA matters.  Often the NDAs I receive specify a relatively brief duration: usually between 2 and 5 years.  Problematically, after the time-period expires the protections provided by the NDA lapse and the previously confidential information can be disclosed at will.  While you may not believe that confidential information would be valuable 5 years into the future, this could be a costly assumption – image if the Coca-Cola recipe was treated the same?

NDAs should specify a perpetual duration unless you have a specific reason for limiting the duration.  Regardless, if the NDA duration has a limit you should be very careful to disclose only information that you’re comfortable becoming public information in the future.

2.  Who Can be Disclosed to

I often encounter NDAs that classify the NDA itself as confidential information that can only be disclosed with permission from the other party.  While seemingly innocuous, this treatment of the NDA can become a massive headache when it comes time to sell your company or its technology.  For example, you could be prohibited from disclosing the mere existence of the NDA to the purchaser or its legal counsel.

NDAs should permit disclosure of the NDA itself to your professional service providers, third parties proposing to engage in transactions with your company and their professional service providers.

3.  Scope of Protection

Do not neglect the scope of the NDA’s protection.  Obviously the NDA should protect information physically disclosed or spoken to the other party but there may be certain things disclosed to the other party that don’t fall within the typical scope of “information”.  For example, you may want the NDA to protect things that are visually perceived by the other party when on-site or sounds heard by the other party (this could matter if the sound of a machine could be used to determine a key design feature).

Always consider what you are disclosing under the NDA and be sure that the scope of the NDA’s protection matches the scope of disclosure as well as inadvertent, passive, disclosures that may take place.

Ultimately, the pitfalls with a NDA, as with any legal document, originate from the treatment of the NDA as a standard templated agreement.  The NDA is a powerful document that should be carefully crafted to reflect your particular business needs and to avoid the above pitfalls.

I’m against the NDA.  This is common sentiment in the technology sector as well.  Before I dive into my issues with the NDA, let’s distinguish between types of NDA.

A Non-Disclosure Agreement is an agreement that requires a receiving party to not disclose or use certain information that the disclosing party wants to provide. Typically they are provided as a start to business negotiations or as part of a broader agreement.

I don’t take issue with NDAs that protect business information, such as financials, business plans or product launch plans or NDAs that are part of a broader agreement.

I do take issue with stand-alone NDAs that serve only to protect the “next great idea”. An idea (excluding patentable ideas) has no value; execution of an idea has value. Indeed, the same idea can be executed multiple ways with only a single approach achieving success.

Signing an NDA protecting an idea has the potential to limit your company’s own product development in the future as you will be restricted from “directly or indirectly” using the idea. Who is to say that you would not have arrived at the idea yourself, which is especially common in industries where most ideas are slight derivatives of what’s already out there, or what “indirect” use of an idea means. Further, imagine the challenge of creating a company-wide “ideas bank” where you place all ideas presented in NDAs and that you can never use.

A smart company will not use an NDA and, instead, will intelligently disclose the bare minimum level of information necessary for discussions to continue. These smart companies recognize that NDAs are hard to enforce as you face the burden of discovering an alleged breach and establishing that the breach actually involves information protected by the NDA. They also realize that NDAs tend to slow business negotiations.

Instead of the NDA, control what you say.  It’s far is far easier than trying to control what other people have already been told.