A US founder signs a one-page NDA with a contractor in Bengaluru. Six months later the contractor leaves to join a competitor and the founder believes proprietary go-to-market materials have walked with them. The NDA is governed by Delaware law with exclusive jurisdiction in the Delaware Chancery Court. The founder has no enforcement mechanism in India. Service of process from the US to India under the Hague Service Convention takes 6 to 9 months. The contractor never responds. The materials are now in the competitor’s hands. The NDA was technically enforceable. Practically it was useless.
NDAs are easy to sign and hard to enforce when the parties are in different jurisdictions. This guide walks through NDA enforceability in the US (including the DTSA whistleblower notice requirement), the UK (Trade Secrets Regulations 2018), India (Indian Contract Act Section 27), and the EU (Trade Secrets Directive 2016/943) with a side-by-side comparison and a working clause template.
United States
Baseline enforceability
NDAs are enforceable in every US state under contract law and, for trade secrets, under both state-law Uniform Trade Secrets Act adoptions and the federal Defend Trade Secrets Act of 2016 (18 USC 1831-1839). State laws vary on:
- Duration: Most states accept 2 to 5 years for commercial information and perpetual for trade secrets. California is stricter on post-employment restrictions.
- Definition of confidential information: Overly broad definitions (“any information disclosed by Discloser”) can be struck. Specific carve-outs (publicly known, independently developed, lawfully received from third parties, required by law) are standard.
- Non-competes: Several states (California, Colorado, Minnesota, Oklahoma, North Dakota) substantially restrict employee non-competes. The FTC’s 2024 non-compete rule remains in litigation as of 2026, so state law continues to control in most cases.
The DTSA whistleblower notice (18 USC 1833(b))
The Defend Trade Secrets Act of 2016 added a federal trade secret cause of action. It also added a whistleblower immunity that protects employees who disclose trade secrets to the government when reporting suspected violations of law.
Under 18 USC 1833(b)(3) (https://www.law.cornell.edu/uscode/text/18/1833):
An employer shall provide notice of the immunity set forth in this subsection in any contract or agreement with an employee that governs the use of a trade secret or other confidential information.
The DTSA defines “employee” to include contractors and consultants. If the notice is missing, the employer “may not be awarded exemplary damages or attorney fees” in a DTSA action against the employee.
Required notice text (or a cross-reference to a policy under 18 USC 1833(b)(3)(B)):
Notice of Immunity Under the Defend Trade Secrets Act. An individual shall not be held criminally or civilly liable under any Federal or State trade secret law for the disclosure of a trade secret that (i) is made in confidence to a Federal, State, or local government official, either directly or indirectly, or to an attorney, and solely for the purpose of reporting or investigating a suspected violation of law; or (ii) is made in a complaint or other document filed in a lawsuit or other proceeding, if such filing is made under seal. An individual who files a lawsuit for retaliation by an employer for reporting a suspected violation of law may disclose the trade secret to the attorney of the individual and use the trade secret information in the court proceeding, if the individual (A) files any document containing the trade secret under seal; and (B) does not disclose the trade secret, except pursuant to court order.
Include this in every NDA, employment agreement, contractor agreement, consulting agreement, and restrictive covenant signed with a worker in or for the US. The cost of inclusion is zero. The cost of omission is the loss of exemplary damages and attorney’s fees.
California specifics
California Business and Professions Code 16600 voids most post-employment non-competes (https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=BPC§ionNum=16600.). California Labor Code 432.5 prohibits employers from requiring employees to sign certain restrictive agreements. California Civil Code 3426 (the California Uniform Trade Secrets Act) does enforce trade secret protection. The pattern: trade secret NDAs survive, non-competes do not.
United Kingdom
Common law of confidence
The UK protects confidential information primarily through the common law of breach of confidence. The classic test (Coco v Clark 1969): (a) the information has the necessary quality of confidence, (b) it was imparted in circumstances importing an obligation of confidence, and (c) there has been unauthorized use to the detriment of the disclosing party.
Trade Secrets (Enforcement, etc.) Regulations 2018
The Trade Secrets (Enforcement, etc.) Regulations 2018 (SI 2018/597) implemented EU Directive 2016/943 in the UK (https://www.legislation.gov.uk/uksi/2018/597/contents/made). They added:
- A statutory definition of “trade secret” aligned with the Directive
- Specific remedies (injunctions, corrective measures, damages)
- A 6-year limitation period for trade secret claims
- Procedural safeguards for confidentiality during legal proceedings
Crucially, Regulation 3 states that the Regulations do not affect “other measures, procedures, and remedies available.” The common law of confidence sits on top. UK NDAs are therefore enforceable through both common law breach of confidence and the 2018 Regulations.
UK post-employment restrictions
UK courts treat post-employment confidentiality and non-compete obligations under the “restraint of trade” doctrine. The clause must protect a legitimate business interest, go no further than necessary, and be reasonable in scope and duration. 12 months post-termination is roughly the upper bound for non-compete clauses in commercial cases. NDAs (which restrain disclosure rather than employment) get more latitude and routinely run 3 to 5 years for commercial information and indefinitely for trade secrets.
UK and EU divergence after Brexit
The UK retained the Trade Secrets Regulations after Brexit but is no longer bound by future EU directive updates. The 2018 Regulations remain the current UK statutory framework. EU Directive amendments since 2020 do not automatically apply.
India
Section 27 of the Indian Contract Act 1872
Section 27 (https://indiankanoon.org/doc/1431516/) states:
Every agreement by which any one is restrained from exercising a lawful profession, trade or business of any kind, is to that extent void.
The exception is narrow: agreements not to carry on a business after the sale of goodwill are valid within reasonable limits.
NDA enforceability under Section 27
Indian courts have consistently held that NDAs and confidentiality clauses are not restraints on trade. They restrict the use or disclosure of specific information rather than the right to work in an industry. Leading cases:
- Niranjan Shankar Golikari v. Century Spinning (1967): Negative covenants operating during employment are not restraints on trade. Post-employment restraints generally are.
- Superintendence Company v. Krishan Murgai (1981): Post-employment non-competes are void under Section 27 except in goodwill sales.
- Diljeet Titus v. Alfred Adebare (2006): Post-employment confidentiality and IP obligations are enforceable when narrowly drafted to protect specific confidential information.
The working rule: NDAs covering trade secrets and proprietary information are enforceable in India both during and after the contractor engagement. Non-compete clauses are not enforceable post-termination.
Practical enforcement in India
Even where an NDA is enforceable, practical enforcement requires Indian court access. Provisions to add for Indian-counterparty NDAs:
- Indian governing law option for direct enforcement in Indian courts
- Singapore or London arbitration with Indian-counsel enforcement for neutral cross-border resolution
- Injunctive relief language to enable urgent relief under Order XXXIX of the Code of Civil Procedure
- Specific performance language because monetary damages are often inadequate for information leaks
For Indian contractor work specifically, the Contractor of Record product makes Omnivoo’s Indian entity the legal contracting party, which simplifies NDA enforcement under Indian law.
European Union
Directive 2016/943 on the Protection of Trade Secrets
Directive (EU) 2016/943 of 8 June 2016 harmonized minimum trade secret protection across all EU member states (https://eur-lex.europa.eu/eli/dir/2016/943/oj/eng). Member states had to transpose it by 9 June 2018. Key features:
- Common definition of trade secret: Information that is secret, has commercial value because it is secret, and has been subject to reasonable steps to keep it secret
- Common remedies: Injunctions, corrective measures, damages, and publication of decisions
- Common defenses: Whistleblower protection for disclosures in the public interest, lawful reverse engineering, exercise of freedom of expression
- Procedural safeguards for confidentiality during legal proceedings
The Directive is a floor, not a ceiling. Member states can offer stronger protection. Germany’s Geschaftsgeheimnisgesetz (transposing the Directive) added country-specific provisions on reasonable secrecy steps.
Member-state variations
- France: Code de commerce L151-1 to L154-1 transposed the Directive. France retains strong moral rights and worker protections under separate provisions of the Code du travail.
- Germany: The Geschaftsgeheimnisgesetz (GeschGehG) is the implementing statute. German courts have ruled that the “reasonable steps” requirement is strict and that simply marking documents confidential is not enough.
- Spain: The Ley de Secretos Empresariales transposed the Directive in 2019.
- Italy: The Codice della Proprieta Industriale was amended to align with the Directive.
For a cross-EU NDA, drafting to the Directive’s standards plus the strictest member-state’s “reasonable steps” requirement (Germany) provides robust coverage.
Comparison table
| Element | US (DTSA) | UK | India | EU (Directive) |
|---|---|---|---|---|
| Statutory basis | 18 USC 1831-1839, state UTSA | SI 2018/597 plus common law | Indian Contract Act 1872 Section 27 (preserves NDA), state-law claims for confidence | Directive 2016/943 plus member-state transposition |
| Definition of trade secret | UTSA definition (secret, value, reasonable efforts) | TRIPS-aligned definition in Regulations | Common law (no statutory definition) | Directive definition (secret, value, reasonable steps) |
| NDA duration | 2-5 years commercial, perpetual for trade secret | 2-5 years commercial, perpetual for trade secret | Term plus perpetual for trade secrets, post-employment non-competes void | 2-5 years commercial, perpetual for trade secret |
| Required notice | DTSA whistleblower notice (18 USC 1833(b)(3)) | None specified | None specified | None specified |
| Whistleblower carve-out | Yes, under DTSA | Yes, common law and case law | Yes, narrow (public interest) | Yes, under Directive Article 5 |
| Limitation period | 3 years (DTSA), state UTSA varies | 6 years from discovery | 3 years generally | Member-state law (typically 3-6 years) |
| Injunctive relief | Yes | Yes | Yes (Order XXXIX CPC) | Yes (Directive Article 12) |
| Forum recommendation | Federal court for DTSA claims | English courts for breach of confidence | Indian courts or Singapore arbitration | Member-state courts |
| Cross-border challenge | Enforcement abroad needs treaty | EU enforcement via 2007 Hague Convention | Service via Hague Service Convention is slow | Recognition under Brussels Recast for EU judgments |
Cross-jurisdictional NDA template
A clause set that holds across all four jurisdictions:
Confidential Information. Means all non-public information disclosed to Receiving Party in connection with the Services, marked confidential or reasonably understood as such. Excludes information that (a) is or becomes publicly known through no breach, (b) was lawfully known before disclosure, (c) is independently developed without use of Confidential Information, or (d) is lawfully received from a third party without confidentiality obligations.
Trade Secrets. Confidential Information that constitutes a trade secret under applicable law (including 18 USC 1839, the UK Trade Secrets (Enforcement, etc.) Regulations 2018, and Directive (EU) 2016/943) is protected for so long as it retains its trade secret character.
Obligations. Receiving Party shall use Confidential Information only for the Services, protect it with reasonable care, not disclose it without written consent, and limit access to personnel bound by confidentiality at least as protective as this Agreement.
Duration. Obligations continue for 5 years after termination for ordinary Confidential Information and indefinitely for Trade Secrets so long as the information retains its character.
Notice of Immunity. [Insert the 18 USC 1833(b) notice quoted above.]
Equitable Relief. Breach may cause irreparable harm. Disclosing Party may seek injunctive relief in addition to other remedies, without posting bond where permitted by law.
Governing Law and Forum. Governed by [England and Wales / Delaware / India]. Parties submit to [English courts / Delaware Chancery Court / SIAC in Singapore].
This template defines confidential information with carve-outs, layers trade secret protection, sets a tiered duration (5 years commercial, indefinite for trade secrets), includes the DTSA notice, preserves equitable relief, and leaves the law and forum choice flexible.
How Omnivoo handles NDA enforceability
Omnivoo’s Contract Management product ships NDAs with the cross-jurisdictional clause set above, including the DTSA whistleblower notice baked in for US contractors, a tiered duration structure, and a forum selection block tailored to the contractor’s jurisdiction. For Indian contractor relationships, the Contractor of Record product positions Omnivoo’s Indian entity as the legal contracting party so enforcement happens within India’s jurisdiction without cross-border service of process.
For broader contract structure where the NDA attaches, see drafting a SOW for US companies hiring global contractors. For IP assignment language that complements the NDA, see contractor IP assignment across US, India, and EU. The Contract Management product handles NDAs, MSAs, SOWs, and DPAs in a single workflow.
Drafting checklist
- Is confidential information defined with the four standard carve-outs (publicly known, prior knowledge, independent development, third-party disclosure)
- Are trade secrets called out separately and protected indefinitely
- Is the duration tiered (5 years commercial, indefinite for trade secrets)
- Is the DTSA whistleblower notice included for any US-touching NDA
- Are equitable relief and specific performance preserved
- Is the governing law and forum chosen with enforcement in mind
- Does the forum choice match the location where breach is most likely to happen
- Is permitted disclosure for legal compliance included with a notice-back obligation
If you remember three things
- The DTSA whistleblower notice under 18 USC 1833(b)(3) costs nothing to include and saves exemplary damages if you ever litigate. Always include it.
- India enforces NDAs but not post-employment non-competes. Section 27 of the Contract Act 1872 is unambiguous on this. Draft separately and do not bundle.
- Forum choice does more work than substance. A perfectly drafted NDA enforced in the wrong forum is unenforceable in practice. Pick a forum the parties can actually use.
NDAs are the most-signed and least-read documents in startup hiring. The clause set above is the floor for cross-border contractor work. The forum choice is the ceiling.