Having an NDA checked or dealing with a confidentiality breach: when do you need a lawyer?

1. Start with the information and the purpose of sharing

Before discussing a model contract, make an inventory of the information. What is needed to assess cooperation and what can wait? Separate, for example, overall turnover figures, individual customer data and a technical process. Describe why the recipient needs each category. That allows more focused advice than labelling every document confidential without distinction.

Ondernemersplein describes an NDA as a contract agreeing which information must not be passed on or made public. It also identifies purpose, permitted recipients and duration as matters to agree. Translate that into your workflow: which people get access, which files do they see and for what assessment may they use them?

2. Distinguish contractual confidentiality from a trade secret

Rijksoverheid lists three conditions for trade-secret protection: the information is secret, has commercial value because it is secret, and is kept secret through measures. A label on a document therefore does not automatically make every detail a protected trade secret. In a dispute, establish which information can be protected on which basis.

An NDA and statutory trade-secret protection thus provide different starting points. Keep both the contract and records of actual security and disclosure. Was some information already public? Did the recipient get only a selection or the entire file? Record the factual answer. A practical account of actual events helps more than a file describing everything indiscriminately as a trade secret.

3. Have scope, exceptions and permitted recipients assessed

When presented with an NDA, ask exactly who is bound and how protected information is defined. Read more than its title: use, sharing and return provisions may cover different acts. Say if accountants, financiers or other advisers need to inspect information. The agreement must be workable for those actually conducting the investigation.

Also discuss information already known, later made public or requiring disclosure on another basis. Ask how to document such circumstances. This page supplies no standard clause: suitable wording depends on the transaction and roles. Send your lawyer the entire document, including schedules and cross-references, so hidden restrictions are not left outside the assessment.

4. Match duration and consequences to the risk

Ondernemersplein explains that confidentiality duration depends on the information and agreements made. Sanctions should also fit the risks. Ask what the contract says about ending discussions, the period afterwards and consequences of breach. Stopping negotiations is not automatically the same as ending every obligation.

Is there a high penalty or an amount per breach or day? Ask which events the wording covers and how that relates to other requested measures. A penalty provision alone does not establish a breach in your situation. Before signing, clarify which obligations your organisation can meet operationally and who will be responsible.

5. Organise protection beyond the document

Official trade-secret guidance identifies security and confidentiality agreements as measures for keeping information secret. Turn that into suitable practice: limited access, a record of versions provided and a contact person for questions. Preserve those records carefully. The aim is to reconstruct afterwards which information reached which recipient.

Discuss with those responsible how access ends when discussions stop. Record what you ask the recipient to do and check that it matches the NDA. A request to destroy all information immediately may, for example, raise questions about evidence that should actually be retained. Have that tension assessed before issuing an irreversible instruction.

6. Act purposefully on a suspected breach

First record the facts of your discovery: which information, recipient, channel and time. Distinguish suspicion from confirmed disclosure. Ondernemersplein mentions collecting evidence and seeking legal assistance as steps after a breach. For protected trade secrets, official Wbb guidance mentions a court injunction and compensation among possible requested measures; conditions need assessment in each case.

Where disclosure is threatened, seek prompt advice on limiting harm and the desired action. Do not yourself circulate the disputed material widely to explain the problem. Also determine who investigates within your organisation and which other obligations need examining if personal data is involved. A contractual complaint, security incident and possible privacy obligation each require their own assessment.

7. Fictional example: confidential figures during an acquisition

Suppose an entrepreneur gives a prospective buyer access to a folder of monthly figures and price lists. The NDA states assessment of an acquisition as its purpose. After discussions break down, an internal price list appears in another company’s sales proposal. The entrepreneur wants to claim a penalty immediately. This example is fictional and says nothing about the outcome of a real case.

Initial preparation consists of the signed NDA, access log, relevant file version and proposal found later. Then investigate who could see the document and what actually matches. The lawyer can thus compare wording with facts. The mere observation that the acquisition did not proceed does not prove a confidentiality breach.

8. Checklist for your first lawyer consultation

On first contact, say whether you want advice before signing or information already risks leaking. That determines urgency and documents needed. Ask for a defined engagement to check the contract, respond to a claim or assess measures. Agree costs and when to expect initial feedback.

• The complete NDA with schedules, amendments and signatures.
• Description of the information, its value and known public parts.
• Overview of recipients, versions provided and agreed purpose of use.
• Access and security measures and available factual incident records.
• Your desired measure, concrete threat and any response or transaction deadline.