Lee Clark — Co-Founder & Business AttorneyDraws on 60+ years of combined firm experience guiding owners through contracts, deals, and disputes. About Lee →

Confidentiality agreements — NDAs — are among the most commonly used business contracts, protecting sensitive information shared with employees, contractors, partners, and prospects. But they’re also commonly drafted carelessly, and a vague or overbroad NDA may fail to protect you when it matters. An NDA that works requires clear, enforceable terms. This guide explains what makes confidentiality agreements effective. It is general information, not advice on a specific agreement.

We help businesses get this right from the start. This is general information, not advice on a specific situation.

An NDA gives false security if it’s too vague to enforce when someone leaks.

What an NDA protects

A confidentiality agreement, or NDA, is a contract in which one or more parties agree to protect and not disclose the confidential information they receive from another. NDAs are used across business — with employees, contractors, potential partners, and prospective buyers — to safeguard sensitive information like trade secrets, business plans, financials, and customer data. As the Legal Information Institute’s overview of a law.cornell.edu reflects, the agreement’s protections are defined by its terms. The purpose is to enable the sharing of sensitive information for a business purpose while legally binding the recipient to keep it confidential. But whether the NDA actually delivers that protection depends on how well it’s drafted.

The protection is in the drafting, not the title on the document.

Clearly define the confidential information

One of the most important — and most often botched — elements is defining what information is actually confidential. An NDA that’s vague about what it protects can be difficult to enforce, because it’s unclear what the recipient was obligated to protect. A good NDA defines the confidential information clearly enough that both parties understand what’s covered, whether through categories, marking requirements, or other means appropriate to the situation. Getting this definition right is central to an NDA that works — too vague and it may not protect anything reliably; well-defined and it gives clear, enforceable protection for the information that matters. This clarity is foundational.

Reasonable scope and key terms

An effective NDA also gets the scope and terms right. This includes a reasonable duration for the confidentiality obligation, appropriate permitted uses and exceptions (such as information that becomes public or was already known), the recipient’s obligations regarding the information, and what happens on termination or breach. Overbroad terms — protecting too much for too long, or imposing unreasonable obligations — can undermine enforceability, while missing terms leave gaps. As a law.cornell.edu of a well-drafted NDA gives the disclosing party recourse, the terms need to be both reasonable and complete. Balancing strong protection with reasonable, enforceable terms is what makes an NDA practical and effective rather than merely impressive-looking.

Making the NDA effective

To create an NDA that works: clearly define the confidential information, set a reasonable scope and duration, include the key terms and appropriate exceptions, and ensure the obligations are enforceable and practical. For NDAs protecting genuinely important information, having the agreement drafted or reviewed helps ensure it will actually hold up when needed rather than giving false security. Because NDAs are so widely used and their protection depends entirely on their drafting, using a well-crafted agreement — rather than a generic template of uncertain quality — is a worthwhile step when protecting sensitive information. A properly drafted NDA is a genuine safeguard; a careless one is a false comfort.

A simple plan to get a legal partner in your corner

A short conversation early helps you make the right call and keep moving with confidence.

The engagement at a glance

A three-step path from first call to ongoing protection.

Frequently asked questions