Confidentiality Agreement in California: Required Elements and Limits

A confidentiality agreement in California is enforceable only if it meets the four statutory elements of a valid contract, stays narrow enough not to function as a noncompete, and preserves an employee’s right to speak about unlawful workplace conduct. Federal law adds one more piece: any NDA that touches trade secrets has to carry a whistleblower immunity notice, or the employer loses access to enhanced damages if the agreement is ever breached.

The Four Elements Every California NDA Needs

California Civil Code Section 1550 sets the baseline for any contract: capacity, consent, a lawful purpose, and consideration.1California Legislative Information. California Civil Code 1550 For an NDA, that translates into four practical questions.

  • Capacity. Both parties must be legally able to contract. Minors and people declared mentally incapacitated generally cannot.
  • Consent. Both sides must agree voluntarily to the same terms. Agreements signed under threats, fraud, or duress can be voided.
  • Lawful purpose. The agreement cannot require an illegal act or violate California public policy. An NDA drafted to hide evidence of a crime fails this element.
  • Consideration. Something of value has to flow between the parties. In employment, the job offer or access to proprietary information usually suffices. Between two businesses, the mutual exchange of confidential data works.

Miss any one of these, and a California court can treat the whole agreement as voidable.

Defining What the Agreement Actually Protects

The definition of “Confidential Information” is where most NDAs succeed or fail. California courts look skeptically at catch-all definitions that sweep in everything a company produces. Naming specific categories — proprietary formulas, financial projections, customer data, unreleased product designs — reads as reasonable. A definition so broad that it covers anything an employee learned on the job reads as an attempt to lock them out of their industry.

Standard Carve-Outs

Well-drafted agreements exclude information the receiving party has no obligation to keep secret:

  • Information already public when disclosed
  • Information that later becomes public through no fault of the receiving party
  • Information the receiving party developed independently
  • Information received from a third party who had no confidentiality obligation

Without these carve-outs, a receiving party could face liability for information they legitimately obtained on their own, which courts view as unreasonable.

Trade Secrets Versus General Confidential Information

This distinction shapes what happens if the agreement is breached. Under the California Uniform Trade Secrets Act (CUTSA), a trade secret is information that derives economic value from being kept secret and is the subject of reasonable efforts to maintain that secrecy.2California Legislative Information. California Civil Code 3426.1 – Trade Secret Definition A customer list built over years and kept under restricted access could qualify. A general company directory would not.

Trade secret status unlocks stronger remedies, including injunctive relief, damages for actual loss or unjust enrichment, and up to double damages for willful and malicious misappropriation.3California Legislative Information. California Civil Code 3426.3 – Damages for Misappropriation Information that is merely confidential is limited to contract-based remedies. Agreements that clearly flag which material is treated as a trade secret give both sides better footing later.

What a California NDA Cannot Restrict

California polices NDA scope more aggressively than most states, and some limits have no workaround. Provisions that cross these lines are simply void.

It Cannot Operate as a Noncompete

Business and Professions Code Section 16600 voids any contract that restrains someone from working in a lawful profession or business.4California Legislative Information. California Business and Professions Code 16600 An NDA that defines “confidential information” so broadly a former employee effectively cannot work for a competitor is a noncompete in disguise and will not be enforced.

The practical line: the agreement can protect specific proprietary information, but it cannot bar a former employee from using general skills, industry knowledge, or professional relationships built during the job. Section 16600.5 extends the rule to agreements signed outside California, voiding them once the employee works in the state.5California Legislative Information. California Business and Professions Code 16600.5 An employer that tries to enforce a void noncompete can face a private lawsuit for injunctive relief, actual damages, and attorney fees.

It Cannot Silence Employees About Unlawful Conduct

Two overlapping statutes bar NDAs from suppressing information about unlawful workplace behavior. Government Code Section 12964.5, amended by the Silenced No More Act (SB 331), covers employment separation and severance agreements. It makes it an unlawful employment practice to include any provision that prohibits disclosing information about unlawful workplace acts, including harassment, discrimination, and retaliation based on any protected characteristic.6California Legislative Information. California Government Code 12964.5

Any separation agreement that restricts an employee’s ability to discuss workplace conditions must state, in substance, that nothing in the agreement prevents the employee from disclosing information about unlawful acts in the workplace. Without that language, the restriction is void. The employer also has to give the employee at least five business days to consult an attorney before signing.

Code of Civil Procedure Section 1001 covers settlement agreements in lawsuits and administrative complaints. It voids confidentiality provisions that restrict disclosure of factual information related to claims of sexual assault, sexual harassment, or workplace harassment and discrimination entered on or after January 1, 2022.

Both statutes share the same carve-outs. The settlement amount itself can remain confidential. A claimant can request that their own identity and identifying facts be shielded, though not when a government agency is a party. And neither statute stops employers from protecting legitimate trade secrets or proprietary information unrelated to the unlawful conduct.

It Cannot Bar All Discussion of Working Conditions

Labor Code Section 232.5 prohibits employers from requiring employees to keep quiet about working conditions.7California Legislative Information. California Labor Code 232.5 An employer cannot make silence a condition of employment, require a waiver of the right, or retaliate against an employee who speaks up. An NDA purporting to bar all discussion of workplace conditions runs into this statute. Protecting trade secrets and proprietary information through separate, narrower provisions remains permitted.

Federal Requirements That Reach Into California

Two federal rules regularly get missed when California NDAs are drafted.

The DTSA Whistleblower Notice

The federal Defend Trade Secrets Act requires every employer to include a notice of whistleblower immunity in any contract governing the use of trade secrets or confidential information. The notice tells the employee that federal law protects them from liability for disclosing trade secrets to a government official or an attorney for the purpose of reporting a suspected legal violation.8Office of the Law Revision Counsel. 18 U.S. Code 1833 – Exceptions to Prohibitions

The requirement can be met either by including the full notice in the agreement or by referencing a company policy document describing the reporting policy for suspected violations. It applies to contracts entered into or updated after May 11, 2016, and “employee” includes contractors and consultants.

Skipping the notice has a concrete cost: the employer cannot recover exemplary damages (up to double the base award) or attorney fees in any federal trade secret misappropriation claim against that employee.9Office of the Law Revision Counsel. 18 U.S. Code 1836 – Civil Proceedings Trade secret litigation is expensive; forfeiting enhanced damages over a missing paragraph is a costly oversight.

The Tax Rule on Sexual Harassment Settlements

Under Section 162(q) of the Internal Revenue Code, a business cannot deduct any settlement payment related to sexual harassment or sexual abuse if the settlement is subject to a nondisclosure agreement. The rule also blocks the deduction of the business’s attorney fees tied to that settlement.10Internal Revenue Service. Section 162(q) FAQ The IRS has clarified the restriction applies to the payor, not the recipient: a person who receives a settlement payment can still deduct their own related attorney fees if otherwise eligible. Attaching an NDA to a sexual harassment settlement carries a real tax cost.

What Breach Actually Costs

Remedies depend on whether the leaked material qualifies as a trade secret or falls into general confidential information.

Trade Secret Misappropriation

Under CUTSA, a court can issue an injunction stopping further use or disclosure.11California Legislative Information. California Civil Code 3426.2 – Injunctive Relief The disclosing party can recover damages for actual losses plus any unjust enrichment the violating party gained. If neither is provable, the court can impose a reasonable royalty instead.3California Legislative Information. California Civil Code 3426.3 – Damages for Misappropriation Willful and malicious misappropriation opens the door to exemplary damages of up to twice the base award, and bad-faith claims or defenses can trigger attorney fees for the prevailing party.12California Legislative Information. California Civil Code 3426.4 – Attorney Fees

Contract-Based Claims

When the disclosed information does not rise to trade secret status, the claim is breach of contract. Remedies typically include monetary damages for provable financial losses and, in some cases, a court order to stop further disclosure. These claims can be easier to prove because the analysis stays close to the agreement’s language, but there is no statutory doubling of damages and no automatic attorney fees, which is why classifying protected information as a trade secret when the facts support it is worthwhile.

Provisions That Determine Whether the Agreement Holds Up

Duration and Survival

Every NDA should say how long the confidentiality obligations last. General confidential information typically carries a survival period of one to five years after the business relationship ends, depending on how quickly the material loses its competitive value. Trade secret protection can last indefinitely under both CUTSA and the agreement, as long as the information continues to meet the legal definition.2California Legislative Information. California Civil Code 3426.1 – Trade Secret Definition Leaving the duration blank invites a court to fill the gap, which rarely favors the disclosing party.

Return or Destruction of Materials

A strong NDA requires the receiving party to return or destroy all confidential materials when the agreement ends. Many go further and require written certification that all copies, notes, and derivative materials have been destroyed. The clause creates a clean obligation and a paper trail, which matters if the receiving party keeps using the information later.

Severability

California courts sometimes strike individual provisions and leave the rest intact. A severability clause tells the court to do exactly that rather than voiding the whole agreement. Given how aggressively California polices overbroad restrictions, this clause is not optional.

Governing Law and Jurisdiction

An NDA involving California parties or California-based work should designate California law. Trying to route around California’s rules by choosing another state’s law will not work: Section 16600.5 voids a noncompete clause regardless of where the agreement was signed if the employee works in California.5California Legislative Information. California Business and Professions Code 16600.5 The public policy protections travel with the employee.