What Happens When Someone Breaks an NDA: Enforcement, Damages, and When They Fail

Signing an NDA creates legal obligations that can follow a person for years. Breaking one creates exposure to lawsuits, injunctions, and potentially large damage awards. But NDAs vary enormously in how they are written and courts scrutinize them carefully. Understanding what actually happens when an NDA is violated, and what limits exist on enforcement, matters whether you are the one enforcing it or the one who may have crossed a line.

What Has to Be Proven to Win an NDA Case

Winning an NDA breach case requires proving four elements. First, a valid and enforceable NDA exists. Second, the information in question actually qualifies as confidential under the agreement. Third, the defendant disclosed or used that information in a way the NDA prohibits. Fourth, the breach caused damages or the disclosure creates a risk of irreparable harm that warrants an injunction.

Each element can be contested. The validity of the NDA itself comes under attack if consideration was inadequate, if the agreement was signed under duress, or if the terms are so broad that courts in the applicable jurisdiction refuse to enforce them. Whether information is actually confidential is disputed in cases where the allegedly secret information was already publicly available or widely known in the industry. Proving the defendant actually disclosed the specific information rather than developing it independently requires evidence of the breach, which can be difficult to obtain in cases where the disclosure happened privately.

Injunctive Relief: Stopping the Damage Before Trial

In most NDA breach situations, the most urgent remedy is stopping the continued disclosure, not recovering money for past harm. The law provides injunctive relief for exactly this situation. A preliminary injunction is a court order requiring the defendant to stop the offending behavior while the case proceeds to trial.

To get a preliminary injunction in an NDA case, the plaintiff must show a likelihood of success on the merits, meaning the court thinks they will probably win at trial, that they will suffer irreparable harm without the injunction that cannot be adequately compensated with money, that the balance of hardships tips in their favor, and that the public interest would not be disserved by the injunction.

Courts grant preliminary injunctions in NDA cases relatively readily when the confidential information has genuine value, the disclosure is ongoing, and the harm cannot be undone after the fact. Trade secrets, customer lists, proprietary technology, and strategic business information are the categories most likely to support emergency injunctive relief.

Monetary Damages in NDA Breach Cases

After stopping the disclosure, the injured party typically seeks money damages. These can include actual damages reflecting the concrete financial harm from the breach such as lost sales, lost business value, or the cost of re-securing compromised systems, disgorgement of any profits the defendant made by misusing the confidential information, and in some cases punitive damages when the breach was willful and egregious.

Proving actual damages in NDA cases can be challenging. If a former employee takes a customer list and goes to work for a competitor, the damages from lost customer relationships may be real but difficult to quantify precisely. Courts use a variety of methodologies including the value of the misappropriated information itself, the cost to replicate it, and expert testimony on the commercial value of the disclosed trade secrets.

Liquidated Damages Clauses

Many commercial NDAs include liquidated damages clauses that pre-specify a dollar amount the breaching party will owe for each violation. These clauses avoid the need to prove and quantify actual damages and provide immediate certainty about consequences. For the NDA to be enforceable, the liquidated damages amount must represent a reasonable pre-breach estimate of actual damages, not a penalty. Courts in most states will not enforce liquidated damages provisions they find to be punitive rather than compensatory.

California takes a particularly strict position. California Civil Code Section 1671 makes liquidated damages presumptively valid in commercial contracts but presumptively invalid in consumer contracts. Courts still look at whether the amount bears a reasonable relationship to the anticipated harm. A liquidated damages clause of $500,000 for disclosing a two-year-old business plan that is no longer being pursued faces serious enforceability questions even in states that favor these clauses.

When NDAs Are Unenforceable

Courts will not enforce NDAs that are too broad to be reasonable. An NDA that purports to make everything an employee learned during their employment permanently confidential, including general skills and industry knowledge, is almost certainly unenforceable because it would effectively prevent the person from working in their field. Courts distinguish between protecting genuine trade secrets and proprietary information on one hand and trying to monopolize an employee's entire professional expertise on the other.

NDAs cannot be used to prohibit legally protected disclosures. An employee who witnesses workplace safety violations cannot be silenced from reporting them to OSHA by an NDA. An employee who experiences sexual harassment or discrimination cannot be prohibited from reporting it to the EEOC by an NDA. Whistleblowers who report fraud against the federal government through False Claims Act proceedings are protected from NDA enforcement by specific statute.

The Speak Out Act, signed into federal law in 2022, limits the enforceability of pre-dispute NDAs in cases involving sexual harassment and sexual assault. Employers cannot use NDAs signed before an incident to prevent employees from discussing the incident publicly. This law does not affect NDAs signed after an incident as part of a settlement, only those signed before as a condition of employment or a business relationship.

Employment NDAs and Trade Secret Protection

The Defend Trade Secrets Act of 2016 created a federal cause of action for trade secret misappropriation that runs parallel to state trade secret laws in all 50 states. This means a company whose confidential information is stolen or disclosed can sue in federal court under federal law, often a faster and more powerful forum than state court for complex commercial cases.

Under the DTSA, the company must have taken reasonable measures to keep the information secret and the information must derive independent economic value from not being generally known. Companies that do not actually treat their information as confidential, that share it freely with employees without any access controls or confidentiality training, and that do not have written confidentiality policies face challenges proving trade secret status even when they have NDAs in place.

What to Do If Your NDA Is Being Violated

If you believe someone is violating an NDA, document the breach as specifically as possible before taking any action. Note what information was disclosed, when, to whom, in what context, and what harm has resulted or is threatened. This documentation becomes the foundation of any legal action.

A cease and desist letter is usually the first formal step. This puts the breaching party on notice, creates a paper trail, and sometimes resolves the situation without litigation. Many NDA breaches stop when the breaching party receives a serious legal letter making clear that litigation is the alternative.

When the breach is ongoing and causing irreparable harm, moving directly to a lawsuit seeking emergency injunctive relief may be necessary. Courts can grant temporary restraining orders on an emergency basis when the harm is immediate and the need for relief is clear. Moving quickly is critical because delay in seeking emergency relief can suggest to a court that the harm is not actually urgent.