Almost every serious business conversation in India today starts with an NDA — a founder pitching an investor, a company onboarding a vendor, an employer bringing on a new hire with access to client data. Yet India still doesn't have a dedicated law called the "NDA Act" or a standalone trade secrets statute. An NDA in India draws its enforceability entirely from contract law, common-law principles of confidence, and — increasingly — India's new data protection framework.
At LegalDev, we draft NDAs tailored to the actual relationship and information at stake — whether that's an investor conversation, a vendor engagement, or an employment relationship — and advise on the stamp duty and execution formalities that apply in your state.
A Non-Disclosure Agreement is a contract between two or more parties in which one or both agree not to disclose specified confidential information to anyone outside the agreement, except as permitted by its terms. It's used whenever sensitive information — a business plan, source code, customer data, pricing, a manufacturing process, or merger discussions — needs to move between parties who aren't yet bound by any other relationship of trust.
Legally, an NDA doesn't create a new category of right. It's simply a contract, governed by the same rules of offer, acceptance, consideration, and capacity that apply to any agreement under the Indian Contract Act, 1872. What makes it work in practice is precise drafting — a vague NDA that doesn't clearly define what's confidential is difficult to enforce, no matter how serious the intent behind it.
Businesses that regularly handle sensitive information — client data, product roadmaps, pricing models, or proprietary processes — use NDAs to create a clear, provable obligation of confidentiality before that information changes hands. Without one, a business relying purely on an informal understanding has a much harder time proving in court that the other side owed any duty of confidence at all, or what exactly they agreed to keep quiet.
Typical situations where an NDA is used in India include:
Yes, and this is worth explaining clearly because it's often confused with a related but different question — whether a non-compete clause is enforceable.
An NDA is enforced under the general principles of the Indian Contract Act, 1872, like any other agreement, provided it has the usual ingredients of a valid contract: competent parties, free consent, lawful consideration, and a lawful object.
The clause people most often worry about is Section 27 of the Contract Act, which voids any agreement that restrains a person from exercising a lawful profession, trade, or business. This is why non-compete clauses in India are notoriously hard to enforce, especially against former employees. Confidentiality obligations, however, are treated differently by Indian courts — an NDA doesn't stop someone from working in their field or industry; it only restricts them from using or disclosing specific information they were given in confidence. Courts have consistently distinguished this from a restraint on trade, which is why well-drafted confidentiality clauses generally survive scrutiny under Section 27 even when a non-compete clause in the same document might not.
Stamp duty on agreements is a state subject in India, so the exact duty payable on an NDA depends on where it's executed and how the relevant state's Stamp Act classifies it — most states treat a standalone confidentiality agreement as a general agreement, attracting a modest, fixed stamp duty rather than an ad valorem (value-based) one. Many states now allow e-stamping through authorised centres or portals, which is faster than buying physical stamp paper and easier to verify later.
An unstamped or insufficiently stamped agreement isn't necessarily void, but it can face admissibility problems if it's ever produced as evidence in court — the relevant Stamp Act typically allows the document to be impounded and the deficient duty (plus penalty) paid before it can be relied upon. It's a fixable problem, but one that's far easier to avoid at signing than to correct later during a dispute.
Many commercial NDAs include an arbitration clause for resolving disputes. If your NDA does, there's a specific point worth knowing: in December 2023, a seven-judge Constitution Bench of the Supreme Court settled a long-running question on this exact issue, holding that an agreement containing an arbitration clause is not rendered void merely because it's unstamped or insufficiently stamped. Courts can — and are required to — impound the document and direct payment of the deficient stamp duty, rather than refusing to send the dispute to arbitration altogether. In practice, this means a stamping defect is a curable procedural issue rather than a reason the arbitration clause itself fails, though paying the correct duty at signing remains the simpler path.
Breach of an NDA is, first and foremost, a civil matter. The disclosing party can seek:
A common misconception is that breaching an NDA automatically exposes someone to criminal prosecution. That's not quite right. Criminal liability requires the facts to independently satisfy the ingredients of a specific criminal offence — it isn't triggered by the NDA itself. The two provisions most often relevant are:
In most commercial disputes, the civil route through the NDA itself remains the primary and more practical remedy.
This is one of the more significant recent developments affecting how NDAs should be drafted in India, and it's still actively unfolding.
The Digital Personal Data Protection (DPDP) Act, 2023 received presidential assent in August 2023, but sat largely dormant until the DPDP Rules were notified on 13 November 2025, which activated the law on a phased, 18-month timeline:
As of today, we're in the "build" phase of that timeline. If your NDA covers the sharing of personal data — employee records, customer lists, user data shared for due diligence, or any information that identifies an individual — it's worth adding a clause that references DPDP compliance obligations directly: how personal data within the confidential information will be processed, who's responsible for breach notification if something goes wrong, and what happens to that data once the NDA's purpose is complete. Older NDA templates that only address "confidential information" broadly, without a specific nod to personal data handling, are increasingly out of step with where Indian data protection law is headed.
Not yet, as of 2026. Unlike jurisdictions such as the US or the EU, India protects trade secrets through a patchwork of contract law (NDAs and confidentiality clauses), the equitable doctrine of breach of confidence, and limited criminal provisions — not a dedicated statute.
The 22nd Law Commission of India, in its 289th Report (March 2024), recommended a dedicated law and annexed a draft Protection of Trade Secrets Bill, 2024 to it — proposing civil remedies through commercial courts, a TRIPS-aligned definition of "trade secret," and specific carve-outs for whistleblower disclosures and information an employee gains through general skill and experience. As of now, this remains a Law Commission recommendation, not enacted legislation — it hasn't been introduced or passed in Parliament. Until that changes, a carefully drafted NDA remains the single most important legal tool available to an Indian business for protecting confidential and proprietary information.
Electronically signed NDAs are legally valid in India under Section 10A of the Information Technology Act, 2000, which recognises contracts formed through electronic means, including electronic signatures, as enforceable — provided the underlying agreement itself satisfies the usual requirements of a valid contract. For higher-value or higher-risk agreements, using a proper electronic signature method (such as an Aadhaar-based e-sign or a Digital Signature Certificate) rather than a simple scanned signature adds a stronger evidentiary trail if the agreement's authenticity is ever challenged.
There's no single fixed rule — the appropriate duration depends on the nature of the information and the relationship:
The right approach is to match the term to how long the information actually needs protecting, rather than defaulting to a fixed number out of habit.
A template downloaded off the internet rarely accounts for the specifics that make an NDA actually enforceable — a properly scoped definition of confidential information, the right structure for your situation (unilateral, mutual, or multilateral), a data-protection clause that reflects where DPDP compliance currently stands, and language that will hold up if it's ever tested in court or arbitration. Our team at LegalDev drafts NDAs tailored to the actual relationship and information at stake, whether that's an investor conversation, a vendor engagement, or an employment relationship, and advises on the stamp duty and execution formalities that apply in your state.
Talk to our team about drafting your NDA, or get a free consultation to discuss what your specific situation needs.
A Non-Disclosure Agreement is a contract in which one or more parties agree not to disclose specified confidential information shared between them, except as the agreement permits. In India, it's enforced under the general contract law framework of the Indian Contract Act, 1872, rather than any dedicated NDA-specific statute.
Any business or individual sharing sensitive information — trade secrets, client data, financial details, product plans, or proprietary processes — with someone outside a relationship of established trust. This commonly includes startups talking to investors, companies engaging vendors or contractors, and employers onboarding staff with access to confidential systems or data.
At minimum: a clear definition of confidential information, identification of the parties and whether obligations are one-way or mutual, the permitted purpose of disclosure, standard exclusions (public information, independently developed information, legally compelled disclosure), the term and survival of the confidentiality obligation, and provisions on remedies and dispute resolution.
It depends on the information involved — general business NDAs commonly run 1 to 5 years, while agreements protecting genuine trade secrets or proprietary technical information are often drafted with no fixed expiry, since that information can remain sensitive indefinitely.
The disclosing party can pursue civil remedies — typically an injunction to stop further use or disclosure, and damages for losses caused by the breach. Criminal liability is possible in narrower circumstances involving genuine entrustment and dishonest misappropriation under Section 316 of the Bharatiya Nyaya Sanhita, 2023, but breach of an NDA by itself doesn't automatically trigger criminal prosecution.
Yes. Like any contract, an NDA can be amended if all parties agree to the changes in writing and sign the updated terms — an oral modification is far harder to prove and enforce later.
It's possible to draft a basic NDA without one, but professional drafting materially reduces the risk of vague or unenforceable clauses — particularly around the definition of confidential information, survival terms, and, increasingly, how personal data covered by the agreement is handled under the DPDP framework.
Not yet, as of 2026. Trade secrets are protected in India through NDAs, the common-law doctrine of breach of confidence, and limited criminal provisions. A draft Protection of Trade Secrets Bill, 2024 has been recommended by the Law Commission but has not been enacted by Parliament.
No, not automatically. It may face admissibility issues if produced in court, but most State Stamp Acts allow the document to be impounded and the deficient duty paid before it's relied upon. Where the NDA contains an arbitration clause, the Supreme Court has confirmed that an unstamped agreement doesn't prevent the dispute from going to arbitration — the stamping defect is treated as a curable procedural issue.