What is a non-disclosure agreement (NDA)?
Is a non-disclosure agreement enforceable in South Africa?
“It constitutes the delict of unlawful competition, as do the actions of first respondent, in that it has unlawfully made use of confidential information belonging to the applicant as a springboard in order to compete with it. In terms of the springboard doctrine, an interdict against the use of confidential information may be limited by the duration of the advantage obtained, or the time saved, by reason of having had access to the confidential information.”
“A court will use the power to invalidate a contract or not to enforce it, sparingly, and only in the clearest of cases in which harm to the public is substantially incontestable and does not depend on the idiosyncratic inferences of a few judicial minds … The protection of the sanctity of contracts is thus essential to the achievement of the constitutional vision of our society. Indeed, our constitutional project will be imperilled if courts denude the principle of pacta sunt servanda.”
“POPIA imposes statutory duties to keep personal information secure and confidential and to process it only for a lawful, defined purpose — duties that run alongside, and should be reflected in, any NDA covering personal information.”
When you need a Non-Disclosure
- Before sharing your business plan, financial model, customer list, pricing, source code, or formulations with a prospective investor, buyer, lender, supplier, or contractor during due diligence or a pitch.
- When two businesses begin discussing a joint venture, merger, acquisition, distribution deal, or technology collaboration and each side will see the other’s confidential information — a mutual NDA protects both ways.
- When engaging employees, freelancers, agencies, or independent contractors who will be exposed to trade secrets, know-how, or unpublished product information you need kept secret.
- When briefing a developer, manufacturer, or service provider on a new product, recipe, design, or process before any supply or development contract is signed.
- When disclosing personal information of clients, staff, or third parties, where POPIA already requires confidentiality and an NDA records and reinforces that duty for the recipient.
What a Non-Disclosure should contain
Definition of confidential information
Define precisely what is protected — e.g. information marked or identified as confidential, business and financial data, customer and pricing information, source code, and trade secrets. The definition must be specific enough to be certain, but not so sweeping that it captures information that is already public or trivial, which weakens enforceability.
Permitted purpose
State the single, defined purpose for which the information may be used — for example “to evaluate a possible investment” or “to provide development services”. Use outside that purpose is a breach. A tight purpose clause is what separates a real NDA from a clause a court treats as an open-ended restraint on the recipient’s freedom to trade.
Exclusions from confidentiality
Carve out information that is or becomes public through no fault of the recipient, was already lawfully known, is independently developed, or is received from a third party without breach. South African courts will not protect information already in the public domain, so these standard exclusions keep the NDA realistic and enforceable.
One-way vs mutual obligations
Make clear whether only the recipient is bound (unilateral) or both parties owe each other confidentiality (mutual). Get this wrong and a discloser who also reveals information can find their own material unprotected. Mutual NDAs suit two-way exploratory talks; one-way NDAs suit a single disclosing party.
Duration of the obligation
Set how long confidentiality lasts. A defined, reasonable period (often 2–5 years) is easiest to enforce; for genuine trade secrets the obligation can run for as long as the information stays secret. An indefinite, blanket duration over ordinary business information is more likely to be challenged as unreasonable.
Permitted disclosures and compelled disclosure
Allow disclosure to named representatives, advisers, or employees who need to know and are themselves bound to confidentiality, and provide for disclosure compelled by law, court order, or a regulator — with notice to the discloser where lawful — so the recipient is not forced to choose between breaching the NDA and breaking the law.
Return or destruction of information
Require the recipient, on request or when the purpose ends, to return or destroy confidential material and copies (including electronic copies) and to confirm destruction. This limits the residual risk once talks end and supports a POPIA-aligned retention and disposal obligation.
Remedies and interdict
Record that a breach causes harm not adequately remedied by damages and that the discloser may seek an interdict. Confidentiality breaches are typically met with an urgent interdict, so the clause should acknowledge the right to that relief in addition to damages, and specify governing law and jurisdiction.
No licence, no obligation to proceed
Confirm that disclosing information grants no intellectual-property licence or ownership and creates no obligation to conclude the underlying deal. This stops a recipient arguing that access to confidential material gave them rights to use it, and keeps the NDA distinct from the commercial contract that may follow.
NDA (confidentiality) vs restraint of trade vs non-solicitation
| Feature | NDA / confidentiality | Restraint of trade | Non-solicitation |
|---|---|---|---|
| What it stops | Disclosing or using defined confidential information outside the agreed purpose | Competing, working for a rival, or running a competing business | Approaching the firm’s clients, suppliers, or staff |
| How broad | Narrow — limited to defined information | Broadest — can bar work in a sector and area | Targeted — limited to defined relationships |
| Time limit | A set period, or for as long as the information stays secret | Must be a reasonable, defined period | Usually a defined period |
| Legal test | Valid contract + not contrary to public policy; info must be genuinely confidential | Presumed valid unless shown unreasonable (Magna Alloys) | Reasonableness, like a restraint |
| Typical use | Almost every commercial disclosure, due diligence, pitch | Senior staff, sale of a business, partner exit | Sales and client-facing roles |
Common South African pitfalls
- Vague or all-encompassing definition: an NDA that purports to protect “all information” without specifying what is confidential is uncertain and easy to attack. South African courts need a definition tied to genuinely confidential material — sweeping definitions invite a finding that the clause is too broad to enforce.
- Trying to protect public-domain information: confidentiality protection falls away once information is genuinely in the public domain or already known to the recipient. Leaving out the standard exclusions, or relying on an NDA to lock down information that is already out, sets the agreement up to fail.
- No defined purpose: without a clear permitted-use clause, the NDA reads as an open-ended restriction and gives the recipient room to argue about what they were and were not allowed to do with the information. The permitted purpose is the backbone of an enforceable NDA.
- Indefinite duration on ordinary information: an everlasting confidentiality obligation over routine business information is more likely to be cut down as unreasonable. Match the term to how long the information actually stays valuable, and reserve perpetual protection for true trade secrets.
- Ignoring POPIA where personal information is involved: if the confidential information includes personal information, POPIA imposes its own security, purpose-limitation, and breach-notification duties. An NDA that contradicts or ignores those duties can leave the discloser exposed even if the contract itself is honoured.
- Treating the NDA as the only protection: an NDA does not, by itself, restrain a recipient from competing or soliciting. If you also need to stop competition or client poaching, that calls for a separate restraint of trade or non-solicitation clause tested for reasonableness — not a confidentiality clause stretched to do work it cannot do.
Frequently asked questions
Is a non-disclosure agreement legally binding in South Africa?
Yes. An NDA is binding in South Africa as an ordinary contract, provided it meets the normal requirements of contract — agreement, lawful purpose, and certainty — and is not contrary to public policy. There is no special NDA statute; it is enforced under the common law of contract and the law protecting confidential information.
What is the difference between a mutual and a one-way NDA?
A one-way (unilateral) NDA binds only the party receiving information, used when one side discloses to an investor, supplier, or contractor. A mutual (bilateral) NDA binds both parties, used when two businesses each share confidential information — for example during merger, joint-venture, or partnership talks. The choice depends on which direction the sensitive information flows.
How long should an NDA last?
There is no fixed maximum. A defined, reasonable period — often two to five years — is the easiest to enforce. For genuine trade secrets, the obligation can last as long as the information stays secret. An indefinite confidentiality obligation over ordinary business information is more likely to be challenged as unreasonable.
Can I protect my confidential information without an NDA?
Often, yes. South African law protects confidential information independently of contract — it is unlawful competition to use someone’s confidential information as a springboard to compete, and a court can grant an interdict. But proving an unwritten duty is harder and slower, so a signed NDA that defines the information and the duty gives you a far stronger, quicker remedy.
What happens if someone breaches an NDA in South Africa?
The discloser can sue for damages and, more usefully, apply to court for an interdict to stop further disclosure or use of the information. Because confidentiality breaches cause harm that damages cannot fully undo, urgent interdicts are the common remedy. A well-drafted NDA records that an interdict is available and identifies the governing law and court.
Can an NDA stop a former employee from competing with me?
No — not on its own. An NDA stops the misuse of confidential information; it does not, by itself, prevent an employee from competing or soliciting your clients. To restrain competition you need a separate restraint of trade or non-solicitation undertaking, which is tested for reasonableness. The two work best together but do different jobs.
Does an NDA cover personal information under POPIA?
It can, and it should be drafted to align with POPIA. The Protection of Personal Information Act 4 of 2013 already requires personal information to be kept secure and used only for a defined, lawful purpose. Where confidential information includes personal information, the NDA should track those duties — including security, purpose limitation, and return or destruction of data.
Will a South African court enforce a broad or vague NDA?
Not reliably. Courts enforce clear, reasonable confidentiality undertakings, but an NDA that is vague, captures public information, or is unreasonably wide can be read down or refused. Under Beadica 231 CC, a court declines to enforce a term on public-policy grounds only “sparingly, and only in the clearest of cases”, so precise drafting is what keeps an NDA reliably enforceable.
Sources & authority
- Traka Africa (Pty) Ltd v AMaya Industries and Another (2015/2082) [2016] ZAGPJHC 24 (18 February 2016)
- Beadica 231 CC and Others v Trustees, Oregon Trust and Others (CCT109/19) [2020] ZACC 13; 2020 (5) SA 247 (CC)
- Protection of Personal Information Act 4 of 2013 (POPIA)
This guide is general information, not legal advice. It reflects the law as at June 2026.