Standard Operating Procedure: Execution of Non-Disclosure Agreements (NDA) in the UK

This Standard Operating Procedure (SOP) outlines the mandatory process for drafting, reviewing, and executing Non-Disclosure Agreements (NDAs) under the jurisdiction of the laws of England and Wales. The objective of this procedure is to protect the organization’s proprietary information, intellectual property, and trade secrets during negotiations or collaborations with third parties. By following these steps, staff ensure that all agreements are legally enforceable, compliant with UK regulations, and aligned with company risk management policies.

Phase 1: Preparation and Scoping

• Identify the Nature of the Disclosure: Determine whether the NDA is "unilateral" (one-way disclosure) or "mutual" (both parties disclosing).
• Define Confidential Information: Clearly outline what constitutes confidential information (e.g., technical data, financial projections, client lists, or software code).
• Determine the Term: Establish the duration of the agreement (typically 2–5 years) and the duration of the obligation to keep information confidential post-termination.
• Identify Signatories: Confirm that the person signing the NDA has the delegated authority to bind the company legally.

Phase 2: Drafting and Review

• Utilize Approved Templates: Always use the latest version of the company-approved template; do not use external or ad-hoc templates without legal counsel approval.
• Specify Jurisdiction: Ensure the "Governing Law" clause specifies "England and Wales."
• Include Exclusions: Explicitly list information that is not confidential (e.g., information already in the public domain or independently developed without reference to disclosed data).
• Address Return or Destruction: Include a clause requiring the recipient to return or destroy all physical and electronic confidential information upon request or termination of the relationship.

Phase 3: Execution and Record Keeping

• Review for Edits: If the counterparty makes changes, run a "blackline" comparison against the original template.
• Formal Execution: Use a secure electronic signature platform (e.g., DocuSign or Adobe Sign) that complies with the Electronic Communications Act 2000.
• Counter-signature: Ensure a fully executed copy (signed by both parties) is returned before any confidential information is shared.
• Centralised Filing: Upload the final document to the secure corporate document management system (DMS) for auditability.

Pro Tips & Pitfalls

• Pro Tip: Define the 'Purpose': Always include a clear "Purpose" clause. If the information is used for a purpose outside the defined scope, it constitutes a breach of contract.
• Pro Tip: Remedies: Ensure the agreement mentions that monetary damages may be insufficient and that the company may seek injunctive relief (court orders to stop unauthorized disclosure).
• Pitfall: The "Evergreen" Mistake: Avoid "perpetual" confidentiality obligations unless absolutely necessary, as UK courts are often reluctant to enforce them, potentially rendering the whole clause unreasonable and unenforceable.
• Pitfall: Oral Disclosures: If the NDA only covers written information, ensure an amendment is added to include information disclosed orally, provided it is summarized in writing within a set timeframe (e.g., 14 days).

Frequently Asked Questions (FAQ)

1. Does an NDA in the UK need to be witnessed? Generally, no. A standard commercial NDA signed by an authorized signatory is legally binding under the laws of England and Wales without a witness.

2. Can an NDA prevent a whistleblower from reporting illegal activity? No. In the UK, NDAs cannot override statutory whistleblowing protections under the Public Interest Disclosure Act 1998. Clauses attempting to restrict reports to regulators are generally void.

3. What happens if the other party breaches the NDA? If a breach occurs, you should immediately document the unauthorized disclosure and notify your legal department or external counsel. You may be entitled to seek an interim injunction to prevent further disclosure and claim damages for losses incurred.