NDA Meaning: Definition and Legal Issues 2026

A start-up shares its source code with a service provider for a technical demonstration. The manager of an industrial SME opens its accounts to a potential buyer. An employee gains access to a strategic client file. In each of these situations, sensitive information changes hands, and its disclosure could cause harm that is difficult to remedy. The NDA, or Non-Disclosure Agreement, is the contractual tool that governs this exchange. This FAQ explains what an NDA really means, its legal scope under French law, its limits, and the points to watch before signing in 2026.

What does NDA mean and what exactly does the term cover?

The acronym NDA stands for Non-Disclosure Agreement. In French, one speaks of an accord de confidentialité (confidentiality agreement), a confidentiality clause or undertaking, or even an accord de secret. The question of the nda meaning comes up often because the term is widely used in the business world, including in France, without its signatories always appreciating its legal scope.

An NDA is a contract by which one or more parties undertake not to disclose to third parties, and not to use for purposes other than those agreed, information designated as confidential that is passed to them. Understanding what nda mean in practice requires distinguishing two dimensions: the obligation not to reveal the information (non-disclosure) and the obligation not to exploit it for one's own benefit (non-use). A well-drafted agreement covers both.

Legally, the NDA is not an exotic instrument in French law. It is analysed as an ordinary contract governed by the general law of obligations in the French Civil Code. Its validity rests on the conditions of Article 1128 of the French Civil Code: consent of the parties, capacity to contract, and lawful and certain content. The anglicism "NDA" therefore designates something French law knows perfectly well under the name of confidentiality agreement.

Unilateral, bilateral and multilateral NDAs

A unilateral NDA imposes the confidentiality obligation on one party only, the one receiving the information. This is the classic arrangement where a company presents a project to a recruitment candidate or to an investor who discloses nothing sensitive in return.

A bilateral NDA, or mutual NDA, places the obligation on both parties. It is appropriate where two companies are considering a partnership or an external growth transaction and exchange strategic data with each other. A multilateral NDA involves three or more parties, for example in a consortium bringing together several companies around a joint research and development project.

What is the legal value of a confidentiality agreement in France?

A validly concluded confidentiality agreement is binding between the parties under Article 1103 of the French Civil Code, according to which "contracts lawfully formed take the place of law for those who have made them". Breach of it engages the contractual liability of the party in breach under Article 1231-1 of the French Civil Code, which allows damages to be obtained in compensation for the loss suffered.

The NDA is therefore neither a mere formality nor a statement of intent. It is an enforceable undertaking, non-performance of which may be sanctioned by the court. It remains necessary that the protected information has been properly defined and that the injured party can establish, first, the prohibited disclosure or use and, second, the resulting loss.

The role of pre-contractual confidentiality

Even without a signed NDA, French law partially protects information exchanged during negotiations. Article 1112-2 of the French Civil Code, introduced by the 2016 reform of contract law, provides that:

"A person who uses or discloses without authorisation confidential information obtained in the course of negotiations incurs liability under the ordinary rules of law."

This provision acts as a safety net. But it remains general and leaves considerable room for the court's assessment of whether the information is "confidential". It is precisely to remove this uncertainty that a written confidentiality agreement is of major value: it defines in advance what is protected, for how long, and with what consequences in the event of breach.

What does an NDA actually protect, and what does it not protect?

The strength of an NDA lies in the precision of the definition of confidential information. A wording that is too vague, such as "any information exchanged between the parties", exposes the parties to a twofold risk: being held to be imprecise and therefore difficult to enforce, or, conversely, covering items that were never meant to be covered. Rigorous drafting identifies the categories of information concerned: financial data, manufacturing secrets, client files, technical know-how, strategic projects, source code.

A confidentiality agreement does not protect everything, and this is a frequent source of misunderstanding. Generally excluded, by so-called exception clauses, are information that is already public, information that the recipient lawfully held before signing, information obtained in good faith from a third party not bound by secrecy, and information whose disclosure is required by law or by a court decision. Take an IT service provider that receives a piece of data already available on its client's website: it clearly cannot be held liable for having "disclosed" it.

NDA and trade secrets: two complementary protections

The NDA works alongside the statutory regime for trade secrets (secret des affaires), introduced into French law by Law No. 2018-670 of 30 July 2018 transposing Directive (EU) 2016/943, and codified in Articles L. 151-1 et seq. of the French Commercial Code. This regime protects information that is not generally known, that has commercial value because it is secret, and that is subject to reasonable protection measures.

This last condition is decisive: to benefit from statutory trade secret protection, the company must prove that it took concrete steps to preserve the confidentiality of the information. Signing an NDA is precisely one such step. In other words, the confidentiality agreement does not merely create a contractual obligation: it feeds and reinforces the statutory protection provided by the Commercial Code. The two mechanisms support each other. The protection of know-how and confidential information, alongside trade marks and creations, is covered in our article on the intangible assets of the company.

What clauses should a confidentiality agreement contain?

A solid NDA rests on a core set of clauses that define precisely each party's rights and obligations. Several elements deserve particular attention.

• The definition of confidential information, precise enough to be enforceable but broad enough to cover the real scope of the exchange
• The identification of the parties and, where applicable, of the persons within each organisation who are authorised to receive the information
• The purpose of the disclosure, that is, the precise use permitted (assessing an acquisition, testing a product, negotiating a partnership)
• The duration of the confidentiality obligation, which may survive the end of the contractual relationship
• The fate of the information at the end of the relationship: return or destruction of the materials
• The sanctions applicable in the event of breach
• The governing law and the competent court in the event of a dispute

The question of duration

The duration of the confidentiality undertaking is a frequently neglected point. A perpetual obligation may be held excessive and recharacterised by the court, while a duration that is too short deprives the agreement of its usefulness. Practice distinguishes the term of the agreement itself, tied to that of the negotiation or the relationship, from the term of the confidentiality obligation proper, which frequently survives for several years after the end of the exchanges. For a manufacturing secret, long protection is justified; for information whose value fades quickly, a short term is sufficient.

The penalty clause, a deterrent

Many NDAs include a penalty clause (clause pénale), governed by Article 1231-5 of the French Civil Code, which sets in advance the amount of compensation due in the event of breach. Its value is twofold: it deters the recipient from breaching the undertaking, and it relieves the injured party of proving the exact extent of its loss, a point that is often delicate for intangible information.

This clause is nevertheless not all-powerful. The same article allows the court to reduce or increase the agreed penalty if it is manifestly excessive or derisory. A penalty clause setting a sum disproportionate to the foreseeable loss is therefore open to judicial revision.

How can a breach of an NDA be proved and sanctioned?

The main practical difficulty with a confidentiality agreement lies in proof. Showing that protected information has been disclosed or exploited without authorisation often requires reconstructing the path of the leak. The courts accept a wide variety of means of proof in commercial matters, but the burden rests on the party alleging the breach.

Several procedural tools exist. An application based on Article 145 of the French Code of Civil Procedure makes it possible to ask the court, before any proceedings, for investigative measures intended to preserve or establish evidence of facts on which the outcome of a dispute may depend. A company that suspects a former partner of having misappropriated its know-how can thus obtain a measure of factual record. In trade secret matters, Articles L. 152-1 et seq. of the French Commercial Code provide for specific measures, including interim and protective measures to bring the infringement to an end. The preparation and execution of such an application are discussed separately in our article on the ex parte application under Articles 145 and 493 of the French Code of Civil Procedure.

Possible sanctions

Breach of an NDA may give rise to several types of sanctions, which may sometimes be combined:

• Damages compensating the loss suffered, whether financial, commercial or reputational
• Application of the penalty clause where one has been provided for
• Orders prohibiting or putting an end to the unlawful use of the information
• In some cases, publication of the court decision

Where the breach is accompanied by other wrongful conduct, for example the diversion of clients or acts of unfair competition, the injured party may also bring a claim in tort under Article 1240 of the French Civil Code. Combining legal bases often makes the action more effective.

Is an NDA suitable for individuals and not only for companies?

The confidentiality agreement is not reserved for large financial transactions. An individual may perfectly well use one, and the practice is growing. Consider an inventor presenting a prototype to a manufacturer who might market it, an author submitting a manuscript to a publisher, or an independent consultant gaining access to the personal data of a company's clients. In all these cases, an NDA governs the circulation of the sensitive information.

For an individual, a few precautions are needed before signing. It should be checked that the obligations are reciprocal where both parties exchange information, that the duration and scope are proportionate, and that the sanctions provided for are not disproportionate to the actual undertaking. Signing an NDA whose penalty clause provides for a considerable sum for a mere project presentation calls for reflection.

NDA and employment contract

In an employment relationship, the confidentiality obligation exists in part independently of any NDA. The employee owes a duty of loyalty to the employer, which includes a degree of discretion. Many employment contracts also contain a specific confidentiality clause. This clause should not be confused with the non-compete clause, which is subject to strict and autonomous validity conditions, in particular the existence of financial consideration. A confidentiality agreement cannot be used to circumvent the requirements applicable to non-competes. The validity conditions and drafting of this provision are detailed in our article on the non-compete clause in the employment contract.

What are the issues and points to watch for NDAs in 2026?

The use of confidentiality agreements is intensifying as a result of several developments. The spread of remote working and digital exchanges multiplies the potential points of leakage of sensitive information. The development of generative artificial intelligence raises new questions: entrusting confidential data to a tool that reuses it for its training may amount to a disclosure within the meaning of the NDA. Clauses must now anticipate these technological uses.

The relationship between confidentiality and personal data protection is another point to watch. Where the information exchanged includes personal data, the NDA is not enough: the General Data Protection Regulation (GDPR) must be complied with and, where applicable, a data processing agreement meeting Article 28 of the GDPR must be concluded. The Commission nationale de l'informatique et des libertés (CNIL, the French data protection authority) oversees compliance with this framework, which is distinct from the contractual confidentiality obligation.

Finally, in an international context, the question of governing law and competent jurisdiction takes on a strategic dimension. An NDA signed between a French company and a foreign partner must clearly designate the law that governs it and the competent court, failing which any later dispute will be considerably more complex.

Conclusion

The NDA is neither a decorative formality nor an absolute guarantee. It is a contract whose effectiveness depends entirely on its drafting: a confidentiality agreement that is vague, unbalanced or unsuited to the reality of the exchange offers illusory protection and may even be turned against the party that imposed it. Conversely, a precise NDA, coordinated with the trade secrets regime and backed by proportionate sanctions, is a genuine legal shield.

The rule to follow is simple: never sign, or ask others to sign, a standard confidentiality agreement downloaded from the internet without having adapted it to the real context of the transaction. Before any exchange of sensitive information, have the scope of the protected data, the duration of the obligation and the sanctions defined precisely, ideally with the support of a lawyer able to check that the whole is consistent with your situation.

Frequently asked questions

What exactly does NDA mean?

NDA is the acronym for Non-Disclosure Agreement, which is translated in French as accord de confidentialité or accord de non-divulgation. It is a contract by which a party undertakes not to reveal to third parties, and not to use for its own account, confidential information communicated to it. In French law, it is analysed as an ordinary contract governed by the general law of obligations in the Civil Code. Breach of it engages the contractual liability of the party in breach.

Does a confidentiality agreement have real legal value in France?

Yes. A validly concluded NDA is binding between the parties under Article 1103 of the French Civil Code. Breach of it allows damages to be obtained under Article 1231-1 of the French Civil Code. It remains necessary that the protected information is precisely defined and that the injured party can prove the prohibited disclosure or use as well as the loss suffered.

What is the difference between an NDA and trade secrets?

The NDA is a contractual obligation created by the will of the parties, whereas trade secret protection is a statutory protection provided for by Articles L. 151-1 et seq. of the French Commercial Code, resulting from Law No. 2018-670 of 30 July 2018. The two mechanisms are complementary: signing a confidentiality agreement is one of the "reasonable protection measures" required by law to benefit from the trade secrets regime. The NDA therefore reinforces the statutory protection.

How long does an NDA remain valid?

The duration depends on what is negotiated between the parties. A distinction must be drawn between the term of the agreement itself, often tied to that of the negotiation, and the term of the confidentiality obligation, which frequently survives for several years after the end of the relationship. A perpetual obligation may be held excessive by the court, while a duration that is too short deprives the agreement of its usefulness. The duration must remain proportionate to the value and nature of the protected information.

What are the risks if a confidentiality agreement is breached?

Breach exposes the party in breach to several sanctions, which may sometimes be combined: damages compensating the loss, application of the penalty clause if one has been provided for under Article 1231-5 of the French Civil Code, orders prohibiting the unlawful use, and sometimes publication of the decision. Where the breach is accompanied by acts of unfair competition, a claim under Article 1240 of the French Civil Code is also possible. The burden of proving the breach rests on the party alleging it.

Can an individual sign or ask others to sign an NDA?

Yes, the confidentiality agreement is not reserved for companies. An inventor presenting a prototype, an author submitting a manuscript or an independent consultant may use one. Before signing, an individual should check that the obligations are balanced, that the duration and scope are proportionate, and that the sanctions provided for are not disproportionate to the actual undertaking.

Is an NDA sufficient when personal data is exchanged?

No. Where the information includes personal data, the NDA does not remove the need to comply with the General Data Protection Regulation (GDPR). If one of the parties processes data on behalf of the other, a data processing agreement meeting Article 28 of the GDPR is required. Contractual protection of confidentiality and GDPR compliance are two distinct obligations that apply cumulatively, under the supervision of the CNIL.