India · NDA · 10 min readUpdated 2026-10-26

The Four Exclusions Every Fair NDA Should Have

Yes. A fair NDA excludes information that is public, already known to you, independently developed, or lawfully received from a third party, and permits disclosure required by law. No Indian statute writes these in for you, so check the clause before signing.

Exclusions are the least discussed part of an NDA and the part that determines whether the obligation is possible to comply with. An agreement without them is not stricter in a useful way; it is unworkable in a way that helps nobody. This guide sets out the four standard exclusions and the fifth one for legally compelled disclosure, explains what evidence you need to rely on each, and gives wording you can propose when the NDA you have been sent leaves them out.

Key takeaways

Four exclusions are standard: already public, already known, independently developed, and lawfully received from a third party.
A fifth, permitting disclosure required by law or a court or regulator, with notice where lawful, is normal and important.
Their absence usually indicates a template rather than a deliberate position, and asking for them is routine.
Exclusions should survive termination and should apply for the whole confidentiality period.
An exclusion is only as good as your records, so keep dated evidence of what you already had and what you built.

What are the standard exclusions in an NDA?

Information that is or becomes publicly available other than through your breach.
Information you already knew before it was disclosed to you, which is why keeping your own records matters.
Information you develop independently without reference to what was disclosed.
Information lawfully received from a third party who was free to disclose it.
Disclosure required by law, regulation or an order of a court or authority, ordinarily with notice to the other side where that is lawful.

Why each one exists

The public information exclusion prevents a counterparty asserting rights over material anyone can read. Without it, a party can claim you learned from them something described in an industry publication or on its own website, and you would be arguing about provenance rather than pointing at a clause.

Prior knowledge and independent development protect what you already had and what you build yourself. Third party receipt covers information that reaches you legitimately by another route, for example from a vendor who pitched the same idea to several companies. Together they keep the obligation attached to what was actually disclosed rather than to a subject area.

There is a legal reason as well as a practical one. A confidentiality clause that stops you using knowledge you already had, or ideas you develop yourself, starts to operate less like protection of information and more like a restriction on your business. Section 27 of the Indian Contract Act, 1872 makes agreements in restraint of a lawful trade or business void to that extent. Clear exclusions keep the NDA on the right side of that line, which helps the disclosing party too.

How the exclusions work in practice

Each exclusion depends on evidence. The table below sets out what each one covers, what you would need to show, and the drafting trap to watch for.

The five NDA exclusions, the evidence they need, and common traps
Exclusion	What it covers	Evidence you will need	Common trap
Public domain	Information published or generally available, not through your breach	The publication, website or filing, with its date	Wording that excludes only information public at the date of disclosure, not information that becomes public later
Prior knowledge	Information you had before disclosure	Dated documents, emails, code commits or notes	A requirement to notify the discloser within a short period, such as 7 days, or lose the exclusion
Independent development	Work done without using the disclosed information	Development records, dated design files, the names of who worked on it	Limiting it to staff with no access at all, which a small team cannot show
Third party receipt	Information received lawfully from someone free to share it	The third party's communication and any terms attached	Requiring proof that the third party owed no duty to anyone, which you cannot know
Compelled disclosure	Disclosure required by law, court or regulator	The order, notice or statutory demand	No such exclusion at all, or a duty to resist every request at your own cost

The fifth exclusion: disclosure required by law

Disclosure required by law, regulation or court order should be permitted, ordinarily with a requirement to notify the other party where lawful so they can seek protection. Without it, an agreement puts you in the position of choosing between breaching the contract and disobeying an order.

In India this comes up more often than people expect. A court can summon documents under the Bharatiya Nagarik Suraksha Sanhita, 2023, which replaced the Code of Criminal Procedure from 1 July 2024. Tax authorities, sector regulators such as SEBI or RBI, and investigating agencies can also require information. Some of those requests come with a restriction on telling anyone, which is why the notice obligation should say where lawful.

A balanced clause also says you will disclose only the part that is legally required, and will cooperate reasonably, at the discloser's cost, if they want to seek a protective order. This clause is standard and its absence is a straightforward drafting gap rather than a negotiating position. Asking for it is not contentious.

Independent development deserves attention

If you build products, this is the exclusion to look at most carefully. A team working on a similar problem will arrive at similar answers, and the exclusion is what separates that from a breach.

Some agreements narrow it to development by people who had no access to the confidential information, which is stricter and can be difficult to demonstrate in a small company where everyone talks to everyone. Where you can, keep it framed around not using the disclosed information rather than around segregating personnel.

Consider a twelve-person SaaS company in Gurugram that hears a pitch from a payments vendor and, six months later, ships a similar reconciliation feature that its team had been sketching for a year. If the exclusion requires that nobody with access worked on it, the company fails the test simply because its CTO attended the pitch. If it requires only that the feature was built without using the disclosed information, the company can rely on its own design history.

Who has to prove an exclusion applies?

Usually you do. Most NDAs say the receiving party bears the burden of showing an exclusion applies, and many add that it must be shown by written or documentary evidence. That is a reasonable allocation, since you hold the records, but it means the exclusion is only as useful as your filing habits.

Electronic records such as emails, repository logs and cloud document histories are commonly used for this. If a dispute reaches court, the Bharatiya Sakshya Adhiniyam, 2023, which replaced the Indian Evidence Act from 1 July 2024, governs how electronic records are proved, including certification requirements. Systems that keep timestamps automatically make that far easier than personal notes do.

Sample exclusion wording you can propose

If the NDA you were sent has no exclusions, a clause along these lines is widely accepted: "Confidential Information shall not include information that the Receiving Party can show by reasonable evidence: (a) is or becomes generally available to the public other than through a breach of this Agreement; (b) was known to the Receiving Party before disclosure without an obligation of confidence; (c) is independently developed by or for the Receiving Party without use of the Confidential Information; or (d) is lawfully received from a third party without restriction on disclosure. The Receiving Party may disclose Confidential Information to the extent required by law, regulation or order of a court or authority, provided that, where lawful, it gives the Disclosing Party prompt notice and discloses only the portion legally required."

Note the phrase "reasonable evidence". Some templates require "contemporaneous written records" for every exclusion, which is heavier. Reasonable evidence is a fair middle ground.

A related carve-out: permitted recipients

Strictly this is not an exclusion, but it is missing from many Indian NDAs and causes the same problem. You will need to share the information with your own employees, directors, advocates, chartered accountants and sometimes investors, lenders or group companies. An NDA that permits use only by the signing entity, with no permitted recipients, is breached the first time you forward an email to your accountant.

Ask for a clause allowing disclosure to your representatives who need to know the information for the agreed purpose and who are bound by confidentiality obligations no less protective than the NDA. Professional advisers are usually bound by their own duties of confidence. Expect the discloser to ask that you remain responsible for any breach by your representatives, which is a fair trade.

Two details that get missed

First, exclusions should survive termination. An agreement whose exclusions lapse when the term ends leaves you with a continuing obligation and no carve-outs, which is worse than either. Check the survival clause and make sure the definition of confidential information, including its exclusions, survives with the obligations.

Second, keep your own records. Prior knowledge and independent development are only useful if you can show what you had and when. A dated record of your own work is what turns an exclusion from a clause into a defence.

A simple habit works for most small teams: before any meeting under an NDA, save a short dated note or export of what you are already working on in that area, and file it with the signed NDA. If a dispute ever arises, that single file is the starting point for showing prior knowledge and independent development, and it costs ten minutes to create.

What if the other side refuses the exclusions?

Ask which exclusion they object to and why. Often the concern is one exclusion, usually independent development, and a narrower wording resolves it.
Offer the reasonable evidence standard in exchange for keeping all four.
Narrow the definition of confidential information instead, for example to information marked confidential or confirmed in writing within 15 days of oral disclosure.
Limit what you receive. If the NDA stays one-sided, ask them not to send material outside the agreed purpose.
Treat a flat refusal of every exclusion as a signal about the relationship, and take advice before signing if the information involved is core to your business.

Have a contract in front of you?

Upload it and get every clause checked against Indian law, with the provision each finding rests on.

Review your nda contract

Free templates for this

Common questions

The NDA I was sent has no exclusions. Should I be concerned?

It usually indicates a template rather than a deliberate attempt to overreach, and asking for the standard exclusions is a routine request. If a counterparty refuses all of them, that is worth noting, because they are what make the obligation workable rather than what weaken it. Ask for them in a short markup before signing.

How do I prove I already knew something?

Contemporaneous records. Dated notes, earlier documents, prior code or designs, and internal communications predating the disclosure are what establish it. Systems that timestamp automatically, such as email, version control and cloud documents, are more persuasive than undated personal notes. Building that habit is what makes the exclusion useful in practice rather than only on paper.

Is information public if it is on the internet somewhere?

Usually, if it is genuinely accessible to the public and not posted there through someone's breach. A leaked document posted online does not become fair game simply because it is online. The exclusion normally requires that the information became public other than through a breach by you, so check how it got there before relying on it.

Can I disclose confidential information to the police or a court?

If the law or an order requires it, a properly drafted NDA permits disclosure to the extent required, usually with notice to the other party where lawful. Without that exclusion you face a conflict between the contract and the legal demand. A court is unlikely to penalise compliance with a lawful order, but the clause avoids the argument altogether.

Do exclusions apply to oral disclosures too?

Yes, if the NDA covers oral information, the exclusions apply to it in the same way. Oral disclosures are harder to evidence, which is why many NDAs require oral information to be confirmed in writing within a set period, often 15 to 30 days, before it counts as confidential. That requirement helps both sides know what is covered.

Should exclusions appear in a mutual NDA as well?

Yes. In a mutual NDA each party is both discloser and recipient, so the same exclusions protect both sides. A mutual NDA without exclusions is equally unworkable for each party. Check that the exclusions are written to apply to whichever party is receiving, rather than naming only one of you.

Related guides

This article is general information about Indian law as of 2026-10-26, not legal advice, and reading it does not create an advocate–client relationship. Statutes and rules change, particularly under the Labour Codes, where State rules differ from State to State. Consult a qualified advocate about your own situation.