Most NDAs are routine. A few quietly do far more than protect secrets.

Check how widely “Confidential Information” is defined and whether the usual exclusions are there: information already public, already known to you, received lawfully from someone else or independently developed, plus disclosure required by law. Then check whether obligations run both ways, how long they last, whether there is a residuals clause, what you must return or destroy, and whether a non-compete or non-solicit has been added, since restraints engage Section 27 of the Contract Act.

Yes, as a contract. Confidential information in India is protected mainly through contract and the general law on breach of confidence. An NDA signed electronically is not invalid merely because it is electronic, under Section 10A of the Information Technology Act. How enforceable a particular NDA is depends on how clearly it defines what is protected, which is what the report checks first.

No Indian statute sets a general maximum term for confidentiality obligations. A perpetual obligation is commonly sought for genuine trade secrets, which stay valuable only as long as they stay secret, but for ordinary business information a defined period is easier to justify and to live with. Many NDAs use a fixed term with longer protection for trade secrets. The report flags a perpetual term and suggests a period that fits what is being shared.

A residuals clause lets the receiving party use ideas, concepts and know-how its people retain in their unaided memory after seeing your information. It appears most often in NDAs drafted by large companies, and it can let them use much of what you share without breaching the NDA. If you are the one disclosing, ask to delete it, or narrow it to general skills and exclude anything specific to your business.

A pure confidentiality obligation does not stop you working elsewhere; it limits what you disclose and use. A non-compete placed inside an NDA is a restraint of trade, which Section 27 of the Contract Act makes void, so a post-engagement non-compete is largely unenforceable whatever the document calls itself. Exclusivity during an engagement is a separate question. The report separates confidentiality from restraint, clause by clause.

No. Whether to grant an injunction is for the court, which looks at the facts, and the Specific Relief Act limits injunctions in some situations. A clause agreeing that damages would be inadequate may carry some weight, but it does not decide the question. The report flags these clauses so you understand what you are conceding, and whether the obligation runs only against you.

If only one side is sharing information, a one-way NDA protecting that side is normal. If both sides will share, for example in a partnership or deal discussion, a mutual NDA keeps the obligations balanced. Watch for a document called mutual that defines Confidential Information by reference to one party only, or gives the exclusions to one side alone. The report checks which way each obligation runs.

It can, where the information shared includes personal data such as customer or employee details. The DPDP Act, 2023 and the DPDP Rules, notified in November 2025 and phasing in to full compliance on 13 May 2027, expect use to be limited to the stated purpose and processors to be bound by contract. A shorter timeline has been proposed, so verify the current deadline. The report flags personal data in scope and asks whether separate data protection terms are needed.

Stamp duty is set by State law, and most States charge duty on agreements of this kind, so an NDA is usually dutiable. An unstamped or under-stamped instrument cannot be admitted in evidence until the deficiency and penalty are paid, under Section 35 of the Indian Stamp Act or the equivalent provision of a State Stamp Act. That matters if you ever need to enforce the NDA. The report flags stamping and tells you to confirm the rate for your State.