Introduction
Every business holds information it cannot afford to lose. Customer lists, pricing strategies, product designs, supplier terms, software source code, and financial projections all represent years of effort and investment. When you share that information with a prospective partner, investor, employee, or vendor, you need a legally enforceable mechanism to keep it confidential. That mechanism is the non-disclosure agreement, commonly known as an NDA or confidentiality agreement.
In Ontario, NDAs serve as the first line of defence for proprietary business information. They are used at virtually every stage of commercial life: during hiring, before merger discussions, in joint venture negotiations, and when outsourcing services. Despite their prevalence, NDAs are frequently drafted poorly, leaving businesses exposed to information leaks that are difficult or impossible to remedy after the fact.
This article explains how NDAs work under Ontario law, what they should contain, how courts enforce them, and the common drafting mistakes that undermine their effectiveness.
Why NDAs Matter for Ontario Businesses
An NDA creates a contractual obligation of confidentiality. Without one, the recipient of your sensitive information may have no legal duty to keep it secret, unless the information qualifies as a trade secret or was shared in a relationship that gives rise to a fiduciary or equitable obligation of confidence. Relying on those common law protections alone is risky, because they require you to prove the nature of the relationship and the secrecy of the information in court, often after the damage has already been done.
A well-drafted NDA eliminates ambiguity. It defines exactly what information is confidential, spells out what the recipient can and cannot do with it, sets a clear duration, and identifies the remedies available if the agreement is breached. This clarity benefits both parties: the disclosing party knows its information is protected, and the receiving party knows precisely what its obligations are.
NDAs also serve an important psychological function. They signal to the recipient that you take confidentiality seriously and that misuse of your information will have consequences. In employment contexts, they remind departing employees that their obligations survive the end of the relationship.
Types of NDAs: Mutual vs. One-Way
One-Way (Unilateral) NDAs
A unilateral NDA protects information flowing in one direction only. One party discloses confidential information, and the other party agrees to keep it secret. This structure is common in employment agreements, where the employer shares proprietary information with an employee, and in situations where a business is pitching to investors or engaging a consultant.
Mutual (Bilateral) NDAs
A mutual NDA protects both parties equally. Each party is simultaneously a discloser and a recipient. Mutual NDAs are standard in joint venture discussions, potential mergers and acquisitions, technology partnerships, and any negotiation where both sides will be sharing sensitive information. Most sophisticated commercial negotiations begin with a mutual NDA.
The choice between mutual and unilateral depends on the nature of the transaction. If information flows both ways, a mutual NDA is appropriate. If only one party is sharing sensitive material, a unilateral NDA suffices. However, in practice, parties sometimes insist on a mutual NDA even when the information flow is primarily one-directional, simply to avoid the appearance that only one side has something to protect.
Key Components of an Effective NDA
Definition of Confidential Information
This is the most important clause in any NDA. It defines the scope of what is protected. A good definition is broad enough to capture all genuinely sensitive information but specific enough that both parties understand what it covers.
Common approaches include a general categorical definition (covering technical data, business plans, customer information, financial records, and similar categories) supplemented by a requirement that written disclosures be marked "Confidential" and oral disclosures be confirmed in writing within a specified number of days. Some NDAs use an exhaustive list of specific categories, while others use a broad catch-all definition.
The risk of being too broad is that a court may find the definition unreasonable and decline to enforce it. The risk of being too narrow is that important information falls outside the NDA’s scope. Skilled drafting strikes a balance.
Standard Exclusions
Every NDA should carve out information that the receiving party should not be required to keep confidential. Standard exclusions include:
• Information that was already publicly available at the time of disclosure, or that becomes publicly available through no fault of the receiving party.
• Information that the receiving party already possessed before disclosure, as demonstrated by written records.
• Information that the receiving party independently developed without reference to the disclosing party’s confidential information.
• Information that the receiving party lawfully received from a third party who had no obligation of confidentiality to the disclosing party.
Failing to include these exclusions is a common drafting error. Without them, a receiving party could find itself in breach for possessing information it already had or that was freely available in the public domain.
Obligations of the Receiving Party
The NDA should clearly state what the receiving party must do, and must not do, with the confidential information. At minimum, the receiving party should be required to hold the information in confidence, use it only for the stated purpose (such as evaluating a potential business transaction), restrict access to those employees or advisors who need to know the information, and ensure that those individuals are bound by confidentiality obligations at least as protective as those in the NDA.
Term and Duration
The NDA should specify how long the confidentiality obligations last. Some NDAs set a fixed term, such as two, three, or five years from the date of disclosure. Others provide that the obligations continue for as long as the information remains confidential. For trade secrets, an indefinite duration is appropriate because trade secret protection lasts only as long as secrecy is maintained. For other types of business information that may have a limited commercial lifespan, a fixed term is more practical.
Permitted Disclosures
Most NDAs include a clause permitting disclosure when required by law, regulation, or court order. This is important because a receiving party may be compelled to disclose confidential information in response to a subpoena, regulatory investigation, or legal proceeding. The clause typically requires the receiving party to give prompt notice to the disclosing party so that the disclosing party can seek a protective order or other remedy before the disclosure occurs.
Remedies for Breach
An NDA should address what happens if the receiving party breaches its obligations. The most critical remedy for confidentiality breaches is injunctive relief, because monetary damages are often inadequate to compensate for the loss of secret information. A well-drafted NDA will include an acknowledgment that a breach may cause irreparable harm and that the disclosing party is entitled to seek injunctive relief without the need to prove actual damages or post a bond. While courts retain discretion over whether to grant an injunction, this language strengthens the disclosing party’s position.
Criminal Code Section 391 and Trade Secrets
In addition to civil remedies, Ontario businesses should be aware that the Criminal Code, R.S.C. 1985, c. C-46, s. 391, creates a criminal offence for the fraudulent taking or obtaining of a trade secret. This provision applies where a person, by deceit, falsehood, or other fraudulent means, obtains a trade secret or communicates or makes available a trade secret knowing that it was obtained by such means.
Section 391 is not frequently prosecuted, but its existence underscores the seriousness with which Canadian law treats trade secret theft. For businesses, it provides an additional layer of deterrence beyond the contractual protections of an NDA. In cases of deliberate and egregious misappropriation, a criminal complaint may be appropriate alongside civil proceedings.
Enforcement Considerations in Ontario
Ontario courts will enforce NDAs that are reasonable in scope, duration, and geographic application. However, enforcement is not automatic. The disclosing party must demonstrate that the NDA was properly formed (offer, acceptance, consideration), that the information at issue falls within the NDA’s definition of confidential information, that the receiving party breached the agreement, and that the disclosing party suffered harm or is at risk of suffering harm as a result.
Consideration deserves special attention. In the context of a new employment relationship, the job itself typically constitutes adequate consideration for an NDA. When an NDA is introduced during an existing employment relationship, however, fresh consideration is required. Ontario courts have held that continued employment alone may not constitute sufficient consideration, particularly where the employee receives no additional benefit. This is a frequent point of vulnerability in employment-related NDAs.
When seeking to enforce an NDA through an injunction, the disclosing party will typically bring a motion for an interlocutory injunction. The court will apply the test from RJR-MacDonald Inc v Canada (Attorney General), 1994 1 SCR 311, considering whether there is a serious issue to be tried, whether the moving party would suffer irreparable harm if the injunction is not granted, and whether the balance of convenience favours granting the injunction.
Common Mistakes in NDA Drafting
Overbroad Definitions of Confidential Information
Defining "confidential information" as "all information shared between the parties" or "any and all information, whether written or oral" is tempting but problematic. Such definitions may be found unreasonable by a court, making the entire NDA difficult to enforce. A definition should be comprehensive but grounded in identifiable categories of information.
Inadequate or Missing Exclusions
Omitting standard exclusions for publicly available information, prior knowledge, independent development, and third-party sources creates an unreasonably broad obligation. Receiving parties may refuse to sign an NDA without these protections, and courts may decline to enforce one that lacks them.
Missing Injunction Provisions
Failing to include language acknowledging that a breach may cause irreparable harm and that the disclosing party is entitled to seek injunctive relief weakens the disclosing party’s ability to obtain emergency court orders. While the presence of such a clause does not guarantee an injunction, its absence forces the disclosing party to make the case for irreparable harm entirely from scratch.
No Return or Destruction Obligation
An NDA should require the receiving party to return or destroy all confidential information upon request or at the end of the relationship. Without this provision, confidential materials may linger in the receiving party’s files indefinitely, increasing the risk of inadvertent disclosure.
Ignoring the Governing Law Clause
For Ontario businesses, the NDA should specify that it is governed by the laws of Ontario and that the courts of Ontario have jurisdiction over any disputes. This avoids the expense and uncertainty of litigating in another jurisdiction.
Practical Tips for Ontario Businesses
1. Sign the NDA before sharing any confidential information. Once information is disclosed without protection, it may be difficult to impose confidentiality obligations retroactively.
2. Tailor each NDA to the specific transaction. A template NDA may not adequately address the particular risks of a given deal.
3. Keep records of what information was shared, when, and with whom. This documentation will be critical if you ever need to enforce the NDA.
4. Review and update NDAs periodically. Business relationships evolve, and an NDA drafted at the outset of a relationship may no longer adequately protect information shared years later.
5. Ensure that any employees or advisors who will have access to the other party’s confidential information are themselves bound by appropriate confidentiality obligations.
6. Consider whether non-solicitation or non-competition provisions are also needed. An NDA protects information but does not necessarily prevent the other party from competing with you or soliciting your clients or employees.
Frequently Asked Questions
Q: Can I use a free NDA template I found online for my Ontario business?
A: You can, but you should not rely on one without careful review. Free templates are often drafted under American law and may not account for Ontario-specific considerations, such as the requirement for fresh consideration in existing employment relationships or the standards Ontario courts apply when assessing the reasonableness of restrictive covenants. A template can serve as a starting point, but it should be reviewed and adapted by a lawyer at Booni Law who understands Ontario law and the specific transaction.
Q: How long should an NDA last?
A: There is no single correct answer. The appropriate duration depends on the nature of the information being protected. For trade secrets, an indefinite term (lasting as long as the information remains confidential) is appropriate. For other business information, a term of two to five years is common. Shorter durations may be appropriate for information that will quickly become outdated; longer durations may be warranted for information with lasting commercial value.
Q: What happens if someone breaches my NDA?
A: You can pursue civil remedies, including damages for any losses you suffered and an injunction to prevent further disclosure. If the NDA includes an injunction clause, you may be able to obtain emergency relief quickly. In extreme cases involving deliberate theft of trade secrets, you may also consider reporting the matter to law enforcement under Criminal Code s. 391. The practical challenge with NDA breaches is often proving what information was disclosed, to whom, and what harm resulted. This is why careful documentation of what you shared and when is so important.
Q: Does an NDA prevent an employee from working for a competitor?
A: No. An NDA protects confidential information; it does not restrict where someone can work. If you want to prevent a departing employee from joining a competitor, you need a non-competition clause, which is a separate and more difficult provision to enforce under Ontario law. A non-solicitation clause, which prevents the employee from soliciting your clients or other employees, is another distinct provision. These restrictive covenants must be reasonable in scope, geography, and duration to be enforceable.
Q: Is a verbal NDA enforceable in Ontario?
A: In theory, an oral agreement of confidentiality could be enforceable, but proving its existence and terms would be extremely difficult. There is no substitute for a written, signed NDA. Written agreements eliminate disputes about what was agreed to and provide clear evidence of the parties’ obligations.
Contact Booni Law
Whether you need to draft an NDA for a new business relationship, review an NDA presented to you, or enforce an NDA that has been breached, Booni Law can help. Our team advises Ontario businesses on all aspects of confidentiality protection, from initial drafting to litigation. Booni Law serves clients across Ontario, including the Greater Toronto Area, Southwestern Ontario, and communities throughout the province. Email us at admin@boonilaw.com or call +1 (226) 271-1751 to get started.
Disclaimer: This article is provided for general informational purposes only and does not constitute legal advice. Reading this article does not create a solicitor-client relationship between you and Booni Law. The information in this article may not reflect the most current legal developments and should not be relied upon as a substitute for professional legal advice tailored to your specific circumstances. If you require legal advice, please contact Booni Law.
