Why Exclusions Matter
Every well-drafted NDA includes exclusions — categories of information that are carved out from the confidentiality obligations. These exclusions are not weaknesses in your NDA. They are essential for enforceability. Courts routinely examine whether an NDA includes reasonable exclusions when determining if the agreement should be upheld. An NDA without standard exclusions may be deemed overbroad and unenforceable.
The Four Standard Exclusions
Nearly every NDA should include these four fundamental exclusions. They represent situations where it would be unreasonable to hold the receiving party responsible for maintaining confidentiality.
1. Publicly Available Information
Information that is already in the public domain or becomes publicly available through no fault of the receiving party is excluded from confidentiality obligations. This makes sense because you cannot require someone to keep secret something that anyone can find through a simple internet search or public records request.
Key nuance: The information must have become public through legitimate means. If the receiving party leaked the information and then claimed it was public, this exclusion would not apply. The NDA should specify that the exclusion only covers information that became public "through no act or omission of the receiving party."
Example: You share your company's revenue figures under an NDA. If those same figures are later published in a public SEC filing, the receiving party is no longer obligated to keep them confidential.
2. Prior Knowledge
Information that the receiving party can demonstrate they already knew before the NDA was signed is excluded. This prevents the disclosing party from effectively claiming ownership over knowledge the receiving party independently possessed.
Key nuance: The receiving party bears the burden of proving prior knowledge. The best way to establish this is through contemporaneous documentation — records, files, or communications that predate the NDA and demonstrate prior awareness of the information.
Example: You share your marketing strategy with a potential partner under an NDA. If the partner can show they had developed a virtually identical strategy in their own internal documents before your disclosure, that strategy is not covered by the NDA.
3. Independent Development
Information that the receiving party independently develops without reference to or use of the disclosing party's confidential information is excluded. This protects the receiving party's right to innovate and develop their own ideas.
Key nuance: "Independent development" means the information was created through the receiving party's own efforts, without relying on, consulting, or being influenced by the disclosing party's confidential information. The receiving party may need to demonstrate a clean development path to invoke this exclusion.
Example: After signing an NDA with a tech company, your engineering team independently develops a similar feature based on their own research and industry knowledge. As long as they did not use any of the disclosing party's confidential technical information, their independently developed solution is not restricted.
4. Third-Party Disclosures
Information received from a third party who is not bound by any confidentiality obligation regarding that information is excluded. This protects the receiving party from being trapped by information they legitimately obtained from another source.
Key nuance: The third party must not have been under any obligation of confidentiality when they shared the information. If the third party was also bound by an NDA with the disclosing party and breached it, this exclusion would not apply.
Example: A supplier shares industry pricing data with you that overlaps with information you received under an NDA from a competitor. If the supplier obtained that data independently and was not bound by any confidentiality agreement, you can freely use the information from the supplier.
The receiving party typically bears the burden of proving that an exclusion applies. Maintain thorough records of your pre-existing knowledge, independent development processes, and third-party information sources to support any exclusion claims.
Additional Exclusions to Consider
Beyond the four standard exclusions, there are other carve-outs that may be appropriate depending on your situation.
Legally Compelled Disclosure
Most NDAs include a provision allowing the receiving party to disclose confidential information if required by law, regulation, or court order. Without this exclusion, the receiving party could be caught between their NDA obligations and a legal requirement to produce information.
Best practice: Require the receiving party to notify the disclosing party promptly if they receive a legal demand for confidential information, giving the disclosing party an opportunity to seek a protective order or other legal remedy before disclosure occurs. Also require that only the minimum information necessary to comply with the legal requirement be disclosed.
Government or Regulatory Disclosures
Similar to legally compelled disclosures, you may need to allow disclosures to government agencies or regulators. This is particularly relevant in regulated industries like healthcare, financial services, and energy.
Professional Advisor Disclosures
The receiving party may need to share confidential information with their attorneys, accountants, or other professional advisors. An exclusion allowing this, provided the advisors are bound by their own professional confidentiality obligations, is common and reasonable.
Aggregated or De-Identified Data
In some contexts, it may be appropriate to exclude aggregated statistical data or de-identified information that cannot be traced back to specific confidential details. This is common in technology and data-sharing agreements where the receiving party may want to use anonymized insights.
When negotiating an NDA, do not resist the inclusion of standard exclusions. They make the agreement more balanced and, paradoxically, more enforceable. Focus your negotiation energy on the specific definitions and the scope of the obligations instead.
Drafting Effective Exclusion Language
Be Specific
Vague exclusion language can lead to disputes. Instead of simply listing the exclusion, describe the conditions that must be met for it to apply.
Address the Burden of Proof
Specify who bears the burden of proving that an exclusion applies. This is typically the receiving party, but it should be explicitly stated in the agreement.
Require Documentation
For the prior knowledge and independent development exclusions, consider requiring that the receiving party demonstrate the exclusion through contemporaneous written records. This establishes a clear evidentiary standard and discourages frivolous exclusion claims.
Combine Exclusions Thoughtfully
Be careful about how exclusions interact. For example, information could be partially public and partially confidential. Your NDA should address whether an exclusion applies to an entire body of information or only to the specific portions that meet the exclusion criteria.
Common Mistakes with Exclusions
Omitting Exclusions Entirely
Some NDAs, particularly hastily drafted ones, leave out exclusions altogether. This is a significant enforceability risk. Courts may refuse to enforce an NDA they consider overbroad.
Making Exclusions Too Broad
Going too far in the other direction — making exclusions so broad that they swallow the confidentiality obligations — also undermines the NDA. Exclusions should be reasonable safety valves, not escape hatches.
Inconsistent Language
Make sure the exclusion language is consistent with the rest of the NDA. If the definition of confidential information uses certain terminology, the exclusions should use the same terms to avoid confusion.
Build Your NDA with Proper Exclusions
PactDraft generates NDAs that include all appropriate exclusions, properly drafted and tailored to your specific situation. The platform ensures your agreement is both protective and enforceable by including the right balance of confidentiality obligations and reasonable carve-outs. Create your customized NDA in minutes.