Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- Overview
Legal Issues To Check Before You Sign
- Is it a one-way or mutual NDA?
- How does it define confidential information?
- What can the receiving party use the information for?
- What exceptions apply?
- Who can access the information?
- How long do the obligations last?
- What happens to documents and data at the end?
- Does the NDA deal with intellectual property ownership?
- Is the governing law right for your deal?
- Will the NDA work alongside privacy obligations and other contracts?
Common NDA Mistakes
- Using a generic template without tailoring it
- Signing after the information has already been shared
- Assuming an NDA protects every business asset
- Defining confidential information too vaguely
- Ignoring practical handling issues
- Accepting harsh one-sided terms when you are the receiving party
- Forgetting about remedies and enforceability
- Key Takeaways
If you are about to share a business idea, customer list, pricing model, software concept, or supplier process, an NDA can help protect what makes your business valuable. But plenty of New Zealand founders make the same mistakes. They use a generic template that does not fit the deal, they sign the other side’s NDA without checking what counts as confidential information, or they assume an NDA automatically stops misuse in every situation.
The reality is that NDA contracts are useful, but only when they are drafted and used properly. A vague document may be hard to enforce. An overly broad one can slow down negotiations or make the other party walk away. A poorly timed NDA can also create friction where a more tailored contract clause would have done the job better.
This guide explains when New Zealand businesses usually use NDAs, what legal points to review before you sign, which mistakes come up most often, and how to make sure the agreement actually protects your information in a practical commercial setting.
Overview
NDA contracts are confidentiality agreements that set rules for how one or both parties can use, store, and disclose private business information. They are commonly used before commercial discussions, investment conversations, contractor engagements, product development work, and strategic partnerships.
A good NDA does not just say “keep this secret”. It clearly defines what is protected, who can access it, how long the obligations last, what exceptions apply, and what happens if the information is misused.
- Check whether the NDA is one-way or mutual.
- Define confidential information with enough detail to be useful.
- Review carve-outs for information already known, public, or legally required to be disclosed.
- Make sure the permitted use of the information is narrow and specific.
- Check who inside each business can receive the information, such as employees, advisers, and contractors.
- Review the confidentiality period and whether it is realistic for the type of information involved.
- Look for return, deletion, and storage obligations.
- Check dispute, enforcement, and governing law clauses for New Zealand suitability.
When New Zealand Businesses Use NDAs
Businesses usually use an NDA before they disclose commercially sensitive information to someone who does not already owe confidentiality obligations. The aim is to create clear contractual rules before the information leaves your control.
Talking to investors or potential buyers
Founders often want to show forecasts, margins, customer acquisition data, or product plans during investment and acquisition discussions. An NDA can help, especially where the discussion moves beyond a pitch deck into material that would be genuinely harmful if copied or shared.
That said, not every investor will sign one at an early stage. Some investors prefer to review high-level information first and only sign confidentiality terms later. This is where founders often get caught, because they reveal more than they intended before there is any signed protection in place.
Hiring contractors, developers, and consultants
If you are engaging a software developer, marketing consultant, product designer, manufacturer, or freelance operations specialist, they may need access to information that is central to your business. That could include source code, roadmaps, customer data, pricing structures, or internal systems.
In those situations, the confidentiality clause in the service agreement may be enough. In other cases, a separate NDA makes sense, especially before you sign the main contract or where discussions start informally and you are not ready to commit to the wider engagement yet.
Exploring joint ventures and strategic partnerships
Two businesses discussing a new collaboration may need to exchange technical know-how, sales data, or market strategy before deciding whether to proceed. A mutual NDA is often the right fit here because both sides are sharing sensitive information.
Before you rely on a verbal promise that “everything stays between us”, get the terms recorded properly in written terms. Verbal confidentiality promises can be difficult to prove, and they rarely deal with practical issues like who can access the information internally.
Sharing information with suppliers and manufacturers
A supplier may need drawings, formulations, specifications, packaging concepts, or sourcing arrangements to quote or produce your product. If that information gives you a market advantage, an NDA can reduce the risk of the supplier using it for another client or disclosing it more widely.
This matters particularly when your product has not yet gone public or where the supplier works with competing businesses.
Due diligence and business sales
If you are buying a business, selling one, or taking on a major commercial deal, due diligence often involves access to sensitive material. Financial reports, contracts, customer records, software assets, and operations documents may all be shared in a data room or direct exchange.
An NDA helps set the ground rules for reviewing that information and can also restrict use of the material if the deal does not proceed.
Internal business protection
Some businesses also use confidentiality deeds or NDA-style clauses with employees, founders, and shareholders. These situations often need more than a standalone NDA, because ownership of intellectual property, restraint issues, privacy compliance, and post-exit obligations may also be relevant.
For that reason, NDA contracts are often only one part of the wider legal package. They work best when they line up with your employment agreements, contractor terms, shareholder arrangements, and intellectual property provisions.
Legal Issues To Check Before You Sign
Before you sign a contract, the key question is whether the NDA actually protects the information you are about to disclose without creating unnecessary commercial risk for your business. The wording matters more than the document title.
Is it a one-way or mutual NDA?
A one-way NDA protects information flowing from one party to the other. A mutual NDA protects both sides because both expect to share confidential material.
If only your business is disclosing meaningful confidential information, a one-way NDA may be cleaner. If both businesses are revealing strategy, technical details, or financial information, a mutual NDA is often fairer and easier to negotiate.
How does it define confidential information?
This is one of the most important clauses in NDA contracts. If the definition is too narrow, useful information may fall outside the agreement. If it is too broad, it can become unrealistic and hard to manage.
A practical definition often covers information disclosed in writing, verbally, visually, electronically, or by inspection, and may include:
- business plans and forecasts
- pricing and margins
- supplier and customer information
- software, code, and technical material
- product specifications and prototypes
- marketing strategy and commercial negotiations
Some NDAs only protect information marked “confidential”. That can be risky in real business discussions, especially where information is shared in meetings or calls. If you are receiving the NDA, check whether the marking requirement is workable. If you are disclosing information, think carefully before accepting a narrow marking rule.
What can the receiving party use the information for?
The permitted purpose should be specific. Usually, the receiving party should only be allowed to use the information to assess or perform the proposed business relationship.
If the clause says the recipient can use the information for broad “business purposes” or similar wording, the protection may be weaker than you expect. The main risk is function creep, where information given for one discussion gets reused in another context.
What exceptions apply?
Most enforceable NDAs include sensible carve-outs. These usually cover information that:
- is already public, other than through a breach
- was already lawfully known by the receiving party
- is independently developed without using the confidential information
- must be disclosed by law, court order, or regulatory requirement
These exceptions matter because an NDA should not try to control information that is not genuinely confidential. But the drafting still needs care. For example, a legal disclosure clause should ideally require notice where permitted, so the disclosing party has a chance to respond.
Who can access the information?
The agreement should say whether employees, professional advisers, related companies, subcontractors, or investors can receive the information. Most businesses need some flexibility here.
The safer approach is to allow disclosure only to people who genuinely need to know the information for the stated purpose, and who are already bound by confidentiality obligations. If the draft allows unrestricted disclosure within a corporate group or to any adviser without limits, review that carefully before you sign.
How long do the obligations last?
Confidentiality periods vary depending on the type of information and the commercial context. Some NDAs last one to three years. Others impose longer obligations, especially where trade secrets or sensitive technical information are involved.
An unlimited confidentiality period is not always unreasonable, but it should fit the information. A short term may be inadequate for a long product development cycle. A very long term may be challenged in negotiations if the information is not especially sensitive.
What happens to documents and data at the end?
Check whether the receiving party must return, destroy, or delete confidential information when discussions end or on request. That includes copies, notes, summaries, and stored digital material.
In practice, complete deletion is not always simple because of backups, legal archives, or automated retention systems. Good drafting usually recognises operational limits while still requiring proper handling and no further use.
Does the NDA deal with intellectual property ownership?
An NDA does not automatically transfer ownership of intellectual property. It mainly restricts disclosure and misuse of information.
If you are sharing concepts, software specifications, designs, or branding material, check whether separate clauses or a related contract are needed for contract drafting to confirm who owns existing intellectual property and any new material created during the relationship.
Is the governing law right for your deal?
For New Zealand businesses, New Zealand governing law and dispute wording will often be more practical, especially for domestic arrangements. If the other party sends an overseas template, it may refer to another legal system, court structure, or enforcement process that is inconvenient and expensive.
This does not always make the NDA unsuitable, but it is a point worth negotiating before you accept the provider’s standard terms.
Will the NDA work alongside privacy obligations and other contracts?
If the information includes personal information, the Privacy Act 2020 may also be relevant. An NDA is not a substitute for a privacy notice or broader privacy compliance. You may still need proper authority to collect, use, store, and disclose personal information, especially if customer or employee data is involved.
You should also check consistency with related contracts. A supplier agreement, employment agreement, contractor agreement, or heads of agreement may already include confidentiality clauses. Mismatched documents can create confusion about which rules apply.
Common NDA Mistakes
Most NDA problems come from poor fit, poor timing, or poor follow-through. The document may exist, but it does not match how the business actually shares information.
Using a generic template without tailoring it
A template can be a starting point, but it should not be the final step. Different transactions need different confidentiality rules. A manufacturing deal raises different issues from investor talks or software development.
If the NDA does not reflect the actual information, timeframe, and commercial purpose, enforcement becomes harder and negotiations can get bogged down later.
Signing after the information has already been shared
This is very common in founder-led businesses. A conversation starts casually, trust builds quickly, and the sensitive material is already in the other party’s inbox before anyone asks for a signed agreement.
An NDA can sometimes be drafted to cover prior disclosures, but that is not always straightforward and may not fully solve the issue. The safer move is to deal with confidentiality before you send the detailed material.
Assuming an NDA protects every business asset
An NDA is not a catch-all protection tool. It does not register your trade mark, assign intellectual property, stop lawful competition in every form, or replace a properly drafted services or supply agreement.
For example, if a contractor builds software for you, confidentiality alone may not confirm ownership of the code. If you disclose a brand name, confidentiality does not create trade mark rights by itself. Founders often need a combination of contracts and intellectual property steps.
Defining confidential information too vaguely
If the agreement just refers to “all information concerning the business” without more detail, there may be arguments later about what was actually protected. A better NDA balances breadth with practical clarity.
Clear examples and a sensible structure make it easier for both parties to follow the rules and easier to prove a breach if something goes wrong.
Ignoring practical handling issues
Confidentiality is not just about legal wording. It is also about business process. If ten people have access to the same files, no documents are labelled internally, and information is shared across multiple channels, your position weakens.
Founders should think about:
- who is authorised to share sensitive material
- how documents are labelled and stored
- whether meeting notes and recordings are controlled
- how access is switched off when discussions end
Accepting harsh one-sided terms when you are the receiving party
Sometimes a business signs an NDA to receive information from a potential partner, supplier, or buyer. In that situation, your risk is different. You may be taking on broad obligations, long terms, and strict return requirements for information that turns out to have little real value.
Before you sign, check whether the obligations are proportionate. You do not want to accidentally restrict your own future work because the definition of confidential information is too wide or the permitted purpose is too narrow.
Forgetting about remedies and enforceability
Some businesses assume that if an NDA is breached, the problem will be easy to fix. In reality, once confidential information is disclosed, the commercial damage may already be done.
The contract should support practical enforcement, but the real protection often comes from limiting disclosure in the first place, sharing only what is needed, and sequencing information release carefully.
FAQs
Are NDA contracts legally enforceable in New Zealand?
Yes, NDA contracts can be legally enforceable in New Zealand if they are properly drafted, supported by a real commercial arrangement, and reasonable in scope. Clear definitions, realistic obligations, and a genuine confidentiality interest all help.
What is the difference between an NDA and a confidentiality clause?
An NDA is usually a standalone agreement focused on confidential information. A confidentiality clause is one part of a broader contract, such as a service agreement or employment agreement. Either can work, depending on the context.
Do I need a mutual NDA or a one-way NDA?
You need a mutual NDA if both sides will share sensitive information. A one-way NDA is usually enough if only one side is disclosing confidential material. The right choice depends on the actual flow of information, not just the stage of the deal.
Does an NDA protect ideas?
An NDA may help protect confidential ideas while they are being shared in confidence, but it does not automatically create intellectual property ownership or stop all similar independent development. If the idea has commercial value, you may also need intellectual property clauses and other legal protections.
When should I get an NDA reviewed?
You should get it reviewed before you sign, especially if the agreement involves core business information, technical know-how, customer data, overseas counterparties, or complex commercial negotiations. Early contract review is usually simpler and cheaper than fixing problems after disclosure.
Key Takeaways
- NDA contracts help protect sensitive business information, but only if the drafting matches the real transaction.
- The most important issues are the definition of confidential information, the permitted purpose, the exceptions, access rights, duration, and end-of-deal handling obligations.
- Founders often make avoidable mistakes by using generic templates, signing after disclosure, or assuming an NDA covers intellectual property ownership and other wider legal issues.
- New Zealand businesses should also check governing law, privacy implications, and consistency with related commercial contracts.
- Before you sign, make sure the NDA is practical for how your team will actually share, store, and control confidential information.
If you want help with confidentiality clauses, intellectual property protections, contract negotiation, and supplier or contractor agreements, you can reach us on 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.








