What Is Confidentiality? NDAs, Employment & Trade Secrets In NZ

If you’re running a small business, “confidentiality” probably comes up more often than you’d like - in supplier discussions, hiring, pitching to investors, or even just talking to a contractor about a new idea.

Most business owners understand the general concept: keep sensitive information private. The tricky part is turning that idea into practical protection you can rely on when something goes wrong.

This is where having a properly drafted confidentiality agreement (often called an NDA) becomes one of the most useful legal tools you can have from day one.

This article is general information only and not legal advice. Confidentiality obligations and enforcement can depend heavily on the facts and the documents in place.

What Does “Confidentiality” Mean In A Business Context?

In simple terms, confidentiality is the obligation to keep certain information private and not misuse it.

For NZ businesses, confidentiality usually shows up in three places:

• During discussions (for example, when you’re negotiating with a supplier, investor, potential buyer, or collaborator).
• In working relationships (employees, contractors, consultants, agencies, and service providers).
• In ongoing operations (where your “secret sauce” is the thing that gives you an edge).

When we talk about confidential information, it can include things like:

• customer lists and customer pricing
• marketing strategies and sales pipelines
• supplier terms and cost breakdowns
• product formulas, recipes, and manufacturing methods
• source code, technical documentation, prototypes and designs
• internal financials, budgets and forecasts
• business plans, pitch decks and expansion plans

Confidentiality is different from “privacy”, although there’s often overlap. Privacy is about personal information (like customer contact details or employee records) and is governed by the Privacy Act 2020. Confidentiality is broader - it can cover business information too. If your confidential information includes personal information, you’ll usually need both confidentiality protections and a solid Privacy Policy in place.

What Is A Confidentiality Agreement (And When Do You Need One)?

A confidentiality agreement is a contract where one or both parties agree to protect confidential information.

In practice, a confidentiality agreement is used to:

• define what information is “confidential”
• set rules for how it can be used (and what it can’t be used for)
• limit who the information can be shared with
• require secure storage and handling
• set a time period for the confidentiality obligations
• outline what happens if there’s a breach

In NZ, you’ll also hear confidentiality agreements called:

• NDAs (non-disclosure agreements)
• non-disclosure deeds (sometimes used when parties want a deed format)
• confidentiality clauses (built into other contracts rather than a standalone agreement)

So when should you consider using a confidentiality agreement?

Common Situations For A Confidentiality Agreement

• You’re sharing a new business idea with a developer, designer, manufacturer, or consultant.
• You’re hiring staff and they’ll have access to customer data, pricing, internal processes, or strategy.
• You’re engaging contractors and they’ll see systems and internal documents.
• You’re talking about selling your business, bringing in an investor, or entering a joint venture.
• You’re onboarding a supplier and need to disclose pricing, volumes, or product specifications.

Sometimes business owners wait until they “feel unsure” about someone to bring up confidentiality. But the best time to put a confidentiality agreement in place is before you disclose anything valuable - when everything is still friendly and everyone’s motivated to move fast.

One-Way Vs Mutual Confidentiality Agreements

There are generally two formats:

• One-way NDA: only one party discloses confidential information (common when you’re sharing your business information with a contractor or potential buyer).
• Mutual NDA: both parties disclose confidential information (common for partnerships, collaborations, joint ventures, or early-stage investor discussions).

Choosing the right structure matters, because it affects who is protected, what obligations exist, and how disputes play out later.

Confidentiality In Employment: Protecting Your Business When You Hire

If you have (or plan to have) employees, confidentiality protection shouldn’t be an afterthought.

Employees often have access to the most sensitive parts of your business - your customer relationships, sales systems, pricing margins, internal strategy, and day-to-day operations.

In many cases, confidentiality is handled through a confidentiality clause inside the Employment Contract, rather than a separate standalone NDA.

What Should A Good Employment Confidentiality Clause Cover?

While the right wording depends on your business, a strong employment confidentiality clause typically addresses:

• What counts as confidential information (and whether it includes information learned verbally, visually, and through systems).
• When the obligation applies (usually during employment and continuing after employment ends).
• What the employee can use information for (generally “only for the purpose of performing their duties”).
• Return of property and information (devices, documents, passwords, data exports, customer lists).
• Consequences of breach (disciplinary action, termination, and legal options).

It’s also common to pair confidentiality clauses with well-drafted workplace policies, especially where staff use company devices, handle customer data, or work remotely. This is where an Workplace Policy (or a set of policies) can help turn legal obligations into day-to-day rules your team can actually follow.

What If An Employee Leaves - Can They Take Customers Or Trade Secrets?

This is one of the most stressful scenarios for small businesses: a key staff member resigns and suddenly your customer list, pricing, or processes feel exposed.

Confidentiality helps - but it’s important to be realistic. Not everything an employee learns automatically becomes “confidential information” forever. For example:

• General skills and experience (like sales ability or industry knowledge) usually can’t be “owned” by the business.
• Genuine trade secrets (like formulas, unique processes, non-public pricing structures, or proprietary systems) are much more protectable.

If your employee has access to high-value information and could realistically move to a competitor (or start their own competing business), it’s often worth getting advice on whether you also need a restraint clause (like a non-compete or non-solicitation) in addition to confidentiality. These clauses need careful drafting to be enforceable and reasonable in the NZ context.

Trade Secrets And Confidential Information: What Are You Actually Protecting?

Confidential information is a broad category. A trade secret is a particular kind of confidential information that has commercial value because it’s not generally known.

For many small businesses, trade secrets are the “engine room” of the business - the thing that makes you different, faster, cheaper, or better.

Examples Of Trade Secrets In Small Businesses

• a recipe, formula, or product method that isn’t public
• a supplier deal structure that gives you an edge
• a unique pricing model or quoting approach
• non-public customer segmentation and sales scripts
• manufacturing specifications and tolerances
• internal software tools, automations or workflows

Even if you don’t call something a “trade secret”, you might still be relying on it as one.

How Do You Strengthen Trade Secret Protection In Practice?

Courts tend to look at what you actually did to keep information confidential. So beyond contracts, your business practices matter. Common steps include:

• restricting access on a “need to know” basis
• using password protection and role-based permissions
• storing key documents securely (and controlling downloads/exports)
• marking sensitive documents as “Confidential”
• training staff on confidentiality expectations and processes
• using written agreements for employees, contractors and partners

If your business handles personal data as part of your confidential information (for example, customer records), you should also be thinking about Privacy Act compliance and data-handling rules. If something goes wrong, having a data breach response plan can make a big difference to how quickly and safely you can respond.

What Should Be Included In A Confidentiality Agreement NZ Businesses Use?

A confidentiality agreement is only as good as its fit for your situation. A generic “template” can easily miss the exact risk you’re trying to manage - especially if you’re sharing sensitive information with a contractor, collaborator, or potential buyer.

That said, most confidentiality agreements used by NZ businesses cover a core set of terms.

Key Clauses Most Confidentiality Agreements Include

• Parties: who is disclosing and who is receiving the information (and whether related entities are included).
• Definition of confidential information: broad enough to protect you, but clear enough to be workable.
• Purpose: why the information is being disclosed (this is often a key enforcement point).
• Non-disclosure obligations: rules preventing sharing with third parties, except in limited circumstances.
• Non-use obligations: rules stopping the recipient from using your information to compete, copy, or gain an unfair advantage.
• Permitted disclosures: for example, to employees/advisers who also need to know and are bound by confidentiality.
• Security obligations: how information must be stored, protected, and handled.
• Return or destruction: what happens to documents and data once discussions end.
• Term: how long confidentiality lasts (and whether certain obligations survive indefinitely for trade secrets).
• Remedies and enforcement: what you can do if there’s a breach (including urgent steps like seeking an injunction).

Common Mistakes We See With Confidentiality Agreements

When business owners run into trouble with confidentiality, it’s often because the document (or process) wasn’t quite right from the start. Common issues include:

• Signing the NDA too late (after you’ve already disclosed the valuable information).
• Using a template that doesn’t match the situation (for example, it doesn’t cover contractors, sub-contracting, or digital data handling).
• Not clearly limiting “purpose”, which can make it harder to show the other party misused the information.
• Not including practical return/destruction obligations, especially where information has been shared via cloud platforms.
• Assuming confidentiality is enough on its own, when you may also need IP clauses, restraint clauses, or solid workplace policies.

If your confidentiality agreement is being used alongside other legal documents (like supplier agreements, contractor agreements, or service terms), it’s also worth making sure the documents don’t contradict each other. In some cases, it’s cleaner to include confidentiality clauses inside a broader Service Agreement so all obligations sit in one place.

How Do You Actually Enforce Confidentiality If Something Goes Wrong?

Even with the best systems, breaches can happen - a former contractor reuses your materials, an employee takes a customer list, or a potential buyer leaks your financials.

When that happens, enforcement is usually about acting early, documenting clearly, and taking practical steps before the damage spreads.

Step-By-Step: What To Do If You Suspect A Breach

1. Contain the issue quickly. Change passwords, revoke access, and secure systems (especially for cloud drives, CRMs, and email).
2. Gather evidence. Save emails, messages, access logs, screenshots, and relevant documents showing what was shared and what was done with it.
3. Check what documents apply. Identify whether the obligations sit in an NDA, employment contract, contractor agreement, or another contract.
4. Send a formal notice. Often, the first step is a letter requiring the person to stop using/disclosing information and return/delete materials.
5. Consider urgent court action if needed. If disclosure or misuse is ongoing, you may need an injunction to stop the harm continuing.
6. Review and improve your process. After immediate risk is managed, tighten access controls and update your agreements and policies.

What enforcement looks like will depend on the context, what was shared, and how serious the harm is. It’s also worth remembering that if confidential information includes personal information, you may have additional obligations under the Privacy Act 2020 (including responding appropriately to privacy incidents).

If you’re building out your legal foundations more broadly (for example, you’re setting up a company structure or formalising founders’ roles), it’s also smart to align confidentiality obligations with your ownership documents like a Shareholders Agreement and, where relevant, a Company Constitution.

Key Takeaways

• A confidentiality agreement helps protect your business’s valuable information by clearly defining what’s confidential, how it can be used, and what happens if there’s a breach.
• Confidentiality comes up most often when you’re hiring employees, engaging contractors, negotiating deals, collaborating, or preparing for investment or a business sale.
• In employment, confidentiality is commonly dealt with inside an Employment Contract and supported by practical workplace policies so expectations are clear day-to-day.
• Trade secrets are a high-value category of confidential information, and your real-world security practices (access control, password protection, training) can matter just as much as the contract.
• Templates can be risky if they don’t match your situation - confidentiality clauses need to reflect how you actually share, store, and protect information in your business.
• If you suspect a breach, act early: secure access, gather evidence, check your contracts, and get legal advice before the issue escalates.

If you’d like help putting the right confidentiality agreement in place (or reviewing what you’re currently using), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.