NDA Red Flags in Indian Contracts: A Clause-Level Guide

An NDA is only as strong as its weakest clause, and in India that matters more than in many jurisdictions because there is no standalone trade secrets statute. Protection for confidential business information rests on the contract itself, supported by the common law action for breach of confidence and the general principles of the Indian Contract Act, 1872. If the drafting is loose, there is no statute waiting underneath to fill the gap. The red flags below are ones that appear regularly in NDAs circulated in Indian commercial practice.

Red flag: a perpetual tail with no survival logic

Two different periods live inside every NDA, and drafts routinely conflate them. The term of the agreement controls how long information may be disclosed under it. The survival period controls how long the confidentiality obligation binds information already disclosed. A well-drafted NDA states both. A defective one states a two-year term and leaves the reader guessing whether any obligation exists on day 731 for material shared on day 30.

Perpetual obligations are not automatically void, but they are best reserved for genuine trade secrets, source code and formulae rather than every attachment. A blanket perpetual tail creates an indefinite retention and audit burden on the receiving party and is difficult to police. Note also that duration and limitation are separate questions: under Article 55 of the Schedule to the Limitation Act, 1963, a suit for compensation for breach of contract not otherwise specifically provided for is generally subject to a three-year period running from the breach, or from the date a continuing breach ceases. Confirm the Article applicable to your cause of action. A longer tail therefore widens the window in which a fresh breach can occur rather than extending the time you have to act once it does.

Red flag: missing carve-outs

Five carve-outs are standard, and an NDA missing any of them should be queried before signature.

• Information already lawfully in the receiving party's possession, without an obligation of confidence, before disclosure.
• Information that is public, or becomes public other than through a breach of the agreement.
• Information lawfully received from a third party who was not under a restriction.
• Information independently developed by the receiving party without reference to the disclosed material. Without this, a recipient already building in the same space inherits a contamination argument every time it ships a comparable feature.
• Disclosure required by law, a court, a regulator or a stock exchange, with an obligation to notify the discloser and cooperate in seeking protective relief to the extent legally permitted.

The legally compelled disclosure carve-out is frequently dropped and is among the most dangerous to omit. A receiving party may be compelled to disclose by a court under the Code of Civil Procedure, 1908, by an investigating agency, or by a regulator such as SEBI or the Reserve Bank of India. Without the carve-out, the recipient is caught between contractual breach and statutory non-compliance. Section 23 of the Indian Contract Act, 1872 renders an agreement void where its object or consideration is unlawful or opposed to public policy, so a clause purporting to bar disclosure to a statutory authority is unlikely to be enforced in any event. Draft the carve-out properly rather than relying on that.

Red flag: a one-sided definition

Check whether an NDA described as mutual actually is. The tell sits in three places: whether Confidential Information is defined by reference to only one party's disclosures, whether obligations and remedies run both ways, and whether the carve-outs apply to both parties. A definition capturing 'all information disclosed, whether or not marked confidential, in any form, at any time', combined with no carve-outs and no marking discipline, is unworkable for the receiving party's staff and invites a court to read it down.

The mirror-image problem is a residuals clause permitting the receiving party to use information retained in the unaided memory of its personnel. It is a legitimate ask from a technology recipient and a serious erosion for a discloser. Whichever side you are on, notice it rather than skim past it.

Red flag: no return-or-destroy obligation

An NDA that never says what happens to the material leaves your information on somebody's laptop indefinitely. A usable clause specifies the trigger (expiry, termination or written request), the deadline, the treatment of copies, extracts and derivatives, and certification by an authorised officer of the receiving party.

It also needs realistic exceptions. Disaster-recovery backups that are not readily accessible cannot practically be purged on demand, and records may have to be retained under the Companies Act, 2013, the governing income-tax legislation or GST law. Note that the Income-tax Act, 2025 has replaced the Income-tax Act, 1961, so verify the current retention provision against the bare Act rather than relying on a section number carried over from an older template. The workable position is to permit retention where legally required or held in routine backups, with the confidentiality obligation continuing for as long as the copy exists.

Where the material includes personal data, retention and erasure are governed separately by India's data protection framework. The Digital Personal Data Protection Act, 2023 received Presidential assent on 11 August 2023, and the Digital Personal Data Protection Rules, 2025 have since been notified in the Gazette; they are not a draft. Commencement is phased, with different provisions taking effect at different points rather than all at once. Confirm the exact provisions and the dates that apply to you from the Gazette notification and the material published by the Ministry of Electronics and Information Technology before fixing any compliance date in a contract.

Red flag: vague governing law and forum

'The courts of India shall have jurisdiction' is not a forum clause. Name the governing law, name the seat or the court, and check that the choice is one the law will respect. Section 28 of the Indian Contract Act, 1872 voids agreements that absolutely restrict a party from enforcing rights before ordinary tribunals, subject to the saving for arbitration. Parties may agree that only one of two or more courts that already have jurisdiction will hear disputes, but they cannot confer jurisdiction on a court that has none, so an exclusive jurisdiction clause naming a city with no connection to the parties or the cause of action is a weak clause.

If the NDA arbitrates, check that the clause is complete under the Arbitration and Conciliation Act, 1996: seat rather than merely venue, number of arbitrators, appointment mechanism, language and rules. If it litigates, remember that Section 12A of the Commercial Courts Act, 2015 requires pre-institution mediation for commercial suits that do not contemplate urgent interim relief, which affects how quickly you can get before a judge.

Red flag: restraints smuggled into the NDA

Non-compete, non-solicitation and non-circumvention clauses frequently ride along inside NDAs. Section 27 of the Indian Contract Act, 1872 makes an agreement restraining anyone from exercising a lawful profession, trade or business void to that extent, subject to the statutory exception for the sale of goodwill. Restraints operating after the relationship ends are generally not enforced in India, while covenants operating during the subsistence of the contract are treated differently. Employee non-solicitation has produced more varied outcomes and should be checked against the current position before you rely on it. A confidentiality obligation is not itself a restraint of trade, which is a good reason to keep the two sets of clauses separate rather than bundled into one paragraph.

Red flag: overreaching remedies

A clause stating that the disclosing party 'shall be entitled to injunctive relief without proof of damage and without furnishing security' does not bind a court. Injunctive relief in India is discretionary and governed by the Specific Relief Act, 1963 and Order XXXIX of the Code of Civil Procedure, 1908. Similarly, where a fixed sum is named as compensation for breach, Section 74 of the Indian Contract Act, 1872 applies: the court awards reasonable compensation not exceeding the named amount. The figure operates as a ceiling rather than an entitlement, so a large number in an NDA buys less comfort than it appears to.

Red flag: execution and stamping gaps

Check who signed and whether they could. For a company, confirm authority through a board resolution or power of attorney rather than a designation on a signature block. Then confirm stamping: duty depends on the state of execution and the nature of the instrument, in some states under the Indian Stamp Act, 1899 as amended in its application to that state, in others under separate State Stamp Acts such as the Maharashtra Stamp Act, 1958 and the Karnataka Stamp Act, 1957. An instrument that is not duly stamped is inadmissible in evidence under Section 35 of the Indian Stamp Act, 1899 or the corresponding provision of the applicable State Stamp Act, which bites at precisely the moment you need the NDA. An insufficiently stamped instrument can generally be impounded and then admitted on payment of the deficient duty and the prescribed penalty, subject to the exceptions in the applicable Act, so the defect is usually curable but at cost and delay at exactly the wrong moment. For electronic execution, Section 10A of the Information Technology Act, 2000 recognises contracts formed through electronic means, while the First Schedule to that Act excludes certain classes of instrument. Verify the current stamp position for your state of execution against the applicable State legislation.

A five-minute review sequence

• Find the term and the survival period. If you cannot state both in one sentence, the clause needs redrafting.
• Count the carve-outs. Five is the baseline; note which are missing and why.
• Read the definition of Confidential Information and ask whether it binds both parties symmetrically.
• Locate the return-or-destroy clause, its trigger, its deadline and its retention exceptions.
• Read the governing law and dispute clause aloud. If it does not name a law and a specific forum or seat, it is unfinished.

How LexVio reviews NDAs

LexVio returns a 0-100 Legal Health Score on a reviewed NDA together with clause-level risk flags, so a missing carve-out or an absent survival period is shown as a located defect rather than a general warning. The score is LexVio's own assessment of the document as reviewed and is not weighted to your house playbook. Where you want the fix rather than the diagnosis, AI drafting produces tracked-change redlines exportable to Word. Across a portfolio, Nexus supports search by clause type and clause benchmarking, so you can see how your executed NDAs actually differ from your standard form. The decision on which deviations to accept remains a legal and commercial judgment for the professional handling the matter.