Non-Disclosure Agreement (NDA)
Template — South Africa
An attorney-drafted Non-Disclosure Agreement (NDA) template designed specifically for South African businesses. This comprehensive confidentiality agreement protects trade secrets, proprietary information, and sensitive business data under the South African common law of contract and the Protection of Personal Information Act 4 of 2013 (POPIA). Supports both mutual (bilateral) and unilateral (one-way) confidentiality obligations for negotiations, partnerships, employment, and investment discussions.
Drafted by qualified South African attorneys
Reviewed for compliance with current legislation · Last updated April 2026
Why Your Business Needs This Agreement
Trade Secrets Leaked to Competitors Without Legal Recourse
Without a signed NDA, a business that shares proprietary processes, customer lists, or pricing strategies with a potential partner or vendor has limited legal protection if that information ends up with a competitor. While South African common law recognises trade secret protection through the unlawful competition doctrine, proving the elements — that the information was confidential, that it was unlawfully appropriated, and that the disclosing party suffered damage — without a written agreement is extremely difficult and expensive. Many South African businesses discover this too late, spending hundreds of thousands of rands in High Court litigation with uncertain outcomes when a simple NDA would have provided clear contractual remedies.
POPIA Non-Compliance When Sharing Personal Information
South African businesses routinely share databases containing personal information — customer lists, employee records, contact directories — with potential partners, service providers, and advisors during commercial discussions. Without an NDA that includes POPIA-compliant provisions, both parties risk regulatory action from the Information Regulator. Section 21 of POPIA requires a written agreement where personal information is processed by an operator on behalf of a responsible party. The absence of such provisions can result in administrative fines of up to R10 million under Section 109, enforcement notices, and reputational damage when breaches are publicised.
Former Employees Using Confidential Information at Competitors
One of the most common confidentiality disputes in South Africa arises when a former employee joins a competitor and uses trade secrets, customer relationships, or proprietary processes acquired during their previous employment. Without a properly drafted NDA or confidentiality agreement, the former employer must rely on common law principles — proving that the information was a genuine trade secret (not merely general skill and knowledge) and that it was unlawfully used. This distinction, established in Faccenda Chicken Ltd v Fowler (applied in South African jurisprudence), is notoriously difficult to draw in practice. A well-drafted NDA clearly categorises what constitutes confidential information versus general knowledge, making post-employment enforcement far more straightforward.
Investor Due Diligence Exposing Sensitive Business Information
Fundraising inevitably requires sharing your most sensitive business information — financial models, growth projections, customer acquisition costs, technology architecture, and strategic plans — with potential investors who may also be evaluating your competitors. Without an NDA, there is no contractual barrier preventing an investor from sharing your information with a competing portfolio company or using the insights gained to make investment decisions that disadvantage your business. South African startups and growth companies are particularly vulnerable during Series A and later funding rounds, where multiple VCs and PE firms may be evaluating the opportunity simultaneously.
Unclear Confidentiality Boundaries in Joint Ventures and Partnerships
When two South African businesses explore a joint venture or strategic partnership, both parties necessarily share commercially sensitive information. Without a mutual NDA, there is no agreed definition of what constitutes confidential information, no clear permitted purpose for using that information, and no obligation to return or destroy information if the partnership does not proceed. This creates a situation where either party can argue that information shared during discussions was not intended to be confidential, or that it falls within the public domain. The resulting disputes can be extremely costly and often lead to the breakdown of the commercial relationship entirely.
Inability to Obtain Urgent Interdicts Without Clear Contractual Terms
When a breach of confidentiality occurs, speed is critical — every day that confidential information remains in the wrong hands increases the damage. To obtain an urgent interdict from the South African High Court under Uniform Rule 6(12), the applicant must demonstrate a clear right, among other requirements. Without a written NDA that clearly defines the confidential information and the receiving party's obligations, establishing a "clear right" becomes significantly more difficult, as the applicant must prove the existence and terms of an oral or implied agreement. A signed NDA provides the documentary evidence needed to move swiftly and obtain interdictory relief before the damage becomes irreparable.
What is a Non-Disclosure Agreement (NDA)?
A Non-Disclosure Agreement — also known as a confidentiality agreement — is one of the most critical and frequently used legal documents in South African commercial practice. It is typically the very first agreement signed in any business relationship, establishing the legal framework for protecting sensitive information before partnerships are formed, investments are discussed, employees are onboarded, or vendors are engaged. In South Africa, where the common law of contract governs confidentiality obligations, a well-drafted NDA provides certainty, enforceability, and practical protection that far exceeds the limited protections available under common law alone.
Under South African common law, trade secrets and confidential information enjoy a degree of protection through the actio legis Aquiliae (delictual action for unlawful competition) and the principles established in cases such as Atlas Organic Fertilizers (Pty) Ltd v Pikkewyn Ghwano (Pty) Ltd and Meter Systems Holdings Ltd v Naidoo. However, these common law remedies are reactive — they require the disclosing party to prove that information was confidential, that it was unlawfully obtained or disclosed, and that damage was suffered. A written NDA is proactive: it defines in advance what information is confidential, who may access it, how it must be protected, and what remedies are available for breach. This contractual certainty makes enforcement significantly easier and faster.
The Protection of Personal Information Act 4 of 2013 (POPIA) adds a critical regulatory layer when confidential information includes personal information as defined in Section 1 of the Act. Where an NDA covers the exchange of customer databases, employee records, or any data that identifies or can identify a natural person, the agreement must address POPIA's conditions for lawful processing under Chapter 3, the security safeguards required by Section 19, and the cross-border transfer restrictions under Section 72. A modern South African NDA that ignores POPIA obligations is fundamentally incomplete and exposes both parties to regulatory sanctions from the Information Regulator, including administrative fines of up to R10 million under Section 109.
This template supports both mutual (bilateral) NDAs — where both parties share and receive confidential information, such as during merger negotiations or joint venture discussions — and unilateral (one-way) NDAs — where only one party discloses information, such as when sharing trade secrets with a potential contractor or employee. The distinction matters legally because in a mutual NDA, both parties bear identical obligations, while in a unilateral NDA, the obligations fall primarily on the receiving party.
South African courts have consistently enforced reasonable confidentiality obligations. In Experian South Africa (Pty) Ltd v Haynes, the court upheld a confidentiality clause and granted an interdict preventing the former employee from using or disclosing the company's confidential customer information. The key to enforceability is reasonableness — the scope of confidential information must be clearly defined, the duration of obligations must be proportionate to the nature of the information, and the restrictions must not be so broad as to be unconscionable. This attorney-drafted template has been calibrated to meet these requirements, ensuring enforceability while providing comprehensive protection.
Whether you are a startup sharing your business plan with potential investors, a company engaging a new technology vendor, an employer onboarding a senior executive with access to trade secrets, or joint venture partners exploring a commercial collaboration, this NDA template provides the legal foundation for protecting your most valuable intangible assets under South African law.
Who Needs This
Want early access to the Non-Disclosure Agreement (NDA) template?
We'll email you the moment early access opens
South African courts enforce NDAs under the common law of contract and have granted urgent interdicts within 24-48 hours for confidentiality breaches under Uniform Rule 6(12)
Trade secrets are protected indefinitely under South African common law provided the information retains its secret character and the holder takes reasonable measures to maintain secrecy
POPIA imposes fines of up to R10 million and potential imprisonment for up to 10 years for non-compliant handling of personal information shared under an NDA
The Conventional Penalties Act 15 of 1962 allows pre-estimated damages clauses in NDAs, enabling enforcement without proving actual financial loss
Electronic signatures on NDAs are valid under Section 13 of ECTA (Electronic Communications and Transactions Act 25 of 2002) provided the method is reliable and appropriate
Key Clauses Included
This Non-Disclosure Agreement (NDA) template covers 11 essential sections, each drafted by South African attorneys.
Definition of Confidential Information
This section provides a comprehensive, layered definition of what constitutes confidential information under the agreement. It covers trade secrets (formulas, processes, algorithms, source code), business information (financial records, business plans, pricing strategies, customer and supplier lists), technical information (designs, specifications, prototypes, research data), and any other proprietary information disclosed in writing, orally, or through observation. Critically, it also sets out the standard exclusions recognised by South African courts: information that is or becomes publicly available through no fault of the receiving party, information already known to the receiving party before disclosure, information independently developed without reference to confidential information, and information received from a third party without breach of any obligation of confidence.
Obligations of the Receiving Party
Sets out the core duties of the party receiving confidential information. The receiving party must hold all confidential information in strict confidence, use it only for the stated purpose (the "permitted purpose"), restrict access to authorised personnel on a need-to-know basis, implement reasonable security measures to prevent unauthorised access or disclosure, and not copy or reproduce confidential information except as reasonably necessary for the permitted purpose. The standard of care required is typically at least the same degree of care the receiving party applies to its own confidential information, but in no event less than a reasonable standard. This section also addresses the receiving party's vicarious liability for breaches by its employees, agents, or subcontractors.
Permitted Disclosures
Defines the narrow circumstances in which disclosure of confidential information is permitted without constituting a breach. These include disclosure to the receiving party's professional advisors (attorneys, auditors, tax consultants) who are bound by their own professional confidentiality obligations, disclosure to employees and directors who need access for the permitted purpose and who have signed individual confidentiality undertakings, and disclosure required by law, regulation, or court order — subject to the obligation to provide the disclosing party with prior written notice (where legally permissible) so that the disclosing party may seek a protective order or other remedy. Under Section 69 of the Companies Act 71 of 2008, certain disclosures may also be required to regulatory bodies such as CIPC.
Duration of Confidentiality Obligations
Specifies the period during which confidentiality obligations remain in force. For general business information, obligations typically apply for a defined period of two to five years from the date of disclosure. For trade secrets — information that derives its economic value from being secret and is subject to reasonable measures to maintain its secrecy — obligations continue indefinitely for as long as the information retains its character as a trade secret. South African courts have upheld perpetual confidentiality obligations for genuine trade secrets, recognising that their value depends entirely on their secrecy. The section also addresses the survival of obligations beyond termination or expiry of the agreement itself.
Return and Destruction of Confidential Information
Imposes obligations on the receiving party to return or destroy all confidential information upon termination of the agreement, expiry of the permitted purpose, or upon written request from the disclosing party. This includes physical documents, electronic files, copies, summaries, analyses, and any materials derived from confidential information. The receiving party must provide a written certification of destruction signed by an authorised representative. The section includes practical exceptions for copies retained in automated backup systems or as required by law or regulatory obligations, provided these retained copies remain subject to the confidentiality obligations for the duration of their retention.
Intellectual Property Reservation
Clarifies that no disclosure of confidential information under the NDA grants the receiving party any licence, ownership, or other intellectual property rights in the disclosed information. All intellectual property rights remain with the disclosing party or the relevant rights holder. This is critical under the South African Copyright Act 98 of 1978, where the first owner of copyright is generally the author — without an express reservation, a receiving party might argue that disclosure implied a licence to use the information commercially. The section also addresses the prohibition on reverse engineering, decompilation, or analysis of disclosed materials to derive trade secrets.
POPIA Compliance Provisions
Addresses the intersection of confidentiality and data protection where the confidential information includes personal information as defined in Section 1 of POPIA. The section establishes which party is the responsible party and which is the operator (if applicable), imposes POPIA-compliant security measures under Section 19, requires breach notification in accordance with Section 22, and addresses cross-border transfer restrictions under Section 72. Where the NDA involves the sharing of databases, customer lists, or employee records containing personal information, these provisions ensure both parties meet their statutory obligations to the Information Regulator and affected data subjects.
Non-Solicitation and Non-Circumvention
Prevents the receiving party from using confidential information to solicit the disclosing party's employees, clients, or suppliers, or to circumvent the disclosing party in business opportunities that were the subject of the confidential disclosure. In the context of potential acquisition or investment discussions, this clause prevents a party from using disclosed customer lists or supplier contracts to approach those relationships directly. Under South African common law, restraint of trade principles (as established in Magna Alloys and Research (SA) (Pty) Ltd v Ellis) apply — the clause must be reasonable in scope and duration to be enforceable.
Remedies for Breach
Acknowledges that a breach of confidentiality obligations may cause irreparable harm that cannot be adequately compensated by monetary damages alone, and provides for a range of remedies. The disclosing party may seek an urgent interdict (injunction) from the High Court to prevent further disclosure — South African courts have a well-established procedure for urgent applications under Uniform Rule 6(12). The section also provides for contractual damages, agreed penalty clauses (enforceable under the Conventional Penalties Act 15 of 1962), and the right to claim consequential damages where the breach causes quantifiable financial loss. The inclusion of a pre-estimated damages clause can expedite enforcement by avoiding the need to prove actual loss.
No Obligation to Disclose or Transact
Makes clear that the NDA does not obligate either party to disclose any particular information or to proceed with any transaction, partnership, or business relationship. This is essential in the pre-contractual context where NDAs are commonly used — it preserves each party's freedom to walk away from negotiations without liability, consistent with the South African common law principle that there is no duty to negotiate in good faith absent an express contractual commitment. The disclosing party retains sole discretion over what information to share and when.
Dispute Resolution and Governing Law
Specifies that the agreement is governed by the laws of the Republic of South Africa and establishes the dispute resolution process. Given the urgent nature of most confidentiality breaches, the template provides for the right to approach the High Court for urgent interim relief (interdicts) while establishing mediation followed by binding arbitration under the Arbitration Foundation of Southern Africa (AFSA) rules as the primary mechanism for substantive disputes. This dual-track approach ensures that time-sensitive breaches can be addressed immediately through the courts while the underlying dispute is resolved through cost-effective, confidential arbitration rather than protracted public litigation.
South African Law Compliance
South African Common Law of Contract
NDAs are primarily governed by the South African common law of contract, which requires consensus (agreement), capacity, legality, and possibility of performance for a valid contract. The common law also provides the foundational principles of trade secret protection through the actio legis Aquiliae and the unlawful competition doctrine. In Atlas Organic Fertilizers v Pikkewyn Ghwano, the Appellate Division confirmed that the misappropriation of trade secrets constitutes unlawful competition, entitling the aggrieved party to damages and interdictory relief. A written NDA builds on this common law foundation by providing contractual certainty about what is confidential, the standard of care required, and the remedies available — making enforcement substantially easier than relying on common law alone.
Protection of Personal Information Act 4 of 2013
POPIA is directly relevant whenever confidential information shared under an NDA includes personal information — defined in Section 1 as information relating to an identifiable natural or juristic person. Section 19 requires both parties to implement appropriate technical and organisational measures to secure personal information against loss, damage, or unauthorised access. Section 22 mandates notification to the Information Regulator and affected data subjects in the event of a data breach. Section 72 restricts cross-border transfers of personal information to countries with adequate data protection legislation or where the data subject has consented. The NDA must ensure both parties comply with these provisions, as non-compliance carries administrative fines of up to R10 million under Section 109 and potential criminal liability under Section 107.
Conventional Penalties Act 15 of 1962
This Act governs penalty clauses (pre-estimated damages provisions) in South African contracts, including NDAs. Section 1(1) provides that a penalty stipulation in a contract is enforceable, subject to the court's discretion under Section 3 to reduce the penalty if it is out of proportion to the prejudice suffered. Including a reasonable penalty clause in an NDA provides a significant enforcement advantage — the disclosing party does not need to prove actual damages but can claim the agreed penalty amount upon proof of breach. South African courts will enforce these clauses provided the amount is a genuine pre-estimate of likely loss and not punitive or unconscionable.
Copyright Act 98 of 1978
The Copyright Act is relevant where confidential information includes copyright-protected works such as software code, technical drawings, architectural plans, reports, or marketing materials. Under Section 21, the first owner of copyright is generally the author. The NDA must expressly provide that disclosure of copyright-protected materials does not transfer or licence any intellectual property rights to the receiving party. Section 11B protects computer programs, and Section 44 governs the assignment and licensing of copyright — both relevant when technical trade secrets are shared under an NDA. Without a clear IP reservation clause, a receiving party could argue an implied licence to use disclosed materials.
Common Law Doctrine of Unlawful Competition
South African courts recognise the misappropriation of trade secrets as a form of unlawful competition actionable under the extended actio legis Aquiliae. In Schultz v Butt and Dun and Bradstreet (Pty) Ltd v SA Merchants Combined Credit Bureau (Cape) (Pty) Ltd, the courts confirmed that using another party's confidential business information for competitive purposes is wrongful and gives rise to delictual liability. While this common law protection exists independently of any NDA, a written confidentiality agreement strengthens the claim by providing evidence of the confidential nature of the information, the parties' consensus on its protection, and the specific obligations that were breached.
South African businesses are lining up for My-Contracts — be first in when we launch
Mutual NDA vs One-Way NDA
Choosing the right NDA structure depends on whether information flows in one direction or both. Using the wrong type can leave one party unprotected.
| Feature | Mutual (Bilateral) NDA | One-Way (Unilateral) NDA |
|---|---|---|
| Information flow | Both parties share and receive confidential information | Only one party (the disclosing party) shares confidential information |
| Obligations | Both parties bear identical confidentiality obligations to each other | Only the receiving party bears confidentiality obligations |
| Typical use case | Merger negotiations, joint ventures, partnership evaluations, technology collaborations | Sharing trade secrets with a contractor, investor pitch decks, employee onboarding |
| Complexity | More complex — must define obligations symmetrically for both parties | Simpler — obligations flow in one direction only |
| POPIA implications | Both parties may be responsible parties and operators depending on the data shared | Disclosing party is typically the responsible party; receiving party may be an operator under Section 21 |
| Negotiation dynamics | Generally easier to negotiate — both parties accept equal obligations | Receiving party may resist broad restrictions since obligations are one-sided |
| Enforcement | Either party can enforce against the other for breach | Only the disclosing party can enforce — the receiving party has no confidentiality claims |
| Duration considerations | Same duration applies to both parties — typically 2-5 years, indefinite for trade secrets | Duration applies only to the receiving party's obligations |
| Non-solicitation | Mutual non-solicitation of each other's employees and clients | Non-solicitation typically only restricts the receiving party |
| When to choose | When both sides need to share sensitive information to evaluate an opportunity | When only one party is disclosing and the other is purely receiving and evaluating |
Create Your Non-Disclosure Agreement (NDA) in Minutes
Our guided wizard walks you through every clause — no legal knowledge required. Attorney-drafted, South African law compliant.
Identify the parties and the type of NDA required
Determine whether you need a mutual (bilateral) NDA or a unilateral (one-way) NDA based on whether information will flow in both directions or only one. Collect the full legal names and registration details of both parties. If either party is a juristic person (company, close corporation, or trust), confirm the signatory's authority to bind the entity.
Define the confidential information and permitted purpose
Identify the specific categories of confidential information that will be shared — trade secrets, financial data, customer information, technology specifications, business plans, or other proprietary information. Define the permitted purpose clearly (e.g., "evaluating a potential joint venture in the renewable energy sector") so that any use outside this purpose constitutes a breach. The more precisely you define these terms, the easier the agreement is to enforce.
Set the duration and territorial scope
Determine the confidentiality period appropriate to the information being shared — typically two to five years for general business information, with indefinite protection for trade secrets. Set the territorial scope (South Africa, or broader if cross-border sharing is anticipated) and consider whether POPIA's cross-border transfer restrictions under Section 72 apply if information will be shared with parties outside South Africa.
Customise the template with POPIA and industry-specific provisions
If the confidential information includes personal information, activate the POPIA compliance provisions and consider whether a separate operator agreement under Section 21 is required. For regulated industries (financial services, healthcare, telecommunications), add any sector-specific confidentiality requirements. Review the penalty clause amount and ensure it represents a genuine pre-estimate of likely loss under the Conventional Penalties Act 15 of 1962.
Execute the agreement and implement information sharing controls
Have both parties sign the NDA before any confidential information is disclosed. Electronic signatures are valid under ECTA Section 13. Mark all confidential documents with a "Confidential" legend and implement access controls to track who receives what information. Maintain a register of disclosures to support any future enforcement action. Store the signed NDA securely and ensure both parties receive executed copies.
Frequently Asked Questions
A Non-Disclosure Agreement (NDA), also called a confidentiality agreement, is a legally binding contract that creates an obligation of confidentiality between the parties regarding specified sensitive information. In South Africa, while common law provides some protection for trade secrets through the doctrine of unlawful competition (as confirmed in Atlas Organic Fertilizers v Pikkewyn Ghwano), this protection is reactive and difficult to enforce — you must prove the information was confidential, that it was unlawfully obtained, and that you suffered damage. A written NDA is proactive: it defines exactly what information is protected, specifies the standard of care required, limits the duration and purpose of use, and provides clear contractual remedies including the right to seek an urgent interdict from the High Court. For South African businesses sharing trade secrets, customer data, financial information, or strategic plans with any third party, an NDA is not merely advisable — it is essential.
What You Get With This Template
Drafted specifically for South African law — compliant with common law principles, POPIA, ECTA, and the Conventional Penalties Act 15 of 1962
Supports both mutual (bilateral) and unilateral (one-way) confidentiality structures with a single customisable template
Comprehensive trade secret protection with indefinite duration for genuine trade secrets as recognised by South African courts
POPIA-integrated provisions for when confidential information includes personal information, addressing operator obligations and cross-border transfers
Clear contractual remedies including urgent interdict provisions, penalty clauses, and delivery-up rights that expedite enforcement in South African courts
Standard exclusions aligned with South African case law to prevent overreach and ensure enforceability
Non-solicitation and non-circumvention provisions to prevent misuse of disclosed business relationships and opportunities
Customisable decision points clearly marked throughout — no legal jargon without explanation, suitable for business owners to complete without attorney assistance