Non-Disclosure Agreements in Hong Kong: Drafting, Enforcement, and Common Pitfalls

Introduction

Non-disclosure agreements (NDAs) — also known as confidentiality agreements — are among the most widely used commercial contracts in business, yet they are often given insufficient attention. A poorly drafted NDA can leave sensitive information inadequately protected, while an overly aggressive NDA can deter potential counterparties and fail to hold up when tested in court.

In Hong Kong, NDAs are governed by the ordinary principles of contract law, supplemented by equity's law of confidence. This guide provides practical guidance on drafting effective NDAs, understanding their scope and limitations under Hong Kong law, and what to do when confidential information is misused.

When Is an NDA Used?

NDAs are appropriate in a wide range of commercial contexts, including:

• Pre-transaction discussions (M&A, joint ventures, investment discussions) where sensitive financial, operational, or technical information is shared
• Employment relationships, to protect trade secrets and proprietary information from current and departing employees
• Technology licensing and development agreements, where source code, algorithms, or technical specifications are disclosed
• Supplier and vendor relationships involving access to proprietary processes, customer data, or business systems
• Due diligence exercises, where a potential acquirer or investor is given access to non-public information about the target

Key Clauses in a Hong Kong NDA

Definition of Confidential Information

The definition of "confidential information" is the most commercially important provision in any NDA. A definition that is too narrow may fail to protect genuinely sensitive information; one that is too broad may be unenforceable or commercially impractical.

A well-drafted definition should:

• Identify the categories of information covered (technical data, business plans, financial information, customer lists, intellectual property, etc.)
• Specify whether oral disclosures are covered (and if so, whether they must be confirmed in writing within a specified period)
• Exclude information that is already in the public domain, already known to the recipient, or subsequently received from a third party without restriction

Obligations of the Receiving Party

The core obligation of the NDA is to require the receiving party to keep the confidential information secret and to use it only for the agreed purpose. Standard obligations include:

• Not disclosing the information to third parties without the disclosing party's consent
• Using the information only for the permitted purpose
• Applying at least the same level of care to protect the information as the receiving party applies to its own confidential information (subject to a minimum standard of reasonable care)
• Restricting access to the information to employees and advisers on a strict need-to-know basis

Permitted Disclosures

NDAs typically carve out certain permitted disclosures, such as disclosures required by law, regulation, or court order, and disclosures to professional advisers (lawyers, accountants, etc.) who are themselves subject to confidentiality obligations. These carve-outs should be carefully drafted to avoid being used as a loophole.

Duration

The duration of the confidentiality obligation is a frequently negotiated point. Some NDAs provide for an indefinite obligation (appropriate where the information is a true trade secret that does not lose its sensitivity over time), while others provide for a fixed term (commonly two to five years). For NDAs in the context of M&A transactions, a fixed term of two to three years after the date of disclosure or the termination of discussions is common.

Return or Destruction of Information

A well-drafted NDA should require the receiving party to return or destroy confidential information (including copies and notes) upon request or at the end of the permitted purpose. In the digital age, true destruction of electronic information is increasingly difficult, and NDAs should address how electronic copies (including back-up copies) are to be handled.

Residuals Clause

A residuals clause allows the receiving party to use knowledge retained in unaided human memory (as opposed to recorded information) without restriction after the purpose of the NDA has ended. Residuals clauses are commonly included in technology NDAs to protect the mobility of personnel who cannot be expected to forget general knowledge and skills. Disclosing parties should resist residuals clauses where genuinely sensitive technical information is involved.

Injunctive Relief

NDAs commonly include a provision acknowledging that a breach would cause irreparable harm and that the disclosing party is entitled to seek injunctive relief without the need to prove actual damages. This provision can be important in practice, as it signals to the court that the parties contemplated this remedy and may assist in obtaining urgent interim relief.

Mutual vs Unilateral NDAs

A unilateral NDA imposes confidentiality obligations on one party only (the recipient of the confidential information). A mutual NDA imposes reciprocal obligations on both parties, reflecting the fact that both are disclosing sensitive information to the other. The choice between mutual and unilateral depends on the nature of the relationship — in pre-M&A discussions, both parties typically exchange confidential information and a mutual NDA is appropriate; in an employment context, the obligations typically run only from the employee to the employer.

Enforceability Under Hong Kong Law

NDAs are enforceable under Hong Kong contract law, subject to the following considerations:

• Consideration: A contract requires consideration to be enforceable. For standalone NDAs (not forming part of a wider agreement), consideration is typically the mutual exchange of promises (in a mutual NDA) or the provision of access to the confidential information (in a unilateral NDA). NDAs executed as deeds do not require consideration
• Reasonableness: While Hong Kong does not have a general statutory test of reasonableness for commercial contracts (unlike the UK's Unfair Contract Terms Act), courts will not enforce provisions that are contrary to public policy. Overly broad NDAs that attempt to gag employees from reporting genuine wrongdoing, for example, may not be fully enforceable
• Employment context: In employment NDAs, the scope of the obligation must be reasonable to be enforceable as a restraint of trade. An obligation that purports to prevent an employee from using general skills and knowledge acquired during their employment will not be upheld

Remedies for Breach

Where a party breaches an NDA, the following remedies may be available:

• Injunction: A court order requiring the receiving party to stop using or disclosing the confidential information. Urgent injunctions (interlocutory injunctions) can be obtained on short notice where there is a serious risk of ongoing harm
• Damages: Compensation for the financial loss caused by the breach. Proving loss can be difficult, particularly for intangible harm such as loss of competitive advantage
• Account of profits: Where the receiving party has made profits from the misuse of the confidential information, the disclosing party may seek an account of those profits as an alternative to damages
• Delivery up or destruction: A court order requiring the receiving party to deliver up or destroy materials containing the confidential information

In addition to contractual remedies, equity provides an independent cause of action for breach of confidence, which may be available even in the absence of a written NDA where the circumstances import an obligation of confidence.

Common Drafting Pitfalls

• Failing to identify the information with sufficient precision: Vague definitions make it difficult to establish a breach and to seek enforcement
• Omitting oral disclosures: Much commercially sensitive information is shared verbally — ensure the NDA clearly addresses oral disclosures
• Not addressing group companies and advisers: If the receiving party's group companies or professional advisers will have access to the information, the NDA should expressly address their obligations
• No return/destruction obligation: Without this, confidential information may remain in the recipient's possession indefinitely after the purpose has ended
• Signing too late: NDAs should be signed before confidential information is disclosed. Information disclosed before signing is generally not covered

How Alan Wong LLP Can Help

Alan Wong LLP assists businesses, individuals, and investors with the drafting, review, and negotiation of NDAs and confidentiality agreements in Hong Kong. Our services include:

• Drafting bespoke NDAs tailored to the specific transaction or relationship
• Reviewing and negotiating NDAs proposed by counterparties
• Advising on the enforceability of NDA provisions under Hong Kong law
• Advising on breach of confidence claims and seeking urgent injunctive relief
• Advising on employee confidentiality obligations and post-termination restrictions

Conclusion

A well-drafted NDA is a cost-effective and essential tool for protecting confidential information in commercial relationships. Given the ease with which information can be copied and disseminated in the digital age, investing in a properly drafted NDA at the outset of a commercial relationship is far more effective than trying to recover the position after a breach has occurred. Seek legal advice to ensure your NDA provides the protection your business genuinely needs.

This article is for general information purposes only and does not constitute legal advice. For advice on non-disclosure agreements or confidentiality matters, please contact Alan Wong LLP.