Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Non-Disclosure Agreements (NDAs) are one of the simplest ways to protect your business’ confidential information. If you’re sharing trade secrets with a supplier, investor, contractor or potential partner, an NDA sets out ground rules so your information isn’t misused or leaked.
But what if someone breaches your NDA - can they actually go to jail? And, as a business owner, what can you do to reduce the risk and enforce your rights if things go wrong?
In this guide, we’ll answer these questions from a small business perspective. We’ll cover when criminal risk can arise (and when it doesn’t), what remedies are usually available, and how to draft NDAs that hold up in Australia.
What Is An NDA (And Why Do Businesses Use Them)?
An NDA is a contract that requires one or both parties to keep specified information confidential and to only use it for a permitted purpose. You’ll typically use an NDA before sharing business plans, pricing models, formulas, customer lists, code, product roadmaps, supply terms or unique processes.
You might choose a one-way NDA (only one party shares secrets) or a Mutual Non-Disclosure Agreement (both parties share). The key purpose is simple: prevent unauthorised disclosure or use of your confidential information, and give you clear remedies if a breach occurs.
NDAs sit alongside your other contracts. For example, you’ll often use a Non-Disclosure Agreement early in discussions, then roll tailored confidentiality clauses into the main supply, services or employment agreement once you proceed.
Can You Go To Jail For Breaking An NDA In Australia?
In short, breaching an NDA is usually a civil matter, not a criminal one.
An NDA is a contract. If someone breaches it, the usual consequences are civil remedies - such as injunctions (to stop further disclosure), damages (to compensate your loss), delivery up or destruction of materials, and potentially an account of profits (handing over profits made using your information). These remedies are enforced through the civil courts, not the criminal system.
That means simply breaking an NDA does not, by itself, send someone to jail.
However, there are important exceptions where criminal liability can arise - not because the document is an NDA, but because the conduct linked to the breach crosses into criminal territory. We cover those scenarios below.
What Actually Happens If Someone Breaches Your NDA?
If you believe your confidential information has been misused or disclosed without permission, the path you take is typically civil and strategic:
- Identify the breach quickly, preserve evidence and limit further disclosure if you can (e.g. revoke access credentials).
- Send a carefully drafted letter demanding the breach stop and setting out your rights - often a formal Cease and Desist Letter.
- Apply for urgent court orders (injunctions) if necessary to prevent ongoing harm, particularly where a launch, sale or publication is imminent.
- Pursue compensation or other civil remedies for breach of contract, which may include damages, delivery up and destruction of copies, or an account of profits.
- Consider negotiated outcomes like undertakings, corrective actions and settlement deeds to resolve the dispute efficiently.
Courts will look closely at the NDA’s wording. Clear definitions of “Confidential Information”, fair exclusions, reasonable purpose limits, and practical obligations (return, destruction, security) all make enforcement easier. If an NDA is vague, overreaching or poorly drafted, it becomes harder to prove a breach and your losses.
When Could Criminal Liability Enter The Picture?
While breaching an NDA itself isn’t a crime, some breach scenarios involve separate criminal conduct. This is where jail becomes a (rare) possibility:
1) Breaching A Court Order Or Contempt Of Court
If you obtain a court order (for example, an injunction that restrains disclosure) and the other party breaches that order, they may be in contempt of court. Contempt can attract fines and, in serious cases, imprisonment. The criminal exposure here comes from defying the court, not the NDA itself.
2) Computer Misuse Or Hacking
If someone accesses your systems without authorisation to obtain confidential information - for instance, by guessing credentials, installing malware or bypassing security - that conduct may be a criminal offence under computer misuse laws. In this case, the conduct (unauthorised access or modification of data) is criminal irrespective of any NDA.
3) Theft, Fraud Or Dishonest Conduct
Taking physical documents, devices or storage media, or engaging in deception to obtain or use confidential information, may amount to theft or fraud under state and territory crimes legislation. Again, any potential jail term arises from the criminal act, not the fact there was an NDA.
4) Official Secrets And Special Regimes
Where government secrets or national security-related information are involved (for example, some Commonwealth information regimes), disclosure can be a criminal offence. This is uncommon for most small businesses, but if you work with government or defence, be alert to special secrecy obligations that sit outside a commercial NDA.
The bottom line: most commercial NDA breaches are civil. Jail risk appears only where the breach involves separate criminal conduct or defiance of a court order.
How To Draft NDAs That Hold Up (And Don’t Create Unintended Risk)
Strong NDAs reduce the chance of disputes and make enforcement faster if you need it. Here’s what Australian small businesses should build in.
Choose The Right Form: Agreement Or Deed
NDAs can be drafted either as a contract supported by consideration, or as a deed. A deed can be useful where consideration is uncertain (for example, during early, exploratory discussions). If you’re weighing up formats, it helps to understand what is a deed and when you’d use one.
Use Clear, Targeted Definitions
Define “Confidential Information” precisely. Avoid catch-all definitions that try to sweep in everything the other party already knows or can lawfully obtain elsewhere. Include sensible exclusions - information that is public, independently developed, known prior to disclosure, or disclosed by law.
Limit The Purpose And Set Practical Obligations
State exactly how the information may be used (for example, only to evaluate a proposed partnership) and prohibit all other uses. Require appropriate security, restrict copying, and set out return and destruction processes at the end of discussions or the project.
Consider The Term
Confidentiality is not always forever. Some information loses sensitivity over time; other information (like a secret formula) may need longer protection. Specify a realistic protection period and align it with how the business value of the information changes.
Think About Who May Receive The Information
If the other party needs to share your information with advisers, employees or subcontractors, require limited onward disclosure under equivalent confidentiality obligations. This keeps your protections intact through the chain.
Execution Matters
Make sure the NDA is properly executed. If you’re signing on behalf of a company, you can rely on statutory methods of signing documents under section 127, and in most cases e-signatures are acceptable - see the rules on wet ink vs electronic signatures to choose a compliant process.
Don’t Overreach
Courts look unfavourably on NDAs that overreach or operate like disguised non-compete restraints. Keep the restrictions tied to genuine confidentiality, and use separate, reasonable restraint clauses (in your main services, supplier or employment contracts) where needed and lawful.
Use The Right Type For The Situation
If both sides are sharing secrets, use a balanced Mutual Non-Disclosure Agreement. If only you’re disclosing, a one-way Non-Disclosure Agreement is usually more appropriate. For cross-border deals, adapt the terms to the governing law and enforcement options you’ll actually rely on.
Practical Steps To Prevent And Respond To NDA Breaches
Prevention is better than cure. Here’s a practical workflow we recommend owners and managers follow.
Before You Share Any Information
- Scope your NDA to the actual deal stage. Early chats? Keep the term short and purpose tight. Deep diligence? Expand the definition and obligations.
- Label documents “Confidential”, separate sensitive data in a secure folder or data room, and restrict access on a need-to-know basis.
- Pair the NDA with good hygiene: access controls, audit logs, offboarding checklists and confidentiality clauses in your Employment Contract and contractor agreements.
- If you’re dealing internationally, consider jurisdiction and service of process. In some cases, an international NDA agreement or additional local law addendum is sensible.
If You Suspect A Breach
- Act quickly to preserve evidence (emails, access logs, downloads, messages). Speed matters - both for stopping the leak and proving loss.
- Contain further disclosure by revoking access, requesting return/destruction and reminding the counterparty of their obligations in writing.
- Issue a targeted Cease and Desist Letter and seek undertakings to prevent ongoing harm.
- Consider urgent injunctive relief where there’s imminent publication, launch or transfer of your data.
- Assess civil claims (including breach of contract) and whether any criminal conduct (e.g., hacking or theft) should be reported to authorities. This is rare but important where it applies.
- Where appropriate, negotiate a commercial resolution - for example, corrective actions, assurances, monitoring, contributions to your costs, and a settlement deed to close the issue.
Throughout, keep your response proportionate and documented. Ideally, your NDA will specify notice procedures, dispute resolution and governing law so you have a clear path to enforce your rights.
Key Takeaways
- Breaking an NDA is generally a civil matter in Australia; jail is not a typical outcome for breach of contract alone.
- Criminal liability can arise only where the breach involves separate criminal conduct (like hacking, theft or fraud) or defies a court order (contempt).
- Effective NDAs use clear definitions, sensible exclusions, purpose limits, security and return obligations, and the right form (agreement or deed) for the context.
- Execution and process matter - use compliant company execution, allow e-signatures where appropriate, and back up your NDA with internal access controls and staff confidentiality clauses.
- If a breach occurs, move fast: preserve evidence, issue a cease and desist, seek injunctions where needed, and pursue civil remedies proportionately.
- Balancing prevention, smart drafting and a measured enforcement strategy will protect your confidential information without overreaching or escalating unnecessarily.
If you’d like a consultation on NDAs and confidentiality protection for your business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








