NDA Review

An NDA review is a five-part examination of a non-disclosure or confidentiality agreement, covering both unilateral and mutual structures across employment, business, and transactional contexts. It covers DTSA compliance review, structural and scope review, enforceability review, restrictive covenant interplay review, and compliance-floor verification. 

The Defend Trade Secrets Act, 18 U.S.C. § 1833(b), requires any NDA entered into or updated after May 11, 2016, that governs trade secrets or confidential information to include a whistleblower immunity notice, or the party seeking to enforce it forfeits the ability to recover exemplary damages and attorney's fees in a future misappropriation suit against that individual. Three lenses evaluate the agreement in a complete review: DTSA compliance review, structural and scope review, and enforceability review. An NDA review is a distinct activity from a severance agreement's confidentiality clause review, since an NDA governs an ongoing or prospective relationship while a severance confidentiality clause addresses a relationship already ending. 

The most commonly skipped step in an NDA review is confirming whether the agreement actually includes DTSA notice language or a cross-reference to a reporting policy document, since this omission is common even in sophisticated templates and directly limits available remedies later. Businesses drafting or receiving a first NDA before a deal discussion, employers updating employment-related confidentiality agreements, and individuals asked to sign an NDA before disclosing or receiving sensitive information all use this review before signing.

What Is an NDA Review?

An NDA review is the examination of a non-disclosure or confidentiality agreement to confirm its enforceability, quantify its disclosure and structural risk, and verify its compliance with the DTSA's notice requirement before a party signs. General contract law requires offer, acceptance, and consideration for an agreement to be enforceable, and a review confirms these elements are present alongside compliance with the specific statutory framework governing trade secret protection.

Three things an NDA review is not.

1. Not the same as reading the confidentiality obligation alone. The obligation states what information the parties must protect. A review evaluates the agreement's structural fairness, statutory compliance, and enforceability, but the confidentiality obligation itself is not addressed.
2. Not the same as contract negotiation. Review identifies and explains risk. Negotiation is the separate, later step of requesting specific changes from the counterparty.
3. Not the same as a severance agreement's confidentiality clause review. A severance clause addresses a relationship already ending, governed by distinct considerations such as the OWBPA and current NLRB precedent. An NDA review evaluates a document governing an ongoing or prospective relationship instead.

What Is the DTSA Whistleblower Notice Requirement, and Why Is It the Threshold Question?

The DTSA whistleblower notice requirement is the federal obligation, codified at 18 U.S.C. § 1833(b)(3)(A), requiring notice of whistleblower immunity in any contract or agreement, entered into or updated after May 11, 2016, that governs the use of a trade secret or other confidential information. The statute defines "employee" broadly under § 1833(b)(4) to include contractors and consultants, meaning the requirement extends well beyond traditional employment agreements to reach most NDAs signed with an outside party performing work.

An employer or disclosing party satisfies this requirement in one of two ways. The party can include the notice language directly in the agreement itself, stating that an individual cannot be held criminally or civilly liable for disclosing a trade secret made in confidence to a government official or attorney solely to report a suspected violation of law. Alternatively, § 1833(b)(3)(B) permits a cross-reference to a separate policy document setting out the party's own reporting policy for a suspected violation of law, satisfying the requirement without repeating the full notice text in every agreement.

The consequence for skipping this requirement is specific and quantifiable, not merely theoretical. Section 1833(b)(3)(C) bars recovery of exemplary damages and attorney's fees under the DTSA against an individual who was not given notice, even where that individual genuinely misappropriated a trade secret willfully and maliciously. A federal court applied this exact consequence in Xoran Holdings LLC v. Luick, No. 16-13703, 2017 U.S. Dist. LEXIS 147868 (E.D. Mich. Sept. 13, 2017), holding that the plaintiff's failure to provide the required notice precluded recovery of attorney's fees and exemplary damages from the defendants, regardless of the underlying misappropriation claim's merits.

This gap does not eliminate every available remedy. A claim brought instead under a state's Uniform Trade Secrets Act may still permit exemplary damages and attorney's fees, since the DTSA does not preempt existing state trade secret law, and a party who failed to provide DTSA notice retains the option of pursuing a parallel state law claim where one is available. This means the practical severity of a missing notice depends partly on which state's law applies alongside the federal claim.

Three DTSA notice rules for contract review.

1. Confirm the NDA's execution or amendment date falls after May 11, 2016, since the notice requirement applies to agreements entered into or updated after that date.
2. Confirm the notice appears directly in the agreement or through a proper cross-reference to a policy document, since an informal or verbal mention of whistleblower rights does not satisfy either statutory path.
3. Confirm whether a parallel state trade secret claim remains available as a fallback, since a missing DTSA notice limits federal remedies specifically but does not necessarily eliminate every avenue for recovering damages and fees.

Mutual vs. Unilateral NDAs and Trade Secret vs. Confidential Information Scope

A unilateral NDA protects one party's disclosures only, obligating a single receiving party to keep the disclosing party's information confidential without a reciprocal obligation running the other direction. A mutual NDA protects both parties' disclosures, structuring each side as both a disclosing party and a receiving party where genuine two-way information exchange occurs, such as in merger discussions or joint development projects.

The DTSA's specific statutory definition of "trade secret," found at 18 U.S.C. § 1839(3), covers information that derives independent economic value from not being generally known and that the owner has taken reasonable measures to keep secret. This definition is narrower than the broader, contractually defined category of "confidential information" most NDAs cover in addition to trade secrets, a category that can include material not rising to trade secret status under the statute. The DTSA notice requirement and its remedies attach specifically to trade secret misappropriation claims, meaning an NDA's protection for confidential information falling outside that narrower definition depends entirely on the contract's own enforceability rather than the DTSA framework.

What an NDA Review Includes

An NDA review includes six components: DTSA compliance review, structural and scope review, duration and survival review, carve-out and exception review, restrictive covenant interplay review, and compliance-floor verification. Each component targets a distinct financial or legal exposure in the agreement.

1. DTSA compliance review. The reviewer confirms the notice appears directly or through a proper policy cross-reference and checks the agreement's execution date against the statute's applicability threshold.
2. Structural and scope review. The reviewer confirms whether the agreement should be mutual or unilateral based on the actual information exchange contemplated.
3. Duration and survival review. The reviewer checks the confidentiality obligation's stated term for reasonableness.
4. Carve-out and exception review. The reviewer confirms the agreement includes standard exceptions for independently developed, publicly available, and rightfully obtained information.
5. Restrictive covenant interplay review. The reviewer checks whether the NDA contains any non-compete or non-solicitation language and evaluates its enforceability separately from the confidentiality terms.
6. Compliance-floor verification. The reviewer confirms the agreement does not attempt to waive the DTSA's whistleblower immunity or any other non-waivable statutory protection.

The Residual Clause Risk and Other High-Risk Provisions

A residual clause is language permitting the receiving party to use information "retained in unaided memory" after the engagement ends, without treating that retained information as a continuing confidentiality breach. This provision can undermine the NDA's core protection when drafted too broadly, since a receiving party's employees can claim broad, good-faith recollection of the disclosing party's sensitive information, using it in future work while relying on the residual clause as cover.

An indefinite or perpetual duration term creates a separate enforceability risk. A confidentiality obligation with no stated end date, applied broadly to information that would naturally lose its sensitivity over time, invites a court to find the term unreasonable, particularly where the underlying information does not qualify as a genuine trade secret capable of indefinite protection under the DTSA's own framework.

What an NDA Review Cannot Change

An NDA review identifies negotiable terms, and three categories of content sit outside what negotiation can alter regardless of legal representation.

1. The DTSA's whistleblower immunity itself, since no contract can waive this federal statutory protection regardless of the NDA's own language.
2. The statutory consequence for a missing notice, since this limitation on remedies cannot be cured retroactively once a specific dispute is already underway.
3. State public policy limits on an NDA's scope, since a confidentiality agreement functioning as a disguised restrictive covenant remains subject to the same reasonableness standards an actual non-compete clause would face.

Common Red Flags in NDAs

Common red flags in NDAs fall into five categories, and each creates a distinct legal or financial risk.

1. No DTSA whistleblower notice or policy cross-reference despite the agreement covering trade secrets, limiting available remedies in a future misappropriation dispute.
2. A definition of confidential information broad enough to capture material that is actually publicly available, creating an unreasonable and likely unenforceable scope.
3. A residual clause undermining the agreement's core protection by permitting broad use of information retained in unaided memory.
4. An indefinite duration with no reasonable end date, inviting an enforceability challenge.
5. Missing carve-outs for independently developed or rightfully obtained information, leaving the receiving party exposed even for information it never actually received from the disclosing party.

Fee Structure and the Review Process

A fixed-fee NDA review charges one set price for the full review instead of billing by the hour. The review process runs in five steps and takes three business days under standard turnaround, with a rush option available for a near-term signing deadline.

1. Submission. The party sends the NDA along with any referenced policy document intended to satisfy the DTSA cross-reference option.
2. Intake. The reviewer confirms the agreement's structure, mutual or unilateral, and the type of information involved to apply the correct classification analysis.
3. Review. The reviewer reads the agreement clause by clause, checking DTSA compliance, structural fairness, and enforceability.
4. Delivery. The reviewer sends a written letter identifying risks and recommended questions within three business days under standard turnaround.
5. Discussion. The party and reviewer discuss the letter and confirm which points to raise with the counterparty before signing.

NDA Review vs. Relying on the Other Party's Standard Template vs. Self-Review

A party choosing between a self-review, the other party's own standard NDA template, and an independent contract review faces a different independence and analysis depth under each option. The comparison below states what each delivers on four factors that matter most before signing.

The other party's own standard template protects that party's interests, and it does not substitute for an independent review of whether the agreement's structure and statutory compliance actually serve the reviewing party's own position.

About the Review Service

A qualified NDA review service demonstrates direct familiarity with the DTSA's whistleblower notice requirement, trade secret classification standards, and the structural distinctions between mutual and unilateral confidentiality agreements. Verification steps include confirming the reviewer's experience with trade secret and confidentiality disputes rather than general commercial contracts and confirming whether the review addresses DTSA compliance directly.

NDA Review: Complete Reference Table

Conclusion

An NDA that looks standard on its face can still quietly cost a business its strongest remedies, since federal law requires any confidentiality agreement covering trade secrets to include a whistleblower immunity notice, and skipping it doesn't void the NDA, it just strips the disclosing party's ability to recover exemplary damages and attorney's fees if a misappropriation dispute ever reaches court. Beyond that single omission, a definition of confidential information written too broadly, a residual clause that lets a departing employee rely on "unaided memory" as cover, or an indefinite duration term with no reasonable end date can each undermine the exact protection the agreement was signed to create. Because these gaps show up even in sophisticated-looking templates, checking an NDA's actual statutory compliance and structural fairness before signing catches risk a standard read-through won't. To have your own confidentiality agreement checked by a professional contract review service before you sign.