Defining Confidential Information: What Counts and What Doesn’t

The most fought-over sentence in any NDA is the one that defines confidential information. Everything else in the agreement—the non-use promise, the return-of-materials clause, the remedies—only reaches as far as that definition does. Draft it too narrowly and your best material walks out the door unprotected. Draft it too broadly and a court may refuse to enforce any of it. Defining confidential information well is the difference between a document that protects you and a document that just looks like it does.

This guide breaks down how to define confidential information so the definition actually holds: what to include, the carve-outs that keep it enforceable, how to handle oral and unmarked disclosures, and where contractual confidentiality ends and trade-secret law begins.

Why Defining Confidential Information Is the Whole Ballgame

An NDA is a fence, and the definition of confidential information is where you decide what sits inside the fence. If the definition says “all information disclosed,” a court may find it unreasonable and decline to enforce it. If it lists three narrow categories, everything you forgot to list is fair game for the other side.

The goal is a definition that is broad enough to cover what actually matters and precise enough that a judge can apply it. That balance is why the definition—not the boilerplate—is the clause worth your drafting time. For the surrounding structure, see our walkthrough of the most common NDA mistakes.

What Counts as Confidential Information

A workable definition usually combines a general standard with illustrative categories. The general standard captures anything a reasonable person would understand to be sensitive; the categories put the other side on notice about the crown jewels.

• Business: customer lists, pricing, margins, pipelines, and strategy.
• Technical: source code, formulations, designs, and know-how.
• Legal and financial: unfiled IP, financials, and deal terms.
• Third-party: information you hold under someone else’s confidentiality obligation.

Much of this overlaps with your intellectual property, so the definition should coordinate with the rest of your IP strategy—our intellectual property primer explains how contracts, copyrights, and trade secrets fit together rather than duplicating one another.

The Carve-Outs That Make the Definition Enforceable

Counterintuitively, the exclusions are what make a confidential information definition enforceable. Four standard carve-outs appear in almost every well-drafted NDA, and a receiving party should insist on all four:

• Publicly available information, through no fault of the recipient.
• Already known to the recipient before disclosure.
• Independently developed without using the disclosed material.
• Rightfully received from a third party without a duty of confidentiality.

A fifth carve-out covers disclosure required by law—a subpoena or regulator—usually paired with a duty to give notice so the disclosing party can seek protection. Without these carve-outs, the definition sweeps in information the recipient has every right to use, and that overreach is exactly what makes courts skeptical.

Marking, Oral Disclosures, and the Residuals Clause

Two practical questions decide most real disputes. First: does information have to be marked “confidential” to count? A marking requirement is clean but dangerous, because busy teams rarely stamp every document. If you require marking, add a grace period to confirm oral disclosures in writing.

Second: the residuals clause. Recipients often want the right to use general knowledge retained in their employees’ memories. Disclosing parties hate residuals clauses because they can swallow the protection whole. Whether you accept one—and how narrowly it is written—is a negotiation worth having consciously, not by accident. These same tensions show up in employment documents; compare how employment agreements and state noncompete rules treat information an employee carries to a new job.

Trade Secrets vs. Contractual Confidential Information

Not all confidential information is a trade secret, and the distinction matters for remedies. A contract protects what the parties agree to protect. Trade-secret law protects information that derives value from being secret and is subject to reasonable secrecy efforts—and it can provide statutory remedies even against parties you never signed with.

The federal Defend Trade Secrets Act definition sets that bar, and the USPTO’s trade-secret resources explain the “reasonable measures” expectation. A tight NDA is one of those reasonable measures. When misappropriation actually happens—as in our case study on AI-driven trade-secret theft—you want both the contract and the statute on your side.

Common Drafting Mistakes to Avoid

A few recurring errors quietly gut otherwise solid agreements:

• Defining confidential information as “everything,” which invites a court to enforce nothing.
• Omitting the standard carve-outs, making the definition look unreasonable.
• Requiring marking with no way to capture oral disclosures.
• Letting a broad residuals clause erase the protection.
• Setting a confidentiality term that expires before the information stops being valuable.

Operators who share proprietary playbooks with outside advisors—for instance, dispensary operators working with consultants like Collateral Base—should be especially careful that the definition covers SOPs and processes, not just documents. When a breach heads toward court, our litigation colleagues at Howard Law Group live and die by how the definition was written.

How Long Should the Confidentiality Obligation Last?

Even a perfect definition fails if the clock runs out too soon. The confidentiality term should match how long the confidential information actually stays valuable, and that varies by category. A product roadmap may be stale in eighteen months; a secret formulation or a customer database can be sensitive for a decade or more.

Two drafting patterns dominate. The first sets a fixed term—three or five years—which is clean and easy to administer but can leave long-lived secrets exposed once it lapses. The second uses a hybrid: a fixed term for ordinary confidential information, plus an indefinite obligation for anything that qualifies as a trade secret, lasting as long as the material remains secret. That hybrid is usually the smarter default because it does not force you to choose between simplicity and protection.

Whatever term you pick, make sure the survival language is explicit and that the return-or-destroy obligation is tied to it. A confidentiality clause that expires silently, or that never says what happens to the material at the end, invites exactly the argument you drafted the agreement to avoid.

Frequently Asked Questions

Next Steps

Defining confidential information is the clause that decides whether the rest of your NDA means anything. Get the standard, the categories, and the carve-outs right, and the fence finally holds.

Need your NDA definition pressure-tested? Schedule a review with Howard East.

This article is general information, not legal advice. No attorney-client relationship is created by reading it. Attorney Advertising.