Legal Remedies for NDA Breach: What the Other Party Can Do
If you breach an NDA — intentionally or accidentally — the Disclosing Party has several legal tools at their disposal. These are cumulative, meaning they can use all of them simultaneously. A single disclosure can trigger damages, an injunction, and attorneys' fees all at once.
The most common remedies, in order of escalation: (1) a demand letter asking you to stop and confirm compliance, (2) a lawsuit for breach of contract seeking monetary damages, (3) a motion for a temporary restraining order or preliminary injunction to stop ongoing disclosure, (4) a claim for attorneys' fees if the NDA includes a fee-shifting provision, and (5) in severe trade secret cases, a criminal referral to federal prosecutors.
Monetary Damages: How Much Can a Breach Cost?
The Disclosing Party can recover three categories of monetary damages:
- Actual damages — the financial harm directly caused by the breach. If a leaked customer list cost the Disclosing Party a $500,000 contract, that's the starting point. These are the hardest to calculate and the most heavily litigated.
- Disgorgement of profits — if you profited from the breach (e.g., you used the confidential information to win a deal or develop a competing product), the Disclosing Party can claim those profits. You don't get to keep what you earned by breaking the agreement.
- Liquidated damages — if the NDA specifies a dollar amount per breach (e.g., '$10,000 per violation'), the Disclosing Party can claim that amount without proving actual harm. This is why [liquidated damages clauses in NDAs](/blog/nda-red-flags-to-watch-for) are red flags — they pre-set the penalty and bypass the need to prove real losses.
Additionally, many NDAs include a fee-shifting clause: the losing party pays the winning party's attorneys' fees. In an NDA breach lawsuit, legal fees can easily reach $50,000-$200,000. If you lose, you're paying both sides.
💡 Tip: Actual damages are limited by the principle of 'reasonable foreseeability' — the damages must have been a foreseeable consequence of the breach at the time the NDA was signed. Speculative or remote damages are generally not recoverable.
Injunctions: Court Orders to Stop Disclosure
Money comes after the fact. An injunction stops the bleeding in real time. If the Disclosing Party learns you're about to disclose — or are currently disclosing — their confidential information, they can go to court for an emergency order (a temporary restraining order, or TRO) within hours.
A TRO can be issued the same day, often without you even being present in court (ex parte). It orders you to immediately stop the disclosure and preserve all evidence. A few days later, there's a hearing on a preliminary injunction, which can last for the duration of the lawsuit. If the court finds the Disclosing Party is likely to win, the injunction stays in place — you're legally barred from further disclosure, under penalty of contempt of court.
Most NDAs explicitly state that 'money damages are an inadequate remedy' and that the Disclosing Party 'shall be entitled to injunctive relief without posting bond.' Courts generally honor these provisions in NDA cases because once information is public, the harm is irreversible — you can't un-ring a bell.
When NDA Breach Becomes Criminal
For most NDA breaches, the consequences are purely civil — you get sued, not arrested. But when the breach involves theft of trade secrets, federal criminal law enters the picture.
Under the Economic Espionage Act (18 U.S.C. § 1832), theft of trade secrets for commercial advantage is a federal crime. Penalties for individuals: up to 10 years in prison and fines up to $250,000. For organizations: fines up to $5 million or three times the value of the stolen trade secret, whichever is greater.
The line between civil breach and criminal theft turns on intent and scale. A sales rep who accidentally emails a customer list to their personal account to work from home? Civil breach. An engineer who downloads 10,000 files to a USB drive the day before resigning to join a competitor? That's a federal case — literally.
High-profile criminal NDA cases: the Waymo vs. Uber trade secret trial (Anthony Levandowski sentenced to 18 months), the DuPont vs. Kolon Industries case ($920 million in damages plus criminal charges), and the Coca-Cola trade secret theft attempt (two employees tried to sell trade secrets to Pepsi for $1.5 million — Pepsi reported them to the FBI).
Defenses to an NDA Breach Claim
If you're accused of breaching an NDA, you may have one of these defenses:
- The information wasn't actually confidential — it was already public, you already knew it, or you got it from a third party without restrictions. This is the most common defense, and it succeeds if any of the [standard exclusions](/blog/nda-confidential-information) apply.
- The NDA is unenforceable — it's overly broad (covers everything with no exclusions), the term is unreasonably long, or the scope is contrary to public policy. Courts won't enforce contracts that are unconscionably one-sided.
- No actual breach occurred — the disclosure was authorized, or the information was independently developed without reference to the confidential material. This is why companies implement clean-room development processes when working near a competitor's confidential information.
- The Disclosing Party suffered no harm — while this doesn't make the breach go away, it dramatically limits damages. If the disclosure was to someone who already knew the information or who had no commercial interest in it, damages may be nominal.
- Whistleblower protection — under the Defend Trade Secrets Act, you can disclose trade secrets to government officials or an attorney for the purpose of reporting a suspected legal violation, and you're immune from liability. This immunity must be included in every NDA signed after May 2016 — if your NDA doesn't mention DTSA whistleblower immunity, it's non-compliant.
Real-World NDA Breach Examples
What do NDA breaches actually look like in practice? Here are three common scenarios:
- The departing employee: A product manager leaves for a competitor. Before leaving, they forward their work email to a personal account with customer roadmaps, pricing models, and feature plans. The former employer discovers this during a routine email audit and sues for breach of NDA. Outcome: preliminary injunction blocking the employee from working on competing products for 12 months, plus $75,000 in damages and attorneys' fees.
- The loose-lipped founder: A startup founder pitches to a VC, who passes. Two weeks later, the founder overhears someone at a networking event describing their exact business model. The VC had shared the pitch deck with a portfolio company. No NDA was signed before the pitch, so the founder had no legal recourse. That competitor launched six months later. Lesson: either get an NDA or don't share your secret sauce.
- The freelance developer: A freelance developer builds a prototype for a client under an NDA. After the project ends, the developer reuses substantial portions of the codebase for a different client in the same industry. The first client discovers the code similarity and sues. The developer settles for $45,000 — more than they earned on the original project. Lesson: NDA obligations don't end when the project ends.
The common thread in all three: the breach could have been avoided. A clear understanding of what the NDA covers, a habit of marking confidential materials, and a moment's pause before sharing — these simple practices prevent most breaches before they happen.
Review My NDA Now →