NDA Enforcement in Canada: What Courts Actually Uphold

Most NDAs Are Not Worth the Paper They Are Printed On

Confidentiality agreements are the most frequently executed — and most frequently unenforceable — contracts in commercial law. Canadian courts routinely decline to enforce NDAs that are overbroad in scope, indefinite in duration, or that attempt to protect information that does not meet the legal threshold for confidential information. The result is that most companies operate under a false sense of security, believing their NDAs provide protection that a court would never actually grant.

Understanding what Canadian courts require for an enforceable NDA is the difference between a document that protects your business and one that gives you nothing more than a psychological comfort blanket.

The Lac Minerals Framework

The foundational Canadian authority on confidential information is the Supreme Court of Canada's decision in Lac Minerals Ltd. v. International Corona Resources Ltd., [1989] 2 SCR 574. The Court established a three-part test for breach of confidence:

• The information must have the quality of confidence — it must not be public knowledge or publicly available
• The information must have been communicated in circumstances that import an obligation of confidence
• There must be an unauthorized use of the information to the detriment of the party who communicated it

The first element — the quality of confidence — is where most NDA enforcement efforts fail. Information that is publicly available, that is general knowledge in the industry, or that the receiving party already knew independently does not qualify for protection, regardless of what the NDA says. Courts will not enforce a confidentiality obligation over information that is not genuinely confidential.

What Courts Look For in Enforceable NDAs

1. Precise Definition of Confidential Information

The most common drafting error in NDAs is an overbroad definition of "Confidential Information." Definitions that capture "all information disclosed by the Disclosing Party" or "any and all information, whether written, oral, or observed" are so broad that they are effectively meaningless — and courts treat them accordingly.

An enforceable definition identifies the specific categories of information being protected: customer lists, pricing information, product roadmaps, source code, financial projections, or trade secrets related to a specific process or technology. The more specific the definition, the more likely a court is to enforce it.

2. Reasonable Time Limits

An NDA with no expiry date creates an indefinite obligation that courts view skeptically. While trade secrets can be protected for as long as they remain secret, general business information should have a defined confidentiality period. Two to five years is the most common range for commercial NDAs. Perpetual obligations are appropriate only for true trade secrets — and even then, the obligation should be tied to the continued secrecy of the information, not to a perpetual calendar period.

3. Clear Carve-Outs

Every enforceable NDA includes standard exclusions from the definition of Confidential Information:

• Information that is or becomes publicly available through no fault of the receiving party
• Information that the receiving party already possessed before disclosure
• Information that the receiving party independently develops without reference to the confidential information
• Information that the receiving party receives from a third party who is not bound by a confidentiality obligation
• Information that is required to be disclosed by law, regulation, or court order (with notice to the disclosing party where permitted)

These carve-outs are not optional boilerplate — they are the boundaries that make the obligation reasonable and enforceable.

4. Proportionate Obligations

The obligations imposed on the receiving party must be proportionate to the legitimate business interest being protected. An NDA that prohibits the receiving party from working in an entire industry, or that imposes restrictions that effectively operate as a non-competition clause, will be scrutinized more closely than one that simply requires the receiving party to keep specific information confidential and not use it for unauthorized purposes.

Mutual vs. One-Way NDAs

A mutual NDA (where both parties disclose and receive confidential information) and a one-way NDA (where only one party discloses) serve different purposes, and the choice matters.

For investor discussions, a mutual NDA is inappropriate — investors review hundreds of opportunities and cannot agree to confidentiality obligations for each one. Most sophisticated investors will not sign an NDA before a term sheet. For employee and contractor relationships, a one-way NDA (or confidentiality clause within the employment or contractor agreement) is standard. For commercial partnerships and potential M&A discussions, a mutual NDA is appropriate.

Remedies: Injunction Is Not Automatic

Many NDAs state that a breach will cause "irreparable harm" and that the disclosing party is entitled to injunctive relief. This language does not bind the court. To obtain an interlocutory injunction in Canada, the moving party must satisfy the three-part test from RJR-MacDonald Inc. v. Canada (Attorney General), [1994] 1 SCR 311:

• There is a serious issue to be tried
• The moving party will suffer irreparable harm if the injunction is not granted
• The balance of convenience favours granting the injunction

Irreparable harm must be demonstrated with evidence, not merely asserted in the contract. If the harm can be compensated with money damages, an injunction will not be granted. This means that for most commercial NDA breaches, the remedy is damages — not an injunction — and proving the quantum of damages for confidential information that has been misused is notoriously difficult.

Practical Drafting Principles

• Be specific about what you are protecting. Identify the categories of information with enough precision that a court can determine what is covered and what is not.
• Set a reasonable duration. Two to five years for general business information; indefinite for true trade secrets (tied to continued secrecy).
• Include all standard carve-outs. Publicly available information, prior knowledge, independent development, third-party disclosure, and legal compulsion.
• Limit the permitted use. Confidential information should be used only for the specific purpose of the business relationship. Any other use should require prior written consent.
• Address return or destruction. On termination of the relationship, the receiving party should be required to return or destroy all confidential information and certify that they have done so.
• Do not over-reach. An NDA that tries to protect everything protects nothing. Focus on the information that actually matters to your business.

The Bottom Line

An NDA is only as good as its enforceability. A broad, vague, perpetual NDA may feel more protective — but in front of a Canadian court, it is less protective than a narrow, specific, time-limited agreement that clearly identifies the information being protected and imposes proportionate obligations. Draft for the courtroom, not for the filing cabinet.