Non-Disclosure Agreements in Australia 2025: What’s Changed and What to Watch

Several trends and legal updates are shaping the use of NDAs in Australia this year:

1. Greater Scrutiny of Confidentiality Clauses

Australian regulators are taking a closer look at NDAs, particularly those that could be used to silence employees or prevent reporting of unlawful conduct. There is a clear expectation that NDAs should not be used to conceal workplace misconduct or restrict whistleblowing. Agreements that attempt to do so may be unenforceable or attract regulatory attention.

2. Updated Guidance from Regulators

Organisations such as the Australian Human Rights Commission and the Fair Work Ombudsman have issued guidance encouraging businesses to avoid overly broad confidentiality clauses. NDAs should not conflict with employees’ rights to make protected disclosures or report unlawful behaviour. This means businesses need to review their templates and ensure that exceptions for legal and regulatory disclosures are clearly included.

3. Expanding Scope of Confidential Information

With more business conducted online and remote work now common, the definition of ‘confidential information’ has broadened. NDAs increasingly cover digital data, cybersecurity issues, and information stored in the cloud. There is also growing consideration of how artificial intelligence and new technologies generate or handle confidential material.

4. Cross-Border Data Considerations

If confidential information is stored or accessed overseas, NDAs should address how international privacy laws and data transfer protocols apply. This is especially relevant for businesses working with global partners or using cloud-based services.

While the fundamentals of NDAs remain, the details matter more than ever. A well-drafted NDA in 2025 should:

Clearly Define Confidential Information

Avoid vague or overly broad definitions. Specify what information is considered confidential and what is not (for example, information already in the public domain or independently developed).

Set Reasonable Timeframes

NDAs typically limit confidentiality to a set period, such as two to five years, unless there is a strong reason for a longer term. Indefinite confidentiality is less common and may not always be enforceable.

Include Legal and Regulatory Exceptions

Modern NDAs should make clear that nothing in the agreement prevents disclosures required by law, regulatory investigations, or the reporting of misconduct. This helps ensure the NDA does not conflict with whistleblower protections or other legal obligations.

Address Data Security and International Issues

If confidential information may be stored or accessed outside Australia, the NDA should reference relevant privacy laws and data protection requirements. This is increasingly important as businesses rely on international cloud services and remote teams.

NDAs are only effective if they are clear, fair, and enforceable. Here are some practical steps to follow in 2025:

Use Plain Language

Avoid legal jargon. Clear, straightforward wording helps all parties understand their rights and obligations, reducing the risk of misunderstandings or disputes.

Tailor Each NDA to the Situation

Generic templates may not suit every scenario. Customise the agreement to reflect the specific type of information being protected, the relationship between the parties, and the risks involved.

Review for Compliance with Current Laws

Ensure your NDA reflects the latest legal standards, especially around employment, whistleblowing, and privacy. Regularly review and update your agreements to keep them in line with current expectations.

Focus on Enforceability

Australian courts may refuse to enforce NDAs that are too broad or that attempt to prevent lawful disclosures. The agreement should focus on protecting legitimate business interests, not restricting rights or concealing wrongdoing.

Educate Your Team

NDAs are not a substitute for a culture of trust and compliance. Make sure staff understand what information is confidential, what isn’t, and the consequences of breaching an NDA. Training can help prevent accidental disclosures and reinforce the importance of confidentiality.

Be Open to Negotiation

It is increasingly common for employees, contractors, or partners to request changes to NDA terms—especially around reporting rights and the duration of confidentiality. Being flexible and willing to negotiate can help build trust and reduce the risk of disputes.

• Overly Broad Clauses: Trying to cover too much can make an NDA unenforceable. Focus on what truly needs protection.
• Ignoring Legal Exceptions: Failing to allow for disclosures required by law or regulation can invalidate parts of the agreement.
• Outdated Templates: Using old templates that don’t reflect current legal standards can expose your business to risk.
• Lack of Clarity: Ambiguous language can lead to confusion and disputes. Be specific about what is covered and for how long.

NDAs continue to play a vital role in protecting sensitive business information. However, the legal and regulatory environment in Australia is moving towards greater transparency and accountability. This means NDAs must be carefully drafted to balance the need for confidentiality with the rights of individuals and the public interest.

For businesses, this is an opportunity to review existing agreements, update templates, and ensure that NDAs are used appropriately. For individuals, understanding your rights and obligations under an NDA is essential before signing.

In 2025, NDAs remain an important tool for managing risk and protecting confidential information in Australia. However, they are not without limits. Legal reforms and increased regulatory oversight mean that NDAs must be clear, fair, and compliant with current laws. By focusing on clarity, enforceability, and respect for legal rights, businesses and individuals can use NDAs effectively—without running into unnecessary legal trouble.