NDA in South Africa: Template, Key Clauses and Local Law (2026)

What is an NDA in South Africa, and what does local law require? A non-disclosure agreement (NDA), also called a confidentiality agreement, is a contract that binds one or both parties to keep shared information secret and to use it only for an agreed purpose. South Africa has no dedicated NDA statute. An NDA is governed by the common law of contract, which in South Africa is rooted in Roman-Dutch law. To be enforceable the agreement must meet the ordinary requirements of a valid contract: genuine agreement, lawful object, certainty of terms, and consistency with public policy. Two features of South African law shape a good NDA. First, confidential information is protected both by the contract itself and, separately, by the law of delict, which treats the misuse of another party's trade secrets as unlawful competition. The courts have recognised that a person who uses a former employer's or counterparty's confidential information as a springboard can be restrained even beyond the strict wording of a contract. Second, an NDA restricts the use and disclosure of information. It does not stop a person from earning a living with their own general skill and experience. If you want to stop someone competing or soliciting, that is a restraint of trade clause, which is a separate question judged on its own reasonableness. This article is general information, not legal advice. Confirm the current position with a qualified South African attorney before you rely on any clause. Last verified October 2026. ## A South Africa NDA template you can copy Copy the block below and fill the bracketed fields. ```

NON-DISCLOSURE AGREEMENT This Agreement is made on [DATE] BETWEEN: [DISCLOSING PARTY NAME], [registration / ID number], of [address] ("Disclosing Party") AND [RECEIVING PARTY NAME], [registration / ID number], of [address] ("Receiving Party") 1. PURPOSE The parties wish to explore [describe the purpose, e.g. a possible supply arrangement] (the "Purpose") and will share confidential information for that Purpose only. 2. CONFIDENTIAL INFORMATION "Confidential Information" means all non-public information disclosed by the Disclosing Party, in any form, including [business plans, pricing, customer data, technical material, source code], and the existence and terms of this Agreement. 3. EXCLUSIONS Confidential Information does not include information that is or becomes public through no breach of this Agreement, was already lawfully known to the Receiving Party, is independently developed without use of the Confidential Information, or is received lawfully from a third party without a duty of confidence. 4. OBLIGATIONS The Receiving Party will keep the Confidential Information secret, use it only for the Purpose, disclose it only to employees or advisers who need to know it and are under a like duty, and protect it with at least reasonable care. 5. PERSONAL INFORMATION (POPIA) Where Confidential Information includes personal information, the Receiving Party will process it only for the Purpose, apply reasonable security safeguards, and comply with the Protection of Personal Information Act 4 of 2013. [Add a data processing or operator clause where one party processes personal information for the other.] 6. COMPELLED DISCLOSURE If the Receiving Party is required by law or a court to disclose any Confidential Information, it will, where lawful, give prompt notice so the Disclosing Party can seek protection. 7. RETURN OR DESTRUCTION On written request or when the Purpose ends, the Receiving Party will return or destroy the Confidential Information and confirm it in writing, subject to any legal retention duty. 8. TERM AND SURVIVAL This Agreement runs for [N] years from the date above. The duty of confidentiality survives for [N] years after it ends, and indefinitely for trade secrets. 9. NO LICENCE, NO WARRANTY No right or licence in any intellectual property is granted. The information is shared "as is" with no warranty of accuracy. 10. REMEDIES The parties agree that damages may not be an adequate remedy and that the Disclosing Party may seek an interdict to restrain a breach. 11. GOVERNING LAW This Agreement is governed by the law of the Republic of South Africa, and the parties submit to the jurisdiction of its courts. Signed: Disclosing Party: __________ Receiving Party: __________ Name / capacity / date Name / capacity / date

- **Definition and exclusions (clauses 2 and 3).** Define confidential information widely enough to catch what matters, then carve out the standard exclusions. Without the exclusions a court may see the clause as unreasonable. Marking documents "confidential" helps but should not be the only trigger, because not everything valuable gets labelled in time.
- **Obligations and need to know (clause 4).** Limit onward disclosure to people who genuinely need the information and who are themselves bound. This is what makes the duty workable inside an organisation.
- **POPIA (clause 5).** This is the South African twist. If the information includes personal information, for example customer, employee or financial records, the Protection of Personal Information Act applies on top of the NDA. A confidentiality clause does not replace POPIA. Where one party processes personal information on behalf of the other, that party is an operator under POPIA, and you usually need operator wording covering security safeguards and breach notification, or a separate data processing agreement.
- **Term and survival (clause 8).** Set a sensible term for the sharing, and a longer survival period for the duty itself. Genuine trade secrets can be protected for as long as they stay secret, so say so.
- **Remedies (clause 10).** South African courts can grant an interdict to stop a threatened or continuing breach. Recording that damages may be inadequate supports an urgent application. ## Red flags to watch for - **Treating the NDA as a non-compete.** An NDA controls information. It cannot stop a person using their own skill or working in the industry. If you need that, draft a separate restraint of trade clause, and keep it reasonable in scope, time and area, because a South African court will only enforce a restraint that protects a legitimate interest and is not against public policy.
- **An overbroad definition with no exclusions.** A clause that tries to make everything secret forever, with no carve-outs, invites a court to read it down or refuse to enforce it.
- **Silencing protected disclosures.** An NDA cannot be used to gag a protected disclosure under whistle-blower law, or to cover up fraud, harassment or other wrongdoing. A clause that tries to do this is contrary to public policy.
- **Ignoring POPIA.** If personal information changes hands and you rely only on a confidentiality clause, you can still breach POPIA. Add the data protection wording.
- **No return or destruction step.** Without clause 7 the receiving party can hold your information indefinitely with no clear end point. ## A note on jurisdiction and current law South African contract law allows parties wide freedom to agree their own terms, so a clear NDA will usually be enforced as written, subject to public policy and to POPIA where personal information is involved. The protection of confidential information also sits in the law of delict, which can reach misuse that the contract did not fully anticipate. Because the detail here, including the operator obligations under POPIA and the reasonableness of any restraint, turns on facts and on current regulator guidance, confirm the position with a South African attorney before you rely on a clause. Adira is built around Indian corporate law first and is architected to expand to other jurisdictions. Deeper, verified South African coverage, including POPIA-specific review, is on the roadmap rather than live today, so treat this template as a sound starting point and have local counsel check anything high-stakes. ## Where a contract workspace helps An NDA rarely travels alone. It sits beside the deal it protects, the data processing terms POPIA may require, and the versions you send to different counterparties, each slightly changed. The work that outlasts the drafting is keeping those versions straight, remembering which purpose and term you agreed with whom, and making sure the personal information wording matches the actual data flow. Keeping that drafting, review and version history in one AI workspace tuned to how your company shares information means the definition, the purpose and the POPIA wording stay consistent across every NDA, with edits made in plain language. [Adira](https://adiralaw.com) is one workspace designed to work this way. The template above is enough to put a fair South African NDA in place on its own. *This article is general information, not legal advice. Enforceability, POPIA obligations and restraint of trade rules turn on the facts, so have a qualified South African attorney review anything important. Last verified October 2026.*