Business Law

NDAs in California: What Is Still Enforceable

By Ingrid Rainey · July 1, 2026 · 8 min read

Editorial photo illustrating NDAs in California: What Is Still Enforceable After the Noncompete Ban

California enforces genuine confidentiality obligations. What it does not enforce is a confidentiality clause drafted so broadly that its practical effect is to stop someone from working in their field. With Business and Professions Code section 16600 strengthened — and employers now exposed to a private right of action for even including a void restraint — the risk of copying an out-of-state NDA template has gone up considerably.

Key takeaways

  • Confidentiality provisions are enforceable; provisions that operate as de facto non-competes are void regardless of their label.
  • Section 16600.5 makes a void restraint unenforceable no matter where or when it was signed, and creates employee remedies including attorney's fees.
  • Define confidential information by category with real carve-outs rather than sweeping in everything the person learned.
  • Employee NDAs must preserve whistleblower rights and comply with the Silenced No More Act's disclosure carve-outs.

Where NDAs cross the line

A clause defining confidential information as 'all information relating to the company or the industry' effectively bars a departing employee from using their general knowledge and skill. Courts look at effect over label, and that clause can be read as a restraint on trade.

The same problem appears in customer non-solicitation provisions dressed as confidentiality. If the practical operation is to prevent the person from competing or from serving customers who choose to follow them, California treats it as a restraint.

Drafting a California-safe employee NDA

  • Define confidential information by category — pricing models, source code, customer lists with non-public terms, unreleased product plans — rather than as everything the employee saw.
  • Include standard exclusions: information already public, independently developed, lawfully received from a third party, or already known.
  • Preserve the employee's right to use general knowledge, skill, and experience.
  • Add the Defend Trade Secrets Act immunity notice, which is a prerequisite to recovering exemplary damages and fees under that statute.
  • Carve out reports to government agencies and disclosures about unlawful acts in the workplace, as California law requires.
  • Include a severability clause so an overbroad term does not take the whole agreement down.

The notice requirement employers keep missing

Section 16600.1 required employers to notify current and former California employees, individually and in writing, that any non-compete clause in their agreements is void. That obligation applied to employees employed after January 1, 2022, and the deadline has passed — but companies that never sent the notice remain exposed, and each violation is an act of unfair competition.

Section 16600.5 goes further: an employer cannot enter into or attempt to enforce a void restraint, and an employee may sue for injunctive relief, actual damages, and attorney's fees. That is the provision that makes recycling a Texas or New York template genuinely expensive rather than merely ineffective.

Have a question about your situation?

Rainey Law P.C. advises San Diego businesses and employees on matters like this one.

Request a consultation

Commercial NDAs between businesses

Business-to-business NDAs get more room, particularly in a sale-of-business context where narrowly tailored restrictions are permitted by statute. Even so, be specific: define the purpose of disclosure, set a term (three to five years for general confidential information, indefinite for trade secrets), and address residual knowledge.

Watch the operational terms as much as the legal ones — who may receive the information, whether it can be shared with affiliates and advisors, the return-or-destroy obligation, and the compelled-disclosure procedure when a subpoena arrives.

What actually protects information

Trade secret protection depends on reasonable secrecy measures, and an NDA is only one of them. Access controls, offboarding checklists, device returns, and departure interviews carry weight in any later dispute.

The cases that go well for companies are the ones where they can show a specific, identified secret and a specific step taken to protect it. The cases that go badly are the ones where the only evidence is a signed form nobody followed up on.

Frequently asked questions

Are NDAs enforceable in California at all?

Yes. Properly scoped confidentiality agreements protecting genuine confidential information and trade secrets are enforceable. It is the overbroad ones that function as restraints that fail.

Can we use our out-of-state NDA template for California employees?

Not safely. Section 16600.5 voids restraints regardless of where the contract was signed or which state's law it selects, and adds employee remedies including attorney's fees.

Can an NDA stop an employee from reporting harassment?

No. California law protects disclosures about unlawful acts in the workplace, and agreements must include the required carve-out language.

How long should confidentiality obligations last?

Trade secrets can be protected for as long as they remain secret. For other confidential information, a defined term of three to five years is common and easier to defend.

This article is general information, not legal advice, and does not create an attorney-client relationship. Outcomes depend on the facts of each matter.

More insights

We fight for you.

Schedule a confidential consultation to discuss your business or employment matter.

Call NowBook Consult