Confidentiality clauses in UK contracts: what they mean and when to push back

A confidentiality clause in a UK contract is a legally binding obligation to keep certain information private, but it has clear limits, and many clauses as drafted go further than UK law will actually enforce. Understanding what yours says before you sign is the difference between reasonable protection and an unreasonable restriction on your rights.

Before diving in: if you received a contract today and want to know whether your confidentiality clause is standard or a red flag, you can upload it to Ookulli for a plain-English review, no solicitor required.

Key Takeaways

• A confidentiality clause and an NDA are the same obligation in different containers: one is embedded in a larger contract, the other is a standalone agreement.

• No confidentiality clause can prevent you from whistleblowing, reporting a crime, or seeking legal advice, these are protected by statute and cannot be contracted away.

• As of 1 October 2025, the Victims and Prisoners Act 2024 adds a further layer: any NDA signed on or after that date cannot stop you making "permitted disclosures" if you reasonably believe you are a victim of a crime.

• Overly broad clauses, those that declare "all company information" confidential, are harder to enforce in UK courts. Specificity matters.

• Freelancers should pay particular attention to portfolio restrictions and non-compete-adjacent clauses, which often go further than a client can legally justify.

• You can push back. Most confidentiality clauses are negotiable if you know what to ask for.

What is a confidentiality clause in a UK contract?

A confidentiality clause is a contractual term that restricts one or both parties from sharing specific information with third parties. It goes by several names: non-disclosure clause, NDA clause, confidentiality undertaking, or, in less formal settings, a "gagging clause" (a term usually reserved for clauses that go beyond protecting information and attempt to silence people about wrongdoing).

The distinction between a confidentiality clause and a standalone NDA is mainly structural. A confidentiality clause sits inside a larger contract, an employment contract, a freelance services agreement, a settlement agreement. A standalone NDA is a separate document covering only confidentiality, here is how to review one. Legally, they create the same obligation. If your employment contract has a confidentiality clause, you do not also need to sign a separate NDA for it to be binding.

You will encounter confidentiality clauses in three main contexts:

• Employment contracts, protecting employer information during and after your employment

• Freelance or service agreements, protecting client information during and after a project

• Settlement agreements, preventing disclosure of the circumstances leading to settlement, including allegations of misconduct

What does a confidentiality clause actually cover?

"Confidential information", the definition that matters most

The most important words in any confidentiality clause in a UK contract are the ones that define what counts as confidential. A well-drafted clause defines this specifically: pricing data, client lists, technical specifications, proprietary processes, trade secrets. A poorly drafted, or intentionally overreaching, clause defines it as "any and all information obtained in connection with your employment."

The difference matters enormously. UK courts have indicated they are unlikely to enforce a confidentiality clause so broad it would prevent ordinary professional discussion. The specificity of the definition is the first thing to scrutinise.

Trade secrets sit at one end of the spectrum. UK law (the Trade Secrets (Enforcement, etc.) Regulations 2018) gives strong protection to genuine trade secrets, information that has real commercial value precisely because it is not publicly known, and which the employer has taken reasonable steps to protect. At the other end is general know-how: skills, experience, and knowledge you have accumulated professionally. You are not obliged to forget what you have learned, and courts will not enforce clauses that attempt to prevent you from using your general professional expertise in a subsequent role.

One-way vs mutual confidentiality obligations

A one-way clause binds only you. A mutual clause binds both parties.

In an employment context, one-way obligations (binding the employee only) are the norm. In a freelance or services context, there is often a genuine case for mutuality: you may be sharing sensitive information about your business, your processes, or your other clients in order to complete the work. If the clause only runs one way, you are protecting your client's information with no equivalent protection for your own. For more on this distinction, see mutual vs one-way NDAs.

How long does a confidentiality clause last?

Employment and freelance contracts typically contain clauses that survive termination, meaning they bind you after you leave, not just while you are engaged. Duration varies, how long does an NDA last covers the typical ranges. Common structures are:

• Fixed term post-termination: two years, five years, or a specific number of years

• Indefinite for trade secrets: potentially unlimited

• Indefinite for all information: increasingly unlikely to be upheld by UK courts for anything that is not a genuine trade secret

Indefinite terms on non-trade-secret information are a legitimate point to push back on. Information that was commercially sensitive in 2024 may be entirely irrelevant by 2027. A reasonable confidentiality clause acknowledges this.

What a confidentiality clause cannot do, your legal limits

This is the section worth reading carefully, because the limits are frequently misunderstood, and sometimes deliberately obscured by clauses drafted to make you think you have no right to speak.

No confidentiality clause in a UK contract can prevent you from doing any of the following:

• Making a protected disclosure (whistleblowing), the Public Interest Disclosure Act 1998 protects workers who disclose information about wrongdoing in the public interest. This protection cannot be contracted away. Any clause that purports to override it is unenforceable to that extent.

• Reporting a crime, under the Victims and Prisoners Act 2024, section 17, which came into force on 1 October 2025, any NDA signed on or after that date cannot prevent a person who reasonably believes they are a victim of a crime from making "permitted disclosures." This includes reporting to the police, seeking help from support organisations, or accessing medical or legal advice. This is a significant change.

• Seeking legal advice, you always retain the right to consult a solicitor about your legal position, including the terms of the confidentiality clause itself.

• Complying with a court order, if ordered by a court to produce information or testify, you cannot use a contractual obligation as grounds to refuse.

• Reporting harassment or discrimination, since 6 April 2026, sexual harassment is expressly capable of being a protected disclosure under whistleblowing law. The Employment Rights Act 2025 goes further and will void confidentiality provisions that stop workers speaking about harassment or discrimination, but that change is not yet in force: it is expected in 2027 and will not apply to agreements signed before it commences.

• Talking to a union representative or trade union about your employment terms and conditions.

If a confidentiality clause in your contract reads as though it restricts any of the above, it is either poorly drafted or intentionally overreaching. Either way, it is unenforceable to that extent, and flagging it before you sign is entirely reasonable.

Red flags in a confidentiality clause, what's standard vs what to push back on

Most confidentiality clauses are legitimate. Knowing the difference between normal and problematic lets you sign with confidence or negotiate from a position of knowledge.

What's standard and reasonable:

• Protection of genuine trade secrets, client lists, pricing data, and proprietary processes

• Post-termination obligations with a reasonable time limit for non-trade-secret information

• A clause that applies to both parties in a freelance context (mutual obligations)

• Permitted disclosure carve-outs for legal advice, court orders, and regulatory requirements

Red flags, consider pushing back:

Red flag 1: A definition so broad it covers "all information"

A clause that defines confidential information as "any information obtained in connection with your employment or engagement" is almost meaningless in practice, and courts have treated such clauses sceptically. The question is not whether it is enforceable in principle but whether your employer or client could credibly threaten to enforce it. The answer is sometimes yes, which makes the psychological pressure real even when the legal position is uncertain.

Red flag 2: No mutual obligation when you are sharing information too

In a freelance arrangement, you routinely share sensitive business information with your client to get the work done. A clause that binds only you is asymmetric. Asking for a mutual obligation is entirely standard commercial practice.

Red flag 3: No permitted disclosure carve-outs

A properly drafted confidentiality clause always carves out disclosures required by law, court order, or regulatory authority. If those carve-outs are absent, either the clause was drafted carelessly or someone wanted it to look more absolute than it is.

Red flag 4: Indefinite duration on non-trade-secret information

If the clause runs indefinitely and the definition of "confidential information" is broad, covering, say, general business strategy or project details, the clause is attempting to bind you permanently on information that will have no commercial sensitivity within a few years.

Red flag 5 (freelancer-specific): A blanket portfolio or case study ban with no exceptions

This is one of the most common frustrations for creative and technical freelancers. A clause that prohibits you from ever mentioning a project, even anonymously, removes a significant part of your professional currency. It is also often disproportionate: the client's legitimate interest is usually in protecting specific information, not in being invisible in your portfolio forever.

Red flag 6 (freelancer-specific): Clauses that prevent you working for competing clients

A confidentiality clause that, in practice, prevents you from working in your sector is not a confidentiality clause, it is a non-compete dressed up as one (more on this in can an NDA stop you working for competitors). Non-competes are only enforceable if they are reasonable in scope, duration, and geography, and only to protect a legitimate business interest. A blanket restriction on working with other clients in the same industry is also inconsistent with genuine self-employed status under IR35 principles.

When and how to push back, what to actually ask for

Pushing back on a confidentiality clause does not have to be confrontational. Most employers and clients have never had a prospective employee or contractor request a specific change. A calm, professional request, framed around wanting to understand your obligations, will, in the majority of cases, result in a conversation rather than a retraction.

Here is what to ask for, specifically:

Narrow the definition

Ask for the clause to be amended to list specific categories of information rather than using a catch-all phrase. Something like: "Could we define 'confidential information' to mean [specific list]? I want to make sure I understand exactly what I'm protecting." This is a reasonable and professional ask.

Request mutual obligations if relevant

In a freelance context: "The clause currently only binds me. Given that I'll be sharing [relevant information] to complete the project, can we make this mutual?" This is standard in commercial contracts and should not be controversial.

Ask for clear carve-outs

"I'd want to make sure the clause has standard carve-outs for legal advice and court orders, can we confirm those are included?" If they are not in the current draft, this is a drafting correction, not a negotiation.

Push back on indefinite terms

"Can we put a specific time limit on the post-termination obligation for non-trade-secret information? Three to five years is fairly standard for this type of work." If the clause protects genuine trade secrets, those can remain indefinite. Everything else should have a reasonable sunset.

Negotiate a portfolio exception (freelancers)

"I'd like to include a carve-out that allows me to reference this project anonymously in my portfolio, describing the type of work and outcomes without identifying your company. Is that something we can add?" Many clients will agree to this once asked. It costs them very little and removes a significant professional restriction on you.

On framing the conversation:

Lead with understanding ("I want to make sure I've got this right before I sign") rather than objection ("I'm not comfortable with this"). Most people respond better when asked to clarify than when asked to justify.

Confidentiality clauses in freelance contracts, a specific note

Clients use confidentiality clauses in freelance contracts for legitimate reasons. They are sharing commercially sensitive information, client names, project details, pricing, proprietary processes, to enable you to do the work. Protecting that information is reasonable, and in most cases you will not want to push back on the existence of the clause, only its scope.

The issues specific to freelancers are:

Portfolio and attribution rights

A blanket ban on mentioning a project, including an anonymised version, removes professional visibility that, for freelancers, is equivalent to a CV. This is worth addressing explicitly before you sign. Ask for a carve-out that allows you to describe the work generically and anonymously.

Non-compete-adjacent restrictions

Watch for clauses that prevent you from working with companies in the same sector, or with named competitors, for a period after the project ends. These go beyond protecting confidential information and start functioning as non-competes. As noted above, they require separate legal justification (legitimate business interest, reasonable scope and duration) and a blanket restriction is unlikely to be enforceable, but that does not mean your client will not attempt to rely on it.

IR35 and the freedom from exclusivity

If you are operating outside IR35 as a genuine independent contractor, a clause that prevents you from working with other clients in the same industry cuts against the "freedom from exclusivity" that characterises self-employed status. A highly restrictive confidentiality clause in a UK contract can itself be a factor that weighs towards deemed employment.

One practical note: when reviewing a freelance contract, it is worth understanding not just what the confidentiality clause says but whether the data-handling terms hold up too. If you are considering uploading your contract to an AI tool for a quick check, read why you should anonymise your contract first, even with tools that look trustworthy, your contract contains information you should protect before it leaves your hands.

It is also worth knowing that generic AI gets contract review wrong more often than most people expect: LLMs trained on broad datasets often default to US legal framing for contractual questions, which can produce confident-sounding but wrong answers for UK contracts. If you want UK-specific analysis, Ookulli reviews contracts against UK law specifically, including flagging confidentiality clauses like the ones described in this article. See how it works.

Frequently asked questions

Can a confidentiality clause stop me from whistleblowing?

No. The Public Interest Disclosure Act 1998 protects qualifying disclosures regardless of any contractual obligation. A confidentiality clause in a UK contract that purports to prevent whistleblowing is unenforceable to that extent. As of 6 April 2026, sexual harassment is also a qualifying disclosure under UK whistleblowing law, so any clause attempting to silence disclosures of harassment has no legal force.

How long does a confidentiality clause last after leaving a job?

It depends on what the clause says. Many employment contracts have post-termination confidentiality obligations that last two to five years for general information, with trade secrets potentially protected indefinitely. Indefinite terms on non-trade-secret information are harder to enforce. If your clause does not specify a duration, that ambiguity itself is worth querying before you sign.

Can I negotiate a confidentiality clause before signing?

Yes, particularly in a freelance or commercial context. Employment contracts offer less flexibility, but even a standard employer clause can be queried, especially if the definition of confidential information is unusually broad, or if permitted disclosure carve-outs are missing. The worst that happens is they say no and explain why.

What is the difference between a confidentiality clause and an NDA?

They create the same legal obligation. An NDA (non-disclosure agreement) is a standalone document covering only confidentiality. A confidentiality clause is the same obligation embedded in a larger contract, an employment agreement, a service contract, or a settlement agreement. Whether it sits in a separate document or inside a larger one does not change what it requires of you.

Is a confidentiality clause enforceable if it is too broad?

UK courts are less likely to enforce confidentiality clauses that are vague or sweeping. Defining all company information as confidential, for example, has been treated sceptically, there needs to be a genuine commercial reason to protect specific information. That said, "harder to enforce" is not the same as "unenforceable," and if you want clarity on whether your specific clause would hold up, legal advice or a specialist contract review is the appropriate step. You can review your contract with Ookulli to get a plain-English assessment of how proportionate your clause is.

Can a confidentiality clause stop me putting work in my portfolio?

It can, if it is drafted broadly enough and you signed it. This is common in agency, creative, and tech freelance contracts. The clause itself may be enforceable even if you consider it disproportionate. The time to address this is before signing: ask for a specific carve-out allowing anonymised case studies. Once you have signed, you are bound by what the clause says.

Conclusion

A confidentiality clause in a UK contract is not inherently alarming, in most cases it reflects a legitimate interest in protecting genuine commercial information. The problem is when clauses are drafted so broadly that they create obligations no UK court would uphold, or when they omit carve-outs that any properly drafted clause should contain.

The practical steps are straightforward:

1. Read the definition of "confidential information" carefully, specificity is a good sign, vagueness is not

2. Check whether carve-outs exist for legal advice, court orders, and whistleblowing

3. Note the duration, indefinite terms on non-trade-secret information are worth querying

4. If you are a freelancer, look for portfolio restrictions and working-with-competitors clauses before you sign

5. Ask for what you need, most requests are reasonable and most clients will engage with them.

If you received a contract with a confidentiality clause and want to understand what it actually means for your specific situation, Ookulli reviews UK contracts in plain English, flags clauses like the ones described here, and tells you which law applies. No solicitor fees, no waiting, no jargon. Your first contract review is free, then £10 per document, with a 30-day money-back guarantee (details). Review your contract with Ookulli.