What happens if you breach an NDA in the UK?
Published on
If you breach an NDA in the UK, the other party can seek damages, an injunction, or both. In practice, most NDA disputes are resolved through negotiation. Courts are a last resort. What matters most is the actual loss caused by the disclosure and whether the clause itself was reasonable and enforceable.
If you think you might have breached an NDA, the situation is usually less catastrophic than it feels at three in the morning. But it does need handling properly, and quickly. This guide walks through what the law actually allows the other party to do, what affects how serious the outcome is, and what to do if you think you've breached one.
Take Marcus, a freelance UI designer in Bristol. He showed a friend a wireframe from a client project at a pub one Friday night. The friend posted it on Twitter the next day. By Monday morning Marcus had a worried email from his client and a copy of the NDA he had signed eight months earlier. He spent the weekend convinced his career was over. What actually happened: a phone call, an apology, the post taken down, and a contract that quietly was not renewed. No lawsuit. No damages. Most NDA breaches end somewhere closer to that than to the dramatic court case people imagine.
Key takeaways
Damages are limited to actual, demonstrable loss, not punitive figures pulled from the air
Injunctions can be granted very quickly, sometimes within 24 to 48 hours
An unenforceable NDA clause cannot be enforced, even after a breach
Under the Victims and Prisoners Act 2024, NDAs cannot prevent you reporting criminal conduct
Your first step if you think you have breached: stop, document everything, take legal advice before contacting the other party
The two main remedies the other party can seek
UK law gives the party whose information has been disclosed two main options. They can pursue financial compensation for losses they can prove, or they can ask a court to physically stop further disclosure. Often they pursue both at the same time.
Damages, and how they are actually calculated
Damages in an NDA breach case are compensatory, not punitive. That means the court is trying to put the claimant back in the position they would have been in if the breach had not happened. They cannot ask for a large lump sum just because they are annoyed.
The claimant has to prove three things: that confidential information was disclosed, that the disclosure caused them a loss, and what that loss actually amounts to in pounds. The last part is where most cases either settle or fall apart. Speculative losses, what they might have made if a competitor had not heard about their idea, are difficult to recover.
Where direct loss is hard to quantify, two alternatives sometimes apply:
Nominal damages: a small symbolic amount confirming the breach happened, often a few hundred pounds
Account of profits: any financial benefit you gained from the disclosure can be ordered repaid to the claimant
For most freelancers, the realistic worst case is not a six-figure damages claim. It is paying back any direct gain plus the other party's legal costs.
Injunctions, and why they often hurt more than damages
An injunction is a court order forcing you to do something or, more commonly, stop doing something. In NDA cases, it usually means stop disclosing the information, return any documents, and destroy any copies.
The most important thing about injunctions is the speed. An interim injunction can be obtained within 24 to 48 hours in urgent cases. The court does not need to be sure you have breached the NDA at this stage. It only needs to decide:
Is there a serious issue to be tried?
Does the balance of convenience favour restraining you while the case is resolved?
If both answers are yes, the order can be in your inbox by the end of the week.
A final injunction, granted after a full hearing, can permanently prevent disclosure or compel you to hand over documents. In practice, injunctions are often more damaging than damages awards because they can prevent you finishing work for current clients or starting work for new ones in the same space.
Want to make sure the NDA you are about to sign does not let a client weaponise an interim injunction against you? Reviewing an NDA before you sign takes about ten minutes and is the single highest-value thing you can do.
What affects how serious the consequences are
Two NDA breaches with similar facts can end in very different places. The factors that shift the outcome are mostly common sense, but they are worth being explicit about.
Whether actual loss occurred. A disclosure that caused no measurable harm is far less serious than one that handed a competitor a market opportunity. If the other party cannot point to a real financial impact, damages will be small or nominal.
Whether the disclosure was intentional or accidental. Courts and commercial parties treat a careless slip very differently from a deliberate sale of confidential information to a competitor. Intent does not change the legal definition of breach, but it heavily influences how the matter is resolved.
How quickly you acted once you realised. Reporting the breach to the other party voluntarily, cooperating to limit the damage, and taking steps to prevent recurrence all matter. Silence and delay make everything worse.
Whether the clause itself was reasonable. A confidentiality clause that tries to cover information already in the public domain, or that is so broad it would prevent you working in your sector at all, may not be enforceable in the first place.
The commercial relationship. Most clients prefer a quiet resolution to a public legal fight. If you have done good work for them historically, there is usually room to contain the situation before it escalates.
If the NDA clause was unenforceable, the breach cannot be enforced
This is the point most people miss when they panic. A contract clause that is itself invalid cannot be the basis for a legal claim against you. Several things can make an NDA clause unenforceable under UK law:
It covers information that is already public. Information you can find on Google or in a public filing is not confidential, no matter what the contract says.
It is too broad in scope. A clause that prevents you discussing anything related to a client's business indefinitely is likely to be cut down or struck out.
It restricts lawful disclosures. Reporting a crime, raising a safeguarding concern, or making a protected disclosure under whistleblowing law cannot be restricted, even if the NDA says it can.
It was signed under duress or without proper consideration. Rare in commercial contexts, but possible.
For a breakdown of which clauses actually hold up in court and which do not, the article on risky contract clauses UK freelancers should always check covers the most common enforceability traps.
This is also where Ookulli's source-cited approach matters. Every flag Ookulli raises shows you which clause it refers to and which UK law it is assessed against, so you can see why a clause may or may not be enforceable rather than taking an AI's word for it.
What you can always disclose, even under an NDA
UK law overrides any NDA when it comes to certain disclosures. Under the Victims and Prisoners Act 2024, NDAs in England and Wales cannot prevent victims of criminal conduct from disclosing that conduct to:
Police or other law enforcement bodies
Qualified legal professionals (a solicitor advising them)
Specified regulated professionals in defined circumstances, including GPs
Any clause that tries to gag these disclosures is void, not just unenforceable. The same principle applies to protected disclosures under the Public Interest Disclosure Act 1998: whistleblowing about wrongdoing in the public interest is protected regardless of what your NDA says.
If you breached the NDA by making one of these protected disclosures, the breach is not actionable. The Acas guidance on non-disclosure agreements sets out the same principle in plain English.
What to do if you think you have breached an NDA
The first few hours matter. The instinct to email the other party with a long apology is almost always the wrong one. Five steps, in order:
Stop the disclosure immediately. Take down posts, delete messages, retract anything that can be retracted.
Document exactly what was shared, when, and to whom. Save screenshots, dates, recipients. If you later have to prove the disclosure was limited, this record will save you.
Do not contact the other party yet. Anything you say in a panic apology can be used against you. There is no clock running that forces you to confess within 24 hours.
Take legal advice on enforceability and exposure. This does not always mean a solicitor. A proper NDA review will tell you whether the clause is even enforceable, and a solicitor's view is most useful once you know that.
Then approach the other party, if appropriate. Often a measured, factual conversation, ideally with legal advice already taken, contains the situation faster than going silent does.
Sarah, a freelance copywriter in Manchester, did exactly this when she realised she had mentioned a client's unannounced product in a LinkedIn post. She deleted the post, screenshotted the audience size (small) and engagement (tiny), got a £10 NDA review to confirm the clause was likely enforceable, then sent a brief, professional message to her client offering to discuss. The client accepted her explanation, asked her to be more careful, and the relationship continued. Total elapsed time: 36 hours. Total cost: £10.
Frequently asked questions
Can a client sue me for breaching an NDA UK?
Yes, but a lawsuit is the last step, not the first. Most NDA disputes are resolved through correspondence and negotiation. A claim has to show real, quantifiable loss to be worth pursuing financially.
What is the difference between damages and an injunction in an NDA breach?
Damages are money paid to compensate the other party for the loss caused by the breach. An injunction is a court order forcing you to stop disclosing or to return documents. Damages compensate past harm. Injunctions prevent future harm.
What if I breached an NDA accidentally?
Intent does not change the legal definition of breach, but it heavily affects the outcome. Accidental breaches that are reported quickly and limited in damage are usually resolved without litigation.
Can I be sued for NDA breach if I did not know the information was confidential?
A well-drafted NDA defines what information is confidential, so you should know. If the information was not clearly defined as confidential, or was already public, the breach claim is much weaker. This is one reason reviewing an NDA properly before signing matters.
Does an NDA breach appear on my record UK?
NDA breaches are civil matters, not criminal, so they do not appear on a criminal record or a DBS check. A court judgment against you would appear on the Register of Judgments, which lenders and some employers can search.
What happens if the NDA I signed turns out to be unenforceable?
You cannot be liable for breaching a clause that the court will not enforce. Common reasons NDAs fail enforceability are over-broad scope, attempts to restrict lawful disclosures, and covering information that is already public. See the risky contract clauses guide for more on this.
Sort it before it becomes a problem
The cheapest way to handle an NDA breach is to never have one. The next cheapest is to know exactly what you signed and whether the clauses are enforceable, before the situation escalates.
Ookulli reviews NDAs for UK-specific risks in minutes, shows you which clauses are enforceable and which are not, and grounds every highlight in the actual UK law it is assessed against. From £10 per document, no subscription, 30-day money-back guarantee.
This content is for informational purposes only and does not constitute legal advice. If you have specific concerns about a possible NDA breach, consider consulting a qualified solicitor.
