What happens if you breach an NDA in the UK?

If you breach an NDA in the UK, the other party can seek damages, an injunction, or both. In practice, most NDA disputes are resolved through negotiation. Courts are a last resort. What matters most is the actual loss caused by the disclosure and whether the clause itself was reasonable and enforceable. Enforcement is also harder than the document makes it sound: the other side has to show the information was genuinely confidential, that you were the source, and what the disclosure cost them in pounds.

If you think you might have breached an NDA, the situation is usually less catastrophic than it feels at three in the morning. But it does need handling properly, and quickly. This guide walks through what the law actually allows the other party to do, how a breach plays out stage by stage, how hard an NDA is to enforce in the first place, and what to do if you think you've breached one.

Take Marcus, a freelance UI designer in Bristol. He showed a friend a wireframe from a client project at a pub one Friday night. The friend posted it on Twitter the next day. By Monday morning Marcus had a worried email from his client and a copy of the NDA he had signed eight months earlier. He spent the weekend convinced his career was over. What actually happened: a phone call, an apology, the post taken down, and a contract that quietly was not renewed. No lawsuit. No damages. Most NDA breaches end somewhere closer to that than to the dramatic court case people imagine.

Key takeaways

Damages are limited to actual, demonstrable loss, not punitive figures pulled from the air

Injunctions can be granted very quickly, sometimes within 24 to 48 hours

An unenforceable NDA clause cannot be enforced, even after a breach

Enforcing an NDA is much harder than signing one: the other side has to prove the information was genuinely confidential, that you disclosed it, and what it cost them

Costs usually follow the result, and in a small confidentiality dispute the legal bill regularly exceeds the money in dispute

Under the Victims and Prisoners Act 2024, NDAs cannot prevent you reporting criminal conduct

Your first step if you think you have breached: stop, document everything, take legal advice before contacting the other party

The two main remedies the other party can seek

UK law gives the party whose information has been disclosed two main options. They can pursue financial compensation for losses they can prove, or they can ask a court to physically stop further disclosure. Often they pursue both at the same time.

Damages, and how they are actually calculated

Damages in an NDA breach case are compensatory, not punitive. That means the court is trying to put the claimant back in the position they would have been in if the breach had not happened. They cannot ask for a large lump sum just because they are annoyed.

The claimant has to prove three things: that confidential information was disclosed, that the disclosure caused them a loss, and what that loss actually amounts to in pounds. The last part is where most cases either settle or fall apart. Speculative losses, what they might have made if a competitor had not heard about their idea, are difficult to recover.

Where direct loss is hard to quantify, two alternatives sometimes apply:

Nominal damages: a small symbolic amount confirming the breach happened, often a few hundred pounds
Account of profits: where you profited from the disclosure, a court can order you to hand that profit over. It is a standard remedy for breach of the equitable duty of confidence, and exceptional in a claim brought on the contract alone

For most freelancers, the realistic worst case is not a six-figure damages claim. It is paying back any direct gain plus the other party's legal costs.

Injunctions, and why they often hurt more than damages

An injunction is a court order forcing you to do something or, more commonly, stop doing something. In NDA cases, it usually means stop disclosing the information, return any documents, and destroy any copies.

The most important thing about injunctions is the speed. An interim injunction can be obtained within 24 to 48 hours in urgent cases. The court does not need to be sure you have breached the NDA at this stage. It only needs to decide:

Is there a serious issue to be tried?
Does the balance of convenience favour restraining you while the case is resolved?

If both answers are yes, the order can be in your inbox by the end of the week.

There is a price attached to that speed, and it is one most people never hear about. Unless the court orders otherwise, the party asking for an interim injunction has to give a cross-undertaking in damages: a promise to the court to compensate you for the losses the order causes if it later turns out it should never have been granted. For a client with a thin case and a freelancer whose work would be halted by the order, that promise is a real deterrent.

The bar also rises where the order would restrain publication, because that engages the right to freedom of expression. Section 12(3) of the Human Rights Act 1998 says that in those cases no such relief is to be granted so as to restrain publication before trial unless the court is satisfied that the applicant is likely to establish that publication should not be allowed. That is a harder test than the ordinary serious-issue-to-be-tried threshold.

A final injunction, granted after a full hearing, can permanently prevent disclosure or compel you to hand over documents. In practice, injunctions are often more damaging than damages awards because they can prevent you finishing work for current clients or starting work for new ones in the same space.

A third form is worth knowing about because it comes up in freelance and contractor disputes. A springboard order restrains you from exploiting a head start you gained from the confidential information, and it is deliberately limited to roughly how long that head start would have lasted. Its purpose is to remove an unfair advantage, not to stop you competing, and courts keep its scope and duration no wider than that requires.

Want to make sure the NDA you are about to sign does not let a client weaponise an interim injunction against you? Reviewing an NDA before you sign takes about ten minutes and is the single highest-value thing you can do.

What actually happens after a breach, in order

The remedies above describe what a court can do. They are not what usually happens. A breach that turns into a dispute tends to move through the same stages, and almost all of them stop well before a courtroom.

A conversation, or nothing at all. The client notices, raises it directly, and the matter is dealt with in an email or a phone call. No filing, no solicitor, no record. This is where the large majority of NDA breaches end.
A letter before claim. If the client escalates, the first formal step is a letter, still widely called a letter before action. The Practice Direction on Pre-Action Conduct and Protocols expects it to set out the basis of the claim, a summary of the facts and what the client wants from you, and it expects a response, typically within 14 days for a straightforward matter and longer for a complex one. Ignoring it is the expensive option. A court can penalise a party who failed to engage by adjusting costs, including ordering them on an indemnity basis, even where that party goes on to win the point.
Undertakings. Very often the letter asks for written promises rather than money: stop disclosing, return or delete the material, confirm who else saw it. Giving those undertakings is frequently how the whole thing closes, because it hands the client the protection they actually wanted and removes their reason to apply for an injunction.
An application for an interim injunction. The stage that moves fast, used when the client believes disclosure is continuing or imminent. This is where the two-part test above applies, and where the client has to give the cross-undertaking in damages.
A claim, and eventually a trial. Only a small proportion get this far. Damages, an account of profits, delivery up or destruction of documents, and a final injunction are all decided here.
Costs. Under rule 44.2(2)(a) of the Civil Procedure Rules the general rule is that the unsuccessful party is ordered to pay the costs of the successful party, though the court can depart from that based on conduct and on who succeeded on which issues.

Two practical points fall out of that sequence. The early stages are cheap for both sides, and they are where nearly everything settles. And every stage after the letter costs the client money they may never get back, which is why a client with a weak case usually stops at the letter.

How hard is an NDA to enforce in the UK?

Harder than the document implies, and that gap is worth understanding before you panic about a clause. An NDA is a contract, so it binds you in principle from the moment both sides sign. Getting a court to act on it is a separate question, and it turns on what the clause says, what the information actually was, and what the client can prove.

What makes an NDA hard to enforce

A clause the court will not enforce cannot be the basis of a claim against you. Several things weaken or defeat an NDA under UK law:

The definition of confidential information is too broad. Clauses covering "all information disclosed, in any form, whether or not marked as confidential" try to protect everything and end up protecting nothing in particular. The wider the definition, the harder it is for the client to point at the specific thing you disclosed and show why it mattered. Narrowing that definition is the most useful change to make when you negotiate an NDA before signing.
The information was already in the public domain. Anything findable on Google, in a Companies House filing or in a published announcement is not confidential, whatever the contract says. A great deal of what clients treat as secret has already been mentioned in a press release.
There is no genuine trade secret. Under the Trade Secrets (Enforcement, etc.) Regulations 2018, a trade secret is information that is secret in the sense of not being generally known among or readily accessible to people who normally deal with that kind of information, that has commercial value because it is secret, and that has been subject to reasonable steps to keep it secret. A client who circulated the material in an open shared drive struggles on the third limb.
The duration is unreasonable. A perpetual obligation over ordinary project information is not automatically void, but it weakens the client's position when they are asking a court for a discretionary remedy. What sets an NDA's length, and what counts as normal covers the bands you should expect to see.
It restricts a disclosure the law protects. Reporting a crime, raising a safeguarding concern, or making a protected disclosure under whistleblowing law cannot be restricted, even if the NDA says it can. More on this below.
It is really a restraint of trade in disguise. A confidentiality clause drawn so widely that it stops you working in your sector at all is assessed as a restraint of trade, and a restraint is only enforceable if it goes no further than protecting a legitimate business interest. Whether an NDA can stop you working for competitors works through that test.
It was signed under duress or without proper consideration. Rare in commercial contexts, but possible.

For a breakdown of which clauses actually hold up in court and which do not, the article on risky contract clauses UK freelancers should always check covers the most common enforceability traps.

This is also where Ookulli's source-cited approach matters. Every flag Ookulli raises shows you which clause it refers to and which UK law it is assessed against, so you can see why a clause may or may not be enforceable rather than taking an AI's word for it.

What the other side has to prove, and why that is the real obstacle

Even with a well-drafted NDA, the burden sits with the client, and each element is a place the claim can stall:

That the information was confidential, rather than general skill and experience you carried out of the project in your head. That line is genuinely contested and often decides the case.
That you were the source. Where several people had access to the same material, attribution is difficult and expensive to establish.
That the disclosure caused a loss, in pounds. This is the usual sticking point. A client who cannot quantify the harm is left arguing for nominal damages, which is rarely worth the fee.
That they are still in time. Section 5 of the Limitation Act 1980 gives six years from the date the cause of action accrued for an action founded on simple contract, which for an NDA breach normally means six years from the disclosure.

Delay cuts against them in a second way too. An injunction is a discretionary remedy, so a client who knew about the disclosure for months and did nothing has undermined their own argument that it is urgent.

Then there is the arithmetic. Taking a confidentiality claim to trial costs considerably more than most freelance projects are worth. A client weighing a few thousand pounds of arguable loss against a legal bill several times that will usually take the undertakings and move on. That is not a loophole to build a plan around, but it explains why so few of these disputes are ever filed.

Where enforcement is stronger than people expect

Three things run the other way, and together they are why "my NDA is probably unenforceable" is a bad strategy.

The first is that a weak clause does not leave the client with nothing. Confidential information is protected by the equitable duty of confidence as well as by the contract, and that duty can apply to genuinely confidential material even where the clause is badly drafted or has expired. Our confidentiality clause reference sets out the test the courts use.

The second is that an injunction is easier to get than damages. Stopping further disclosure does not require the client to prove a loss at all, only that there is a serious issue to be tried and that the balance of convenience favours restraining you in the meantime.

The third applies even when you are right. Responding properly to a letter before claim takes time and usually a solicitor, and none of that is recoverable unless proceedings are issued and you win them. The cheapest outcome by a wide margin is the one where nothing has to be argued at all.

What affects how serious the consequences are

Two NDA breaches with similar facts can end in very different places. The factors that shift the outcome are mostly common sense, but they are worth being explicit about.

Whether actual loss occurred. A disclosure that caused no measurable harm is far less serious than one that handed a competitor a market opportunity.

Whether the disclosure was intentional or accidental. Courts and commercial parties treat a careless slip very differently from a deliberate sale of confidential information to a competitor. Intent does not change the legal definition of breach, but it heavily influences how the matter is resolved.

How quickly you acted once you realised. Reporting the breach to the other party voluntarily, cooperating to limit the damage, and taking steps to prevent recurrence all matter. Silence and delay make everything worse.

Whether the clause itself was reasonable. Covered in full above, and it is the factor most people underestimate.

The commercial relationship. Most clients prefer a quiet resolution to a public legal fight. If you have done good work for them historically, there is usually room to contain the situation before it escalates.

What you can always disclose, even under an NDA

UK law overrides any NDA when it comes to certain disclosures. Under the Victims and Prisoners Act 2024, NDAs in England and Wales cannot prevent victims of criminal conduct from disclosing that conduct to:

Police or other law enforcement bodies
Qualified legal professionals (a solicitor advising them)
Specified regulated professionals in defined circumstances, including GPs

Any clause that tries to gag these disclosures is void, not just unenforceable. The same principle applies to protected disclosures under the Public Interest Disclosure Act 1998: whistleblowing about wrongdoing in the public interest is protected regardless of what your NDA says.

If you breached the NDA by making one of these protected disclosures, the breach is not actionable. The Acas guidance on non-disclosure agreements sets out the same principle in plain English.

What to do if you think you have breached an NDA

The first few hours matter. The instinct to email the other party with a long apology is almost always the wrong one. Five steps, in order:

Stop the disclosure immediately. Take down posts, delete messages, retract anything that can be retracted.
Document exactly what was shared, when, and to whom. Save screenshots, dates, recipients. If you later have to prove the disclosure was limited, this record will save you.
Do not contact the other party yet. Anything you say in a panic apology can be used against you. There is no clock running that forces you to confess within 24 hours.
Take legal advice on enforceability and exposure. This does not always mean a solicitor. A proper NDA review will tell you whether the clause is even enforceable, and a solicitor's view is most useful once you know that.
Then approach the other party, if appropriate. Often a measured, factual conversation, ideally with legal advice already taken, contains the situation faster than going silent does.

Sarah, a freelance copywriter in Manchester, did exactly this when she realised she had mentioned a client's unannounced product in a LinkedIn post. She deleted the post, screenshotted the audience size (small) and engagement (tiny), got a £10 NDA review to confirm the clause was likely enforceable, then sent a brief, professional message to her client offering to discuss. The client accepted her explanation, asked her to be more careful, and the relationship continued. Total elapsed time: 36 hours. Total cost: £10.

Frequently asked questions

What happens if you don't follow an NDA?

Not following an NDA is a breach of contract. The other party can ask you to stop and to return or delete the material, claim damages for any loss they can prove, and apply for an injunction. In most cases nothing formal happens at all: the client raises it, you fix it, and the matter closes. Breaching the NDA itself is not a criminal offence.

Can a client sue me for breaching an NDA UK?

Yes, but a lawsuit is the last step, not the first. Most NDA disputes are resolved through correspondence and negotiation. A claim has to show real, quantifiable loss to be worth pursuing financially.

How hard is it to enforce an NDA in the UK?

Harder than the document suggests. The other party has to show the information was genuinely confidential rather than public or general know-how, that you were the source of the disclosure, and what that disclosure cost them in pounds. Proving loss is where most claims stall. The cost of litigating is often several times the amount at stake, which is why the great majority of NDA disputes end in an exchange of letters.

Do NDAs actually hold up in court in the UK?

A properly drafted NDA is a binding contract and courts do enforce it, most often by injunction rather than by an award of damages. What courts will not do is enforce whatever the document happens to say. A clause covering information already in the public domain, one drawn so widely it stops you working in your field, or one attempting to prevent a protected disclosure will not get the client the outcome they wanted.

What is the difference between damages and an injunction in an NDA breach?

Damages are money paid to compensate the other party for the loss caused by the breach. An injunction is a court order forcing you to stop disclosing or to return documents. Damages compensate past harm. Injunctions prevent future harm.

What if I breached an NDA accidentally?

Intent does not change the legal definition of breach, but it heavily affects the outcome. Accidental breaches that are reported quickly and limited in damage are usually resolved without litigation.

Can I be sued for NDA breach if I did not know the information was confidential?

A well-drafted NDA defines what information is confidential, so you should know. If the information was not clearly defined as confidential, or was already public, the breach claim is much weaker. This is one reason reviewing an NDA properly before signing matters.

How long does someone have to sue you for breaching an NDA?

Six years. Section 5 of the Limitation Act 1980 says an action founded on simple contract cannot be brought after six years from the date the cause of action accrued, which for an NDA breach normally means six years from the disclosure. A client who waits also weakens any argument that the matter is urgent enough to justify an injunction.

Who pays the legal costs in an NDA dispute?

The general rule in the Civil Procedure Rules is that the unsuccessful party is ordered to pay the successful party's costs, though the court can depart from it based on the parties' conduct and on who won which issues. Costs are the reason to take these disputes seriously early: in a small confidentiality claim the legal bill regularly exceeds the money in dispute.

Does an NDA breach appear on my record UK?

NDA breaches are civil matters, not criminal, so they do not appear on a criminal record or a DBS check. A court judgment against you would appear on the Register of Judgments, which lenders and some employers can search. One thing does change that picture: breaching a court injunction, as opposed to breaching the NDA, is a contempt of court, and committal for contempt by a superior court can be for a fixed term of up to two years.

What happens if the NDA I signed turns out to be unenforceable?

You cannot be liable for breaching a clause that the court will not enforce. Common reasons NDAs fail enforceability are over-broad scope, attempts to restrict lawful disclosures, and covering information that is already public. See the risky contract clauses guide for more on this.

Sort it before it becomes a problem

The cheapest way to handle an NDA breach is to never have one. The next cheapest is to know exactly what you signed and whether the clauses are enforceable, before the situation escalates.

Ookulli reviews NDAs for UK-specific risks in minutes, shows you which clauses are enforceable and which are not, and grounds every highlight in the actual UK law it is assessed against. From £10 per document, no subscription, 30-day money-back guarantee.

Review your NDA now →

This content is for informational purposes only and does not constitute legal advice. If you have specific concerns about a possible NDA breach, consider consulting a qualified solicitor.