Is an NDA Legally Binding in Malaysia?

A Non-Disclosure Agreement (“NDA”) is generally legally binding in Malaysia, provided that it satisfies the ordinary requirements of a valid contract.

However, signing an NDA does not automatically mean that every clause will be enforceable—or that the party alleging a breach will necessarily succeed in court. The wording of the agreement, the nature of the information and the evidence of misuse will all be relevant.

What Is an NDA?

An NDA is a contract under which one or more parties agree to protect specified confidential information.

It may be used when:

• businesses are discussing a proposed transaction;
• an investor is evaluating a business opportunity;
• a company appoints an employee or consultant;
• parties exchange financial, technical or commercial information;
• a manufacturer shares product designs or specifications;
• a business discloses its customer or supplier information; or
• parties are negotiating a settlement.

An NDA may be:

• unilateral, where only one party discloses confidential information; or
• mutual, where both parties exchange information and owe confidentiality obligations to each other.

When Is an NDA Legally Binding?

An NDA must satisfy the requirements of a valid contract under Malaysian law. In general, this involves:

1. an offer;
2. acceptance;
3. lawful consideration;
4. an intention to create legal relations;
5. certainty of terms;
6. parties with legal capacity; and
7. a lawful object.

The parties must be sufficiently identified, and the NDA should clearly state what each party is agreeing to do or refrain from doing.

If the wording is excessively uncertain, contradictory or incomplete, enforcing it may become difficult even though both parties signed the document.

Does an NDA Need to Be Signed?

A properly executed written NDA provides the clearest evidence of the parties’ agreement.

For a company, the person signing should have authority to bind the company. The agreement should identify the correct legal entity rather than merely using a business name, brand name or trading style.

For example, the NDA should ordinarily identify:

• the company’s full registered name;
• its registration number;
• its registered or business address; and
• the signatory’s name and position.

Electronic signing may also be legally recognised in Malaysia, subject to the applicable legislation and the circumstances in which the signature was obtained. Parties should nevertheless retain reliable records showing who signed the document, when it was signed and which version was accepted.

A witness is not ordinarily what makes an NDA valid, although witnessing may provide additional evidence if the signature is later disputed.

What Information Can an NDA Protect?

An NDA can protect different forms of commercial, financial and technical information, including:

• customer information;
• customer requirements and purchasing history;
• negotiated prices and credit terms;
• supplier arrangements;
• internal costs and profit margins;
• product designs and drawings;
• formulas and manufacturing processes;
• software, source code and system architecture;
• business plans and market strategies;
• financial records and forecasts;
• proposals, presentations and working documents; and
• information concerning a proposed transaction.

Malaysian courts have recognised that information such as customer details, cost prices and customers’ particular requirements may be confidential.

In Worldwide Rota Dies Sdn Bhd v Ronald Ong Cheow Joon [2010] 8 MLJ 297, the Court found that a former employee had misused confidential customer and costing information to compete with his former employer.

However, an NDA should not depend entirely on broad labels such as “business information”, “customer lists” or “trade secrets”.

In Dynacast (Melaka) Sdn Bhd & Ors v Vision Cast Sdn Bhd & Anor [2016] 3 MLJ 417 and Ganesh Raja a/l Nagaiah & Ors v NR Rubber Industries Sdn Bhd [2017] 2 MLJ 396, the courts emphasised the need to identify the confidential information relied upon with sufficient specificity.

Instead of referring only to “customer information”, for example, an NDA may identify:

customer identities, key contact persons, contact details, purchasing history, product requirements, negotiated prices, discounts, credit terms and order volumes.

Specific drafting helps establish what the parties intended to protect.

Can an NDA Protect Information That Is Not Technically Secret?

Potentially, yes.

There is a distinction between:

• an equitable duty of confidence imposed by law; and
• a contractual obligation voluntarily accepted under an NDA.

The parties may agree that identified information must receive confidential treatment under their contract even if there might later be an argument over whether every individual item independently possesses the legal quality of confidence.

This point was illustrated in Inhome Group Sdn Bhd v Dream Home Structural Works Sdn Bhd & Anor [2025] MLJU 2129, where the contractual terms contemplated confidential treatment for information that might not technically be secret or confidential in nature.

However, this does not mean that an NDA should classify everything as confidential without limitation. Appropriate exclusions should ordinarily apply to information that:

• is already publicly available;
• becomes public other than through a breach;
• was already lawfully known to the receiving party;
• is lawfully received from an independent third party; or
• is independently developed without using the disclosed information.

Is an NDA Still Binding After the Relationship Ends?

It can be.

An NDA may expressly provide that the confidentiality obligations survive:

• the termination of employment;
• the completion of a project;
• the end of negotiations;
• the expiry of another commercial agreement; or
• the recipient’s departure from the business.

The appropriate duration depends on the information.

Ordinary commercial information may lose its sensitivity after two, three or five years. Customer contacts, pricing and market strategies may change over time.

A genuine trade secret—such as a secret formula, proprietary manufacturing process or enduring technical know-how—may remain valuable for much longer.

A more carefully drafted NDA may therefore provide different protection periods:

General confidential information: protected for a specified period after termination.

Trade secrets: protected for as long as the information retains its confidential or trade-secret character.

This is generally more commercially sensible than declaring that every item of information must remain confidential forever, regardless of whether it later becomes obsolete or public.

Can an NDA Prevent Someone from Joining a Competitor?

An NDA protects confidential information. It does not automatically prevent a person from competing.

This distinction is particularly important because section 28 of the Contracts Act 1950 generally renders agreements restraining a person from exercising a lawful profession, trade or business void, subject to the statutory exceptions.

A former employee may generally use their skill, experience and general industry knowledge after leaving employment. What they cannot necessarily do is take and exploit the former employer’s confidential information.

An NDA stating:

raises different enforceability issues from a clause stating:

The latter is directed towards protecting information. The former restricts the employee’s ability to work.

Calling a clause a “confidentiality clause” will not necessarily save it if, in substance, it operates as an unlawful restraint of trade.

Does a Signed NDA Guarantee Success in Court?

No.

A signed NDA proves that contractual obligations existed. The claimant must still establish the alleged breach.

This will usually require evidence of:

1. the particular information protected by the NDA;
2. the defendant’s access to that information;
3. the unauthorised act committed by the defendant; and
4. the loss, gain or risk resulting from that act.

In Jayonik Sdn Bhd v Agriquip Machinery Sdn Bhd, the existence of an NDA did not, by itself, prove that the defendants had disclosed or misused the alleged confidential information.

By contrast, stronger confidentiality cases have involved evidence such as:

• documents sent to personal email accounts;
• database downloads;
• records of files copied before resignation;
• WhatsApp messages discussing the material;
• competing quotations containing information from internal documents;
• identical or substantially similar drawings; and
• evidence that confidential information was used to solicit customers.

In Karen Yap Chew Ling v Binary Group Services Bhd [2023] 4 MLJ 792, the former employee had copied a substantial database of business contacts and clients into accounts under her personal control shortly before leaving for a competitor.

The court will assess the evidence—not merely the existence of the defendant’s signature.

What Happens If an NDA Is Breached?

Depending on the facts, the innocent party may seek remedies including:

• an injunction restraining further use or disclosure;
• return, delivery-up or destruction of confidential materials;
• preservation of electronic records and devices;
• damages; or
• an account of profits obtained through the misuse.

In urgent cases, injunctive relief may be particularly important because once confidential information has been widely disclosed, damages may not provide an adequate remedy.

In Centek Ltd & Ors v Farrah Dheeba bt Shaiful Ridzuan & Ors [2021] 9 MLJ 548, the Court dealt with interim injunctive relief and a delivery-up order involving electronic devices and records where there was a risk that evidence might be destroyed.

However, a clause stating that the breaching party must pay a large fixed sum does not guarantee that the court will award that amount.

Such a clause remains subject to section 75 of the Contracts Act 1950, which concerns reasonable compensation where a contract specifies a sum payable upon breach.

Similarly, a claimant generally cannot obtain both compensatory damages and an account of profits for the same wrongdoing. In Karen Yap, the Court of Appeal held that the claimant had to elect between the alternative monetary remedies.

Is Confidential Information Protected Without an NDA?

Possibly.

The absence of a signed NDA does not necessarily mean that a person is free to use or disclose information received in confidence.

An equitable obligation of confidence may arise where:

• the information possesses the necessary quality of confidence;
• it was communicated in circumstances importing an obligation of confidence; and
• it was used without authority to the detriment of the person who disclosed it.

In MRA International Sdn Bhd v SPC Diatech, LLC, the Court recognised that a duty of confidence may arise from the circumstances even without an express confidentiality agreement.

Third-party recipients may also face equitable liability if they knowingly receive and misuse another party’s confidential information, despite not being a party to the original NDA.

Nevertheless, an appropriately drafted NDA remains valuable because it records the parties’ intentions and can expressly regulate matters such as permitted use, authorised recipients, security measures, copying, return, destruction, duration and remedies.

The Takeaway

An NDA is generally legally binding in Malaysia if it forms a valid contract and its terms are sufficiently certain and lawful.

But enforceability is not determined by the title of the document or the presence of a signature alone.

A properly prepared NDA should clearly identify:

• what information is protected;
• why and for what purpose it is being disclosed;
• who may access it;
• how it may be used;
• what acts are prohibited;
• how long the obligations continue;
• when the information must be returned or destroyed; and
• what remedies may be pursued following a breach.

Ultimately, a signed NDA strengthens the protection of confidential information—but it must be supported by precise drafting, sensible information controls and evidence capable of proving any alleged breach.

This article is intended for general information only and does not constitute legal advice. Legal advice should be obtained based on the particular NDA, information and circumstances involved.