Enforcement guide

What Happens if Someone Breaks an NDA in the UK?

Remedies for NDA breach under English law: how to recognise a breach, gather evidence, send a cease-and-desist, apply for an injunction, and claim damages — with practical guidance on when enforcement is worth pursuing.

By Richard Wood, Founder8 min readUpdated 7 June 2026Last reviewed 7 June 2026enforcementbreachremediesUK law

If someone has broken an NDA you relied on, you have legal rights — but exercising them effectively requires knowing which remedy applies, how to build your evidence, and whether the breach is worth the cost of pursuing. This guide walks through the process under English law.

This is general information, not legal advice

NDASafe is a document preparation service, not a law firm. Our templates are legally reviewed against applicable UK law at the point of release, but every situation is different. Where significant value, unusual risk or a cross-border element is involved, take independent legal advice before you sign.

Step 1: confirm you actually have a breach

Not every unwanted disclosure is an enforceable breach. Before taking action, work through three questions:

First, is the NDA validly signed and still in force? An agreement that was never signed by the other side, or whose term has expired, creates no current obligations.

Second, does the information they disclosed fall within the NDA's definition of confidential information? Most NDAs exclude information that was already in the public domain, already known to the recipient, or independently developed. Check whether any exclusion applies.

Third, is the disclosure one the agreement actually prohibits? NDAs typically permit disclosure to professional advisers (lawyers, accountants) on equivalent terms, and to employees who need to know. Permitted disclosures are not breaches.

The remedies available to you

RemedyWhat it doesWhen it applies
Injunction (interim)Court order stopping ongoing or imminent disclosureWhen disclosure is continuing or about to happen; must act quickly
Injunction (final)Permanent prohibition on disclosure or useGranted after a full trial; prevents future breaches
DamagesCompensates you for financial loss caused by the breachWhen you can quantify lost business, diminished value or costs
Account of profitsForces recipient to pay over any profit made from the breachWhen their gain is clearer than your loss
Return / destruction orderRequires return or destruction of confidential informationTypically sought alongside an injunction

Gathering and preserving evidence

Evidence is the foundation of any enforcement action. Collect it as soon as you become aware of the breach — delay can mean content disappears.

  • The signed NDA — the agreement itself, with both signatures. If it was signed electronically, include the audit trail from the e-signature platform.
  • Proof of what was shared and when — emails, data-room logs, meeting minutes or file-transfer records showing what confidential information the other party received.
  • Evidence of the breach — screenshots with timestamps of any public posts, published materials, investor decks or product releases that reproduce your confidential information; messages in which the breach is admitted.
  • Witness statements — accounts from anyone who saw the disclosure or received the information from the other party.
  • Financial records — evidence of lost revenue, a lost deal, diminished competitive position, or costs you incurred because of the breach.

Cease-and-desist: the first formal step

A cease-and-desist letter is often the first formal step. It puts the other party on notice, identifies the breach specifically, demands they stop and return or destroy any copies, and preserves your right to seek further relief. Even if you ultimately go to court, a letter shows you gave them the opportunity to remedy the situation first.

The letter should be factual and measured, not threatening. Disproportionate or inaccurate demands can undermine your credibility and, in extreme cases, be characterised as harassment.

Injunctions: stopping an ongoing breach quickly

If confidential information is being actively disclosed — published on a website, circulated to competitors, used to tender for your clients — an interim injunction from the High Court can stop it fast. An application without notice to the other side (a without-notice injunction) is available in genuine emergencies.

To obtain an interim injunction, you must satisfy the American Cyanamid test: there is a serious question to be tried, damages would not be an adequate remedy, and the balance of convenience favours the order. You will need to give the court an undertaking in damages — promising to pay the other side's losses if the injunction later turns out to have been wrongly granted.

Speed matters. Delay in applying for an injunction is treated by courts as evidence that the situation is not truly urgent, which weakens the application.

Damages and account of profits

Damages for breach of an NDA are compensatory: the aim is to put you in the position you would have been in but for the breach. You must prove the loss and its causal link to the breach — for example, a signed customer contract that the counterparty walked away from after learning your pricing, or a product launch brought forward by a competitor who learned your roadmap.

Where proving your own loss is difficult but the other party has clearly profited — say, a competitor who won business using information they obtained from you — you can elect instead for an account of profits, requiring them to pay over what they made.

Employee NDA breaches

Breaches by employees or ex-employees can also engage the implied duty of good faith during employment, and post-termination confidentiality obligations that survive the end of the contract. The Trade Secrets (Enforcement, etc.) Regulations 2018 provide additional remedies for misuse of trade secrets, including interim measures, seizure orders and corrective measures such as recall or destruction of infringing goods.

When is enforcement worth pursuing?

Litigation is expensive and uncertain. Before issuing proceedings, ask honestly whether the expected outcome (compensation + costs recovered, or an injunction) justifies the cost, management distraction and risk of an adverse finding.

Enforcement tends to be most worthwhile when: the disclosed information had clear commercial value that is now compromised; the breach is ongoing and can be stopped by an injunction; the other party is a substantial entity with assets; or a deterrent signal is needed for a wider audience.

For minor or highly speculative harm, a formal letter followed by a negotiated settlement — perhaps including a confidential financial payment and a revised or reaffirmed agreement — is often a faster, cheaper and more certain outcome than a trial.

Start with a solid NDA — one that's enforceable from the outset

NDASafe templates are drafted for England and Wales with complete clause sets that hold up if challenged. £29 for one, £79 for all eight. Editable Word documents, delivered instantly.

Step by step

  1. 1
    Confirm you actually have a breach

    Before taking action, establish: (1) Is the NDA signed and in force? (2) Does the information disclosed fall within the definition of confidential information in the agreement? (3) Is the disclosure one the NDA actually prohibits — not a permitted disclosure to a professional adviser, not information that was already public? A clear 'yes' to all three is the foundation of any enforcement action.

  2. 2
    Gather and preserve evidence immediately

    Collect everything relevant in its original form with timestamps: screenshots of any public or third-party posts revealing the information; emails or messages in which the breach is admitted or described; the signed NDA itself; records of what you shared and when. Do not alter or delete any communications. If the breach involves digital data, preserve system logs and metadata — they can be critical to proving timing and scope.

  3. 3
    Send a formal cease-and-desist letter

    A well-drafted letter from you (or your solicitor) puts the other party on formal notice that you regard the breach as serious, identifies the specific disclosure you object to, demands they stop immediately and return or destroy any copies, and preserves your right to seek further relief. This step is important even if you intend to go to court — it creates a record and sometimes resolves the matter without litigation.

  4. 4
    Apply for an injunction if the breach is ongoing

    If disclosure is continuing — for example, confidential information has been published on a website, or you believe they are about to disclose further — an interim injunction from the High Court can halt it quickly. This requires evidence of a serious issue to be tried and a risk of irreparable harm. You will need to act fast: delay can undermine an emergency application. Seek legal advice before making this application.

  5. 5
    Quantify your loss and pursue damages or a negotiated settlement

    Once immediate harm is contained, assess the financial damage — lost business, diminished competitive advantage, costs incurred. If you can quantify the loss, a damages claim in court is the route. If the recipient has profited but your own loss is hard to put a number on, ask for an account of profits instead. In many cases, a negotiated settlement (with a revised agreement and a payment) is faster, cheaper and more certain than a trial.

Frequently asked questions

What remedies do I have if someone breaks an NDA in the UK?

An NDA breach gives rise to a claim in contract. The main remedies under English law are: an injunction to stop ongoing or further disclosure; damages to compensate you for any financial loss caused; and an account of profits if the recipient has made money from the breach but you cannot easily quantify your own loss. In serious cases — particularly involving employees and trade secrets — you may also have an action for breach of the equitable duty of confidence.

Can you go to jail for breaking an NDA in the UK?

No. Breaking an NDA is not a criminal offence in the UK — it is a civil breach of contract. You cannot be sent to jail or prison for the breach itself. The consequence is civil liability: the other party can seek an injunction, damages, or an account of profits. The narrow exception is where the breach also involves a separate criminal offence — for example, theft of trade secrets under the Trade Secrets (Enforcement, etc.) Regulations 2018, or obtaining the information by hacking under the Computer Misuse Act. In those cases it is the criminal offence, not the NDA breach, that carries the risk of imprisonment.

How do I prove someone broke an NDA?

Proof requires showing (a) what was confidential, (b) that they received it under the NDA, and (c) that they disclosed or used it in a way the NDA prohibited. Evidence takes many forms: screenshots of public posts or messages revealing the confidential information; communications in which the breach is admitted or implied; witness statements from anyone who received the information; and, for trade secrets, expert evidence establishing that the information was not in the public domain. Preserve everything in original form and with timestamps.

Is it worth suing for breach of NDA?

It depends on two things: the value of the information that was disclosed and the financial damage caused. Litigation in the English courts is expensive, and costs are not always fully recovered even if you win. For a significant commercial loss — a deal that fell apart, a product that was launched by a competitor, a customer list that was used to poach clients — the calculus can favour enforcement. For minor or speculative harm, a formal letter and negotiated settlement is often a better outcome than court proceedings.

What is an injunction and how do I get one?

An injunction is a court order requiring the other party to stop doing something — in this context, stop disclosing or using your confidential information. An interim (emergency) injunction can be obtained quickly, sometimes without the other side being heard first (known as a without-notice application), if there is a real risk of ongoing harm. You apply to the High Court and must show there is a serious issue to be tried, that damages alone would not be adequate, and that the balance of convenience favours restraining the breach. You will need to give an undertaking in damages — meaning you will compensate the other side if the injunction turns out to have been wrongly granted.

Templates mentioned in this guide