NDA for Shareholders in the UK: Protecting Confidential Information Between Companies and Their Shareholders

When a UK private company shares board papers, management accounts or strategic plans with its shareholders, it is disclosing commercially sensitive information to people who are not directors and have no statutory duty of confidence. A shareholder who receives that information is free, in the absence of any contractual obligation, to discuss it with others — including competitors, rival investors, or the press. A shareholder NDA closes that gap by creating a legally binding obligation of confidence from the moment information is shared.

Do shareholders have automatic confidentiality obligations in the UK?

Under UK company law, directors owe fiduciary duties to the company — including a duty to act in the company's interests and to keep confidential information confidential. Shareholders do not have equivalent statutory duties. A shareholder who is not also a director is not bound by the Companies Act 2006 fiduciary regime and can, in principle, share information they receive in their capacity as a shareholder unless restrained by contract.

The common law imposes a duty of confidence where information is disclosed in circumstances that make it obvious that confidence is expected, but that duty is uncertain in scope and difficult to enforce without a clear contractual agreement. A written NDA removes the uncertainty and gives the company a clear contractual right to seek an injunction and damages on breach.

Shareholder NDA vs confidentiality clause in a shareholders' agreement

Most professionally drafted shareholders' agreements include a confidentiality clause. If a shareholders' agreement is in place and all shareholders are parties to it, a separate standalone NDA may be unnecessary for ongoing shareholder relationships. However, a standalone NDA is essential in two situations:

• Pre-investment, before the shareholders' agreement is signed: during due diligence and negotiation, the company shares sensitive financial and commercial information with a prospective investor before any formal agreement exists. A standalone NDA protects that pre-signature disclosure. The shareholders' agreement cannot protect information shared before it was signed.
• New shareholders joining after the original agreement: a new investor or employee shareholder who acquires shares after the original shareholders' agreement was executed does not automatically become a party to it. Unless the agreement includes a deed of adherence mechanism — and the new shareholder executes a deed of adherence — a standalone NDA (or a separate confidentiality agreement) is the safer approach.
• Where the shareholders' agreement is informal or missing clauses: many UK SME shareholders' agreements are skeleton documents that do not include a detailed confidentiality regime. A standalone NDA can supplement the shareholders' agreement where the confidentiality provisions are thin or absent.

What information does a shareholder typically receive?

Shareholders in UK private companies commonly receive the following categories of information that may require confidentiality protection:

• Management accounts and financial data: monthly or quarterly unaudited accounts, cash flow forecasts, budget versus actual reports and EBITDA analysis.
• Board minutes and papers: minutes of board meetings that may include strategic decisions, potential acquisitions, disputes, personnel matters and commercial plans.
• Cap table and future fundraising plans: details of the current share structure, anticipated dilution, planned fundraising rounds, valuation discussions and option pool mechanics.
• Strategic and commercial plans: product roadmaps, key customer and supplier relationships, competitive analysis, market expansion plans and M&A pipeline.
• Personnel data: key employee arrangements, compensation structures, disputes and succession planning.
• Legal and regulatory matters: ongoing litigation, regulatory investigations and compliance issues before they become public.

What a shareholder NDA must cover

A shareholder NDA protecting a UK private company should address the following provisions:

• Confidential information definition: all information disclosed by the company to the shareholder in connection with their investment, whether in writing, electronically or verbally, together with a specific list of categories (financial data, board papers, strategic plans, cap table information, commercial contracts, personnel data).
• Permitted purpose: the shareholder may use confidential information only for the purpose of managing and monitoring their investment in the company.
• Non-use obligation: the shareholder must not use confidential information for any competitive purpose, to trade in securities of the company or associated companies, or for any purpose unconnected with their shareholding.
• Permitted disclosees: the shareholder's own advisers (accountants, lawyers, fund managers, co-investors) may receive confidential information on equivalent terms, with the shareholder remaining responsible for any breach.
• Regulatory carve-outs: the NDA must not prevent disclosure to the FCA, HMRC, Companies House, the Takeover Panel, or any other UK regulatory body where disclosure is required by law.
• Post-exit survival: confidentiality obligations continue for two to five years after the shareholder ceases to hold shares, covering all information received during the period of shareholding.
• Return or destruction on exit: the departing shareholder must return or destroy all confidential information promptly on ceasing to be a shareholder, with written confirmation of destruction on request.

Insider dealing and UK MAR: what an NDA cannot do

For UK-listed companies, the Market Abuse Regulation (UK MAR) imposes statutory obligations on anyone who holds inside information — information that is precise, not public, and likely to have a significant effect on share price if made public. Shareholders in listed companies who receive board papers or earnings information may hold inside information within the meaning of UK MAR.

An NDA cannot override UK MAR obligations. A shareholder who holds inside information is prohibited from dealing in the relevant shares, recommending that someone else deals, or disclosing the information to another person who might deal — regardless of what the NDA says. The Financial Services and Markets Act 2000 treats insider dealing as a criminal offence.

For private company shareholders, there is no equivalent statutory regime, but best practice is to include a non-use clause prohibiting the shareholder from using confidential financial information to trade in the company's shares or the shares of any associated business.

Confidentiality obligations when a shareholder exits

One of the most common drafting oversights in shareholder NDAs is the failure to address what happens when the shareholder sells their shares. Without a survival clause, the shareholder may argue that their obligations ended when their relationship with the company ended. In practice, this could mean that a departing shareholder — particularly one who is leaving in contentious circumstances — treats themselves as free to disclose board-level information once the sale of their shares is complete.

The NDA should expressly state that confidentiality obligations survive termination of the shareholding and continue for a defined period — typically two to five years. The obligations should extend to all information received during the entire period of the shareholder's investment, not just information received immediately before exit.

Return or destruction obligations are equally important on exit. The shareholder should be required to return all confidential documents (including electronic copies and notes) and confirm destruction in writing. Board-level information in the hands of a former shareholder who is now a competitor is a material commercial risk.

Which NDASafe template to use

The appropriate template depends on the relationship and information flow:

• One-Way NDA, Disclosing (£29): use where only the company is sharing confidential information with the shareholder. The company is the disclosing party; the shareholder is the receiving party with confidentiality obligations. The most common structure for investor-shareholder relationships.
• Mutual NDA (£29): use where the shareholder is also sharing confidential information with the company — for example, a strategic corporate investor sharing technical plans or acquisition intentions, or a co-development arrangement where both parties disclose IP.
• Investor NDA (£29): designed specifically for pre-investment discussions at pitch and due diligence stage, before any shares are issued. Includes non-circumvention (12-month default) and no-poach provisions suitable for early-stage fundraising.
• Complete NDA Bundle (£79): all eight NDA variants. Suitable for companies with multiple investor types at different stages, and for corporate solicitors and company secretaries who advise on recurring shareholder confidentiality situations.