NDA Non-Disclosure Agreement in Thailand:
Complete Legal Guide

1. Introduction — What Is an NDA and Why Does Business Need One? Non-Disclosure Agreement — Definition and Business Context in Thailand

In an era where information is a strategic asset, protecting confidential business information has become a matter that businesses of every size cannot afford to overlook. Production formulas, customer databases, business plans, proprietary technology, and other trade secrets represent the accumulated investment of effort, time, and resources. A leak of such information can inflict severe damage on a business's competitive position and commercial value.

A Non-Disclosure Agreement (NDA) — also known as a Confidentiality Agreement (CA) or Confidential Disclosure Agreement (CDA) — is a legally binding contract by which one or both parties agree not to disclose specified information to third parties. An NDA creates enforceable legal obligations and establishes remedies in the event of a breach, making it an indispensable tool in modern commercial practice.

In the Thai business context, NDAs are used across a wide range of commercial situations: preliminary business negotiations (pre-negotiation), due diligence in mergers and acquisitions (M&A), employment and engagement of consultants, joint venture exploration, and the engagement of external contractors or vendors.

1.1 Situations Requiring an NDA

1. Preliminary Business Negotiations: Before exchanging business information — such as revenue figures, profit data, or technical specifications — parties should always execute an NDA first.
2. Due Diligence in M&A Transactions: The target company's review process necessarily involves disclosing sensitive internal information. An NDA is indispensable to protecting that data during the review period.
3. Employment and Engagement of Consultants: Employees, consultants, or freelancers who require access to a company's confidential information should sign an NDA before commencing work.
4. Software Development and Technology Services: Companies engaging external software developers or IT service providers must protect their source code, system architecture, and user data.
5. Joint Ventures and Business Collaboration: Exploring the feasibility of a joint venture requires the exchange of sensitive commercial and financial information from both sides.
6. Investor Relations (Startup Fundraising): Startups presenting business plans to venture capital funds or angel investors should consider NDA protection for their core proprietary concepts and financial projections.

2. Thai Legal Framework — Laws Governing NDAs Civil and Commercial Code, Trade Secrets Act B.E. 2545, and PDPA

There is no specific Thai statute that defines or exclusively governs NDAs by name. Instead, several interlocking laws must be considered together when drafting, interpreting, or enforcing an NDA in Thailand.

2.1 Civil and Commercial Code (CCC) — Book III (Specific Contracts)

The legal foundation of any NDA is the general law of contract as codified in the Civil and Commercial Code (ประมวลกฎหมายแพ่งและพาณิชย์ — CCC), principally Book II (Obligations) and Book III (Specific Contracts). The following provisions are directly relevant:

These provisions establish two fundamental requirements for an NDA to be legally enforceable under Thai law: (1) the NDA must not violate public order or good morals, and (2) it must have a lawful object. Where an NDA is breached, the aggrieved party may claim damages under the contractual liability provisions of the CCC, particularly Sections 213–222 (specific performance and damages) and Section 379 (penalty clauses / liquidated damages).

2.2 Trade Secrets Act B.E. 2545 (2002)

The Trade Secrets Act B.E. 2545 (2002) (พระราชบัญญัติความลับทางการค้า พ.ศ. 2545) is the primary public-law statute protecting trade secrets in Thailand. It provides automatic legal protection for qualifying trade secrets even in the absence of a contractual NDA, subject to three cumulative conditions.

The three elements of a qualifying "trade secret" under the Trade Secrets Act B.E. 2545 (2002) are: (1) Secrecy — the information is not generally known or readily accessible within the relevant professional community; (2) Commercial value — the information has economic value specifically because it is secret; and (3) Reasonable protective measures — the owner has taken appropriate steps to maintain the information's confidential character. A well-drafted NDA constitutes strong evidence of the third element.

Criminal penalties for trade secret violations are provided in the Trade Secrets Act B.E. 2545 (2002), Section 33, which prescribes imprisonment and fines. The NDA and the Trade Secrets Act B.E. 2545 (2002) are thus complementary instruments: the NDA extends the scope of protection and establishes specific contractual conditions, while the statute provides baseline automatic protection and the option of criminal enforcement.

2.3 Personal Data Protection Act B.E. 2562 (2019) — PDPA

Where an NDA covers information that constitutes "personal data" within the definition of the Personal Data Protection Act B.E. 2562 (2019) (พระราชบัญญัติคุ้มครองข้อมูลส่วนบุคคล พ.ศ. 2562 — PDPA), the requirements of the PDPA must be observed concurrently. An NDA cannot serve as a legal basis for processing personal data under the PDPA without a separate lawful basis.

In practice, where an NDA is exchanged between organisations and covers data relating to customers, users, or employees, the NDA should clearly specify that the transfer of personal data is governed by a Data Processing Agreement (DPA) that forms part of or is annexed to the NDA. This ensures compliance with both the contractual obligations of the NDA and the statutory obligations of the PDPA.

2.4 Other Relevant Legislation

3. Key Elements of an Effective NDA Essential Provisions for Enforceability Before Thai Courts

An NDA that is both effective in protecting confidential information and enforceable before Thai courts must contain the following essential provisions.

3.1 Definition of Confidential Information

The definition of "Confidential Information" is the heart of any effective NDA. A definition that is too narrow will leave important information unprotected, while a definition that is excessively broad may be interpreted by Thai courts as lacking practical effect or as an unreasonable restraint on commercial activity.

A well-drafted definition should specify both: (1) the categories of information covered — e.g., financial data, technical specifications, production formulas, customer lists, business strategies, software source code — and (2) the medium of disclosure — written, oral, presentations, digital files, or physical observation.

3.2 Four Standard Exceptions

Every standard-form NDA must include the following four exceptions. Without them, an NDA risks being characterised by Thai courts as unenforceable or as creating obligations that are impossible of performance:

1. Public Domain Information: Information that is or becomes publicly available through no fault of the receiving party — e.g., information published in public media or registered in public government records.
2. Prior Knowledge: Information that the receiving party demonstrably knew before it was disclosed under the NDA, supported by documentary evidence of prior knowledge.
3. Third-Party Disclosure: Information lawfully received from a third party who was entitled to disclose it without restriction.
4. Independent Development: Information or results independently developed by the receiving party without any use of or reference to the disclosing party's confidential information, supported by independent development records.

3.3 Duration

The duration of an NDA has two separate dimensions that must each be defined: (1) the Term of the Agreement (i.e., the period during which the parties' commercial relationship and information exchange occurs), which may be a fixed number of years or tied to a specific project; and (2) the Confidentiality Obligation Period (i.e., how long the receiving party's duty of confidentiality continues), which is typically longer than the agreement term and survives its expiry.

Under Thai law, there is no statutory provision prohibiting any particular duration for confidentiality obligations. However, if the duration is unreasonably long, a Thai court may treat it as an excessive restriction of personal freedom and reduce it under general contract law principles.

3.4 Compelled Disclosure Procedure

Where the receiving party is compelled by a court order, regulatory authority, or government body to disclose confidential information, a well-drafted NDA must clearly specify the procedure for handling such a situation. This procedure should include: (1) a duty to notify the disclosing party as promptly as possible before disclosure, to give the disclosing party an opportunity to seek a protective order or to oppose the disclosure; (2) an obligation to disclose no more than the minimum required by the legal compulsion; and (3) a commitment to seek confidential treatment or a protective order from the relevant court or authority where feasible.

3.5 Remedies

An effective NDA must specify clear remedies for breach. In the Thai legal context, the following remedies are applicable:

1. Liquidated Damages: A pre-agreed sum payable upon breach, avoiding the difficulty of proving actual loss in court. Under Civil and Commercial Code (CCC), Section 379, such clauses are binding. However, Section 383 empowers the court to reduce the stipulated amount if it is found to be grossly disproportionate to actual loss.
2. Injunctive Relief (Interim Protective Order): The right to seek a court order preventing the continued use or disclosure of confidential information — a remedy that is often more valuable than damages for high-value information. Available under Section 254 of the Civil Procedure Code (ประมวลกฎหมายวิธีพิจารณาความแพ่ง มาตรา 254).
3. Attorney's Fees: Some NDAs specify that the prevailing party is entitled to its attorney's fees. Under the Thai system, courts retain discretion over costs awards, so any contractual provision on this point is persuasive but not conclusive.

4. Unilateral vs Mutual NDA — Choosing the Right Structure One-Way vs Bilateral Confidentiality Obligations

The appropriate NDA structure depends on the nature of the commercial relationship and the direction of information flow between the parties.

5. Thai Business Considerations & Common Pitfalls Enforcement Realities and Limitations Under Thai Law

5.1 Enforcement of NDAs Before Thai Courts

Enforcement of an NDA before Thai courts involves several practical considerations. First, the burden of proof rests with the party claiming a breach. The claimant must establish: (1) that the information alleged to have been disclosed falls within the scope of the NDA; (2) that the defendant received such information under the NDA; and (3) that the defendant disclosed or used the information in excess of what the NDA permitted.

Second, Thai courts place significant weight on documentary evidence — files, emails, digital communications — as well as records of information disclosure (such as data room access logs) and expert witness testimony. Parties disclosing confidential information should therefore maintain thorough disclosure records from the outset.

5.2 Limitations of NDAs Under Thai Law

An NDA is not a universal protective instrument. The following categories of information and conduct fall outside the scope of NDA protection under Thai law:

1. General Skills and Professional Know-How: An NDA cannot prevent an employee from applying the general professional skills and knowledge developed during employment. Thai courts draw a clear distinction between "specific organisational confidential information" and "general professional competence."
2. Information That Enters the Public Domain: Once information specified in an NDA enters the public domain (for whatever reason), the NDA obligation in respect of that specific information is automatically extinguished.
3. Whistleblower Disclosures: An NDA cannot lawfully prohibit an employee from reporting information relating to illegal conduct to the National Anti-Corruption Commission (NACC), a regulatory authority, or other competent bodies under applicable Thai law.
4. Information Used to Conceal Illegal Conduct: Where an NDA is instrumentalised to cover up illegal activity, Thai courts will refuse to enforce it on the grounds that it violates public order and good morals under Civil and Commercial Code (CCC), Section 150.

5.3 NDA in Employment Relationships — Distinction from Non-Compete

In the employment context, NDAs and Non-Compete Agreements (สัญญาห้ามแข่งขัน) are frequently confused with one another. The distinctions are legally significant:

5.4 Governing Law and Jurisdiction

For NDAs involving parties of different nationalities or cross-border transactions, the Governing Law and Jurisdiction (or Arbitration) clauses must be clearly specified. If these are not specified and a dispute is brought before a Thai court, the court will apply Thai private international law principles to determine which law governs the contract.

Specifying Thai law as the governing law for business transactions conducted in Thailand is strongly recommended. Thai courts and counsel are familiar with Thai law, and there is no need to prove the content of foreign law in proceedings. If arbitration is preferred, specifying a recognised arbitral institution in Thailand — such as the Thai Arbitration Institute (TAI) or the Thailand Arbitration Center (THAC) — is advisable.

6. Pre-Signing NDA Checklist What to Verify Before Executing an NDA in Thailand

Before executing any NDA, the following items should be systematically verified.

Part 1: Verify the Parties

• ✓
  Confirm the legal status of each party — Verify that each corporate entity is duly registered under applicable law, and that the signatory holds the authority to bind the entity (Authorized Signatory), as evidenced by the company's certificate of registration and authorised directors.
• ✓
  Identify each party fully and accurately — Full legal name, registered address, company registration number (for corporate entities) or national ID number (for natural persons).
• ✓
  Consider whether Affiliates should be included — If a party has subsidiary or affiliated companies that will also access confidential information, confirm whether the NDA covers those Affiliates or whether separate NDAs are required from each entity.

Part 2: Verify the Scope of Confidential Information

• ✓
  Does the definition of "Confidential Information" cover all information you intend to share? — Confirm that every category of information you plan to disclose under the NDA falls within the contractual definition.
• ✓
  Are all four standard exceptions present? — Verify that the NDA includes exceptions for public domain information, prior knowledge, third-party disclosure, and independent development.
• ✓
  Is the permitted use of confidential information clearly and narrowly defined? — The receiving party should be expressly limited to using the information for the stated purpose only, with any other use prohibited.

Part 3: Verify Duration and Termination Conditions

• ✓
  Is the agreement term reasonable and appropriate to your needs? — Not so short as to leave you inadequately protected, and not so long as to risk judicial reduction.
• ✓
  Is the post-termination confidentiality obligation clearly defined? — A "Survival Clause" should specify how many years the duty of confidentiality continues after the agreement expires or is terminated.
• ✓
  Is there a return or destruction of information clause upon termination? — Specify the procedure for returning or certifiably destroying all confidential information, including copies in all formats, upon expiry or termination.

Part 4: Verify Remedies Provisions

• ✓
  Are the Liquidated Damages reasonable and proportionate? — Verify that the pre-agreed damages amount is a genuine pre-estimate of loss, not a penalty. A grossly disproportionate amount may be reduced by the court under Civil and Commercial Code (CCC), Section 383.
• ✓
  Is the right to interim injunctive relief preserved? — The NDA should explicitly state that the disclosing party may seek an interim court order without first being required to quantify monetary loss.
• ✓
  Are Governing Law and Jurisdiction clearly specified? — For Thai business transactions, specifying Thai law as governing law and Thai courts (or a recognised Thai arbitral institution) as the forum for dispute resolution is strongly recommended.

Part 5: Verify PDPA and Personal Data Issues

• ✓
  Does the information to be shared include personal data under the PDPA? — If yes, ensure that a lawful basis for processing exists under the Personal Data Protection Act B.E. 2562 (2019), and consider attaching a Data Processing Agreement (DPA) as an annex to the NDA.
• ✓
  Are minimum data security obligations specified? — Define the minimum security standard that the receiving party must maintain for confidential information, including encryption requirements, access controls, and breach notification obligations.

7. Frequently Asked Questions (FAQ) Common Questions on NDAs in Thailand

8. Conclusion Summary and Key Takeaways

A Non-Disclosure Agreement is an indispensable legal instrument for Thai businesses operating in an environment where information constitutes a key strategic asset. Its effectiveness, however, is contingent on being properly designed for the Thai legal context — with a clear definition of confidential information, the four standard exceptions, a reasonable duration, and proportionate remedies.

The most common NDA mistakes observed in Thai business practice are: using an unadapted foreign template; definitions that are either too vague or too narrow to be enforceable; unreasonable duration provisions; and failure to maintain adequate disclosure records for evidentiary purposes in court proceedings.

Under the Thai legal system, an NDA works in combination with the Trade Secrets Act B.E. 2545 (2002) (พระราชบัญญัติความลับทางการค้า พ.ศ. 2545), which provides baseline automatic protection, and must be designed to respect the requirements of the Personal Data Protection Act B.E. 2562 (2019) (PDPA) where any personal data is involved. Effective use of an NDA therefore requires an integrated understanding of all applicable Thai legislation.

Ultimately, the best NDA is one that allows both parties to understand their obligations clearly, builds the mutual trust necessary for productive commercial relationships, and contains enforceable mechanisms that can be activated effectively if a dispute arises. The investment in a well-drafted NDA at the outset invariably proves more cost-effective than attempting to remedy a breach of confidence after the fact.