How long do my obligations last? - OneNDA Provision
Overview
One of the few variables you can play with in the OneNDA form.
Summary
Confidentiality Period in the OneNDA
It is clear enough how long the Confidentiality Period lasts: but when does it run from? It could, conceivably be the date of execution of the agreement, or the date of disclosure of the information.
The former is probably more “standard” — in the pedantic, messed-up universe of NDA ninjery, at any rate — and it has the “advantage”, if you could call it that, of certainty and consistency: you know when your obligations start, and stop, and you can stick a calendar reminder in your Outlook and everything is good — but the latter makes a lot more sense in light of the broader purpose of a commercial NDA: When I give you any information, it is confidential for a reasonable period from when I disclose it. Information doesn’t necessarily go stale at all, and certainly doesn’t on an arbitrary period set by reference to the commencement of the agreement.
Additionally, the OneNDA does not have a “term” as such — either party can terminate it without cause on thirty days’ notice — so referring the Confidentiality Period to the starting point of the agreement would make no sense at all: say you agreed a Confidentiality Period of three years, but the agreement ran for five: information exchanged in the final two years would not be subject to a confidentiality obligation at all. Clearly that can’t be right.
Confidentiality periods in general
So must your NDA have a term? Some insist on a hard stop, say two years, after which confidential information ceases to be confidential. This seems to us to be artificial. Others may mediate this by “execution of final transaction documents”.
It is not clear why going live on a transaction should suddenly set the negotiating parties free to spill private beans about each other that they learned in its formation. The theory is possibly that the final deal docs will themselves contain confi provisions which will be more sophisticated and can govern — but at least in the derivatives world, typically they don’t. Go figure.
Why have a term at all?
Good question.
Many negotiators declare themselves immutably bound to a term, usually by internal policy. They would sooner be broken upon a wheel than let this one go. This policy, they will intuit, dates from the days of the First Men, possibly was the result of a misunderstanding, but in any case subsequently has hardened, encrusted, calcified, petrified, and finally fossilised itself into a layer so deep in the firm’s organisational substrate that there is no known means of questioning it. In the very act of questioning it invites some kind of opprobrium. If anyone ever did really understand what the issue was, they have long since moved on, or been moved on, and no-one remains who can recall, much less articulate the original reason for this policy, or why it is still needed now.
Furthermore, in the ensuing thirty odd years, generations of employees have left that firm (some voluntarily, many not), taking this deep personal conviction with them, and have circulated the market, wherever they go inculcating a strong sense that some ineffable calamity would befall them, their firm, the market or, indeed, the entire industry should this sacred covenant ever be breached.
Thus the “mandatory confidentiality term” has now become part of the folklore of the financial services markets. You have to have a term, and it can’t be longer than two years at the most.
Now perhaps the JC is that long-prophesied seal of the forthcoming apocalypse (actually that might explain a few things, come to think of it) but, personally, he has never been able to understand what this “term” covenant could possibly achieve? Why, after a couple of years, should I suddenly be entitled to blare all your darkest secrets out from the minarets around town, without so much as a by-your-leave?
While the commercial value of much information does go stale over time (blueprints for a BetaMax, anyone?), this isn’t universally true — a client list is valuable however long you hold it — and the usual justification for the hard stop (“we just don’t have the systems to indefinitely hold information subject to confidence and don’t want indeterminate liability for breach”) is a canard — a palpably false one at that, for a regulated financial institution. Whatever information security systems you do have don’t suddenly stop working after three years. And as for indeterminate liability — well, no harm no foul: if the information really is stale then no loss follows from a breach, right? No loss, no damages.
In any case, it seems to the JC that a term creates more questions than it answers. When does it run from? The date of the NDA itself, or the date of disclosure of the information in question? If the former, and the point is to exclude stale information, why is the NDA date a relevant point? If the latter, who is monitoring what is disclosed when? What is meant to happen when the term expires? Why are we even having this conversation?