Introduction

Confidential information is frequently shared beyond the immediate contracting parties—for example with advisers, consultants, contractors, or group entities. This practice note outlines the key legal avenues a disclosing party may consider when a third-party recipient improperly uses or discloses confidential information, including when direct enforcement may be available, the principal remedies typically sought, and practical drafting and compliance steps that help preserve enforceability.

Direct Recourse Against Third Party Recipients

A disclosing party’s ability to take direct action against a third party recipient for breach of confidentiality largely depends on whether the third party is contractually bound to the disclosing party. This is typically achieved by requiring the third party to sign a separate NDA (often called a “flow-down” or “mirror” agreement) with terms at least as strict as the original NDA. If such an agreement exists, the disclosing party can enforce its rights directly against the third party for breach, seeking remedies (depending on the governing law) such as:

• Interdict / Injunctive relief: An urgent order to stop further use or disclosure (and, where appropriate, to prevent threatened disclosure), often supported by a contractual acknowledgement that damages may be inadequate.
• Damages (loss-based): Compensation for proven loss caused by the breach (scope and recoverability of consequential loss varies by governing law and contractual drafting).
• Account of profits / disgorgement (where available): In some jurisdictions or fact patterns, recovery may focus on the breaching party’s gains rather than the disclosing party’s loss.
• Liquidated damages: If a genuine pre-estimate (or otherwise enforceable agreed amount) is specified, this can streamline enforcement; enforceability tests differ by jurisdiction (e.g., penalty doctrines).
• Delivery up / return / destruction: Orders (or contractual obligations) to return, delete, or destroy confidential materials and certify compliance, including copies and backups where practicable.
• Specific performance: A court order compelling compliance with contractual confidentiality obligations, typically where damages are inadequate and enforcement is appropriate.
• Costs / attorneys’ fees: Recovery of legal costs where permitted by the applicable procedural rules and/or provided for in the agreement.

If the third party did not sign an agreement with the disclosing party, remedies may still exist but are typically more fact- and jurisdiction-dependent. Common options include: (a) enforcing the original NDA against the receiving party (who may then have contractual recourse against its subcontractor/adviser), and/or (b) pursuing a direct non-contractual claim against the third party where recognised (for example, breach of confidence, misappropriation of trade secrets, unlawful competition / delict or tort, inducing breach of contract, or unjust enrichment). The viability and elements of these claims differ across jurisdictions and should be assessed early, especially when urgent relief is required.

Best Practices to Enable Direct Recourse

To maximize direct remedies against third parties, the original NDA should:

• Mandate flow-down NDAs (or accession): Require third parties to sign a mirror NDA with the disclosing party, or to accede to the original NDA, before receiving confidential information.
• Define permitted recipients and purposes: Limit disclosure to approved categories (e.g., professional advisers) on a strict need-to-know basis, solely for the permitted purpose.
• Make the receiving party responsible: Include an express obligation that the receiving party is liable for third-party breaches and must enforce flow-down obligations promptly on request.
• Approval, security and audit rights: Implement written approval for onward disclosure, minimum information security measures, incident notification obligations, and (where appropriate) audit/verification rights.
• Record-keeping and exit obligations: Maintain a log of disclosures and require return/destruction (including deletion) at the end of the relationship, with certification.

Jurisdictional Considerations

Remedies and direct recourse may vary by jurisdiction:

• South Africa: Claims commonly arise in contract (where the third party is bound) and delict/unlawful competition (depending on the facts). Urgent interdicts may be available to restrain misuse, and reasonableness/public policy considerations may influence enforcement of certain clauses.
• United States: In addition to contract, trade secret misappropriation claims may be available under state law and (where applicable) the federal Defend Trade Secrets Act (DTSA), with remedies that can include injunctive relief, damages, and in some cases exemplary damages and attorneys’ fees for willful and malicious misappropriation.
• England / EU: Equitable/common law breach of confidence may permit claims against a third party who receives information with notice of its confidentiality. Separate statutory regimes may apply to trade secrets (noting that specifics differ across EU member states). Contractual NDAs and clear flow-down mechanisms remain the most straightforward route for direct enforcement.

Summary Table of Remedies

Conclusion

Direct recourse against a third-party recipient is usually strongest where the third party is contractually bound to the disclosing party (for example, via a flow-down/mirror NDA or accession mechanism). Where no direct contract exists, a disclosing party may need to rely on enforcement against the receiving party and/or consider non-contractual claims that depend on the governing law and the facts. In all cases, early steps to preserve evidence and seek urgent relief can be critical. Always consult qualified legal counsel for advice on specific circumstances.

Disclaimer: This practice note is for informational purposes only and does not constitute legal advice. For specific legal guidance, consult a qualified attorney familiar with the relevant jurisdiction and circumstances.