Non-Disclosure Agreement (NDA)

Understanding Non-Disclosure Agreements (NDA) in Turkish Law

In Turkish Law, a Non-Disclosure Agreement (NDA), or Gizlilik Sözleşmesi, is a legally binding contract established between two or more parties. Its primary purpose is to ensure that specific information shared between the parties remains confidential and is not disclosed to unauthorized third parties or the public. Governed by the freedom of contract principle under the Turkish Code of Obligations (TCO) Article 26, NDAs are considered "atypical" (isimsiz) and sui generis contracts since they are not explicitly defined as a specific contract type in the TCO.

NDAs are foundational in protecting trade secrets, sensitive business data, and proprietary information. They establish a relationship of trust and provide a clear legal framework for claiming damages or penalties in case of a breach.

Common Application Areas

While NDAs are versatile, they are predominantly utilized in specific sectors and transactions where information security is critical:

• Mergers and Acquisitions (M&A): During the Due Diligence (DD) phase, the acquiring party accesses the target company's financial, legal, and commercial secrets. NDAs ensure this information is protected even if the deal falls through.
• Defense Industry: Defense projects often involve classified information. Under the Defense Industry Security Law (No. 5202), sharing sensitive military or technological data requires stringent confidentiality measures.
• Technology and Cloud Computing: When sharing source codes, algorithms, or storing data in cloud services, NDAs protect intellectual property and prevent unauthorized data processing.

Key Parties in an NDA

An NDA primarily involves two roles, though the agreement can be unilateral, bilateral, or multilateral depending on the flow of information:

• Disclosing Party (Gizli Bilgiyi Veren Taraf): The party that shares the confidential information. This party does not necessarily have to be the owner of the information; being an authorized possessor (e.g., a consultant) is sufficient.
• Receiving Party (Gizli Bilgiyi Alan Taraf): The party that receives the information and undertakes the obligation to keep it confidential and not disclose it.

Essential Characteristics of "Confidential Information"

For information to be legally protected under an NDA in Turkey, it must meet specific criteria. Not every piece of data can be arbitrarily classified as confidential:

1. Must be Confidential: The information must not be known to the public or easily accessible by third parties in the relevant sector.
2. Intent of Confidentiality: The owner must demonstrate a clear intent (explicit or implicit, such as using passwords or restricted access) to keep the information secret.
3. Legitimate Interest: The disclosing party must have a tangible and legitimate interest in keeping the information confidential (i.e., its disclosure would cause harm or financial loss).
4. Must be Real and Accurate: False or fabricated information cannot be legally protected as a trade secret or confidential information.

Interestingly, Turkish jurisprudence also recognizes negative confidential information (e.g., knowledge about a failed R&D process or what not to do) as protectable trade secrets.

Consequences of Breach

When the receiving party breaches the NDA, the disclosing party can seek remedies under the Turkish Code of Obligations. Because proving actual financial loss (damages) from an information leak can be exceptionally difficult, NDAs commonly include specific clauses to facilitate compensation:

• Penalty Clause (Ceza Koşulu): A predetermined sum that the breaching party must pay upon violation, regardless of whether the disclosing party suffered actual damages. This acts as a strong deterrent.
• Liquidated Damages (Götürü Tazminat): A pre-agreed estimate of damages to be paid in the event of a breach, simplifying the burden of proof in court.

Frequently Asked Questions (FAQ)