What is not confidential?
The exclusions clause is the recipient's lifeline. While the definition section (Category 01) names what the agreement covers, the exclusions section names what it doesn't — the categories of information that even a broadly-drafted NDA cannot reach.
Standard exclusions cover four scenarios: information that was already public; information the recipient already knew; information the recipient independently developed; and information the recipient rightfully received from a third party with no duty of confidentiality. A fifth, often separate, exclusion handles compelled disclosure — when a court order or regulator requires the recipient to disclose (covered in Category 05).
An NDA without these exclusions makes the recipient liable for things they never agreed to keep secret in any meaningful sense. An NDA with weak or one-sided exclusions tilts the agreement to the disclosing party's advantage in every dispute that follows.
What every good NDA carves out
Industry-standard exclusions are nearly universal across well-drafted NDAs because U.S. courts will typically read them in even if they're not explicit. A perpetual confidentiality obligation on information that has been published in a newspaper is unenforceable regardless of what the contract says. The exclusions clause makes this explicit so the recipient doesn't have to litigate the point.
The four core exclusions: publicly known (information in the public domain through no fault of the recipient); previously known (information the recipient can document having before the disclosure); independently developed (information the recipient develops without reference to the confidential material); rightfully received (information the recipient legitimately obtains from a third party not bound by confidentiality).
The disclosing party often pushes back on the previously-known and independently-developed exclusions, since these are the ones that create real arguments in disputes. Watch for clauses that try to weaken these by requiring the recipient to prove prior knowledge by 'clear and convincing evidence' or by 'contemporaneous written records' — these heightened burdens shift the risk back to the recipient.
What this looks like in real contracts
What NDASentry flags in this category
2.1 Missing standard exclusions
The agreement omits one or more of the four core carve-outs (publicly known, previously known, independently developed, rightfully received). The recipient is exposed for information that any reasonable contract would exclude from confidentiality, including information that becomes public through other means.
2.2 Narrow or one-sided exclusions
Exclusions are present but burdened with heightened proof requirements ('clear and convincing evidence,' 'contemporaneous written records'), or apply only to one party in a mutual agreement. These patterns shift the evidentiary cost of any dispute toward the recipient.
2.3 Missing 'required by law' exclusion
The agreement does not carve out disclosures required by subpoena, court order, regulatory demand, or other legal process. Without this exclusion, complying with a legal obligation can technically breach the NDA. The handling of compelled disclosure is covered in detail under Category 05.
We are scoring a corpus of public NDAs to publish prevalence data for each pattern in this taxonomy. The findings — including what percentage of real NDAs contain the patterns above, broken down by industry and jurisdiction — will appear here when the study is complete.