Which Laws Govern the Disclosure of Confidential Information in Contracts?

Disclosure of confidential information occurs when someone reveals information that was understood to be private or restricted, either through explicit agreement or implied obligation, without consent or legal authorization. The harm to you as a victim depends on whether the information was trade secrets, personal data, medical records, financial details, or communications protected by law. Courts evaluate liability by examining three core elements: whether the information was genuinely confidential, whether the person who disclosed it had a duty to keep it secret, and whether the disclosure caused measurable harm. The standard varies depending on whether the breach arises from a contractual non-disclosure agreement, a professional relationship, employment, or fiduciary duty.

Liability is not automatic simply because someone shared information you considered private. Courts require evidence that you took reasonable steps to maintain secrecy, that the other party understood the confidential nature of the material, and that the disclosure was intentional or grossly negligent. In New York, courts distinguish between breaches of express agreements (where the confidentiality obligation is written) and breaches of implied duties (where the relationship itself created a reasonable expectation of privacy). The burden falls on you to demonstrate that the information qualified as confidential under the applicable legal standard.

When you pursue a claim for unauthorized disclosure, courts require specific evidence to establish liability. The threshold question is whether the information was actually confidential at the time of disclosure. This means you must show that the information was not publicly available, that you communicated its sensitive nature to the person who disclosed it, and that you implemented safeguards to restrict access. Courts examine the context: Was the information labeled confidential? Did the parties discuss its private status? Were there passwords, restricted access, or security protocols? The absence of formal safeguards does not automatically defeat your claim, but their presence strengthens it considerably.

Second, courts evaluate whether the person who disclosed the information had a legal duty to maintain confidentiality. This duty may arise from an explicit non-disclosure agreement, from professional licensing rules, from employment law, or from the nature of the relationship itself. For example, attorneys, physicians, and therapists owe confidentiality duties by statute and professional ethics. Employees often owe such duties under common law or contract. A vendor or consultant may owe a duty if the engagement involved access to sensitive material. In New York, courts recognize both contractual and non-contractual duties to maintain confidentiality, depending on the circumstances.

Third, you must demonstrate causation and harm. The disclosure must have caused you injury, whether financial loss, reputational damage, competitive disadvantage, or emotional distress. Quantifying harm can be difficult, particularly for reputational injury or loss of business opportunity, but courts may consider market impact, lost clients, diminished brand value, or costs incurred to remediate the breach.

New York law provides several remedies when confidential information is disclosed unlawfully. Injunctive relief is often the most practical remedy: a court may order the person who disclosed the information to cease further disclosure and to return or destroy the material. Courts grant preliminary injunctions in cases where you can demonstrate irreparable harm, a likelihood of success on the merits, and that the balance of hardships favors granting the order. Once the information enters the public domain, however, an injunction becomes less effective because the harm is already done.

Monetary damages are available if you can prove financial loss directly caused by the disclosure. This may include lost profits, diminished business value, costs of remediation, or damages for breach of contract if a non-disclosure agreement exists. Courts may also award damages for emotional distress or reputational harm in certain circumstances, though these are harder to quantify and require evidence of severe injury. In cases involving trade secrets, New York recognizes the Uniform Trade Secrets Act, which permits recovery of actual losses plus unjust enrichment, and in cases of willful and malicious misappropriation, courts may award enhanced damages.

A protective order, sometimes called a confidentiality order, is a court directive that restricts how information disclosed during litigation may be used. If you are concerned that litigation itself will require disclosure of sensitive material, you can seek a protective order to limit access to that material to attorneys, court personnel, and parties directly involved. This tool can help mitigate harm during the legal process, though it does not prevent disclosure that has already occurred.

Unauthorized disclosure often overlaps with other legal claims that may strengthen your position. Breach of confidentiality claims frequently accompany breach of contract claims if a non-disclosure agreement exists, or tortious interference claims if the disclosure was designed to harm your business relationships. In some cases, the disclosure may rise to the level of defamation and misinformation litigation if the disclosed information is false and harms your reputation. Understanding which claims apply to your situation helps you evaluate the full scope of liability and the remedies available.

From a practitioner's perspective, the overlap between these claims matters because different legal theories offer different proof standards and remedies. A breach of confidentiality claim focuses on the unauthorized nature of the disclosure and the breach of duty. A defamation claim requires proof that the disclosed information is false and caused reputational harm. A tortious interference claim requires proof that the defendant intended to harm your business relationships through the disclosure. Pursuing multiple theories simultaneously can strengthen your case, but each requires distinct evidence and satisfies different legal standards.

Before filing a lawsuit, careful documentation of the breach and its impact is essential. You should preserve evidence of the confidential nature of the information: emails, agreements, memoranda, security protocols, or witness accounts that establish your efforts to maintain secrecy. You should also document when and how you learned of the disclosure, who disclosed it, to whom it was disclosed, and what harm resulted. This record-making matters because courts in New York often address threshold questions about the confidentiality status of information early in litigation, and incomplete documentation can weaken your position at summary judgment or trial.

Timing is significant. In New York state courts, the statute of limitations for breach of contract claims is typically six years from the date of the breach, while tort claims such as tortious interference carry a three-year limit. However, these periods may be tolled or extended depending on circumstances, and federal claims involving trade secrets or intellectual property may carry different deadlines. Prompt preservation of evidence and early consultation with counsel helps protect your ability to pursue remedies before deadlines narrow your options.

Consider also whether the disclosure implicates confidentiality laws that create statutory remedies independent of common law claims. For example, if the disclosed information includes medical records, the Health Insurance Portability and Accountability Act (HIPAA) may apply, offering specific remedies and notice requirements. If the information involves financial data or identity information, state privacy laws and federal regulations such as the Gramm-Leach-Bliley Act may create additional obligations and remedies. Understanding which statutes govern your information helps you identify all available avenues for relief and ensures compliance with notice and procedural requirements those laws impose.

The practical pathway forward depends on your specific situation: whether you have a written non-disclosure agreement, whether the disclosure occurred in an employment context, whether the information qualifies as a trade secret, and whether the harm is ongoing or contained. Before pursuing litigation, evaluate whether preliminary injunctive relief is necessary to prevent further disclosure, whether settlement discussions might resolve the matter more efficiently, and what evidence you can gather to support each element of liability. These considerations shape both the strength of your position and the realistic scope of remedies available to you.