Securing Trade Secrets with Non-Disclosure Agreements (NDAs) for Massachusetts Biotech and Tech Firms

A Kendall Square startup emails its assay protocol to a contract research organization under a one-page template NDA. Months later, a nearly identical method shows up in a rival's patent application. Biotech and software companies in Cambridge, Boston, Waltham, and Worcester face this risk all the time, and a sloppy agreement can cost them the very data that drives their valuation.

Protecting trade secrets with a nondisclosure agreement in Massachusetts works only when the contract, the company's daily security habits, and state and federal law all line up. An NDA does not create a trade secret on its own. Still, it is usually the first document a judge looks at when deciding whether the information deserves legal protection.

How the Massachusetts Uniform Trade Secrets Act Protects Company Data

The Massachusetts Uniform Trade Secrets Act (Mass. Gen. Laws ch. 93, § 42) governs misappropriation that began on or after October 1, 2018. It defines a trade secret as information that has economic value because competitors do not know it and that the owner protects through reasonable efforts. For a biotech firm, that might be a cell line process or unpublished trial data. For a tech company, it might be source code, model weights, or a pricing algorithm.

The remedies available under the Act include:

• Injunctions that stop use or disclosure (Mass. Gen. Laws ch. 93, § 42A).
• Actual losses and unjust enrichment, or a reasonable royalty (Mass. Gen. Laws ch. 93, § 42B).
• Exemplary damages of up to 2x the award when the misappropriation was willful and malicious.
• Attorney fees for bad faith claims or willful and malicious conduct (Mass. Gen. Laws ch. 93, § 42C).

A lawsuit generally must be filed within 3 years after the misappropriation was discovered or reasonably should have been discovered (Mass. Gen. Laws ch. 93, § 42E). Owners may also sue in federal court under the Defend Trade Secrets Act (18 U.S.C. § 1836). Theft between businesses can also support a claim for double or treble damages under Mass. Gen. Laws ch. 93A, § 11.

Courts look closely at what a company did to keep its information secret. In USM Corp. v. Marson Fastener Corp., 379 Mass. 90 (MA Supreme Judicial Court 1979), the court ruled for the trade secret owner and held that protective steps need to be reasonable under the circumstances, not perfect. In Peggy Lawton Kitchens, Inc. v. Hogan, 18 Mass. App. Ct. 937 (MA Appeals Court 1984), the court ruled for the employer and upheld relief against a former employee who took the company's closely guarded chocolate chip cookie recipe.

Trade Secrets vs. General Confidential Information

Many NDAs lump everything into one broad definition of confidential information. That shortcut can backfire, because a court may refuse to enforce a definition so broad that it covers public knowledge or an employee's general skills. Careful drafting treats the two categories separately.

Mutual vs. Unilateral NDAs

Unilateral (One-Way) NDAs

A unilateral NDA protects only one party's information. It fits employee onboarding, contractor engagements, and deals where only the company is sharing sensitive data, such as sending a protocol to a contract manufacturer. Because the recipient has nothing of its own to protect, a one-way NDA can impose tighter obligations.

Mutual (Two-Way) NDAs

A mutual NDA binds both sides. It is standard in licensing talks, joint development deals, and acquisition due diligence. Large pharma partners usually insist on their own templates. Before signing one, look for residuals clauses, which let the other side use whatever its employees remember without notes. These clauses can quietly gut your protection.

Duration Limits for Massachusetts NDAs

Massachusetts courts review confidentiality covenants for reasonableness, and they treat true trade secrets differently from ordinary data. A duty to protect a real trade secret can generally last as long as the information stays secret. For general confidential information, an unlimited term invites a challenge. Most businesses use 2 to 5 years after disclosure, and fast-moving software deals often use shorter periods.

Employee NDAs are not subject to the strict rules of the Massachusetts Noncompetition Agreement Act (Mass. Gen. Laws ch. 149, § 24L), which expressly leaves nondisclosure covenants out of its definition of a noncompete. However, if an NDA is so broad that it keeps a former employee from working in the field at all, a court may treat it as a disguised noncompete and refuse to enforce it.

Whistleblower Exclusions and Legal Carve-Outs

An NDA cannot silence lawful reporting. Agreements that ignore this limit may be partly void and can draw penalties from regulators. Generally, a Massachusetts NDA should preserve the right to:

• Report suspected legal violations to the government or an attorney under the Defend Trade Secrets Act immunity provision (18 U.S.C. § 1833(b)), which also requires employers to give written notice of this immunity.
• Contact the SEC directly about possible securities violations under 17 C.F.R. § 240.21F-17, a key issue for publicly traded biotech companies.
• Raise fraud concerns protected by the Sarbanes-Oxley Act (18 U.S.C. § 1514A).
• Discuss pay and working conditions under the National Labor Relations Act (29 U.S.C. § 157) and the Massachusetts Equal Pay Act (Mass. Gen. Laws ch. 149, § 105A).
• File charges with, or cooperate in investigations by, the EEOC and the Massachusetts Commission Against Discrimination (MCAD).

An employer that leaves the DTSA immunity notice out of an employee or contractor agreement cannot recover exemplary damages or attorney fees under the federal statute against that person. In EEOC v. Astra USA, Inc., 94 F.3d 738 (US Court of Appeals 1st Cir. 1996), a case involving a Massachusetts employer, the court ruled for the EEOC on the core issue. It held that settlement terms barring employees from helping the agency are void as against public policy.

Limits on Using NDAs to Conceal Harassment or Discrimination

The law has moved sharply against secrecy in harassment cases. The federal Speak Out Act (42 U.S.C. § 19403) makes pre-dispute nondisclosure and nondisparagement clauses unenforceable in sexual assault and sexual harassment disputes. That means a confidentiality clause signed at hiring cannot be used to stop an employee from speaking about harassment that happens later.

Federal tax law adds a cost. Under 26 U.S.C. § 162(q), a company cannot deduct a sexual harassment or abuse settlement, or the related attorney fees, if the payment is subject to a nondisclosure agreement. At the state level, Massachusetts anti-discrimination law (Mass. Gen. Laws ch. 151B, § 4) bars retaliation against employees who complain. Employers with 6 or more employees must also keep a written sexual harassment policy (Mass. Gen. Laws ch. 151B, § 3A).

Beacon Hill is moving in the same direction. The Massachusetts House has adopted internal rules limiting NDAs in staff harassment settlements, and lawmakers keep refiling bills that would void settlement NDAs in harassment and discrimination cases unless the employee asks for confidentiality. Because these proposals change from session to session, many employers now make settlement confidentiality an optional term the employee can request, and they always carve out reporting to government agencies. Complaints generally must reach the Massachusetts Commission Against Discrimination, Boston or the Massachusetts Commission Against Discrimination, Springfield within 300 days (Mass. Gen. Laws ch. 151B, § 5). A parallel federal charge uses Form 5, FED, U.S. Equal Employment Opportunity Commission, Charge of Discrimination.

Step-by-Step Process in Massachusetts

Whether a company is based in Cambridge, Boston, Worcester, Lowell, or Springfield, Massachusetts firms typically build and enforce an NDA program in the following order.

Step 1: Map and Classify Confidential Information

Create a trade secret register that lists each asset, who owns it, where it is stored, and who can access it. Sort the data into tiers, such as Restricted, Confidential, and Internal, so that NDAs and access controls match how sensitive it is. The register later becomes strong evidence that the company made reasonable efforts.

Step 2: Choose the Right NDA Type for Each Relationship

Use unilateral agreements for employees, contractors, and vendors who receive company data. Use mutual agreements for partnerships and due diligence. Before signing a counterparty's form, check the residuals clause, who owns feedback, and how the information may be used.

Step 3: Draft Precise Definitions and Standard Exclusions

Define protected information by category, and include the four standard exclusions: information that is public, already known to the recipient, independently developed, or lawfully received from a third party. Add a compelled disclosure clause that requires prompt notice before the recipient responds to a subpoena.

Step 4: Insert Whistleblower and Statutory Carve-Outs

Put the immunity notice required by 18 U.S.C. § 1833(b) in every employee and contractor agreement. Add carve-outs for reporting to the SEC, EEOC, and MCAD and for protected NLRA activity. Missing language can cost the company its right to recover fees and invite scrutiny from regulators.

Step 5: Set Duration, Return, and Remedy Terms

State how long each obligation lasts, and require the return or certified destruction of materials. Include consent to injunctive relief, a Massachusetts choice-of-law clause, and a forum clause naming the Massachusetts Superior Court, Suffolk County Business Litigation Session, Boston or the U.S. District Court for the District of Massachusetts, Boston.

Step 6: Sign Properly and Coordinate With Other Covenants

Electronic signatures are valid under the Massachusetts Uniform Electronic Transactions Act (Mass. Gen. Laws ch. 110G, § 7). If the NDA is combined with a noncompete, the noncompete portion must follow the notice, right-to-counsel, and timing rules of Mass. Gen. Laws ch. 149, § 24L. For that reason, many firms keep the NDA as a separate document.

Step 7: Back the Contract With Reasonable Security Measures

Label documents, limit access by role, use electronic lab notebooks with audit trails, and block USB transfers on sensitive systems. Hold exit interviews that remind departing employees of their obligations. Courts look at what the company actually did, not just what the contract says.

Step 8: Act Quickly on a Suspected Breach

Preserve forensic evidence, send a cease-and-desist letter, and consider asking for emergency relief under Mass. R. Civ. P. 65. A state lawsuit starts with a Form AOCV-001, Massachusetts, Superior Court Department of the Trial Court, Civil Action Cover Sheet, filed in a court such as the Massachusetts Superior Court, Suffolk County Business Litigation Session, Boston, the Massachusetts Superior Court, Middlesex County, Woburn, or the Massachusetts Superior Court, Worcester County, Worcester. Federal DTSA claims use the Form JS 44, FED, U.S. District Court, Civil Cover Sheet and the Form AO 440, FED, U.S. District Court, Summons in a Civil Action, filed at the U.S. District Court for the District of Massachusetts, Worcester or the U.S. District Court for the District of Massachusetts, Springfield. Keep the 3-year deadline in mind.

How Much Does It Cost in Massachusetts?

Costs depend on whether a company needs preventive drafting or emergency litigation. Typical ranges include:

• Single NDA review or drafting: $500 to $2,500 flat fee.
• Full confidentiality program (employee NDA, invention assignment, and mutual and unilateral templates): $3,000 to $12,000.
• Hourly rates: $400 to $1,100 at Boston and Cambridge firms, and $250 to $500 in Worcester and Springfield.
• Filing fees: about $275 in Superior Court and $405 in federal district court.
• Forensic computer experts: $15,000 to $75,000 to trace downloads and file transfers.
• TRO and preliminary injunction phase: $50,000 to $250,000.
• Full litigation through trial: $750,000 to $3 million or more in high-stakes biotech cases.

Trade secret plaintiffs rarely find contingency arrangements. Some firms offer hybrid fees when the damages are large and well documented.

How Long Does the Process Take?

• Drafting a custom NDA: 3 to 10 business days.
• Negotiating a mutual NDA with a large pharma partner: 2 to 6 weeks.
• Temporary restraining order: often 1 to 7 days after filing.
• Preliminary injunction hearing: usually 2 to 8 weeks.
• Discovery: 9 to 18 months, and longer when experts fight over source code or scientific data.
• Trial: roughly 18 to 36 months in the Business Litigation Session and 2 to 3 years in federal court.
• MCAD investigations in harassment matters: often 18 months or more.

Find a Massachusetts Trade Secret and NDA Attorney

An NDA program should fit the company's science, funding stage, and partners. Our directory lets founders and general counsel in Boston, Cambridge, Waltham, Worcester, and Springfield compare verified local attorneys who focus on trade secrets, biotech licensing, and technology contracts.

You can review each lawyer's practice areas, experience with life sciences or software clients, and fee structure. Then you can book a consultation to have your templates reviewed or to talk through a suspected breach before a deadline passes.

Frequently Asked Questions (FAQ)