When can an NDA be legally broken? This question is purely theoretical, I promise. Let's say a person signed a Non-Disclosure agreement under certain terms, and then, somehow, they witnessed an illegal act but were forbidden to report it to the police by the agreement. If they reported the act, could the other party of the NDA take legal action? The general question is, when, if ever, is a person legally protected to reveal information directly violating an NDA?
There are many reasons that a contract can be void or voidable. Wikipedia will give you a good rundown. The reasons which apply to contracts generally will apply to NDAs specifically. This answer focuses on non-disclosure agreements. Various legal authorities and courts have found contracts to be void in the following circumstances: 1. Crime 2. Torts 3. Public safety 4. Public Health 5. Matters of substantial public concern The Model Penal Code prohibits what it calls compounding. The crime involves accepting payment in exchange for not reporting a crime. Section 242.5. Compounding A person commits a misdemeanor if he accepts or agrees to accept any pecuniary benefit in consideration of refraining from reporting to law enforcement authorities the commission or suspected commission of any offense or information relating to an offense. It is an affirmative defense to prosecution under this Section that the pecuniary benefit did not exceed an amount which the actor believed to be due as restitution or indemnification for harm caused by the offense. The Restatement (Third) of Unfair Competition recognizes a privilege to disclose trade secrets in certain circumstances like public health/safety and commission of a crime or tort. Section 40, comment c: The existence of a privilege to disclose another's trade secret depends upon the circumstances of the particular case, including the nature of the information, the purpose of the disclosure, and the means by which the actor acquired the information. A privilege is likely to be recognized, for example, in connection with the disclosure of information that is relevant to public health or safety, or to the commission of a crime or tort, or to other matters of substantial public concern. In Lachman v. Sperry-Sun Well Surveying Company, 457 F.2d 850 (10th Cir., 1972) the court cites the Restatement of Contracts, § 577 A bargain, performance of which would tend to harm third persons by deceiving them as to material facts, or by defrauding them, or without justification by other means is illegal. A more recent case cited Lachman as authority to find "nondisclosure agreement not binding in respect to criminal activity." Bartnicki v Vopper, 532 U.S. 514 (2001) Fomby-Denson v. Dept of the Army, 247 F.3d 1366 (Fed. Cir., 2001) Is a case you could look at to see a review of some state courts which have "declined to enforce private agreements that barred the reporting or prosecution of possible crimes."
The employee must, during and after employment, without limitation in time, observe a duty of confidentiality regarding [...] the Company's internal affairs such as business plans, profitability, pricing, employees, methods, processes, routines, code and the like as well as other information that the Company typically wants to keep secret The pure information that the company had at some time a security problem with their product is internal knowledge you only gained through working there. By what is written here, you are indeed prohibited from speaking about it. If it were public knowledge, you could point to a press release and say &quot;I did that, that was me fixing the problem&quot;. That would work. Because it doesn't share anything that isn't public anyway. But you cannot share things the company wants to keep secret. Finding out whether that contract is legally enforcable in your country and juristiction is the job of a real lawyer, but just as written, they are right. You signed a contract to not do that, not talk about it an certainly not publish it on the internet. So you should not do that, unless a good lawyer you trust tells you otherwise. That said, &quot;I found a security flaw&quot; is about as impressive as &quot;I found a dollar on the floor&quot;. Maybe you can talk about your knowledge to prevent something like it happening. That says nothing about whether or not it happened in your old company, and for me as an employer it is much more valuable to have you on board with structured knowledge you can apply, than with your memories of being lucky once.
Hacking into a computer owned by someone else and accessing the data stored on it without permission is a misdemeanor according to StGB 202a (de|en). But only if it's successful. So a failed attempt isn't a misdemeanor yet. When you notice that someone might have committed a criminal offence (regardless of whether you are a victim or just a witness), then the usual procedure is to report it to the police. If they consider the crime serious enough to investigate, then they will request the identity from the ISP. But the copyright lawsuits which are filed in bulk by law firms working with media companies are not crime reports. They are civil lawsuits. A civil lawsuit is when someone had a tangible damage because of something someone else did, and now they want money in compensation. When there is no damage, then there is nothing to sue for. So when you want a judge to file an injunction to force an ISP to give them the identity of one of their users, then you would first have to explain to them how much financial damage you had because of that person and that this is enough damage to make it worth everyone's time. That might be quite challenging for nothing but a failed SSH login attempt. But it might be possible if a single person made so many login attempts that it incurred you non-negligible bandwidth cost or even caused a denial-of-service.
The question says that the OP &quot;asked&quot; company A for confidentially. It does not say that the agreed to it. If they did not, the asker has no case, and they could publicly admit having used his idea and s/he still would have no case. If Company A agreed to confidentiality, and did so in writing (or if the agreement can be otherwise proved) then there might be a case. Proving communication of the idea to Company B would indeed be a hard part of bringing the case. Company B could also defend by showing independent invention of the concept. History has many examples of the same idea being independently arrived at by multiple people at about the same time. Ideas are more common, and therefore of less value standing alone, than many inventors think. To seriously pursue such a case, it would be a very good idea to consult a lawyer experienced in IP law in your jurisdiction. NDAs (and this agreement, if it existed, would be a form of NDA, even if it wasn't called that) are often governed by state law, but trade secret law is partly Federal (see 18 U.S.C. § 1832). A lawyer could advise more specifically and accurately on the chances of success, the probable costs, and the possible amount of recovery, based on the specific facts. But as described, the case is far from a sure thing. More specifically, most US states have enacted some version of the Uniform Trade Secrets Act. The USTA sec 1.2 prohibits using or sharing a trade secret gained through &quot;improper means&quot;. Section 1.1 defines this: &quot;Improper means&quot; includes theft, bribery, misrepresentation, breach or inducement of a breach of a duty to maintain secrecy, or espionage through electronic or other means. Promising to observe confidentiality and then breaking that promise would seem to fit. Section 1.4 defines a &quot;trade secret&quot; as: &quot;Trade secret&quot; means information, including a formula, pattern, compilation, program, device, method, technique, or process, that: (i) derives independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable by proper means by, other persons who can obtain economic value from its disclosure or use, and (ii) is the subject of efforts that are reasonable under the circumstances to maintain its secrecy The idea described in the question might fit this definition. The UTSA provides successful plaintiffs with several possible forms of relief, including injunctive relief, damages, and attorney's fees. The details will be decided by the court in each case.
The document may, but probably doesn't say what it is you are witnessing. For example, a person witnessing a statutory declaration in NSW attests: their qualification to be a witness (JP, solicitor etc.) that they actually saw the declarant sign it that they asked the declarant if they believed their declaration was true that they have known the declarant for more than 12 months OR the declarant provided a photo ID and either their face matched the photo or they had a valid reason for not showing their face. If it doesn't say then what you are witnessing is that the signature was made by a person whom you could identify if necessary (e.g. if the person denied the signature).
It is not legal to give false responses on such a declaration. The point of anti-discrimination laws is that they say when it is legal vs. not legal to discriminate against an employee, and Alex is expected to have faith in the legal system to protect his legal rights. Dissatisfaction with the outcome of the law may be understandable, but still does not legally justify falsifying information given to an employer. In certain cases (look for the fine print and mentions of "penalty of perjury") you can be fined and imprisoned for lying. More commonly, your employment can be terminated when you are discovered. You may also be held liable for consequences of such lies. Your employer's health insurance contract might require truthful and accurate reporting of medical facts and a lie about your condition could result in termination of coverage.
At least as of 2011, when regulations under the Information Technology Act related to privacy and data security were issued (some of the relevant statute sections and regulations are linked in this answer at Law.SE), there was no non-contractual right to have your data destroyed, although a terms of service for a site could give you that right contractually. Instead, usually, a term of service agreement will do exactly the opposite and give a site owner an irrevocable right to keep your data forever. I am not aware of any subsequent statutory, regulatory or case law developments in India which have changed this situation, but that kind of tweak of IT Act regulations in India wouldn't necessary make headlines outside of the local IT industry press coverage in obscure trade journals. The EU is the only place of which I am aware that has any individual right to have data destroyed or suppressed even if it doesn't violated copyright, wasn't obtained illegally and isn't fraudulent or defamatory. Even then, as I understand it, in the EU this is not a unilateral right that applies in all circumstances and is instead a specific remedy for certain situations that have a particularly intense privacy aspect to them.
Yes P was standing in a hallway to which he had apparently been lawfully admitted Indeed. And what were the conditions imposed on P for that lawful admittance? If one of those was &quot;no photography&quot; then P would not have been lawfully on the premises once they started taking pictures; at that point, they would have been a trespasser. Similarly, if they were admitted under conditions of confidence. As a trespasser, the information they obtained would not have been obtained legitimately and would fall foul of protection on trade secrets. Of course, P's actions can be &quot;wrong&quot; without being unlawful.