Anonymising One-Way (Unilateral) NDAs for Third-Party Sharing – UK GDPR-compliant anonymisation per UK GDPR Art. 4(1)
A one-way non-disclosure agreement is a unilateral confidentiality contract that discloses protected information in a single direction — the Trade Secrets (Enforcement, etc.) Regulations 2018 provide statutory remedies for misuse, and UK GDPR fines can reach £17.5 million or 4% of annual global turnover. anonym.legal pseudonymises the named signatories on both sides so advisers can evaluate commercial terms without processing unnecessary personal data.
When this applies
This task applies when the receiving party or its advisers need to review or benchmark a unilateral NDA against standard market terms, but the disclosing party's personnel details are not relevant to that review. According to UK GDPR Art. 5(1)(c), only data strictly necessary for the review purpose should be processed; sharing named personnel data without a legitimate basis is a compliance risk that can attract ICO enforcement — in 2020 the ICO fined British Airways £20 million and Marriott International £18.4 million for data-protection failures.
How anonym.legal handles it
- Upload the one-way NDA to anonym.legal; the engine preserves clause structure and formatting.
- Named natural persons — signatories, authorised representatives, and any contact persons in schedules — are identified across all 267+ entity types.
- The disclosing party's personnel receive distinct pseudonyms separate from the receiving party's personnel, maintaining the asymmetric structure of the agreement.
- All confidentiality scope language, carve-outs, term, and remedies provisions remain in clear text.
- A secure mapping table is produced with UK/EU data residency.
- The pseudonymised version is released for review; the original is restored via the mapping key before execution.
What you provide
- One-way NDA document (signed or draft)
- Identification of which party is the disclosing party (to guide pseudonym labelling)
- Any attached schedules naming additional contacts
Limitations & cautions
- The tool does not assess whether the confidentiality scope is adequate or overly broad — seek legal advice on substantive terms. A clause excluding negligence liability in a unilateral NDA may be void under Unfair Contract Terms Act 1977 s.2(1) in so far as it purports to exclude liability for death or personal injury.
- If the agreement references individuals by role only (e.g. 'the Disclosing Party's CEO'), those references are not automatically pseudonymised unless they appear alongside a name.
- The Limitation Act 1980 provides a 6-year limitation period for simple contract claims, meaning mapping keys should be retained for at least 6 years post-execution.
FAQ
Can I share the pseudonymised NDA with overseas advisers?
The pseudonymised copy no longer contains personal data within the meaning of UK GDPR Art. 4(1), so transfer restrictions that apply to personal data do not apply to it. However, confirm with your legal counsel that the pseudonymisation meets the relevant standard for your specific context.
What happens if the NDA names a company contact in a schedule?
Contacts named in schedules are detected and pseudonymised consistently with their appearances in the main body, so the pseudonym is the same throughout the entire document.
How does anonym.legal distinguish the two parties' personnel?
The engine uses contextual cues — party labels, signature-block headings, and recital definitions — to assign personnel to the correct party group and applies distinct pseudonym prefixes accordingly.
What remedies apply if confidential information is disclosed in breach of a one-way NDA?
Remedies include damages under the Misrepresentation Act 1967 if false statements induced the agreement, and injunctive relief under the Trade Secrets (Enforcement, etc.) Regulations 2018 where trade secrets are involved. According to those Regulations, courts can also order destruction of infringing goods or documents.