Employee Confidentiality Agreement Template Gibraltar
Updated on 12 October 2026
Employee Confidentiality Agreement Template Gibraltar is built for Gibraltar use, not copied from another market. It uses local employment, data-protection or communications sources for the document family.
The page gives a fillable record, clause guide, compliance checks, HowTo steps and FAQs so the document can be completed with local risk points in mind.
Use this when a Gibraltar employee receives client, pricing, security, financial, technical, gaming, professional-services, HR or personal information that needs protection.
Tap any highlighted blank in the document below and type straight into it.Free — no sign-up, no watermark
Employee Confidentiality Agreement
- Employer:
- Employee:
- Location:
- Effective date:
- Authority:
1. Purpose
2. Gibraltar terms and factual record
3. Response or comments
4. Review, expiry or follow-up
Review or follow-up date: . Review sooner if the facts, policy version, wage treatment, monitoring, data use, campaign list or applicable Gibraltar law changes.
5. No waiver of Gibraltar rights
Nothing in this document waives wages, holiday pay, employment rights, privacy rights, data-protection rights, tribunal rights, direct-marketing rights, health and safety rights or any other non-waivable protection. Any settlement, deduction, restraint or release must satisfy the legal rules that apply to it.
6. Storage and access
The completed document should be kept only in the appropriate HR, payroll, client, marketing or recognition file, with health, monitoring, disciplinary and performance records restricted to people who need access.
Employer
Date signed:
Employee
Date signed:
What this Gibraltar template is for
Use this when a Gibraltar employee receives client, pricing, security, financial, technical, gaming, professional-services, HR or personal information that needs protection.
This page keeps the Batch 035 family identity for search and navigation, but the document is drafted for Gibraltar. It uses Gibraltar employment and data-protection sources rather than assuming UK, US, Australian or Canadian rules.
The completed document should let a later HR manager, payroll officer, employee, client, regulator or adviser see what was requested, approved, deducted, recognised, restricted, reported or acknowledged.
How Gibraltar rules change the document
The agreement protects confidential information while preserving lawful disclosures, legal advice, regulator contact, data-protection rights and ordinary skills and experience. Gibraltar GDPR also matters where confidential information includes personal data.
Gibraltar is a small jurisdiction with its own legislation portal, Department of Employment materials and Gibraltar Regulatory Authority data-protection guidance. A document that casually imports UK or US wording can miss local wage, privacy, monitoring or direct-marketing requirements.
That local fit matters in everyday HR records, not only in litigation. A wage deduction, sickness note, remote-work approval, recognition announcement or email campaign can create a payroll, privacy or evidence problem if the document does not say who authorised it, why the information was collected and where the final record will be kept.
The template separates acknowledgement from agreement. Some records only prove receipt or discussion; others, especially deductions, loans or restraints, need clearer consent and local review.
What the Jotform source misses
The Jotform source reverses employee/employer roles, contains hard-coded clinic details and embeds a non-compete. This Gibraltar version removes the non-compete and focuses on confidentiality, privacy and return duties.
A thin PDF can collect a name, date and signature while omitting the controlling issue: who approved the decision, what Gibraltar source applies, what evidence supports it, how personal data is protected, and what response route the affected person has.
This version adds those controls and uses named clauses rather than fixed numbered cross-references, so optional document blocks do not make internal references inaccurate.
Privacy, monitoring and records
GRA guidance and FAQs make data protection a live workplace issue. Employee records, monitoring logs, sickness evidence, disciplinary notes, performance reviews, recognition publicity and marketing lists can all contain personal data.
Keep the completed employee confidentiality agreement in the correct HR, payroll, client, marketing or recognition file. Medical, monitoring, discipline, performance, deduction and final-pay records should not all have the same access level.
Use free-text fields for facts, evidence, decisions and next steps. Avoid unnecessary diagnoses, protected details, speculation, gossip or waiver language.
When not to use this template
Do not use this as a non-compete, settlement, invention assignment or privacy notice. Do not use it to stop lawful complaints or regulator reports.
Do not use it where Gibraltar legislation, a collective agreement, contract, regulator rule, court order, official form or prescribed notice requires something different. This template can support that process, but should not contradict it.
If the issue is high-value, disputed, dismissal-related, medical, monitoring-heavy, restraint-related, cross-border or likely to lead to a complaint, use this as a drafting start only and get advice.
Clause-by-clause guide
- Confidential information
- Confidential information should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
- Exclusions
- Exclusions should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
- Permitted use
- Permitted use should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
- Lawful disclosures
- Lawful disclosures should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
- Personal data
- Personal data should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
- Return and deletion
- Return and deletion should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
- No non-compete
- No non-compete should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
- Remedies
- Remedies should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
Gibraltar compliance checklist
Check these Gibraltar points before using the employee confidentiality agreement.
Define confidential information clearly
Protect information that is genuinely confidential, not every fact the employee learns at work.
Preserve lawful disclosures
The agreement should not prevent legal advice, court compliance, regulator contact or lawful employment complaints.
Apply Gibraltar GDPR to personal data
Gibraltar GDPR contains employment and special-category data provisions relevant to staff and client records.
Laws of Gibraltar - Regulation (EU) 2016/679 as applied in GibraltarSeparate restraints from confidentiality
Any non-solicit or non-compete-style restraint needs separate drafting and local advice.
Plan offboarding
Return/deletion should cover paper, devices, cloud storage, personal email forwarding and access credentials.
Avoid pay or rights secrecy
Confidentiality should not be so broad that it appears to block wage, safety or statutory complaints.
How to complete this Gibraltar template
- Confirm Gibraltar law applies. Check that the worker, workplace, client or campaign is properly connected to Gibraltar. If the employee works elsewhere, or the campaign targets recipients outside Gibraltar, get local advice before relying on a Gibraltar-only template.
- Complete the factual record. Enter the parties, work location, department, policy version, effective date, governing document, source of authority, approval route and whether the signature is acknowledgement only or agreement to a term.
- Check employment and data controls. Review the Employment Act, subsidiary legislation, wage statement and termination rules, Gibraltar GDPR, GRA employment-context guidance, monitoring rules and direct-marketing rules before finalising the record.
- Give a response or review route. Where the document affects an employee, provide a route to comment, correct facts, request support, appeal, raise a data-protection issue or ask for review. A signed form is stronger when it records that route.
- Store the record with limited access. Keep the completed document in the correct HR, payroll, client, marketing or recognition file. Health, monitoring, disciplinary, performance and payroll records need tighter controls than ordinary policy receipts.
Frequently asked questions
Is this the same as an NDA?
Yes. It is an employment-specific NDA for Gibraltar with privacy and lawful-disclosure carve-outs.
Can confidentiality last after employment ends?
Yes where information remains confidential or a trade secret, but the scope should be no wider than needed.
Can it stop work for a competitor?
No. This template is not a non-compete.
Can employees report wrongdoing?
Yes. Lawful disclosures and regulator contact are preserved.
What if the information includes personal data?
Gibraltar GDPR and GRA guidance should be checked, and access should be limited.
What happens on the last day?
The employee returns property, deletes unauthorised copies and confirms whether any information remains in personal accounts or devices.
Related templates
Disclaimer
This template and guide are general information for Gibraltar, not legal, tax, employment, payroll, privacy, direct-marketing or HR advice. No Gibraltar lawyer, regulator, tribunal, government department or professional adviser has reviewed your facts or approved this document. Check the current Employment Act, subsidiary legislation, Gibraltar GDPR, GRA guidance, contract terms and any applicable collective or sector rules before you sign, send, file or rely on this document.


