Employee Confidentiality Agreement Template Gibraltar

Updated on 12 October 2026

Employee Confidentiality Agreement Template Gibraltar is built for Gibraltar use, not copied from another market. It uses local employment, data-protection or communications sources for the document family.

The page gives a fillable record, clause guide, compliance checks, HowTo steps and FAQs so the document can be completed with local risk points in mind.

Use this when a Gibraltar employee receives client, pricing, security, financial, technical, gaming, professional-services, HR or personal information that needs protection.

0 of 10 blanks filled

Tap any highlighted blank in the document below and type straight into it.Free — no sign-up, no watermark

Employee Confidentiality Agreement

Employer:
Employee:
Location:
Effective date:
Authority:

1. Purpose

2. Gibraltar terms and factual record

3. Response or comments

OptionalInclude response or comments block

4. Review, expiry or follow-up

OptionalInclude review / expiry block

Review or follow-up date: . Review sooner if the facts, policy version, wage treatment, monitoring, data use, campaign list or applicable Gibraltar law changes.

5. No waiver of Gibraltar rights

Nothing in this document waives wages, holiday pay, employment rights, privacy rights, data-protection rights, tribunal rights, direct-marketing rights, health and safety rights or any other non-waivable protection. Any settlement, deduction, restraint or release must satisfy the legal rules that apply to it.

6. Storage and access

The completed document should be kept only in the appropriate HR, payroll, client, marketing or recognition file, with health, monitoring, disciplinary and performance records restricted to people who need access.

Employer

Date signed:

Employee

Date signed:

What this Gibraltar template is for

Use this when a Gibraltar employee receives client, pricing, security, financial, technical, gaming, professional-services, HR or personal information that needs protection.

This page keeps the Batch 035 family identity for search and navigation, but the document is drafted for Gibraltar. It uses Gibraltar employment and data-protection sources rather than assuming UK, US, Australian or Canadian rules.

The completed document should let a later HR manager, payroll officer, employee, client, regulator or adviser see what was requested, approved, deducted, recognised, restricted, reported or acknowledged.

How Gibraltar rules change the document

The agreement protects confidential information while preserving lawful disclosures, legal advice, regulator contact, data-protection rights and ordinary skills and experience. Gibraltar GDPR also matters where confidential information includes personal data.

Gibraltar is a small jurisdiction with its own legislation portal, Department of Employment materials and Gibraltar Regulatory Authority data-protection guidance. A document that casually imports UK or US wording can miss local wage, privacy, monitoring or direct-marketing requirements.

That local fit matters in everyday HR records, not only in litigation. A wage deduction, sickness note, remote-work approval, recognition announcement or email campaign can create a payroll, privacy or evidence problem if the document does not say who authorised it, why the information was collected and where the final record will be kept.

The template separates acknowledgement from agreement. Some records only prove receipt or discussion; others, especially deductions, loans or restraints, need clearer consent and local review.

What the Jotform source misses

The Jotform source reverses employee/employer roles, contains hard-coded clinic details and embeds a non-compete. This Gibraltar version removes the non-compete and focuses on confidentiality, privacy and return duties.

A thin PDF can collect a name, date and signature while omitting the controlling issue: who approved the decision, what Gibraltar source applies, what evidence supports it, how personal data is protected, and what response route the affected person has.

This version adds those controls and uses named clauses rather than fixed numbered cross-references, so optional document blocks do not make internal references inaccurate.

Privacy, monitoring and records

GRA guidance and FAQs make data protection a live workplace issue. Employee records, monitoring logs, sickness evidence, disciplinary notes, performance reviews, recognition publicity and marketing lists can all contain personal data.

Keep the completed employee confidentiality agreement in the correct HR, payroll, client, marketing or recognition file. Medical, monitoring, discipline, performance, deduction and final-pay records should not all have the same access level.

Use free-text fields for facts, evidence, decisions and next steps. Avoid unnecessary diagnoses, protected details, speculation, gossip or waiver language.

When not to use this template

Do not use this as a non-compete, settlement, invention assignment or privacy notice. Do not use it to stop lawful complaints or regulator reports.

Do not use it where Gibraltar legislation, a collective agreement, contract, regulator rule, court order, official form or prescribed notice requires something different. This template can support that process, but should not contradict it.

If the issue is high-value, disputed, dismissal-related, medical, monitoring-heavy, restraint-related, cross-border or likely to lead to a complaint, use this as a drafting start only and get advice.

Clause-by-clause guide

Confidential information
Confidential information should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
Exclusions
Exclusions should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
Permitted use
Permitted use should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
Lawful disclosures
Lawful disclosures should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
Personal data
Personal data should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
Return and deletion
Return and deletion should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
No non-compete
No non-compete should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.
Remedies
Remedies should be completed with Gibraltar facts: party names, work location, policy version, authority, approval route, response route and any wage, privacy, monitoring, direct-marketing or recordkeeping effect.

Gibraltar compliance checklist

Check these Gibraltar points before using the employee confidentiality agreement.

  • Define confidential information clearly

    Protect information that is genuinely confidential, not every fact the employee learns at work.

  • Preserve lawful disclosures

    The agreement should not prevent legal advice, court compliance, regulator contact or lawful employment complaints.

  • Apply Gibraltar GDPR to personal data

    Gibraltar GDPR contains employment and special-category data provisions relevant to staff and client records.

    Laws of Gibraltar - Regulation (EU) 2016/679 as applied in Gibraltar
  • Separate restraints from confidentiality

    Any non-solicit or non-compete-style restraint needs separate drafting and local advice.

  • Plan offboarding

    Return/deletion should cover paper, devices, cloud storage, personal email forwarding and access credentials.

  • Avoid pay or rights secrecy

    Confidentiality should not be so broad that it appears to block wage, safety or statutory complaints.

How to complete this Gibraltar template

  1. Confirm Gibraltar law applies. Check that the worker, workplace, client or campaign is properly connected to Gibraltar. If the employee works elsewhere, or the campaign targets recipients outside Gibraltar, get local advice before relying on a Gibraltar-only template.
  2. Complete the factual record. Enter the parties, work location, department, policy version, effective date, governing document, source of authority, approval route and whether the signature is acknowledgement only or agreement to a term.
  3. Check employment and data controls. Review the Employment Act, subsidiary legislation, wage statement and termination rules, Gibraltar GDPR, GRA employment-context guidance, monitoring rules and direct-marketing rules before finalising the record.
  4. Give a response or review route. Where the document affects an employee, provide a route to comment, correct facts, request support, appeal, raise a data-protection issue or ask for review. A signed form is stronger when it records that route.
  5. Store the record with limited access. Keep the completed document in the correct HR, payroll, client, marketing or recognition file. Health, monitoring, disciplinary, performance and payroll records need tighter controls than ordinary policy receipts.

Frequently asked questions

Is this the same as an NDA?

Yes. It is an employment-specific NDA for Gibraltar with privacy and lawful-disclosure carve-outs.

Can confidentiality last after employment ends?

Yes where information remains confidential or a trade secret, but the scope should be no wider than needed.

Can it stop work for a competitor?

No. This template is not a non-compete.

Can employees report wrongdoing?

Yes. Lawful disclosures and regulator contact are preserved.

What if the information includes personal data?

Gibraltar GDPR and GRA guidance should be checked, and access should be limited.

What happens on the last day?

The employee returns property, deletes unauthorised copies and confirms whether any information remains in personal accounts or devices.

Related templates

Disclaimer

This template and guide are general information for Gibraltar, not legal, tax, employment, payroll, privacy, direct-marketing or HR advice. No Gibraltar lawyer, regulator, tribunal, government department or professional adviser has reviewed your facts or approved this document. Check the current Employment Act, subsidiary legislation, Gibraltar GDPR, GRA guidance, contract terms and any applicable collective or sector rules before you sign, send, file or rely on this document.