Employee Confidentiality Agreement Template UK
Updated on 11 October 2026
Employee Confidentiality Agreement Template UK is a UK-local document, not a country-name swap on the US master. It uses UK terminology, UK official sources and UK risk points for the document family.
The page is written for people who need to complete the document, understand the legal controls around it and keep a clean record afterwards. It is deliberately more substantive than Jotform's thin PDF page.
Use this when an employee will access trade secrets, client information, pricing, source code, security processes, strategy, personal data or other confidential business information in a UK workplace.
Tap any highlighted blank in the document below and type straight into it.Free — no sign-up, no watermark
Employee Confidentiality Agreement
- Employer:
- Employee:
- Work or service location:
- Effective date:
- Status recorded for this document:
1. Purpose
2. Local UK terms and factual record
3. Response, comments or acknowledgement
4. Review, expiry or follow-up
Review or follow-up date: . The parties should review this document sooner if the facts, work location, policy version, worker status, pay treatment, data use or applicable UK law changes.
5. No waiver of UK statutory rights
Nothing in this document waives wages, holiday pay, statutory sick pay, flexible-working rights, whistleblowing rights, equality rights, data-protection rights, trade union rights, tribunal rights or any other non-waivable UK statutory protection. Any settlement or waiver must use the legally required process for that subject.
6. Storage and access
The completed document should be kept only in the appropriate HR, payroll, client, marketing or recognition file, with medical, monitoring and sensitive records restricted to people who need access.
Employer
Date signed:
Employee
Date signed:
What this UK template is for
Use this when an employee will access trade secrets, client information, pricing, source code, security processes, strategy, personal data or other confidential business information in a UK workplace.
This page keeps the Batch 035 family identity but rebuilds the instrument for UK use. The document uses UK workplace vocabulary, asks for status and work location, and avoids US-only concepts such as at-will employment, CAN-SPAM or FLSA where they do not belong.
The template is designed to create an auditable record. A future HR manager, payroll officer, client, employee, worker, tribunal, regulator or adviser should be able to see what was requested, approved, paid, deducted, recognised, restricted or acknowledged without reconstructing the story from emails.
How UK law changes the document
UK confidentiality duties can arise from contract, equity, trade secret principles and data-protection duties. The agreement should protect real confidential information while preserving lawful disclosures, whistleblowing, regulatory reporting and the employee use of general skill and experience.
For this reason, the page does not simply translate the US master. It changes the governing assumptions, the compliance checklist, the signature wording and the data-storage note. Where the UK has a public process or regulator guidance, the template points to that process instead of inventing a private shortcut.
The document also distinguishes acknowledgement from agreement. Many HR records need a signature to show receipt or discussion, but that signature should not accidentally waive statutory rights, settle claims, alter employment status or promise that a policy overrides the law.
What the Jotform source misses
The Jotform source reverses employer and employee roles, contains clinic letterhead and hides a non-compete inside an NDA. The UK version removes the non-compete and focuses on confidentiality, return of property and lawful disclosure carve-outs.
Thin PDF templates often look polished because they collect a name, date and signature. The problem is that the legally important questions sit outside those blanks: who approved the decision, what source of law applies, what evidence supports it, whether pay or data is affected, and what response route the affected person has.
This version adds those controls. It asks for version dates, work location, policy basis, response or appeal route, and storage treatment. It also uses named clauses instead of brittle numbered self-references, because optional document blocks can change numbering during rendering.
Recordkeeping and data protection
Most documents in this batch are employment records. The ICO says organisations should give privacy information when collecting worker data and should build data protection into employment record systems. That matters for ordinary personnel documents, and even more where the document contains health, monitoring, disciplinary, performance or rota information.
Keep the completed employee confidentiality agreement in the file where it belongs. Payroll deductions, sickness records, disciplinary evidence, performance reviews, home-working approvals and marketing lists do not all belong in the same access group or retention schedule.
Free-text boxes should be used carefully. They should record facts, reasons, decisions and next steps, not speculation, unnecessary diagnoses, protected characteristics, gossip or legal conclusions that the signer is not qualified to make.
When not to use this template
Do not use this to stop a worker changing jobs, reporting wrongdoing, cooperating with regulators, discussing their own pay where lawful, or using general skills and experience.
Do not use it where a collective agreement, regulator, court, insurer, public-sector procedure or prescribed statutory form requires a different document. Do not use it to punish protected activity, avoid pay, collect unnecessary medical data, make a hidden contractual variation or describe a worker as self-employed, worker or employee contrary to the reality of the relationship.
If the matter is high-value, disputed, cross-border, union-related, dismissal-related, equality-sensitive, medical, security-critical or likely to lead to litigation, use this as a drafting start only and get advice before sending it.
Clause-by-clause guide
- Definition of confidential information
- Definition of confidential information should be completed with UK facts: the correct party names, worker status, work location, policy version, approval route, response route and any pay, data, equality or recordkeeping effect. This clause is intentionally named so users can refer to it without relying on shifting document numbers.
- Exclusions and public information
- Exclusions and public information should be completed with UK facts: the correct party names, worker status, work location, policy version, approval route, response route and any pay, data, equality or recordkeeping effect. This clause is intentionally named so users can refer to it without relying on shifting document numbers.
- Permitted work use
- Permitted work use should be completed with UK facts: the correct party names, worker status, work location, policy version, approval route, response route and any pay, data, equality or recordkeeping effect. This clause is intentionally named so users can refer to it without relying on shifting document numbers.
- Lawful disclosures
- Lawful disclosures should be completed with UK facts: the correct party names, worker status, work location, policy version, approval route, response route and any pay, data, equality or recordkeeping effect. This clause is intentionally named so users can refer to it without relying on shifting document numbers.
- UK GDPR and personal data
- UK GDPR and personal data should be completed with UK facts: the correct party names, worker status, work location, policy version, approval route, response route and any pay, data, equality or recordkeeping effect. This clause is intentionally named so users can refer to it without relying on shifting document numbers.
- Return and deletion
- Return and deletion should be completed with UK facts: the correct party names, worker status, work location, policy version, approval route, response route and any pay, data, equality or recordkeeping effect. This clause is intentionally named so users can refer to it without relying on shifting document numbers.
- No non-compete
- No non-compete should be completed with UK facts: the correct party names, worker status, work location, policy version, approval route, response route and any pay, data, equality or recordkeeping effect. This clause is intentionally named so users can refer to it without relying on shifting document numbers.
- Remedies and governing law
- Remedies and governing law should be completed with UK facts: the correct party names, worker status, work location, policy version, approval route, response route and any pay, data, equality or recordkeeping effect. This clause is intentionally named so users can refer to it without relying on shifting document numbers.
UK compliance checklist
Check these UK points before using the employee confidentiality agreement.
Keep confidentiality narrow
The agreement should protect information that is actually confidential, not every fact the employee learns at work. Overbroad restraints are harder to justify.
UK Supreme Court - Tillman v Egon Zehnder Ltd [2019] UKSC 32Do not smuggle in a non-compete
The UK government has consulted on limiting non-compete clauses, and restrictive covenants already need careful restraint-of-trade analysis. Keep NDA and non-compete wording separate.
GOV.UK - reform of non-compete clauses consultation responsePreserve lawful disclosures
Do not restrict whistleblowing, protected disclosures, court orders, regulator contact or legal advice. Confidentiality should not silence legal rights.
Handle personal data lawfully
If confidential information includes worker, customer or client data, UK GDPR transparency, access and retention duties still apply.
ICO - collecting and keeping employment recordsControl offboarding
Name laptops, drives, cloud accounts, paper files, forwarded emails and backups so return/deletion is operational.
ICO - data protection and monitoring workersAvoid pay-secrecy wording
Do not draft confidentiality so broadly that it appears to ban lawful discussion of pay, working conditions or statutory rights.
How to complete this UK template
- Identify the UK document purpose. Choose the template because it matches the UK record you need, not because the US source title is familiar. If Acas, HMRC, the ICO, a tribunal rule, a regulator or a collective agreement requires a different form or process, use that required process first and keep this document as the supporting record.
- Use local worker language. Complete the fields with the worker status, work location, manager, dates, policy version and pay or data effect. UK law often distinguishes employee, worker and self-employed contractor, so the document should not call everyone an employee unless that is correct.
- Check pay, data and equality controls. Before signing, check whether the document affects pay deductions, sick pay, flexible working, monitoring, medical data, religious dress, disability adjustments, trade union activity or post-termination restrictions. Those issues are where thin PDF templates usually fail.
- Give the affected person a response route. Where the document affects a worker, give them a practical route to ask questions, correct facts, add comments, request an adjustment, appeal or escalate to HR. A signature should say whether it is acknowledgement only or agreement to a term.
- Store it in the right file. Keep the signed document with the correct personnel, payroll, marketing, client or recognition record. Medical information, monitoring logs and sensitive complaint material should have stricter access controls and retention rules than a normal acknowledgement.
Frequently asked questions
Is this the same as an NDA?
Yes for practical purposes. This template uses employee confidentiality language because it includes UK employment-specific carve-outs and offboarding duties.
Can confidentiality last after employment ends?
Yes, but the scope should track information that remains confidential. Trade secrets may need longer protection than ordinary internal information.
Can the employer stop the employee joining a competitor?
Not with this document. A post-termination restraint needs separate drafting, consideration and reasonableness review.
Can the employee report wrongdoing?
Yes. The agreement should not stop protected disclosures, regulator contact, legal advice or compliance with a court or authority.
Should customer data be included?
Yes if the employee accesses it, but the document should also point to data-protection policies and avoid unnecessary copying.
What should happen on the last day?
The employee should return property, delete unauthorised copies, transfer work files back to the employer and confirm whether any devices or accounts still contain company information.
Related templates
Disclaimer
This template and guide are general information for United Kingdom workplaces and UK-facing services, not legal, tax, employment, payroll, data-protection, marketing or HR advice. No solicitor, barrister, regulator or government body has reviewed your facts or approved this document. Rules differ across England and Wales, Scotland and Northern Ireland, and they change. Check the current rules that apply where the worker works and take professional advice before you sign, send, file or rely on this document.


