Are Digital Non-Disclosure Agreements Enforceable in the Philippines?

Introduction

Businesses increasingly exchange confidential information through email, messaging applications, online platforms, and electronic document systems. As a result, non-disclosure agreements (NDAs) are often negotiated, accepted, and signed without any paper document or face-to-face meeting.

Under Philippine law, an NDA executed entirely through electronic communications may be valid and enforceable. Its enforceability generally depends on whether the parties formed a valid contract and whether the electronic document and signature can be authenticated and shown to be reliable.

Electronic Contracts Are Legally Recognized

Section 16 of the Electronic Commerce Act recognizes electronic contracts. An offer, acceptance, and other elements required for contract formation may be expressed, demonstrated, and proved through electronic data messages or electronic documents. A contract cannot be denied validity or enforceability merely because it was created or evidenced electronically (R.A. No. 8792).

The general contract requirements remain applicable. The parties must still have consent, a determinate object, and cause. Electronic form does not cure defects such as fraud, mistake, lack of authority, illegality, or absence of genuine consent.

Section 6 of R.A. No. 8792 likewise provides that information cannot be denied validity or enforceability solely because it is contained in an electronic data message. This provision supports the use of email exchanges, digitally executed agreements, and electronic records as evidence of contractual consent.

When an Electronic NDA May Bind the Parties

An electronically executed NDA will ordinarily be enforceable when the evidence shows the following:

• Identifiable parties: The persons or entities entering into the NDA can be identified.
• Clear assent: The recipient accepted the NDA, signed it electronically, clicked an acceptance button, or otherwise manifested agreement.
• Definite obligations: The confidential information, permitted uses, restrictions, and duration of confidentiality are sufficiently described.
• Lawful cause and object: The agreement concerns a lawful exchange or protection of information.
• Reliable electronic records: The proponent can show that the agreement was generated, transmitted, stored, and preserved in a reliable manner.

Section 17 of R.A. No. 8792 further recognizes that a declaration of will or other statement between an originator and addressee cannot be denied legal effect solely because it is in electronic form.

Electronic Signatures and Authentication

Section 8 of R.A. No. 8792 treats an electronic signature as equivalent to a handwritten signature when the applicable procedure identifies the person to be bound, indicates that person’s consent or approval, is reliable and appropriate for the transaction, requires the signature for the transaction to proceed, and allows the other party to verify the signature.

Examples may include a digital certificate, a signature platform with an audit trail, a secure account associated with the signatory, a one-time authentication code, or a controlled electronic process showing that the signatory reviewed and approved the NDA.

Section 9 of R.A. No. 8792 creates a presumption that the electronic signature belongs to the person to whom it correlates and that it was affixed with the intention to sign or approve the electronic document. The presumption does not apply where the relying party knew or had notice of defects or unreliability, or where reliance on the signature was unreasonable under the circumstances.

Accordingly, an electronic signature is not automatically conclusive. If the signatory denies execution, the party relying on the NDA must be prepared to establish the signature’s authenticity and the reliability of the signing process.

Electronic Evidence Must Still Be Authenticated

The Rules on Electronic Evidence recognize electronic documents as functional equivalents of paper-based documents. However, the person offering a private electronic document has the burden of proving its authenticity. Before the document is admitted as authentic, its integrity and reliability must be established through an appropriate method (A.M. No. 1-7-1-SC).

The applicable rules recognize several ways to authenticate a private electronic document, including proof that it was digitally signed by the person purported to have signed it, proof that appropriate security procedures were used, or other evidence demonstrating the document’s integrity and reliability to the satisfaction of the court (A.M. No. 1-7-1-SC).

The Supreme Court has reiterated that a party seeking to introduce an electronic document bears the burden of proving its authenticity. Failure to comply with authentication requirements may result in exclusion of the document from evidence ([RCBC Bankard Services Corporation v. Oracion, Jr., et al. (2019)](#J3.10), G.R. No. 223274, 19 June 2019).

This rule is particularly important when an NDA is presented as a screenshot, email attachment, scanned signature page, or downloaded file. The document’s existence alone does not necessarily establish who signed it, whether its contents were altered, or whether the alleged signatory intended to be bound.

What Evidence Can Prove a Digital NDA?

Courts may consider the totality of the available evidence, including:

• the original electronic file and its metadata;
• email headers and transmission records;
• the parties’ email or messaging exchanges;
• platform audit trails and completion certificates;
• digital certificates, authentication logs, or access records;
• testimony of the person who created, sent, received, or maintained the document; and
• subsequent conduct showing that the parties treated the NDA as binding.

Under Section 12 of R.A. No. 8792, an electronic document is not inadmissible merely because it is electronic or does not appear in standard written form. Its evidentiary weight depends on the reliability of the manner in which it was generated, stored, or communicated, the reliability of the identification of its originator, and other relevant circumstances.

Emails, Scanned Signatures, and Click-Wrap Acceptance

An email exchange may establish assent if the messages clearly identify the proposed NDA, communicate its terms, and show acceptance by an authorized representative. A typed name, an electronic signature, or a response stating agreement may be relevant, but the surrounding circumstances remain important.

A scanned signature placed on an NDA may be useful evidence, but it may be challenged more easily than a digitally authenticated signature. The proponent should preserve the email transmitting the document, the original file, the identity of the sender, and evidence that the signatory had authority to act.

A click-wrap NDA may also be enforceable when the user is given reasonable notice of the terms and must affirmatively click an acceptance button before proceeding. The record should show the version of the terms presented, the date and time of acceptance, the user’s account details, and the relevant authentication process.

By contrast, a passive browse-wrap arrangement, in which a user is supposedly bound merely by visiting a website without clear notice or affirmative assent, presents greater evidentiary and contractual risks.

Electronic Records Must Be Distinguished from Unreliable Copies

Not every electronically transmitted image or reproduction automatically qualifies as a reliable electronic document. In [MCC Industrial Sales Corporation v. Ssangyong Corporation (2007)](#J10.19), G.R. No. 170633, 17 October 2007, the Supreme Court discussed the treatment of fax transmissions under the Electronic Commerce Act and explained that the electronic character and evidentiary treatment of a communication depend on the governing statutory definitions and the evidence presented.

The lesson for NDA disputes is that parties should preserve the original electronic records and not rely solely on screenshots, blurred scans, forwarded copies, or printouts detached from their transmission history.

Confidentiality Obligations Must Be Sufficiently Definite

An NDA should identify, with reasonable clarity, the information covered by confidentiality. It may include trade secrets, business plans, customer information, financial data, source code, product designs, pricing information, and other non-public materials.

The agreement should also state:

• the permitted purpose for which the information may be used;
• the persons who may receive or access the information;
• exceptions for information that is already public or independently developed;
• the required security measures;
• the procedure for returning or destroying confidential information;
• the duration of the confidentiality obligation; and
• the remedies available in case of breach.

An NDA that defines confidential information so broadly that the recipient cannot reasonably determine what may be disclosed or used may invite disputes over interpretation and enforceability.

Form, Notarization, and the Statute of Frauds

As a general rule, contracts are obligatory in whatever form they are made when the essential requisites of validity are present. The requirement that a document be notarized does not automatically apply to every NDA.

The Supreme Court has explained that a private document involving a contract may remain valid between the parties even when it is not notarized, when the essential requisites of a contract are present. Formalities required for greater efficacy or to bind third persons are distinct from formalities required for validity or enforceability ([Cenido v. Apacionado, et al. (1999)](#J12.15), G.R. No. 132474, 12 January 1999).

Nevertheless, a particular transaction may be subject to a statutory writing requirement or another special form requirement. Parties should therefore examine the subject matter of the NDA and the transaction in which it is used, especially when confidentiality obligations are connected with employment, intellectual property, technology licensing, or another regulated relationship.

Confidentiality and Privilege in Electronic Form

The electronic form of a communication does not, by itself, remove an otherwise applicable privilege. The Rules on Electronic Evidence provide that the confidential character of a privileged communication is not lost solely because the communication is contained in an electronic document (A.M. No. 1-7-1-SC).

This rule is separate from the contractual confidentiality created by an NDA. An NDA may impose contractual duties even when no evidentiary privilege exists. Conversely, an NDA cannot automatically create a statutory privilege that does not otherwise apply.

Common Reasons for Enforcement Problems

Digital NDAs are more vulnerable to challenge when:

• the signatory’s identity cannot be verified;
• the alleged signatory lacked authority to bind the company;
• the final version of the agreement cannot be established;
• the signature platform has no reliable audit trail;
• the document was sent from an unverified or shared account;
• the agreement was materially altered after acceptance; or
• the confidentiality provisions are vague, indefinite, or contrary to law or public policy.

A party may also waive an evidentiary objection by failing to object at the proper time. The Supreme Court has ruled that failure to timely object to evidence, including electronic evidence, may constitute waiver, particularly where the objection is raised for the first time on appeal ([Trimillos v. FCash Global Lending, Inc. (2025)](#J2.13), G.R. No. 271360).

Recommended Record-Keeping Practices

Businesses using electronic NDAs should adopt a signing process that records the complete transaction. The following measures can substantially improve the agreement’s evidentiary value:

1. Use a controlled signing platform or verified business email account.
2. Require multi-factor authentication where appropriate.
3. Preserve the final version of the NDA and prevent unauthorized alterations.
4. Retain audit logs showing the date, time, IP address, authentication method, and completion of signing.
5. Record the authority of the person signing for a corporation or other organization.
6. Keep the communications showing delivery of the NDA and acceptance of its terms.
7. Maintain a document-retention policy that preserves records for the period relevant to the contractual obligation and possible litigation.

Practical Examples

Example 1: Verified electronic signing. A company sends an NDA through a signing platform. The recipient verifies an email address and mobile number, reviews the document, signs using a digital certificate, and receives a completion certificate. The company preserves the audit trail and the final PDF. This presents a strong basis for proving consent and authenticity.

Example 2: Email acceptance. A consultant receives an NDA as an attachment and replies, “I agree to the attached NDA and will comply with its terms.” The email account belongs to the consultant, the attachment is identifiable, and the consultant begins work under the agreement. These circumstances may support formation, although authentication and the consultant’s authority should still be proved if challenged.

Example 3: Unverified screenshot. A company presents only a screenshot of a messaging conversation that allegedly contains acceptance of an NDA. The account name is not verified, the original conversation is unavailable, and no metadata or witness is presented. The evidence may be challenged for lack of authenticity and reliability.

Conclusion

A non-disclosure agreement signed through email, an electronic signing platform, or another digital channel may be enforceable in the Philippines. R.A. No. 8792 recognizes electronic documents, electronic signatures, electronic declarations of will, and electronic contracts, while the Rules on Electronic Evidence provide the requirements for admissibility and authentication.

The strongest digital NDA is not merely a document with an electronic image of a signature. It is an agreement supported by clear consent, definite confidentiality obligations, verified identity, proper authority, reliable security procedures, and preserved electronic records.

Parties preparing or enforcing a digital NDA should therefore preserve the complete signing history, use reliable authentication procedures, define confidential information carefully, and assess whether any special form or statutory requirement applies to the underlying transaction.

About Nicolas and De Vega Law Offices

 Nicolas and de Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.