Confidentiality Breach Limitation Period

A confidentiality breach occurs when confidential information is disclosed, used, or accessed without permission. In business and commercial settings, this often involves trade secrets, commercial contracts, client data, financial information, or internal corporate material.

Claims for breach of confidentiality are subject to limitation periods, which determine how long a claimant has to bring legal proceedings. If a claim is not issued within the relevant time limit, it may become statute-barred under the Limitation Act 1980, meaning it can no longer be enforced through the courts.

Confidentiality disputes are legally complex because they may arise in contract, equity, or data protection law, each with different limitation consequences.

What Counts as a Breach of Confidentiality

A confidentiality breach occurs where confidential information is disclosed or misused without authorisation. The obligation may arise from:

• Express confidentiality clauses in contracts or NDAs
• Implied contractual duties
• Equitable duty of confidence
• Employment obligations
• Corporate and commercial relationships

Common examples include:

• Disclosure of trade secrets to competitors
• Misuse of client lists or pricing data
• Sharing commercially sensitive documents without consent
• Former employees using confidential information in a new role
• Breach of non-disclosure agreements (NDAs)

Legal Bases for Confidentiality Breach Claims

Confidentiality breach claims may be brought under different legal frameworks:

• Breach of contract (confidentiality clauses or NDAs)
• Equitable breach of confidence
• Tortious misuse of information in some cases
• Data protection claims (where personal data is involved)

Each legal route affects the applicable limitation period.

Standard Limitation Period for Confidentiality Breach Claims

Six-year general rule

Most confidentiality breach claims fall under a six-year limitation period in England and Wales.

This applies under the Limitation Act 1980, depending on how the claim is framed:

• Contract claims (e.g. NDA breach): six years from breach
• Tort or equitable claims: generally six years from damage or breach

When Time Starts Running

The start date depends on the legal basis of the claim.

Contractual confidentiality breaches

For breach of an NDA or confidentiality clause:

• Time starts when the breach occurs
• Not when the claimant discovers the breach

Example:

• Confidential document disclosed on 1 January 2021
• Limitation begins on that date even if discovered in 2023

Equitable breach of confidence

For equitable claims:

• Time generally runs from the date of misuse or disclosure
• Courts focus on when the wrongful act occurred

Key issue: discovery vs breach

In most confidentiality cases:

• Discovery of the breach does not automatically affect limitation
• This creates risk where breaches are hidden or difficult to detect

Fraud, Concealment, and Delayed Limitation Start

Section 32 Limitation Act 1980

The limitation period may be postponed where:

• The breach involves fraud, or
• Relevant facts are deliberately concealed, or
• A mistake prevented earlier discovery

In such cases:

• Time does not begin until discovery, or
• When discovery could reasonably have occurred

Practical application

This is particularly relevant where:

• Employees secretly transfer data before leaving
• Commercial partners conceal misuse of information
• Internal systems are used to hide disclosure activity

Continuing Breaches of Confidentiality

Confidentiality breaches may occur over time rather than as a single event.

Examples include:

• Ongoing disclosure of trade secrets
• Repeated use of confidential customer data
• Continuous sharing of protected documents

In such cases:

• Each act of disclosure may create a separate limitation period
• Older breaches may be time-barred while recent acts remain actionable

Data Protection and Confidentiality Overlap

Where personal data is involved, claims may also fall under data protection law.

Key point:

• Data protection claims also typically have a six-year limitation period in England and Wales (or one year if against public authorities in certain contexts)

This overlap is important in business disputes involving:

• Customer databases
• Employee records
• Marketing and analytics data

Equitable Remedies and Delay (Laches)

Even where strict limitation rules apply, confidentiality claims in equity may be affected by delay.

Courts may refuse or limit relief if:

• The claimant delayed unreasonably
• The defendant relied on the absence of complaint
• Evidence has become unavailable

This is known as the doctrine of laches.

Business Context: Common Confidentiality Disputes

Confidentiality breach claims frequently arise in:

• Technology and software development
• Professional services firms
• Corporate acquisitions and due diligence
• Employment exits and restrictive covenants
• Commercial partnerships and joint ventures

Typical disputes involve:

• Misuse of intellectual property
• Leakage of pricing strategies
• Customer solicitation using confidential lists
• Internal document disclosure during negotiations

Practical Limitation Issues

Identifying the breach date

The most important issue is determining when disclosure occurred. Difficulties arise where:

• Information is leaked gradually
• Multiple individuals are involved
• Digital records are incomplete

Proving concealment

To extend limitation under section 32, claimants must show:

• Active concealment or deception
• That earlier discovery was not reasonably possible
• A clear link between concealment and delay

Evidence challenges

Delayed claims often face:

• Deleted electronic communications
• Expired access logs
• Departed employees or witnesses
• Loss of original confidentiality documentation

Common Questions

What is the limitation period for breach of confidentiality?

Generally six years from the date of breach or disclosure.

Does discovering the breach later extend the time limit?

Not usually. Discovery only extends limitation if fraud or concealment applies under section 32 of the Limitation Act 1980.

Can multiple breaches be claimed after six years?

Only breaches within the limitation period are enforceable, although earlier breaches may still be used as background evidence.

Do NDAs change limitation rules?

No. NDAs are subject to the same six-year contractual limitation period unless fraud or concealment applies.

Key Takeaways

The limitation period for confidentiality breach claims in England and Wales is generally six years from the date of disclosure or misuse of confidential information. This applies whether the claim is based on contract or equitable breach of confidence. The limitation period does not usually start when the breach is discovered, although fraud or deliberate concealment can delay the start under section 32 of the Limitation Act 1980. Because confidentiality breaches are often hidden or ongoing, determining the exact breach date is critical to assessing whether a claim can still be brought.