Employee Confidentiality & Data Handling Clause Template

EMPLOYEE CONFIDENTIALITY AND DATA HANDLING CLAUSE

(For incorporation into an Employment Agreement / Offer Letter / Contractor Agreement)

This Clause is entered into between [Organization Name] ("Company") and [Employee Name] ("Employee") as part of the Employee's employment/engagement agreement dated [Date], and sets out the Employee's confidentiality and personal data handling obligations in furtherance of the Company's obligations under Section 8 of the DPDP Act, 2023.

1. DEFINITION OF CONFIDENTIAL AND PERSONAL DATA
"Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act, 2023, including but not limited to customer, employee, and vendor personal data accessed in the course of the Employee's role. "Confidential Information" additionally includes trade secrets, business strategy, and proprietary technical information.

2. CONFIDENTIALITY OBLIGATION
The Employee shall:
   a. Access personal data only to the extent necessary to perform assigned duties;
   b. Maintain strict confidentiality of all personal data and Confidential Information encountered during employment, both during and after termination of employment;
   c. Not disclose personal data to any unauthorised person, whether inside or outside the Company, without proper authorisation;
   d. Not use personal data for any personal purpose or for the benefit of any third party.

3. COMPLIANCE WITH COMPANY POLICIES
The Employee agrees to comply with the Company's Acceptable Use Policy, Data Classification Policy, and Data Breach Response Policy, each as amended from time to time, and acknowledges that these policies form an extension of this Clause.

4. SECURITY PRACTICES
The Employee shall: use only Company-approved systems and devices to process personal data; enable and maintain security controls (screen-lock, disk encryption, multi-factor authentication) on any device used to access personal data; and never transmit personal data through personal email, messaging apps, or unauthorised cloud storage.

5. INCIDENT REPORTING DUTY
The Employee shall immediately report to [breach-reporting@domain / Line Manager / DPO] any suspected or actual unauthorised access, loss, disclosure, or misuse of personal data, in accordance with the Data Breach Response Policy, without attempting to independently resolve or conceal the incident.

6. RETURN OF DATA ON EXIT
Upon resignation, termination, or completion of engagement, the Employee shall: return or securely delete all personal data and Confidential Information in the Employee's possession or control, including copies on personal devices; and certify in writing that no such data has been retained, save as required by law.

7. POST-EMPLOYMENT OBLIGATIONS
The confidentiality obligations in this Clause survive termination of employment indefinitely with respect to personal data, and for [X years] with respect to other Confidential Information, except where the information has lawfully entered the public domain through no fault of the Employee.

8. CONSEQUENCES OF BREACH
Breach of this Clause may result in disciplinary action up to and including termination for cause, and the Company reserves the right to pursue civil remedies, and where applicable, to report the matter to law enforcement or the Data Protection Board of India, without prejudice to any other rights available to the Company.

9. ACKNOWLEDGEMENT OF EMPLOYEE DUTIES
The Employee acknowledges that, as a Data Principal in respect of their own personal data processed by the Company, they are separately subject to the duties under Section 15 of the DPDP Act, including the duty to provide accurate information and not to raise frivolous grievances.

10. GOVERNING LAW
This Clause is governed by the laws of India and forms an integral part of the Employee's employment/engagement agreement.

Acknowledged and agreed:

For [Organization Name]                          Employee
Name: ______________________                    Name: ______________________
Title: ______________________                   Date: ______________________