


How Felcorp enforces confidentiality through legally binding non-disclosure obligations with defined consequences for breach.

Every Felcorp employee is bound by a confidentiality and non-disclosure agreement as a condition of employment. These agreements establish a legally enforceable obligation to protect client data and prevent unauthorised disclosure throughout and beyond the term of employment.
This is the legal mechanism that underpins all other confidentiality controls. Where technology restricts access and processes govern behaviour, the NDA ensures there are defined consequences for any staff member who deliberately or negligently breaches their obligations.
Confidential information under the agreement includes business strategies, financial information, customer and supplier lists, employee records and proprietary data. Client data is classified as highly sensitive and must be treated as confidential at all times.
The obligation extends to all forms of disclosure, whether verbal, written or electronic. Staff must not share confidential information with unauthorised individuals inside or outside the organisation. Information may only be shared on a need-to-know basis with employees who hold the necessary clearance and direct responsibility for the relevant engagement.
Staff are required to handle all confidential information with care throughout their day-to-day work. This includes exercising caution when discussing client matters in meetings, email correspondence, phone conversations and any other setting where information could be overheard or intercepted.
These behavioural obligations reinforce the access controls and data handling procedures described under Identity and Access Management and Operational Processes and Policies. The NDA gives those controls legal weight by making each staff member personally accountable for the information they access.
Any breach of confidentiality, whether intentional or accidental, may result in disciplinary action up to and including termination of employment. A wilful or gross misconduct breach of confidentiality is classified as serious misconduct under Felcorp's employment framework.
This classification carries significant consequences. It provides Felcorp with grounds for immediate termination and, where applicable, the ability to pursue legal remedies for damages caused by the disclosure. The agreement is designed to protect against harmful or vexatious conduct by employees who may seek to misuse the information they have accessed during their employment.
Staff are required to report any suspected or confirmed breach of confidentiality to management immediately. Early reporting allows Felcorp to contain potential damage, assess the scope of the breach and activate the incident response procedures described under Monitoring and Reporting.
The obligation to report applies regardless of whether the breach was caused by the reporting employee or observed in the conduct of another staff member.
Non-disclosure obligations apply equally to temporary staff and substitutes. Where a staff member is temporarily assigned to an engagement due to absence or workload, they must sign a confidentiality agreement before any access is provisioned. The client must also provide written approval before the substitution takes effect.
This ensures that every individual who comes into contact with client data is bound by the same legal protections, regardless of the duration or nature of their assignment.
Non-disclosure agreements sit within the Security By Engagement layer of Felcorp's three-layer security framework. They apply at the individual level and are specific to each employee's access and responsibilities.
For detail on how confidentiality is reinforced through physical and environmental controls, refer to Secure Working Environment.