In this NDA is there some verbage that give contractors like web designers the ability to still showcase their work to the public for CV purposess  if they do something for this company? 

NON-DISCLOSURE AGREEMENT FOR EMPLOYEES, CONTRACTORS, AND AUTHORIZED USERS
EFFECTIVE DATE: _________________
PARTIES
COMPANY 1: Company 1 Ltd. with its principal place of business at Virginia
Ghana ("Company 1")
RECIPIENT: _____________________________________, [an individual / a [COUNTRY] [entity type]] 
[residing/with its principal place of business] at __________________________________                     ("Recipient")
1. BACKGROUND AND PURPOSE
1.1. Company 1 provides cybersecurity services and solutions, including, but not limited to, services for government entities and clients with critical infrastructure.
1.2. Recipient is [an employee / a contractor / an authorized user] of Company 1 with access to Company 1' information systems, data, and/or client information.
1.3. This Agreement establishes the terms and conditions under which Recipient may access, use, and must protect Company 1' Information Assets (as defined below), ensuring their confidentiality, integrity, and availability.
2. DEFINITIONS
2.1. "Information Assets" means all information, data, and systems owned, managed, or utilized by Company 1 or its clients, including but not limited to:
(a) "Confidential Information" which means all non-public information disclosed by or on behalf of Company 1 or its clients to Recipient, or to which Recipient gains access in connection with the relationship between Company 1 and Recipient, in any form, including but not limited to:
(i) Technical information: software, algorithms, formulas, designs, processes, procedures, discoveries, inventions, methods, know-how, and improvements;
(ii) Business information: client lists, vendor lists, pricing strategies, personnel data, marketing strategies, business plans, financial information, operational information, and security protocols;
(iii) Government and critical infrastructure information: any data, documents, plans, specifications, assessments, audits, vulnerability analyses, or other information related to government or essential clients of infrastructure;
(iv) Security vulnerabilities, threat intelligence, incident response data, attack vectors, defensive strategies, and security configurations of Company 1 or its clients;
(v) Any personal information, including but not limited to personally identifiable information (PII) of minors participating in Company 1' cybersecurity education and training programs, and data regarding their family members;
(vi) Educational and training materials, curricula, assessments, and participant data related to Company 1' cybersecurity education and training programs;
(vii) Any information that should reasonably be recognized as confidential information of Company 1 or its clients;
(viii) The fact that Confidential Information has been shared or that discussions or agreements are taking place between Company 1 and its clients, as well as the content of any such discussions; and
(ix) Any notes, analyses, compilations, studies, summaries, or other material prepared by the Recipient containing or based, in whole or in part, on any information described above.
(b) "Systems and Infrastructure," which means any networks, computers, storage media, applications, databases, cloud environments, communication systems, and other IT resources owned, managed, or utilized by Company 1 or provided for Company 1' clients.
2.2. "Trade Secrets" means information that derives independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable by proper means by, other persons who can obtain economic value from its disclosure or use, and is the subject of efforts that are reasonable under the circumstances to maintain its secrecy.
2.3. "Data Integrity" means the accuracy, completeness, and consistency of Information Assets throughout their lifecycle.
2.4. "System Availability" refers to the accessibility and usability of Information Assets, Systems, and Infrastructure when needed by authorized users.
2.5. Confidential Information does not include information that:
(a) Is in or enters the public domain through no fault of the Recipient;
(b) Is lawfully communicated to the Recipient by a third party without restriction on disclosure or use and without breach of this Agreement;
(c) Is already in the Recipient's possession at the time of disclosure by Company 1, as evidenced by written records; or
(d) Is independently developed by the Recipient without use of or reference to Confidential Information, as evidenced by written records.
3. OBLIGATIONS OF RECIPIENT
3.1. Protection of Information Assets. The Recipient shall:
(a) Hold Company 1' Confidential Information in strict confidence;
(b) Use Confidential Information solely for the purpose of performing duties for Company 1 or as otherwise authorized by Company 1 in writing;
(c) Not disclose, distribute, publish, transmit, or otherwise make available Confidential Information to any third party without Company 1' prior written consent;
(d) Take all reasonable precautions to prevent unauthorized use or disclosure of Confidential Information, including at minimum the same level of care Recipient uses to protect its confidential information, but no less than reasonable care;
(e) Notify Company 1 immediately upon discovery of any unauthorized use or disclosure of Confidential Information and cooperate with Company 1 to regain possession of the Confidential Information and prevent further unauthorized use or disclosure;
(f) Comply with all applicable international, national, and local laws and regulations regarding the handling of sensitive information, including but not limited to those regarding privacy, data protection, and information security, specifically including Ghana's Data Protection Act, 2012 (Act 843), the EU General Data Protection Regulation (GDPR), and other applicable international data protection laws in jurisdictions where Company 1 operates.
3.2. Security Obligations. The Recipient shall:
(a) Comply with all Company 1 security policies, procedures, and requirements when accessing, handling, or storing Information Assets;
(b) Not bypass, disable, or attempt to circumvent any security controls implemented by Company 1;
(c) Not copy, reproduce, or remove Information Assets from Company 1' premises or systems without express authorization;
(d) Return or securely destroy all Information Assets upon completion of authorized use or Company 1' request;
(e) Not engage in any action that could reasonably be expected to compromise the confidentiality, integrity, or availability of Company 1' Information Assets.
3.3. Government and Critical Infrastructure Information. For Confidential Information related to government contracts or critical infrastructure:
(a) Recipient acknowledges that such information may be subject to additional legal protections, including but not limited to the requirements of relevant government contracting regulations in Ghana and internationally.
(b) Recipient shall comply with all applicable legal and contractual requirements for the protection of such information across all jurisdictions where Company 1 operates.
(c) Recipient shall not disclose such information to any person not authorized to receive it, including foreign nationals or entities, without prior written approval from Company 1 and, where applicable, the relevant government agency;
(d) Recipient shall immediately report to Company 1 any potential or actual unauthorized disclosure or compromise of such information.
3.4. Protection of Minors' Data. For Confidential Information relating to minors and their family members:
(a) Recipient acknowledges that information about minors participating in Company 1' cybersecurity education and training programs is subject to heightened protection under various international standards, including Ghana's Data Protection Act, the UN Convention on the Rights of the Child, the EU GDPR, and other applicable laws;
(b) Recipient shall exercise the highest standard of care when handling any personal information of minors or their family members;
(c) Recipient shall not use minors' personal information for any purpose other than the specific educational or training purpose for which it was collected;
(d) Recipient shall not disclose minors' personal information to any third party without express written parental or guardian consent and Company 1 approval.
(e) Recipient shall immediately report any unauthorized disclosure of minors' information to Company 1' designated data protection officer.
3.5. Intellectual Property Protection. The Recipient shall:
(a) Recognize that Company 1' cybersecurity methodologies, tools, techniques, and proprietary code constitute valuable intellectual property;
(b) Not reverse engineer, decompile, or attempt to derive source code from any of Company 1' proprietary software or security tools;
(c) Do not use Company 1' training materials, methodologies, or assessment frameworks outside the scope of authorized duties;
(d) Acknowledge that cybersecurity approaches developed while working with Company 1 belong to Company 1.
3.6. Classified Information. If the Recipient's role requires access to classified information:
(a) Recipient must possess and maintain appropriate security clearances as required by relevant government authorities;
(b) Recipient shall strictly adhere to all applicable classified information handling protocols;
(c) Recipient shall not discuss classified information over unsecured channels or with individuals who lack appropriate clearance;
(d) Recipient shall report any potential compromise of classified information through appropriate classified reporting channels immediately upon discovery;
(e) The Recipient acknowledges that mishandling classified information may constitute a criminal offense in various jurisdictions.
3.7. Incident Reporting. The Recipient shall:
(a) Report any suspected or confirmed security incident, data breach, or unauthorized disclosure to Company 1' Chief Information Security Officer (or designated Security Officer) within 12 hours of discovery;
(b) Following internal notification, work with the executive team to ensure all regulatory reporting requirements are met within Ghana's statutory 24-hour reporting window;
(c) Direct all security incident communications to [NAME], Security Incident Response Manager (primary) or [NAME], Deputy Security Officer (secondary);
(d) Do not communicate with external parties about security incidents without explicit written authorization from Company 1' executive team.
3.8. Audit Compliance.
(a) Company 1 reserves the right to audit the Recipient's compliance with the security obligations set forth in this Agreement upon reasonable notice, not to exceed 48 hours;
(b) Recipient shall cooperate fully with any such audit, including providing access to systems, devices, and premises used to access, store, or process Company 1 Information Assets;
(c) If an audit reveals security deficiencies, the Recipient shall promptly implement corrective measures as directed by Company 1.
4. TERM AND TERMINATION
4.1. This Agreement shall commence on the Effective Date and continue until terminated by either party with written notice.
4.2. Recipient's obligations with respect to Confidential Information shall survive the termination of this Agreement or the relationship between Company 1 and Recipient, as follows:
(a) For Trade Secrets, until such information no longer qualifies as a trade secret under applicable law;
(b) For all other Confidential Information, for five (5) years after termination of this Agreement or the relationship between Company 1 and Recipient, whichever is later.
(c) For classified information or information subject to government contracts, in accordance with applicable law, regulations, and contractual requirements.
5. RETURN OF CONFIDENTIAL INFORMATION
5.1. Upon termination of the relationship between Company 1 and Recipient, or at any time upon Company 1' request, Recipient shall:
(a) Promptly return to Company 1 all tangible materials containing or derived from Confidential Information, including all copies, reproductions, and derivatives thereof;
(b) Permanently delete or destroy all electronic copies of Confidential Information in the Recipient's possession or control;
(c) Return all hardware, devices, access cards, tokens, and other physical security items provided by Company 1;
(d) Provide written certification that all Confidential Information has been returned, deleted, or destroyed as required.
5.2. No copies of Confidential Information shall be retained by the Recipient unless specifically authorized in writing by Company 1 or required by applicable law. In the event retention is required by law, Recipient shall maintain all obligations of confidentiality set forth in this Agreement for as long as the information is retained.
6. INTELLECTUAL PROPERTY RIGHTS
6.1. All Confidential Information is and shall remain the exclusive property of Company 1 or its clients. Nothing in this Agreement grants the Recipient any rights to or interest in any Confidential Information, including any license or right to use, sell, exploit, copy, or further develop any Confidential Information.
6.2. Recipient acknowledges that any work product, inventions, improvements, developments, discoveries, ideas, or intellectual property created by Recipient that is based on or derived from Confidential Information shall be owned exclusively by Company 1.
7. REMEDIES
7.1. Recipient acknowledges that any breach of this Agreement may cause Company 1 irreparable harm for which monetary damages would be inadequate. Accordingly, Company 1 shall be entitled to seek injunctive relief to prevent or stop any breach or threatened breach of this Agreement, in addition to any other remedies available at law or in equity.
7.2. In the event of litigation to enforce this Agreement, the prevailing party shall be entitled to recover its reasonable attorneys' fees and court costs.
8. GENERAL PROVISIONS
8.1. No Conflict. Recipient represents that their performance under this Agreement does not and will not breach any agreement to keep in confidence information acquired by Recipient before they engage with Company 1.
8.2. Amendment. This Agreement may be amended only by a written document signed by both parties.
8.3. Assignment. The Recipient may not assign this Agreement without Company 1' prior written consent. Company 1 may assign this Agreement to any successor entity.
8.4. Severability. If any provision of this Agreement is found invalid or unenforceable, the remainder of this Agreement shall be interpreted to carry out the parties' intent best.
8.5. Waiver. Either party's failure to enforce any right or provision under this Agreement does not constitute a waiver of such right or provision.
8.6. Governing Law. This Agreement shall be governed by and construed in accordance with the laws of Ghana without regard to its conflict of laws principles.
8.7. Jurisdiction and Venue. Any legal action arising out of or relating to this Agreement shall be instituted in the courts of Ghana, and each party irrevocably submits to the exclusive jurisdiction of such courts.
8.8. Entire Agreement. This Agreement constitutes the entire Agreement between the parties with respect to the subject matter hereof and supersedes all prior or contemporaneous communications, representations, or agreements, whether oral or written.
8.9. Construction. This Agreement shall be construed as if both parties jointly wrote it. Section headings are for reference purposes only and shall not affect the interpretation of this Agreement.
8.10. Survival. The provisions of this Agreement that by their nature are intended to survive termination or expiration shall survive termination or expiration of this Agreement.
8.11. International Data Transfers. The Recipient acknowledges that Company 1 operates internationally and that data transfers across borders must comply with applicable data transfer regulations and mechanisms. The Recipient shall:
(a) Not transfer Confidential Information across international borders without Company 1' explicit prior written approval;
(b) When authorized to transfer data internationally, ensure such transfers comply with applicable data protection regulations.
8.12. If either party is prevented from performing any of its obligations under this Agreement due to circumstances beyond its reasonable control, including but not limited to natural disasters, war, cyberattacks, terrorism, riots, embargoes, or major system failures:
(a) The affected party shall notify the other party as soon as reasonably possible.
(b) The affected party's obligation to perform shall be suspended only to the extent necessitated by the circumstances.
(c) The affected party shall use reasonable efforts to mitigate the impact and resume performance as soon as possible.
(d) The Recipient's obligations to protect the confidentiality and security of Information Assets shall continue even during such events.
(e) If such an event continues for more than 30 days, either party may terminate this Agreement with written notice.
8.13. Resolution of Legal Conflicts. When Information Assets are subject to multiple legal frameworks simultaneously:
(a) Where compliance with one legal framework would cause a violation of another applicable legal framework, the most restrictive provision shall generally prevail.
(b) For data originating in Ghana, Ghana's Data Protection Act shall take precedence over conflicting provisions, except where international law mandates stronger protections.
(c) For data originating in the European Economic Area, GDPR provisions shall take precedence regarding that specific data.
(d) For information related to US government contracts, applicable US regulations shall govern that specific information.
(e) Where irreconcilable conflicts exist, Company 1' legal department shall provide written guidance on compliance priorities, and the Recipient shall follow such guidance.
SIGNATURES
IN WITNESS WHEREOF, the parties have executed this Agreement as of the Effective Date.
COMPANY 1:
[COMPANY 1 NAME]
By: _________________________________
Name: _______________________________
Title: _______________________________
Date: _______________________________
RECIPIENT: