Who Needs to Know and When? Handling Confidentiality in a Business Sale

Who Needs to Know and When? Handling Confidentiality in a Business Sale

One of the greatest concerns for business owners in a sale process is not the valuation — it is the question of who learns about the plans to sell, and when. Disclosing too early can have devastating consequences: key employees resign, customers preemptively switch suppliers, suppliers worsen their terms. Disclosing too late, on the other hand, can breach legal obligations and cause lasting damage to trust. Managing the flow of information correctly is an art — and it follows a clear principle: need-to-know.

Why Confidentiality Is So Critical

During a business sale, the company exists in a fragile state of limbo for many months. Employees who learn too early about the impending change of ownership react with uncertainty — and uncertainty leads to attrition. High performers, who have the best outside options, are the first to act on them. A company that loses its top sales executive or chief developer during the sale process is suddenly a very different proposition in Due Diligence.

The same applies to customers: if a key customer learns that the business is being sold, they may begin exploring alternatives — not out of ill will, but out of prudent business practice. And suppliers who become aware of an impending change of ownership will negotiate their next contract renewal from a different position.

The NDA: The Foundation of All Confidentiality

Before anyone outside the innermost circle is informed, a robust Non-Disclosure Agreement (NDA) must be in place. A well-drafted NDA covers more than just the obvious. It should include at a minimum:

• Purpose limitation: The information received may be used exclusively to evaluate the transaction — not for competitive purposes.
• Return and deletion obligations: After negotiations are terminated, all documents shared must be returned or demonstrably deleted.
• Non-solicitation clause: The prospective buyer may not recruit employees of the target company — neither during the process nor for a defined period thereafter.
• Duration and penalties: A minimum term of 24 months, with clearly defined contractual penalties for breach.

The Four Phases of Staged Disclosure

Professionally managed sale processes follow a clear phased plan — the further the process has advanced, the more people are brought into the loop:

The intention remains within the innermost circle. No employee, no tax advisor, no external lawyer beyond the directly mandated one is aware of the process.

Once a serious prospective buyer has signed a letter of intent, the CFO, head of accounting, and where applicable a lawyer for Due Diligence preparation are brought in — under NDA.

After the SPA is signed, senior management and key performers are informed. Planning of internal communications for closing also begins at this stage.

Only after the transaction has been completed is the general public informed — with carefully prepared communications that emphasise continuity and stability.

Statutory Obligations: What You Cannot Ignore

In an Asset Deal (purchase of individual assets rather than company shares), Section 613a of the German Civil Code (BGB) applies: employees must be informed about the transfer of business operations and have a right of objection. This notification must take place before the transfer — there is no discretion here. An existing works council also has information and consultation rights under Section 111 of the Works Constitution Act (BetrVG) in the case of material changes to operations — which a business sale typically constitutes.

Customer Communications: What a Sound Plan Contains

The message to customers should never be reactive — it should be planned, coordinated, and framed positively. A professional communications plan includes: a clear message about the continuity of the business relationship, an introduction of the new owner with their strengths, a personal note from the outgoing owner, and a direct point of contact at the buyer. What customers want to hear is not who has bought the company, but that their orders, their terms, and their points of contact are secure.