The bureau said some companies may be in violation of the CFPA if they include language in their non-disclosure agreements that discourage employees from reporting illegal misconduct.