When a student gets attacked in a dormitory parking lot or robbed in a poorly lit library stairwell, the first question is usually about the criminal. The second question, which often matters more financially, is whether the school or university is legally responsible. In the world of premises liability, schools and universities are not treated as ordinary property owners. They are special players with a unique duty to protect the people they invite onto their grounds. But that duty has limits, and understanding those limits is the key to knowing when a victim can actually recover damages.
The basic principle is simple. A property owner owes a duty of care to anyone who is lawfully on the property. For a university, that includes students, staff, visitors, and even parents attending a football game. The duty is to keep the premises reasonably safe and to warn about dangerous conditions that are not obvious. But with third-party assaults, the danger is not a broken handrail or a wet floor. The danger comes from another person, often a criminal stranger. Courts have long wrestled with whether a property owner can be held liable for the intentional criminal acts of someone else. The general rule is that no one has a duty to protect another from a criminal attack unless a special relationship exists. And here is where schools and universities stand apart.
Because students are legally minors in K-12 settings, the law imposes a clear duty of supervision. Schools are acting in place of the parents during the school day, so they must protect students from foreseeable harm, including attacks by other students or outsiders. For colleges and universities, the situation is more nuanced. Courts across the country have gradually recognized a special relationship between a university and its students, especially those who live in campus housing. A dormitory is not just a classroom. It is a place where students sleep, eat, and study, and they have a reasonable expectation that the institution will provide basic security. So when a university knows about a pattern of thefts, assaults, or sexual attacks on campus, it cannot simply shrug and say that crime is random. That knowledge creates a legal duty to take reasonable steps to prevent the next attack.
What does “reasonable” actually mean? In most cases, it does not mean hiring an armed guard for every corner of the campus. It means doing what a prudent institution would do under the same circumstances. If a campus has had multiple reports of assaults in a specific parking garage after dark, the university should increase lighting, add security cameras, or patrol that area more frequently. If the school knows that a particular fraternity party has turned violent in past years, it cannot just ignore that history and expect to escape liability. The law looks at foreseeability. Was the attack reasonably predictable? The more prior incidents that resemble the one in question, the more likely a court will find that the school should have acted.
But there are clear limits. A college is not the insurer of every student’s safety. No university can guarantee that a student will never be a victim of crime. If an attack happens in a completely random and unpredictable way, with no warning signs, the school will almost certainly not be held liable. For example, if a student is walking across an open quad at noon and a person from the surrounding city jumps a fence and attacks them, that is hard to call foreseeable. Similarly, if a student leaves a dormitory window unlocked on the first floor and a thief climbs in at night, the school can argue that the student’s own behavior contributed to the risk. Premises liability cases also rely heavily on what the school actually knew. If there have been zero complaints about a certain area and no reason to suspect danger, a single isolated attack will not create liability simply because the school did not have a police force on every block.
Another factor that often comes up is the distinction between the campus itself and off-campus student housing. Many universities own apartment buildings or houses that are technically part of the campus. But if the attack happens in an apartment complex that is privately owned and only loosely affiliated with the school, the school’s legal responsibility drops significantly. Students assume the risk of living in ordinary neighborhoods, and universities are not responsible for the crime rates of the entire city. That is a hard lesson for many victims, but it is grounded in common sense. A university cannot control what happens five miles away.
When a school is found liable for a third-party assault, the damages can be substantial. Medical bills, lost wages from missed semesters, and psychological counseling costs all add up. In some cases, punitive damages are possible if the school acted with gross indifference, such as ignoring a known threat for years. But winning these cases is not easy. The victim must prove that the school knew or should have known about the danger, that it failed to take reasonable steps, and that this failure directly caused the harm. It is rarely a slam dunk. The assault itself is obvious, but the school’s negligence is a separate question that requires digging through incident reports, maintenance logs, and security budgets.
For anyone who has been assaulted on a school or university property, the practical advice is simple. Document everything. Report the attack to campus police and get a written copy. Check whether other students or staff have reported similar incidents. Look at lighting, locking mechanisms, and security personnel in the area. Insurance companies will do their own investigation, and they will look for ways to blame the victim. Being prepared with clear evidence is often the difference between a settlement and a dismissal. The law does not expect schools to be perfect, but it does expect them to pay attention. When they do not, and a student pays the price, the justice system has a way of making the institution answer for that failure.
