Most people understand that an employer must keep the worksite free of obvious hazards like loose wires or unguarded machinery. But what about the risk of violence from a customer, a stranger, or a trespasser? Workplace violence liability for third-party attacks does not follow a simple rule. An employer is not automatically responsible every time someone with a gun walks into an office or a clinic and hurts a worker. Instead, the law asks whether the employer knew or should have known that such violence was possible and whether the employer took reasonable steps to prevent it.
The core idea is negligence. To hold an employer liable for a violent act committed by a third party, the injured worker generally has to show that the employer failed in a legal duty to provide a reasonably safe workplace. That duty includes protecting employees from foreseeable dangers, and that can include dangers posed by people who do not work for the company. The key word is “foreseeable.“ No employer can guarantee that no one will ever act violently. But an employer can be responsible if violence was a predictable risk and nothing was done about it.
Foreseeability is not a vague feeling. Courts look at concrete facts. Has a customer threatened an employee before? Have there been violent incidents in the parking lot? Does the business operate in an area with high crime rates? Has the employer received complaints about someone acting erratically or aggressively? Does the company have a known history of dealing with a hostile or unstable client? These are the kinds of signals that put an employer on notice. If those signals exist, an employer cannot simply shrug and say the attack was unexpected. Once a risk is reasonably foreseeable, the employer has a duty to respond.
But the duty to respond is not unlimited. The law expects an employer to take steps that are reasonable under the circumstances. In a low-risk office building, that might mean basic measures like secure entry doors and a policy for reporting suspicious behavior. In a late-night convenience store that has been robbed repeatedly, it might mean a panic button, a security guard, better lighting, or adequate staffing. In a hospital emergency room with a history of violent patients, it might mean training staff in de-escalation and having security personnel available. The standard is not perfection. The standard is whether the employer did what a reasonably careful employer would have done with the same knowledge and in the same position.
One common misunderstanding is that any injury caused by a violent crime automatically means the employer was negligent. It does not. If a stranger randomly attacks a worker in a parking lot and the employer had no warning that such an attack was likely, a court will probably find that the employer breached no duty. An employer cannot guard against every possible act of violence. Liability attaches only when there was a real opportunity to foresee the harm and a real opportunity to reduce it, and the employer failed to take that opportunity.
Another layer is workers’ compensation. In most states, if an employee is injured at work, including by an act of violence, the workers’ compensation system pays medical bills and partial lost wages regardless of fault. In exchange, the employee generally cannot sue the employer for pain and suffering or other damages. This is called the exclusive remedy rule. So even if an employer was negligent in failing to protect employees against a violent third party, the workers’ compensation system may be the only route for compensation against the employer. The result is not a windfall; it is a no-fault insurance system. That said, the injured worker can often sue the third party who committed the violence, and in some cases may also have a claim against another outside party, such as a security company that failed to provide promised protection.
When an employer’s own conduct is extreme, there may be exceptions. If an employer intentionally sets up an employee to be harmed, hires someone known to be violent, or knowingly sends an employee into a place with an immediate threat and does nothing to help, courts in some jurisdictions may allow a personal injury lawsuit outside the workers’ compensation system. But those cases are the exception rather than the rule. The broad liability question still comes back to what the employer knew and what a reasonable response would have been.
For a practical bottom line, employers should not wait for an attack to happen. They need to look at their own premises, their history, and their community. They need to take warnings seriously. Employees, for their part, should understand that workers’ compensation will likely be their primary safety net, but a separate lawsuit against an employer will succeed only when there was clear evidence that violence was foreseeable and preventable.
