Guest Safety Claims and Foreseeability on the Premises
An establishment is not an insurer of a guest's safety. It can be liable for a criminal act by a third party, but only where the risk was foreseeable, and the argument about foreseeability is fought with records rather than impressions.

The rule in short
Liability for a third party's criminal act against a guest requires a duty, a breach, causation and damages, with foreseeability doing most of the work. Courts use prior similar incidents on or near the premises, the totality of the circumstances, or a combination. The standard of care is reasonable measures in proportion to the risk, not maximum security. Several states have enacted statutory safe harbors that create a presumption against liability where listed measures are in place.
An establishment does not guarantee a guest's safety, and the criminal act of a stranger is generally the responsibility of the person who committed it. There is a recognized exception. Where the operator knew or should have known of a risk and did not take reasonable measures against it, the harm can be attributed to the operator as well. The whole argument in these cases sits inside the phrase should have known.
What the claim consists of
The elements are the ordinary ones: a duty owed to this person on this property, a breach of that duty, causation, and damages. A registered guest is owed the highest of the categories most states recognize, because the guest is on the property by invitation for the operator's commercial benefit. Someone crossing a parking lot as a shortcut is owed considerably less, and the boundary is drawn by statutes and cases addressing trespassers.
Duty and breach are usually argued together, because the content of the duty depends on what was foreseeable. A property in a location with no history of violent crime, with functioning locks and adequate lighting, owes ordinary care and has probably met it. The same property after a series of assaults in its parking lot owes something more specific, and the question becomes what it did after the first one.
How foreseeability is proved
Two approaches dominate, and states divide between them. The prior similar incidents approach asks whether crimes of the same general type occurred on or near the premises closely enough in time and place to put the operator on notice. It is a demanding test, and it produces the uncomfortable proposition that the first victim rarely recovers. The totality of the circumstances approach is broader, allowing the nature of the business, its location, the design of the property, the hours of operation and general crime data to be weighed together.
Several states blend the two, using prior incidents as the primary evidence while allowing other factors to fill gaps. What all versions share is a preference for records over impression: police calls for service to the address, the establishment's own incident reports, security logs, and complaints from guests and staff. Discovery in these cases is largely a fight about how far back those records go and how they were kept.
| Approach to foreseeability | What the plaintiff must show | Practical effect |
|---|---|---|
| Prior similar incidents | Crimes of a similar type, on or near the premises, close in time | Narrow; the first incident of a kind rarely supports a claim |
| Totality of the circumstances | Location, business type, design, hours and general crime conditions | Broader; allows a claim without a matching prior incident |
| Balancing or blended tests | Foreseeability weighed against the burden of the precaution | Focuses on whether the specific measure was proportionate |
| Statutory presumption states | The same, plus rebutting the presumption where measures are in place | Shifts the argument to whether the listed measures were implemented |
What reasonable measures look like
The standard is proportionality, not maximum security. Courts have not required guards, and they have not required a specific technology. What recurs in the cases is the unglamorous set: functioning locks on room and exterior doors, controlled access after hours, lighting in parking areas and walkways, key control so that a departed guest's key no longer opens a door, staff trained to respond to disturbances, and a practice of actually removing people who are behaving in a way the operator is entitled to act on.
That last measure is often overlooked. Lodging statutes give an operator a specific power to require a disorderly person to leave, described in removing a guest who has become a trespasser. An operator that repeatedly logged complaints about a person and never used that power has documented both the foreseeability and the failure to act, which is the worst combination available.
Camera footage that overwrites after a short cycle, incident reports discarded on a schedule, and key access logs that are never exported are all reasonable business practices until a claim arrives. Then they become an argument about spoliation, and a court may allow an adverse inference against the party that lost the record. Where an incident occurs, the sequence that matters is preserving the footage, the access logs and the reports for that date range before the ordinary cycle deletes them.
Statutory safe harbors and what they do
Several legislatures have responded by prescribing measures and attaching a presumption. A recent pattern lists items — recorded cameras at entry and exit points with a minimum retention period, lighting to a specified level in parking areas, deadbolts and window locks, peepholes, controlled pool access, a crime prevention assessment by law enforcement, and security training for staff within a set period after hire — and gives a property that substantially implements them a presumption against liability for third-party criminal acts.
Those statutes are usually written for a defined property category rather than for lodging generally, so their direct application has to be checked against the definition. Their broader significance is that they set out, in one place, what a legislature considers reasonable, and a plaintiff's expert will use the same list against a property that has none of it. A presumption is also not immunity; it shifts the burden and can be rebutted.
Causation, apportionment and the file that decides it
Causation is the second real battleground. The defense argument is that the criminal act would have happened regardless of the measure said to be missing, and it succeeds where the connection is loose. It fails where the mechanism is direct: a door that could not latch, a key that was never deactivated, an unlit stairwell where the attack occurred. Plaintiffs who can tie a specific failure to the specific entry point tend to survive summary judgment.
Apportionment then reduces what is recovered. Most states divide responsibility among the operator, the criminal actor and the guest, and a guest's own conduct can carry a share. Damages caps and thresholds vary widely, as does whether the criminal actor's share is collectible in practice, which is usually the reason the operator is a defendant at all.
Both sides live on the same documents: incident reports, calls for service, maintenance tickets for locks and lighting, key system audit trails, camera retention settings, staffing records for the shift, and training files. Establishments that keep those in order defend these claims well, and the same records support compliance with the physical safety requirements in state lodging statutes and with the room-level obligations described in accessible rooms and how they must be held. Where a property is branded but independently operated, the further question of who answers for the failure is examined in hotel brands, operators and who answers for the property.
Points to carry away
- The establishment owes a guest reasonable care, which can include protection from foreseeable criminal acts.
- Foreseeability is proved with prior similar incidents, and courts differ on how similar and how near.
- The measure is reasonableness in proportion to the risk, not a requirement of maximum security.
- Some states supply a presumption against liability for properties that implement listed measures.
- Incident logs, key control records and camera retention decide most of these cases.
Questions readers ask
Does a security camera create a duty to watch it?
Installing cameras rarely creates a freestanding duty to monitor them in real time, and courts have been reluctant to hold that adding a safety measure enlarges an operator's obligations. What cameras do create is a record, and a record that has been overwritten or was never retained becomes an evidentiary problem. Where a system was installed and advertised as monitored, however, a guest may argue reasonable reliance on a service the establishment held out as provided.
Are claims like this limited by the guest's own conduct?
Yes, in most states, through comparative fault. A jury apportions responsibility among the establishment, the criminal actor and the guest, and the guest's recovery is reduced by the guest's share. Some states bar recovery entirely above a threshold percentage. Conduct that commonly draws an apportionment argument includes propping a secured door, admitting an unknown person to a room, and remaining in a situation after being warned by staff.
Can a waiver or a term on the folio remove the duty?
Rarely. Courts treat attempts to disclaim liability for personal injury in a consumer setting with suspicion, and many states hold such clauses unenforceable as against public policy, particularly where the service is one the public is invited to use. Terms that limit liability for property, by contrast, are frequently enforced because statutes expressly authorize them. The two categories are routinely confused in guest-facing documents.
Sources
- California Civil Code section 1714The general duty of ordinary care from which premises obligations are derived.
- Florida Statutes section 509.211Safety requirements for lodging establishments, including locking devices, railings and key control policies.
- Florida Statutes section 768.0706An example of a statutory presumption against liability for premises that implement listed security measures.
- Florida Statutes section 812.173A sector-specific security standards statute showing the legislative pattern of prescribing measures.
- Florida Statutes section 768.075Addresses the duty owed to trespassers and discharged persons, which limits who may claim.
- Florida Statutes section 509.141The removal power that is itself one of the measures an establishment is expected to use.
Metro Law Advisors is a publication, not a law firm. This article states general rules and cites its sources; it is not advice about any particular case, and the law differs by state and changes over time.
More in Hospitality & Lodging
The Innkeeper's Duty to Receive and the Narrow Grounds to Refuse
At common law an innkeeper had to receive any traveler able to pay and fit to be received. Modern lodging statutes restate the duty and list the grounds for refusal: no vacancy, inability or refusal to pay, intoxication or disorderly conduct, exceeding posted occupancy, and use of the room for an unlawful purpose. Federal public accommodation law and state civil rights acts remove protected characteristics from the list, and disability law adds obligations rather than exceptions.
The Innkeeper's Lien on a Guest's Belongings
Statutes give a lodging operator a lien on a guest's baggage and other property for room charges and extras furnished at the guest's request. The lien does not reach exempt property, property belonging to someone else once the operator has notice, or, in many states, the guest's essential items. Enforcement is regulated: some states require a judgment before sale, others prescribe notice, advertising and a public sale, with surplus proceeds held for the owner.
Liability Limits for Property Left in a Room
Every state has replaced the common law innkeeper's near-strict liability for guest property with a statutory cap. The cap typically applies only where the establishment provided a safe or safekeeping facility and posted the statutory notice where guests can see it. Amounts are low and are often split into per-item and aggregate limits. Property accepted for safekeeping usually attracts a separate, higher limit and a receipt requirement. Negligence and refusal of deposit can defeat the cap.


