The Duty of Care: Holding Commercial Property Owners Accountable for Inadequate Security

If you’ve experienced violence on commercial property, you’re likely navigating medical bills, emotional trauma, and confusion about your rights. You’re not alone, and you may have legal options beyond the criminal case against your attacker. This guide explains how inadequate security claims work, what compensation avenues exist in the USA, and why time is critical. We’ll walk through the legal landscape without overwhelming jargon, focusing on practical steps you can take to understand premises liability and protect your financial recovery.

What Is Inadequate Security and How Does It Relate to Premises Liability?

Inadequate security—often called negligent security—occurs when a commercial property owner or manager fails to provide reasonable protection against foreseeable criminal acts. Rather than existing in a separate legal universe, this is a specialized subset of premises liability law, which governs injuries that happen because of unsafe conditions or unsafe management of property.

At its core, a negligent security claim focuses on the property owner’s actions or inactions, not on whether the criminal attacker is guilty or can be found. The law asks whether the owner breached a duty of care owed to lawful visitors. As California’s official civil jury instructions (CACI No. 1005) explain, a proprietor must use reasonable care to protect patrons from another person’s criminal conduct if that conduct can be reasonably anticipated. This standard recognizes that while businesses aren’t insurers of visitor safety, they must take sensible steps when danger is predictable.

The specific standards for this duty of care vary significantly by state. For example, Georgia Code § 51-3-1 establishes that an owner who induces others to enter for a lawful purpose is liable for failing to exercise ordinary care in keeping the premises and approaches safe. Other jurisdictions may phrase the duty differently, apply different tests for what constitutes “ordinary” or “reasonable” care, or place different burdens on the injured party to prove notice of dangerous conditions.

So, is negligent security the same as premises liability? Not exactly—it’s a branch of that larger tree. While premises liability covers everything from slippery floors to falling merchandise, inadequate security specifically addresses protection from third-party criminal conduct. The rules vary by state because each legislature and court system has developed its own interpretation of how much security is “reasonable” under local circumstances, influenced by local crime patterns, urban density, and prior case history.

Importantly, state statutes and case law control specific outcomes. What wins a case in Ohio might not prevail in Florida, which is why understanding your jurisdiction’s particular rules matters from the very start.

Understanding Your Options: Civil Claims, Criminal Cases, and Victim Compensation Programs

After a violent crime on commercial property, victims in the USA face three distinct paths for justice and recovery. Understanding these separate tracks helps you make informed decisions without missing critical deadlines.

First, you may file a civil personal injury claim—or security negligence lawsuit—against the property owner or manager. This is a private legal action for monetary damages, and success requires proving that inadequate security contributed to your injuries. This track operates independently of any criminal proceedings and follows civil rules of evidence.

Second, the state may prosecute your attacker criminally. This track focuses on punishment and public safety, not your personal financial recovery. However, if the defendant is convicted, the court may order restitution under the Crime Victims’ Rights Act (18 U.S.C. § 3771), though actual collection depends entirely on the attacker’s ability to pay, which is often limited.

Third, state crime victim compensation programs offer direct reimbursement for crime-related expenses regardless of whether you win a civil verdict. These programs operate in all U.S. states, Washington D.C., and territories, though eligibility rules vary significantly by jurisdiction. The federal government supports these programs through the Crime Victims Fund, established under 34 U.S.C. § 20101, which is financed exclusively by fines and penalties from federal convictions—not taxpayer dollars. Under 34 U.S.C. § 20102, grants are awarded to state programs based on prior-year funding levels, generally excluding property damage from the calculation of those grants.

Does crime victim compensation replace a personal injury claim? Absolutely not. Receiving compensation from a state fund does not replace your right to file a civil legal action for assault on property. These systems serve different purposes. Victim compensation often covers immediate medical costs and mental health counseling with lower evidentiary hurdles, while a civil suit may provide broader damages including pain and suffering, PTSD treatment, and lost earning capacity.

Do you need a police report to file a negligent security claim? While a police report strengthens your civil case by documenting the incident timeline and circumstances, it isn’t always legally required to initiate a lawsuit against a property owner. However, most victim compensation programs do require timely law enforcement reporting as a condition of eligibility, making immediate reporting critical for accessing those funds.

When Can a Commercial Property Owner Be Held Liable for Third-Party Crime?

Property owner accountability hinges on two threshold questions: was the crime foreseeable, and were you lawfully on the property? These questions determine whether the owner had a duty to protect you in the first place, making them the gatekeepers of commercial property liability.

Foreseeability serves as the central battleground in most negligent security cases. Courts examine the totality of the circumstances, including prior incidents on the property, specific complaints about security gaps, known threats communicated to management, and surrounding crime patterns that should have triggered heightened vigilance. In Georgia CVS Pharmacy, LLC v. Carmichael (2023), the Georgia Supreme Court emphasized that reasonable foreseeability is informed by the totality of the circumstances and is generally reserved for the trier of fact—meaning a jury usually decides whether the crime was predictable enough to trigger a duty to act. However, the court noted foreseeability may be resolved as a matter of law where no rational juror could disagree.

States differ dramatically on how similar prior crimes must be to establish foreseeability. Some jurisdictions require “substantially similar” prior incidents—such as prior violent assaults to predict a violent assault—to put the owner on notice. Others apply a broader standard asking whether the general risk of criminal activity was foreseeable under the circumstances.

In Florida, Florida Statutes § 768.0701 requires that in actions against property owners for third-party criminal acts, the trier of fact must consider the fault of all persons who contributed to the injury—including the criminal assailant and potentially the victim. This comparative fault framework affects how damages are apportioned even when the owner is found partially responsible.

Foreseeability and the Totality of the Circumstances

Courts determine whether a crime was predictable enough to trigger a duty by weighing specific evidence of prior risk against general neighborhood dangers. The distinction between prior similar incidents versus general crime rates matters significantly—some states require specific prior acts on the property to establish notice, while others consider broader patterns sufficient. This analysis is intensely fact-heavy, often requiring extensive discovery about incident logs, police calls to the address, and internal security audits that reveal what the owner actually knew about risks.

Lawful Presence and Areas of Control

Your status as an entrant matters significantly. Under Florida’s statute, these claims apply only when the injured person was lawfully on the property, distinguishing between invited customers and trespassers who may be owed different duties. Additionally, courts examine whether the defendant had possession and control over the specific area where the assault occurred—such as a parking garage versus a public sidewalk. As the Ohio Supreme Court noted in Simpson v. Big Bear Stores Co., liability attaches when the owner has control over premises where they know or should know of substantial risk of harm to invitees.

Common Examples of Security Failures and High-Risk Properties

Security failures take many forms, but context always determines whether they constitute legal negligence. A broken lock in a low-crime area with no history of incidents may not trigger liability, while the same broken lock in a high-crime retail center with prior robberies could form the basis of a strong negligent security claim.

Common examples of inadequate security include broken locks on entry doors, malfunctioning access-control gates, poor lighting in stairwells or parking areas, lack of security guards in high-risk environments, failure to monitor security cameras in real-time, and broken windows or fencing that allow easy unauthorized entry. However, these conditions alone don’t automatically create liability—they must be unreasonable under the specific circumstances and foreseeability of harm.

Different commercial properties carry varying security expectations under state standards. Hotels owe guests a heightened duty to protect against foreseeable criminal acts by third parties, particularly in common areas and parking facilities. Apartment complexes must maintain secure premises for tenants and lawful guests, often including functioning locks, adequate lighting, and sometimes security personnel depending on local crime rates. Retail centers with expansive parking lots present unique challenges, as owners must balance open access with patron safety during evening hours. Bars and nightclubs face specific expectations regarding crowd control and parking lot surveillance given the alcohol service context. Hospitals and event venues each carry specialized duties based on their specific vulnerabilities and patient populations.

As California CACI No. 1005 emphasizes, the standard is whether the proprietor could reasonably anticipate the criminal conduct—not whether they subjectively expected it. A shopping center might reasonably anticipate parking lot robberies if prior muggings occurred nearby. Can a hotel be sued for lack of security after an assault? Yes, if the hotel failed to take reasonable steps such as maintaining room locks or providing adequate lighting in areas where attacks were foreseeable. Can a shopping center be liable for a robbery in its parking lot? Potentially, if the owner knew of prior crimes or dangerous conditions but failed to implement reasonable deterrents like cameras, improved lighting, or security patrols.

There’s no nationwide checklist that applies uniformly. Each state’s standard of “reasonable care” governs, meaning what suffices in a small town may be completely inadequate in a major metropolitan area with documented violent crime patterns.

Evidence and Fault: Proving Inadequate Security and Apportionment Issues

Success in a security negligence lawsuit often depends on what evidence survives the days and weeks following the incident. Unlike the criminal case against your attacker, which relies heavily on witness testimony and physical evidence at the scene, your civil claim against the property owner requires documentation of systemic failures and maintenance lapses.

Critical evidence includes video surveillance footage showing the assault or the conditions leading to it, incident logs revealing prior crimes or tenant complaints about safety issues, 911 call recordings establishing response times, maintenance records showing when locks or lights were last serviced, access-control data tracking entry credentials, and staffing schedules revealing whether security personnel were actually on duty as claimed. This evidence proves what the owner knew and when they knew it, establishing the foreseeability that triggers the duty of care. The Georgia CVS Pharmacy decision emphasizes how such documentary evidence informs the totality of the circumstances analysis, making preservation crucial to proving property owner accountability.

Timing is everything. Property owners may repair broken locks or install new lighting immediately after an incident, effectively erasing the hazardous condition that existed when you were attacked. While post-incident repairs are generally inadmissible to prove negligence, they eliminate the ability to photograph the original condition. Additionally, memories fade and employees transfer. This is why contacting a negligent security lawyer quickly—before evidence spoils—can determine whether you can prove your personal injury claim.

Evidence That Disappears First

Video footage often gets overwritten within days or weeks depending on system settings and storage capacity. Incident logs may be routinely “purged” during periodic record-keeping without anticipation of litigation. Maintenance records showing long-deferred repairs can vanish once management anticipates a claim. A negligent security lawyer will send immediate preservation letters to prevent this spoliation and may file for emergency court orders to secure digital evidence, swipe card logs, and surveillance recordings before they disappear permanently.

Comparative Fault and Multiple Defendants

Under Florida Statutes § 768.0701, courts allocate responsibility among the property owner, the criminal assailant, and sometimes the victim based on comparative fault principles. Some states require juries to consider the fault of all parties who contributed to the injury, which can reduce your recovery proportionally if the jury finds you partially responsible, though the criminal actor typically bears the largest share of moral and legal blame.

Beyond the deed owner, you may sue property managers, lessees who control the premises, business operators, and third-party security contractors. The key is “possession and control”—who had the actual authority and contractual obligation to implement security measures? As established in Simpson v. Big Bear Stores, the duty arises from control over the specific premises where the risk materialized, not merely ownership of the dirt.

Damages, Compensation, and Financial Recovery Options

Victims of commercial property violence have three potential sources of financial recovery, each operating under different rules and evidence standards. Understanding these distinct systems helps you maximize compensation without accidentally sacrificing one right for another.

First, civil damages in a personal injury claim may include past and future medical costs, lost wages, diminished earning capacity, physical pain and suffering, emotional distress, PTSD treatment, and ongoing counseling expenses. These damages aim to make you whole through the tort system, though actual collection depends on the property owner’s insurance coverage or assets. Unlike the fixed caps often found in victim compensation programs, civil damages can account for long-term disability and lifelong psychological trauma.

Second, state crime victim compensation programs provide direct reimbursement for crime-related expenses regardless of whether you ultimately win a civil verdict. According to the Office for Victims of Crime, these programs may cover medical costs, mental health counseling, lost wages, and funeral costs, though specific eligibility requirements and benefit caps vary significantly by state. As noted in the statutory framework at 34 U.S.C. § 20102, federal grant calculations to states generally exclude property damage from the funding formula, and OVC guidance confirms that most programs exclude property losses entirely, focusing instead on physical and emotional trauma recovery.

Third, criminal restitution ordered during the attacker’s prosecution—governed by 18 U.S.C. § 3771—requires the convicted defendant to pay specific out-of-pocket losses you can document. However, restitution is limited to concrete economic losses and unavailable if the attacker is never caught, is acquitted, or lacks assets to pay.

Does crime victim compensation replace a personal injury claim? No. These are parallel systems with different purposes. Accepting victim compensation does not waive your right to file a legal action for assault on property against the owner, though your civil recovery may be reduced by amounts already paid by the victim compensation fund. Can emotional distress or PTSD be part of damages? Yes, both civil lawsuits and victim compensation programs recognize psychological trauma and counseling needs, though civil courts typically offer broader damages for pain and suffering.

Taking Legal Action: Next Steps and Why State Law Matters

Immediate action preserves both your health and your legal rights. First, seek medical attention even if injuries seem minor—documentation creates a contemporaneous record linking your physical and psychological trauma directly to the incident. Second, report the crime to law enforcement promptly. This establishes an official record and typically serves as a prerequisite for accessing state crime victim compensation programs, which can provide immediate financial relief for emergency medical expenses. Third, preserve any evidence you can safely collect: photographs of poor lighting or broken locks, contact information for witnesses who saw the conditions, and receipts proving you were lawfully on the property.

There is no uniform national deadline or statute of limitations for filing a security negligence lawsuit. Deadlines vary dramatically by state—some allow as little as one year, others two or more, with different rules about when the clock starts ticking. Additionally, some states require pre-suit notices for claims against certain commercial property types, and the burden of proof standards differ significantly between jurisdictions regarding what you must show about prior crimes.

Can a business be liable if the attacker was never caught? Yes. The criminal’s identity and conviction are not prerequisites for civil liability against a property owner. You need only prove that negligent security contributed to your injuries and that the owner failed to meet the applicable duty of care under state law.

When should you contact a negligent security lawyer? Ideally, within days or weeks—before critical evidence like surveillance footage disappears, before maintenance records are routinely destroyed, or before you make recorded statements to insurance adjusters representing the property owner. Early counsel can send preservation letters, investigate prior incidents through public records, and evaluate whether your case meets your state’s specific foreseeability standards.

Remember: property owner accountability is highly fact-specific and state-specific. What constitutes reasonable security in one jurisdiction may be clearly negligent in another. You need evaluation by counsel licensed in the state where the crime occurred, familiar with local precedents like Georgia CVS Pharmacy or Florida’s statutory framework, to properly assess your viable legal action for assault on property.

Navigating the aftermath of a violent crime requires understanding three key truths: property owners may share liability when they ignore foreseeable dangers, victim compensation programs can provide immediate relief without surrendering your right to sue, and state law—not national standards—determines whether you have a viable claim. Time works against you as evidence disappears and deadlines approach.

Don’t try to decipher foreseeability standards or comparative fault rules alone while healing from trauma. If you suffered an assault due to broken locks, poor lighting, or missing security on commercial property, consult an attorney licensed in your jurisdiction immediately. Your right to recover damages for medical costs, lost wages, and emotional distress depends on acting before critical evidence vanishes. Take the first step today—your recovery and your rights matter.

Disclaimer: The information provided on this website does not, and is not intended to, constitute legal advice; instead, all information, content, and materials available on this site are for general informational purposes only. Readers should contact an attorney to obtain advice with respect to any particular legal matter.