The honest answer, more often than most owners expect, is this: your business can be held legally responsible for what your employees do — even when you had no idea it was happening.
It’s one of the least understood risks in business, and one of the most expensive to learn about the hard way. So let’s talk about it properly.
What Is Employer Liability, Really?
Strip away the legal jargon, and the principle is simple: when an employee causes harm while doing their job, the law often treats that harm as something the business should answer for — not just the individual who caused it.
The reasoning isn’t complicated, either. Employees act on behalf of the business. The business benefits from their work, directs how it’s done, and profits from it. So when something goes wrong in the course of that work, the law generally doesn’t let the business step back and say, “not our problem.”
Picture this: a delivery driver, running a completely routine, fully authorised errand for the company, causes an accident. The driver wasn’t a director. They weren’t acting on anyone’s direct instruction in that moment. They were just doing their job — and doing it badly, for a moment. That single moment can expose the entire business, not just the driver.
This is the reality every business owner needs to sit with: liability doesn’t always start in the boardroom. Often, it starts on the road, at the front desk, or in a customer’s inbox.
So Is a Business Responsible for Everything an Employee Does?
No — and this is where the nuance actually matters.
The deciding question is usually whether the employee was acting within the scope of their employment. That phrase carries a lot of legal weight, and the line isn’t always where you’d expect it.
Take that same delivery driver. If they cause an accident while making an authorised delivery, the business is very much in the picture. But if that same driver quietly takes the company vehicle after hours for a personal errand that has nothing to do with work, and causes an accident — the business’s position looks quite different.
The facts decide everything here. I’d caution against two equally dangerous assumptions I see business owners make all the time:
- “My employee wasn’t authorised to do that, so we’re safe.” Not necessarily true.
- “My employee was involved, so we’re automatically liable.” Also not necessarily true.
The real answer almost always lives in the details — and that’s exactly why these situations deserve proper legal scrutiny rather than a guess.
Negligence Is Where Most of the Real Risk Hides
If I had to point to the single biggest source of employer liability claims over the years, it wouldn’t be dramatic misconduct. It would be something far more ordinary: negligence.
A missed step. A shortcut taken under pressure. A procedure quietly ignored because “it’s always been fine before.” These are the moments that quietly generate legal exposure.
In practice, this can look like an employee who:
- Gives a customer information that turns out to be wrong
- Damages a client’s property while carrying out a service
- Mishandles sensitive business or customer information
- Operates equipment or machinery carelessly
- Causes an accident while carrying out work duties
- Skips a safety procedure that was there for a reason
None of these require bad intentions. That’s what makes negligence so dangerous — it doesn’t announce itself in advance. And once it happens in connection with someone’s work, the business is typically the one left facing the consequences: legal costs, reputational damage, disrupted operations, and customers who quietly start looking elsewhere.
What About Deliberate or Unauthorised Conduct?
This is where things get genuinely tricky — and where a lot of business owners get caught off guard.
There’s a common (and understandably comforting) assumption that if an employee broke company policy, the business is automatically off the hook. In reality, that’s not how it usually works.
If a company has a clear policy prohibiting a certain action, but an employee does it anyway while dealing with a customer, the business may still need to seriously consider its exposure. A written policy is important — but it isn’t a legal force field.
That said, there’s a limit. If an employee’s conduct is so far removed from their actual job that it has nothing meaningfully to do with their employment, the business will generally have stronger ground to argue the conduct was entirely personal.
The line between these two scenarios isn’t always obvious. That’s precisely why this area trips up even well-run businesses.
Can a Business Actually Protect Itself?
Yes — not completely, but meaningfully. In my experience, the businesses that avoid the worst outcomes aren’t the ones that never have a problem employee. They’re the ones that built the right guardrails before they needed them.
- Start with clear employment contracts.
Every employee should have a clear, written understanding of their duties, their authority, and the limits of that authority. Ambiguity here almost always works against the business later. - Put real workplace policies in writing.
Confidentiality, use of company property, customer conduct, health and safety, data handling, professional standards — these shouldn’t live only in someone’s memory. And a policy that’s signed but never explained is barely worth the paper it’s printed on. Train people on it. - Train and actually supervise.
Wherever employees deal with customers, vehicles, machinery, money, or sensitive information, training isn’t optional — it’s risk management. Supervision matters just as much; problems caught early rarely become legal disputes. - Document everything.
Contracts, training records, warnings, incident reports, complaints, relevant communications — keep them. When an incident does happen, good documentation is often the difference between a manageable situation and a costly one. - Review your insurance before you need it.
Understand what your policy actually covers, what it excludes, and how claims are reported. The middle of a crisis is the worst time to discover a gap in coverage.
When Something Does Go Wrong
Here’s a hard truth: the worst response to an incident is no response at all.
If an employee’s conduct results in an accident, a complaint, a financial loss, or the early signs of a legal claim, move quickly to establish the facts. Preserve documents and communications. Speak to the employee and any witnesses while memories are still fresh. Work out early whether the matter needs to be reported to an insurer or a relevant authority.
And if there’s a real chance this could turn into legal proceedings, get advice early — before statements are made or decisions are taken that could unintentionally deepen the business’s exposure. I’ve seen early, careful handling turn a potential six-figure dispute into a manageable resolution more times than I can count. I’ve also seen the opposite.
The Real Lesson Here
Legal risk doesn’t only start at the top of an organisation. It often starts in the everyday moments — a delivery, a phone call, a rushed task at the end of a long day.
Your employees represent your business every single day, often in moments no one is watching closely. Most of the time, that works out fine. But when it doesn’t, the business is usually the one left holding the consequences.
The businesses that fare best aren’t the ones that eliminate risk entirely — that’s not realistic. They’re the ones that took the fundamentals seriously before they were tested: solid contracts, real policies, proper training, careful supervision, good records, and the judgment to get legal advice early rather than late.
Your people are one of your business’s greatest assets. Making sure your business is properly protected when they act on its behalf isn’t a luxury — it’s simply good business.
early legal advice can make all the difference before a small issue becomes a much larger one. especially if your business needs help reviewing employment contracts, tightening workplace policies, assessing commercial risk, or responding to a potential claim.