Negligent Security Requirements: What a Property Owner Must Show — and What a Claim Has to Prove

What Negligent Security Means Under the Law

When a crime happens on someone else's property, the law looks at whether the people who ran that property played a part. That question belongs to premises liability, the area of law that decides when someone who owns or runs a property is responsible for injuries that happen there. A negligent security claim narrows it: did the people in charge of a property fail to take reasonable steps against a crime they had reason to see coming?

It is a state-law doctrine. No single federal rule governs these cases, so the elements, the standards and the way courts apply them differ from state to state. Even so, most states look for the same four core requirements:

1. The defendant controlled the property where the harm happened.
2. A duty arose because there was a foreseeable risk of criminal harm.
3. The owner failed to use reasonable care to address that risk.
4. That failure caused the injury.

Each requirement has to be met, and a weakness in any one can end a claim. The law asks about the property's history, the owner's knowledge and the security in place, not only about the seriousness of the harm.

For someone who was hurt, this means a serious injury alone does not settle whether the property owner is responsible; what matters is how the facts line up against these four requirements. The overview of what negligent security cases involve walks through how these claims work from start to finish.

Control of the Property: Who Can Be Held Responsible

The first question for an injured person is often simply who was in charge of the place where it happened. Control is the threshold element. Without it, no duty attaches, and the rest of the analysis never begins. Control here means the legal right and the practical ability to make security decisions for the space where the harm happened: whether to add lighting, repair a gate, hire guards or install cameras.

Claims arise on many kinds of property. Examples include apartment complexes, hotels, parking garages, shopping centers, bars, schools and hospitals, and the list is not complete. The common defendants are landlords, commercial operators and institutional owners, because those are usually the parties who decide how a space is secured.

Control is not always simple. A building may be owned by one party, managed by another and patrolled by a contracted security company. A shopping center may lease storefronts while keeping the parking lot and walkways for itself. When control is disputed, who had authority over the specific spot where the crime happened becomes its own legal question. For renters, how apartment complex negligent security claims treat common areas is a closely related topic.

If you are a family trying to understand who was in charge of a stairwell, a lot or an entrance, that question often shapes which parties a claim could involve at all.

Foreseeability: The Question Courts Ask First

As a general rule, a person has no legal duty to protect another from a third person's crimes. A 1998 decision of the Supreme Court of Texas, Timberwalk Apartments, Partners, Inc. v. Cain, 972 S.W.2d 749, states that rule and its exception: one who controls premises has a duty to use ordinary care to protect invitees, people lawfully on the property, from criminal acts of third parties if that person knows or has reason to know of an unreasonable and foreseeable risk of harm to them.

The same decision holds that whether a duty exists is a question of law for the court, not the jury. In practical terms, a judge may decide early that no duty existed, and the claim ends there.

To decide whether a crime was foreseeable, Texas courts weigh earlier crimes on or near the property by five factors, considered together:

• proximity, meaning how close the earlier crimes were to the property;
• recency, meaning how recently they happened;
• frequency, meaning how often they happened;
• similarity, meaning how much they resembled the crime at issue;
• publicity, meaning how widely known they were, which bears on what the owner knew or should have known.

These are Texas's factors, not every state's test. Other states use related but not identical frameworks, and the law of the state where the injury happened governs. The page on negligent security claims in Texas covers that state's approach in more depth.

Because foreseeability is so often the most contested element, the records that show earlier crimes, including police data and incident reports, tend to carry great weight. A conversation with an attorney can cover what prior-crime records may exist for a specific property and who is likely to hold them.

Reasonable Care: What Security Measures the Law May Require

If you are looking back at what the property did, or did not do, to keep people safe, this is the element that asks about it. Once a duty exists, the question is whether the owner acted as a reasonably prudent property owner in the same circumstances would have. That measure scales with the foreseeable risk; there is no fixed national checklist an owner either passed or failed.

Security measures that courts have considered include, for example, adequate lighting, functioning locks and access controls, security personnel, surveillance cameras, fencing and warning signs. None of these is required on every property in every state, and the list is not complete. A small office building with no history of crime and a large late-night venue with repeated assaults nearby call for very different responses.

Two things bear most on what is reasonable: the type of property and the nature of the known risk. What the owner knew, and when, shapes what care was required. An owner who had notice of break-ins through a broken gate faces a different question than one who had no warning of anything.

A burned-out light, a door that never latched or a guard post left empty are the kinds of details this element asks about. Whether they amount to a failure of reasonable care depends on the full facts.

Causation and Injury: Connecting the Security Failure to the Harm

Even where security fell short, a claim also has to tie that shortfall to what happened to you or your family. Courts ask two linked questions. First, would the injury have happened without the security failure? That is actual cause, often called "but for" cause. Second, was the harm a foreseeable result of the failure, rather than a remote or unforeseeable event the owner could not have anticipated? That is proximate cause. Both are required.

Defendants in these cases often argue that the attacker's criminal act was independent of anything the property did. A third party's crime does not automatically break the chain of causation, however, when the risk of that crime was foreseeable. The question is whether better security would likely have prevented or reduced the harm, and that turns on the facts of the specific case.

When the elements are met, the categories of harm state law may allow commonly include medical expenses, lost income, and pain and suffering. When someone dies, many states allow a wrongful-death claim, a claim brought by certain family members or the estate for losses caused by a death that resulted from another's wrongful conduct. Which categories apply, and to whom, depends on the state's law and on the facts. Who may bring a claim is covered in the page on who can bring a claim. These damages rules are separate from the criminal prosecution of the attacker, which is explained in the page on civil and criminal cases.

For an injured person or a grieving family, causation is often where the case is won or lost: the link between the security gap and the harm is what turns a general concern about a property into a claim.

How States Differ — and Why That Matters for Your Situation

The state where the injury happened is the governing jurisdiction, and its law decides the elements, the foreseeability standard, the fault rules, the damages rules and the deadlines. The same facts can lead to different legal results in different states.

Fault rules are one clear example. Comparative fault is a rule that reduces the injured person's recovery in proportion to that person's own share of fault, when the defendant argues the injured person contributed to the harm. Contributory negligence is a distinct and stricter doctrine: in the states that follow it, an injured person who was at fault at all may be barred from recovering. Which approach applies, and how it is measured, depends on the state.

Deadlines differ too. A statute of limitations is the law that sets how long a person has to file a claim in court. Limitation periods vary by state, and they begin to run at different points depending on the state and the kind of claim, such as the date of the injury or, in a death case, a date tied to the death. Some claims against government-run properties carry their own notice rules. No single period applies everywhere.

For a family weighing whether to act, the state's rules on fault and time can matter as much as what happened. Talking with an attorney about which state's framework governs a particular incident can clarify how these rules fit together.

Evidence That Typically Bears on a Negligent Security Claim

Prior crime records sit at the center of most negligent security claims, because they speak directly to foreseeability. Records for the property and the surrounding area can show what kinds of crimes had happened, how often and how recently.

Beyond that, the records that usually matter include:

• incident reports filed with the property or with police;
• security policies, staffing records and training logs;
• maintenance and inspection records for lighting, locks and cameras;
• surveillance footage of the area and the event;
• witness accounts from residents, guests, employees or bystanders;
• medical records documenting the injury and its treatment.

Injured people and families often keep their own photos of the scene, the names of people who saw what happened, and copies of any report numbers they were given. Much of the rest, such as staffing schedules or maintenance logs, is held by the owner, the manager or a security contractor.

For someone in your position, this means the strength of a claim may depend less on what you remember than on what records exist and who holds them. Which records exist, and whether the owner had access to prior-crime evidence, is often one of the first practical questions an attorney can help sort out.

Practical Points That Often Come Up Early

Beyond the four elements themselves, a few practical issues tend to shape how a matter unfolds:

• whether more than one party, such as an owner, a manager and a security contractor, shared control of the space;
• which records are already in the family's hands and which sit with the property or police;
• which state's rules on fault and damages govern the incident;
• when the state's limitation period began to run.

Some of these can be answered from what the family already knows; others turn on records held by others. A mistake about which state's rules apply or when a deadline started can change how a matter unfolds.

If you would like help working through these points against what happened to you or your family, you may want to consider a case evaluation conversation with our attorney. More plain answers are collected in the page of common questions about negligent security.