Hotel Negligent Security: What the Law Asks and What It Means for an Injured Guest

Why a Hotel May Matter When Someone Else Committed the Crime

Negligent security is a branch of premises liability, the area of law about the duty a property owner or controller owes to people lawfully on its property. For an injured guest, negligent security is how that duty reaches a crime: a property owner or controller may be liable when a foreseeable criminal act injures a lawful visitor and the owner failed to take reasonable precautions against it.

If you were a paying hotel guest, you are generally treated as an invitee, meaning a person invited onto the property for the owner's business purposes. Under common-law premises liability, invitees are the category of visitor owed the highest duty of care. That status is why a hotel's security choices can become a legal question after an attack.

No single federal statute creates a hotel's duty to protect guests from crime. State law controls, and what counts as a "reasonable" precaution differs from state to state.

The point that surprises many injured guests is this: the attacker's act does not automatically make the hotel liable. The law asks whether the hotel's own conduct, or its failure to act, was also a cause of the harm. A claim of this kind generally turns on a duty, a breach of that duty, causation and damages, and whether each is met depends on the facts. The requirements of a negligent security claim are explained on their own page. For someone weighing what happened to them, the threshold question is not only who committed the crime, but whether the hotel's choices played a part.

What the Hotel Knew Before the Attack — Foreseeability and Prior Incidents

Foreseeability means whether a reasonable property controller in the hotel's position would have anticipated the risk of that kind of crime. In many states, a hotel's duty to protect against criminal acts generally arises only when such acts were reasonably foreseeable.

Texas offers one named example of how a court has framed this. In Timberwalk Apartments, Partners, Inc. v. Cain, 972 S.W.2d 749, a 1998 decision of the Supreme Court of Texas, the court said that one who controls premises owes invitees a duty to protect them against foreseeable criminal acts. To judge foreseeability, the court looked at prior similar crimes and weighed their proximity to the property, their recency, their frequency, their similarity and their publicity. That is Texas's rule, and the Texas negligent security page covers it further. It is not the rule everywhere.

Other states measure foreseeability differently. Some focus on prior similar incidents; others use a totality-of-the-circumstances approach that looks more broadly at everything the property knew. No single state's test is the national standard.

Whatever the test, the same kinds of facts tend to come up: earlier incidents on or near the property, the character of the area, and the hotel's internal incident records and area crime reports. Foreseeability is often the most contested issue. For an injured guest, this means a claim can rise or fall on facts from before the attack that the guest may never have seen, and which of those facts count depends on the state where the hotel sits.

Where the Attack Happened — and What the Law Asks of That Part of the Property

Location shapes the legal question. An attack in a guest room raises different issues than one in a parking garage, a stairwell, a corridor, a pool area or a lobby, because the precautions that were arguably reasonable differ from place to place. The standard throughout is reasonableness, not perfect safety.

Room locks and key control are central for attacks inside a room: whether door locks worked and whether key or key-card access was managed so that unauthorized people could not enter guest rooms. Lost keys, cards that were never deactivated, or doors that did not latch can all become part of the factual picture.

Access to guest floors is another area courts have examined: elevator key restrictions, whether stairwell doors could be opened from outside, and whether the lobby and entrances were monitored.

Parking areas and exterior lighting matter for attacks outside the building. Inadequate lighting in a lot or garage can bear on both foreseeability and breach, meaning whether the hotel fell short of reasonable care.

Staff response is the fourth area. If staff had been told about a threat, a suspicious person or an earlier complaint and did not act, that may be part of the analysis.

For an injured guest, the specific place and circumstances of the attack often determine which precautions were in question and whether their absence was a cause of the injury.

How the Crime Is Classified — the FBI's Definition of Robbery and Assault Categories

If you were robbed or assaulted, the police report you receive will likely describe the crime using a defined category, and that label can shape how the hotel's history is later compared. For robbery, the FBI's Uniform Crime Reporting Program defines robbery as "the taking or attempting to take anything of value from the care, custody, or control of a person or persons by force or threat of force or violence and/or by putting the victim in fear."

Aggravated assault refers generally to a serious physical attack intended to cause severe bodily injury. The precise criminal definitions of assault offenses come from each state's criminal law and differ between states.

These are categories used to count and classify crimes, not the legal elements of a negligent security claim. A civil claim against a property is separate from the criminal case against the attacker, a difference explained in the page on civil and criminal cases. That means a guest's civil claim does not depend on how the criminal case turns out.

The category still matters. Courts that look at earlier incidents often ask how similar they were to the attack at issue, and the nature of the crime can also bear on the kinds of harm a claim may address. In practical terms, for someone robbed in a hallway or attacked in a parking area, the classification on the report is one starting point for asking whether the hotel had seen anything like it before.

Records an Injured Guest May Have — and Why They Matter to a Claim

Evidence in a hotel case usually falls into two groups: what the injured guest or family already has, and what the hotel holds. If you were hurt, the records that usually matter include the following.

• The police report or incident report made on the night of the attack.
• The hotel's own security logs and incident records, which are held by the hotel and may require formal legal process to obtain.
• Prior crime reports for the property or the surrounding area, which bear on foreseeability.
• Maintenance and inspection records for locks, lighting and access-control systems.
• Surveillance footage from cameras in corridors, entrances, elevators or parking areas.
• Medical records documenting the injuries and treatment.

Whether surveillance footage existed, and whether it was kept, can affect what the evidence later shows, and how long any system kept recordings is a fact that varies.

These records speak to the two questions at the center of most hotel cases: what the hotel knew before the attack, and what condition its security measures were in at the time. Injured guests and families often keep their booking confirmation, photographs of injuries or of a broken lock or dark walkway, and the names of staff and witnesses. Some evidence is in the guest's hands; much of it is not, which is part of why these cases take time to develop.

How the State Where the Hotel Sits Can Change the Outcome

For an injured guest, the state where the hotel is located can matter as much as the facts themselves: the same night, the same injuries and the same records can lead to different results in different states. Three areas differ most.

Fault rules come first. If you are found partly at fault, most states use some form of comparative fault, which reduces a person's recovery by their own share of fault. A minority use contributory fault rules, which may bar recovery entirely if the injured person bore any fault. In practice, the same share of fault might reduce a recovery in one state and end a claim in another. Which rule applies, and how it is measured, depends on the state.

Damages are the second area. Damages are the categories of loss the law may allow a claim to address. Depending on the state, these may include medical expenses, lost income, and pain and suffering. Where a person died, a wrongful death claim, meaning a claim brought by certain family members or the estate after a death caused by another's wrongful conduct, is governed by the state's wrongful death law, which defines who may bring it and what categories of loss it covers. Whether any category applies depends on the facts and the state's law.

Deadlines are the third. A statute of limitations is the period within which a lawsuit must be filed. The period for a personal injury or wrongful death claim differs by state, and so does the date it starts to run and any exceptions, such as rules for minors or a discovery rule. A missed deadline generally cannot be recovered, which is why the applicable state's rule matters. The page on negligent security deadlines explains how these periods work in general terms.

What this means for a guest or family is that the hotel's location is often the first fact an attorney asks about. If questions about fault, damages or a deadline are weighing on you, you can request a case evaluation to talk through the rules of the state where the attack happened.

Questions Worth Asking Before Speaking With an Attorney About a Hotel Attack

Before a conversation with an attorney, a few questions can help gather what you already know. They are not a checklist.

Where did the attack happen? The state where the hotel sits usually decides which law applies, including the foreseeability test, the fault rule and the filing deadline.

Was a report made at the time? A police report, a hotel incident report, or both may exist, and each records what was said that night.

How did the hotel respond? Whether staff were told, what they did, and how quickly can all become part of the factual picture.

What injuries resulted, and what medical care followed? The medical records describe the harm in the providers' own words.

What records do you still have, or know exist? A booking confirmation, photographs, messages with the front desk, or the names of witnesses can all matter.

These answers shape the conversation. General information cannot take the place of an analysis of one specific situation; a conversation with an attorney can cover the rules of the state involved and what the available evidence may show on the particular facts. The broader framework is described on the negligent security lawyer page.