Tables and empty chairs in a meeting room with large windows.

Practice Area

Employer Liability for Employee Sexual Assault

Being harmed by someone who was working for an organization does not, by itself, make the organization responsible, and it does not mean the organization is not. Texas law asks two separate questions: whether the assault falls within the scope of the person’s work, which courts have generally answered no for an intentional sexual assault, and whether the organization was itself careless in hiring, supervising, retaining, or entrusting that person with the access that made the harm possible. Those questions are answered from the organization’s own records, obtained through the legal process, and kept distinct from the claim against the individual.

Free Case Consultation

Two questions, not one

When the person who committed a sexual assault was working for someone, two legal questions follow, and they are answered separately. The first is whether the act itself is attributed to the organization because it was part of the person’s work. The second is whether the organization was careless in its own conduct: in hiring the person, in supervising and keeping them, in training them, or in entrusting them with a role, a place, or a tool that gave them access to the person harmed. Employment alone answers neither question. It is the reason the questions are asked.

Being harmed by an organization’s worker is also different from being an organization’s worker who was harmed. The claims discussed here concern a customer, patient, resident, passenger, guest, or other member of the public harmed by someone acting for a business, a care provider, a contractor, a driver service, or another organization. An employee harmed at work by a co-worker or supervisor is addressed below, because a different framework applies first.

Whether the act is attributed to the organization

Texas law holds an employer responsible for an employee’s conduct when the act was within the general scope of the employee’s authority, in furtherance of the employer’s business, and for the accomplishment of the purpose for which the employee was hired. An assault generally fails that test, because the person acts for their own purposes rather than the employer’s. A Texas court of appeals has applied that reasoning even where the interaction that gave the person access was itself authorized, as when a health-care worker examining a patient turned the examination into an assault. Being on duty, in uniform, or in a place the job put the person is not enough.

The contrast is force used to do the job. A security worker who uses force to remove a patron is performing an authorized function, and courts have treated that force differently from an assault committed for personal reasons. Whether the worker was an employee or an independent contractor matters here too: an organization is generally not responsible for a contractor’s violent act unless it controlled how the specific task was performed, and a general instruction is not that control. None of this means the organization is out of the case. It means the second question is where the analysis goes next.

The organization’s own conduct

Texas courts recognize claims that an organization was careless in hiring, supervising, retaining, or training a person, or in entrusting that person with a role or access, and they apply strict requirements to them. Two wrongs must be shown, the organization’s carelessness and the worker’s later wrongful act, and both must have caused the harm. The risk that made the organization’s conduct careless must be the same risk that produced the injury: a hiring failure that concerned driving does not support a claim about an assault. A careless screening practice that never led to a harmful act supports no claim at all. The Supreme Court of Texas has applied these rules while noting that it has not yet recognized negligent training or supervision as independent theories of liability, so the claim is framed carefully rather than assumed.

Within those limits, the facts that matter are concrete. What did the organization know about the person before hiring, and what would a background check required or customary for that work have shown? What complaints or incidents were reported afterward, to whom, and what was done? What did the role give the person: a key, a schedule alone with clients, entry into homes, care of children or patients, authority over a passenger or resident?

The Supreme Court of Texas has held that a company which required its sales to be made inside customers’ homes owed a duty to use reasonable care in choosing whom it sent there, even though it called those workers independent contractors, because it controlled that detail and the risk of sending a dangerous person into a home was foreseeable. It has also held that an organization which did not employ a person but recommended him for a position with access to children owed a narrower duty not to make that recommendation carelessly. And it has limited the duty to supervise: not every complaint or conflict creates one, and an organization is not required to investigate every friction between people.

Where Texas already sets a hiring standard

For some work, Texas law itself says what a careful organization must do before hiring. Nursing facilities, assisted living facilities, and home health agencies may not employ a person whose criminal-history check shows a conviction for listed offenses, including sexual assault. Child-care facilities and agencies must submit their directors, employees, prospective employees, and contracted caregivers for state and federal background checks. Licensed security companies and commissioned security officers undergo state and federal criminal-history checks, and a person required to register as a sex offender cannot be licensed. A transportation network company must, before allowing a driver to log in, run a criminal background check that includes the national and Texas sex-offender registries, may not permit a registered person to drive, and must recheck annually.

Those requirements show what the law already expects for that kind of work, and the organization’s compliance records are evidence in a claim. Compliance does not by itself defeat a claim, and a violation does not by itself prove one; Texas has also given some organizations that provide care or child-welfare services under state contracts a defense tied to documented compliance with those checks, which counsel reviews when it applies. A person harmed by a worker in one of these fields should expect the review to begin with the check the law required.

The records an organization holds, and how they are obtained

The evidence in these claims sits mostly inside the organization: the application and hiring file, the background check that was or was not run, prior complaints and the record of how each was handled, schedules and supervision records, access logs for keys, badges, and vehicles, internal investigation files, policies and training materials, communications among managers, and video. Those records are obtained through the legal process, by discovery requests and subpoenas that a court enforces, and the firm asks in writing that they be preserved at the outset.

They are not obtained by the person harmed. Accessing an organization’s systems, or another person’s accounts or devices, without permission is a crime under Texas law, and material obtained that way damages a claim. What belongs to you is worth keeping: your own messages and call records, the names and dates you know, any report you made to the organization or to police and any response you received, and any agreement you signed with the organization.

An employee harmed at work is a different case

When the person harmed was an employee of the same organization, Texas and federal employment law provide specific remedies and procedures for workplace sexual harassment, with their own agencies and deadlines. Texas courts have held that where the substance of an employee’s claim is harassment covered by that statute, it displaces common-law negligence claims built on the same facts, and courts have drawn distinctions between a pattern of harassment and a single violent assault. Which framework applies is a question of the facts and is decided before anything is filed. The claim against the individual who committed the assault is a sexual assault civil claim, whether the person harmed was an employee or a member of the public.

Public entities, charities, and religious organizations

Texas permits claims against a governmental body, such as a school district, a city, or a hospital district, only where a statute waives its immunity, and the general waiver does not reach claims arising out of assault or other intentional torts. A claim against a public entity for its worker’s assault therefore faces that barrier, and whether the entity’s own conduct can be reached is a separate analysis with its own limits, including any applicable school-employee protection. A claim against an individual requires its own review of the defendant, capacity, conduct, scope of employment, applicable immunity, and procedural or election-of-remedies rules. An obstacle to the entity claim neither automatically defeats nor preserves the individual claim; sexual assault is not automatically within employment scope, and not every government employee is immune. Charitable organizations and their volunteers have statutory protection for ordinary negligence that does not extend to intentional, willfully negligent, or reckless conduct, and Texas has enacted narrow exceptions for particular organizations and roles that counsel reviews when they apply. None of these rules is a reason not to ask the question; each is a reason the answer requires a lawyer’s review of the specific entity.

Agreements, deaths, and the next conversation

Whether an arbitration or confidentiality term affects a claim depends on the agreement, the dates, and current federal and Texas law. A federal law allows a person alleging a sexual assault dispute to elect out of an arbitration agreement or class waiver signed before the dispute, and a court rather than an arbitrator decides whether it applies; another makes confidentiality clauses signed before a dispute unenforceable as to such disputes. Both have date limits and neither reaches every agreement. A stranger’s crime on a property that failed to guard against it is a negligent security claim, with different questions about the organization’s responsibility, and a resident harmed by staff in a nursing facility raises nursing home negligence questions. A death becomes a wrongful death claim. A consultation begins with who the person worked for, what role they held, and what you know about how they came to be there.

Questions clients often ask

Employer Liability for Employee Sexual Assault FAQs

Is the company automatically responsible because the person worked there?

No. Employment alone does not make an organization answer for an employee’s intentional act. Texas law attributes an employee’s conduct to the employer only when the act was within the general scope of the job, in furtherance of the employer’s business, and for the purpose the person was hired to accomplish, and courts have generally held that a sexual assault serves the person’s own purposes rather than the employer’s, even when the interaction that gave the person access was authorized. The separate question is whether the organization was itself careless in who it hired, how it supervised and kept that person, and what it entrusted them with.

The person was on the clock and used their work access. Doesn’t that make it part of the job?

Not by itself. Being on duty, wearing a uniform, or using a work-provided key, vehicle, or appointment gives a person access, but the scope-of-work question asks whether the act served the employer’s purpose; courts have generally treated intentional sexual assault as serving personal purposes instead. Where access matters is in the second question: an organization that placed a person in a role that gave them entry to a home, a patient’s room, a child, or a passenger, and had reason to know the person was dangerous, can answer for its own carelessness in doing so. The access is evidence for that claim rather than proof of the first one.

What does a negligent hiring or supervision claim actually require?

Two separate wrongs and a tight connection between them. The organization must have been careless in hiring, supervising, retaining, training, or entrusting the person; the person must then have committed a wrongful act; and both must have caused the harm, with the risk that made the organization careless being the same risk that produced the injury. Carelessness in hiring that was never followed by a harmful act by the person hired is not a claim. What helps at the start is concrete: the person’s name and role, the dates, any complaint you or anyone else made and to whom, what the organization said or did in response, and what access the role gave the person. The organization’s own records are later tested against those facts.

The company says the person was an independent contractor, not an employee. Does that end it?

No. The label bears on the first question, because an organization is generally not responsible for a contractor’s violent act unless it controlled how the specific task was done. It matters less for the second: the Supreme Court of Texas has held that a company which controlled a relevant detail of the work, such as requiring sales to be made inside customers’ homes, owed a duty to use reasonable care in choosing whom it sent there, whatever the worker’s label. How much control the organization kept, and what it knew about the person, are the facts the review examines.

The organization had earlier complaints about this person. Is that enough?

It is a question, not an answer. Earlier complaints show what the organization knew and when; the claim then asks what it did in response, whether the risk those complaints described is the risk that caused the harm, and whether a reasonable organization would have acted differently. Texas courts have limited the duty to supervise, and not every complaint or workplace conflict creates one, so the content and handling of each report matter more than its existence. The organization’s own records of those complaints are obtained through the legal process.

I was an employee, and a co-worker or supervisor assaulted me at work. What changes?

A different framework applies to you first. Texas and federal employment law provide specific remedies and procedures for employees harmed by workplace sexual harassment, and Texas courts have held that where the substance of an employee’s claim is harassment covered by that statute, it displaces common-law negligence claims built on the same facts; where the substance is a single violent assault rather than a pattern of harassment, the analysis can differ. Which path applies depends on the facts, and the firm identifies it before anything is filed. The claims discussed here concern a customer, patient, resident, passenger, or other member of the public harmed by an organization’s worker.

The employer is a school district, a city, or another public body. Does that change things?

Yes. Claims against a governmental body depend on an applicable waiver of immunity, and the Texas Tort Claims Act excludes claims arising from assault and other intentional torts. A claim against an individual requires a separate analysis of the defendant, the capacity in which they are sued, their conduct and scope of employment, any applicable immunity, and procedural or election-of-remedies rules. A barrier to an entity claim neither automatically defeats nor preserves an individual claim. Sexual assault is not automatically within employment scope, and governmental employment does not make every employee immune. Identify the employer and the person’s role early so counsel can review each claim separately.

Can I get the organization’s personnel files or the person’s accounts myself?

No, and you should not try. Personnel files, complaint records, and internal communications come out in a lawsuit through discovery and subpoenas that a court enforces, and getting into an organization’s systems or another person’s accounts or devices without permission is a crime under Texas law that damages the claim. What you can gather is what is already yours: your own messages, the names and dates you know, any report you made and the response you received, and the names of anyone else who complained. If the organization or its insurer contacts you, asks for a recorded statement, or offers a document to sign, you can decline until you have spoken with a lawyer, because a release or a confidentiality term can affect the claim and the federal limits on such terms depend on dates and wording.