Vicarious liability in Australia and when employers answer for staff conduct

Vicarious liability is a common law principle that can make an employer legally responsible for civil wrongs committed by its employees in the course of their employment. In plain terms, if a staff member negligently injures someone, misleads a customer, or commits another civil wrong while doing their job, the business may have to answer for it, even if the employer did not authorise the conduct, did not know about it, and did nothing wrong itself.

It is a doctrine built up through case law rather than set out in a single statute. It reflects a practical judgment: employers benefit from the work their staff do, and they are usually the party best placed to set standards, supervise conduct and insure against the risks. Understanding how the principle works, where its limits lie, and how it sits alongside duties under work health and safety, anti-discrimination and consumer law, helps a business manage risk before a claim lands.

This guide explains the elements of vicarious liability, the tests courts apply, the statutory versions of the principle, and where legal advice is usually needed.

The worker must be an employee, not a contractor

Vicarious liability attaches to the employment relationship. The general rule is that an employer is liable for the wrongs of employees, but not for the wrongs of independent contractors who are genuinely running their own businesses. The distinction turns on the substance of the relationship, not the label in a contract. Courts look at factors including the degree of control the business exercises over how the work is done, whether the worker is integrated into the business, whether they carry the business's branding, and whether they can delegate the work to others.

The High Court's decision in Hollis v Vabu (2001) 207 CLR 21 shows how far this can go. Bicycle couriers engaged by a courier company under agreements describing them as independent contractors were nonetheless held to be employees. They wore the company's uniform, had no scope to negotiate individual jobs, were allocated work through the company's radio operator, and had to comply with its rules about how to do the job. Because the relationship was, in substance, one of employment, the company was vicariously liable for a courier's negligence that injured a member of the public.

The practical lesson is that treating a worker as a contractor on paper does not guarantee that result in court. If a worker is integrated into the business and directed day to day, a court may find an employment relationship and impose vicarious liability accordingly.

The act must be a civil wrong

Vicarious liability operates in the civil liability context. The employee's act must be a civil wrong, such as negligence, assault or another intentional tort, or a breach of a statutory liability such as misleading or deceptive conduct under the Australian Consumer Law. It is not a principle of criminal liability: a business is not vicariously liable for an employee's crime in the sense of being punished for it. That said, the same events can give rise to both civil claims against the business and criminal or regulatory action against the employee, and in some settings the business itself may face its own direct obligations.

For negligence, the classic case is an employee who is careless while performing their duties and causes injury or damage. Think of a delivery driver who runs a red light during a work run, or a shop assistant who mops a floor without putting up a warning sign. Because the carelessness happens while doing the work the employee was engaged to do, the employer is liable to the injured person, even though the employer itself was not careless.

Intentional wrongs can also attract vicarious liability, but the connection to the employment must be strong. In Prince Alfred College Incorporated v ADC (2016) 258 CLR 134, a case about the sexual abuse of a boarder by a school housemaster, the High Court held that for intentional torts the court considers the special role the employer assigned to the employee and whether there is a sufficient connection between that role and the wrongful act. Where the employment placed the employee in a position of power, intimacy or trust that gave the occasion for the wrongdoing, liability can follow.

The act must happen in the course of employment

The central requirement is that the wrongful act occurred in the course of employment, sometimes expressed as a close connection between the employment and the act. The test is not whether the act was authorised. An employer can be liable for an unauthorised act that was an improper way of doing something the employee was employed to do. The question is whether the act was sufficiently connected to the work, or whether it was a personal act that had nothing to do with the job.

Work events and offsite functions can fall within the course of employment. Team dinners, client events, conferences and Christmas parties are settings where employment-related risks can arise, and the fact that an event happened after hours or off the premises does not by itself take it outside the scope. Supervision, policies and training matter in these settings precisely because the boundaries are less obvious.

Frolics and personal acts are the boundary

The limit of vicarious liability is the employee's personal frolic: conduct done entirely for the employee's own purposes, unconnected with the work. The classic Australian illustration is Deatons Pty Ltd v Flew (1949) 79 CLR 370. A barmaid, angry at an insult from a customer, threw a glass of beer at him and the glass struck his face, costing him the sight of an eye. The High Court held that the hotel was not liable. The assault was an act of personal resentment and retribution, not a way, even an improper way, of doing the work she was employed to do. In the words adopted by the Court, she was in effect a stranger to the employer with respect to that act.

The difficulty for employers is that the boundary is factual and fine. A private dispute between staff members after hours that has nothing to do with work is unlikely to attract vicarious liability. But an assault by a security guard on a patron, or serious harassment of a customer by a salesperson, can be sufficiently connected to the role to make the business liable. Each case turns on the connection between the conduct and the employment.

Statutes have their own versions of the principle

Vicarious liability is not only a common law doctrine. Several statutes impose employer liability for staff conduct, often with their own defences.

Under the Sex Discrimination Act 1984 (Cth), s 106 provides that if an employee or agent does an act in connection with their employment that would be unlawful discrimination or harassment under the Act, the employer is treated as having done the act too. There is a defence: the employer escapes liability if it took all reasonable steps to prevent the employee from doing acts of that kind. Sexual harassment, defined in s 28A of the Act, is the clearest example. Similar provisions exist in other federal and state anti-discrimination laws, which is why policies, training and accessible reporting channels are not optional extras.

The Australian Consumer Law reaches similar results through attribution. Section 18 of the ACL (Schedule 2 of the Competition and Consumer Act 2010 (Cth)) prohibits misleading or deceptive conduct in trade or commerce. Conduct engaged in by an employee or agent within the scope of their actual or apparent authority is attributed to the business under s 139B of the Competition and Consumer Act. A salesperson's exaggerated claims about a product, made while selling, can therefore expose the business to ACL liability even though the statement was the employee's own words. It is not called vicarious liability, but the practical effect is the same.

WHS duties are different again. Under s 19 of the Work Health and Safety Act 2011 (NSW), a person conducting a business or undertaking must ensure, so far as is reasonably practicable, the health and safety of workers and others. This is a direct, non-delegable duty on the business itself, not vicarious liability for employees' acts. An employer cannot pass it off to staff, and officers carry their own due diligence obligations. The practical point is that WHS compliance reduces the chance of harm, but it does not work on the same course of employment test.

A worked example

Consider a small home-improvement business that employs a sales representative. During an in-home visit, the salesperson tells a customer that the company's insulation will cut their power bills in half, a claim the business has never verified and could not substantiate. The customer relies on the statement and signs up.

If the claim is misleading, the business faces exposure under s 18 of the ACL, because the salesperson's statement is attributed to the business as conduct engaged in within the scope of their authority. The employer's good faith is not a defence to misleading conduct. Now suppose the same salesperson, after the visit, drives the company van home and on the way stops at a pub, has a few drinks, and later that night becomes involved in a brawl in which a patron is injured. The assault is a personal act unconnected with the job. In the language of Deatons v Flew, it is the act of a stranger, and the business is unlikely to be vicariously liable.

The example shows the two sides of the principle. Conduct that is part of doing the job, even if unauthorised or careless, can be the business's responsibility, while conduct that is purely personal is not.

Common misconceptions

Several misconceptions recur when employers think about vicarious liability:

• "I didn't authorise it, so I'm not liable": Vicarious liability does not depend on the employer's fault, knowledge or approval. It is liability for another person's wrong, arising from the employment relationship and the connection of the act to the work.
• "Independent contractors remove the risk": Labels matter less than substance. Hollis v Vabu shows that workers described as contractors can be treated as employees, and misclassification carries separate risks under workplace laws.
• "Vicarious liability and WHS are the same thing": WHS imposes a direct duty on the business measured by what is reasonably practicable, and can attract its own penalties. Vicarious liability is a civil liability principle about connection to employment. Both can apply to the same incident.
• "It only covers negligence": Intentional torts, including assault and harassment, can attract vicarious liability where there is a sufficient connection between the employment and the conduct, as Prince Alfred College explains.
• "There is a general right to sue for invasion of privacy": Australia does not currently recognise a general, standalone tort of invasion of privacy, although the High Court has left the possibility open and the area continues to develop. Businesses should instead think in terms of breach of confidence, defamation and statutory privacy obligations where they apply.

When you need a lawyer's help

Vicarious liability is a question of fact and degree, and the cost of getting it wrong is a damages claim, an ACL action or a discrimination complaint. Legal help is usually needed in three situations.

First, when a claim or complaint is made. A lawyer can assess whether the conduct was in the course of employment, whether a statutory defence such as the all reasonable steps defence is available, and what the exposure realistically is. They can also manage communications with complainants, regulators and insurers, and make sure evidence is preserved properly.

Second, when a business is structuring its workforce. Classification advice on whether a worker is an employee or a contractor, and on how the working arrangements should be documented, directly affects vicarious liability exposure and other obligations. Getting this wrong at the start is far more expensive than fixing it later.

Third, when a business is building its risk framework. A lawyer can review employment contracts, workplace policies, customer-facing terms and privacy practices, and advise on insurance cover such as public liability and professional indemnity. These steps do not eliminate vicarious liability, but they reduce the likelihood of incidents and improve the business's position if one occurs.

The question to ask when something goes wrong

When an employee does something that harms another person, the first question is not whether the employee was wrong. It is whether the act was connected to the work they were employed to do. That single factual question, tested against the employment relationship, the role assigned and the circumstances of the act, is what separates the incident your business must answer for from the personal act that is not its problem. It is also the question your insurer and lawyer will ask first, so it pays to think about it before an incident, and to have the policies, training and records in place that show the business took reasonable steps.