Hotels operate in environments where staff, guests and third-party contractors interact constantly, creating a range of potential safety and liability risks. Understanding where a hotel’s legal responsibilities begin—and where they extend—is essential to managing those risks effectively.
What does duty of care mean for hotels?
Duty of care is a legal obligation that requires hotel operators to take reasonable steps to protect the health, safety and wellbeing of guests and employees. It’s not simply about responding when something goes wrong. Instead, it means identifying potential risks before they occur and putting preventative measures in place.
Discover B2B Marketing That Performs
Combine business intelligence and editorial excellence to reach engaged professionals across 36 leading media platforms.
For hotels, this duty extends beyond physical hazards like fire safety and building maintenance. It covers the conduct of staff members, the management of contractors, security arrangements and how incidents are handled when they do happen. When a guest is harmed because of negligence by a staff member, the hotel can be held liable for that harm, even if the employee acted against the hotel’s instructions.
Recent incidents across the hospitality sector have highlighted how quickly situations can escalate. Research on hotel safety measures demonstrates that the combination of busy buildings, high guest numbers and continuous operations requires clear procedures, staff training and effective incident response to manage liability exposure.
Vicarious liability: why hotels cannot ignore it
Vicarious liability is a legal principle that holds employers responsible for wrongful acts committed by their employees within the course of employment. For hotels, this is particularly significant because guests interact regularly with staff across multiple service areas: front desk, housekeeping, security, food and beverage and maintenance.
If a guest is injured by a staff member’s negligence or misconduct, the hotel can be sued directly, even if the employee was acting without authorisation or against the hotel’s policies. This isn’t a theoretical risk. It’s a genuine exposure that hotel operators need to understand clearly.
The complexity lies in the detail. The distinction between direct employees and contractors matters significantly. Who bears liability depends on how employment contracts are structured, who holds operational control, and how incidents are managed. Getting this wrong can expose hotels to unexpected claims. George Ide LLP has examined how vicarious liability applies across different employment arrangements to clarify where liability actually sits in practice.
This principle played out precisely in a 2025 High Court decision. In JD Wetherspoon PLC v Burger, a guest was injured by door security staff at a pub. The case examined whether the venue was liable for the actions of contracted security personnel, with the court ultimately finding the pub not liable, because crucially a clear contract stated the security firm retained control of its own staff. This reinforces a critical lesson that the detail of your contractor agreements directly determines your liability exposure.
For hotel managers, the takeaway is clear. You must understand who bears responsibility under your own contracts with service providers, particularly security firms, cleaning companies and maintenance contractors. That clarity protects both your business and your guests.
The strengthened legal framework
UK employment law has been significantly updated through the Employment Rights Act 2025, which strengthens employer duty of care across multiple areas. The legislation places increased emphasis on prevention rather than reaction. Employers must now demonstrate that they have identified risks, assessed them properly and implemented reasonable control measures before incidents occur.
A key expansion under the 2025 Act is the extension of employer responsibility for third-party harassment. Hotels are now legally accountable for harassment or threatening behaviour from customers and third parties directed toward staff members. This has major implications for front-of-house teams and any employees working in public-facing roles. The duty of care now requires hotels to take all reasonable steps to prevent such incidents, not simply respond after the fact.
The Peoplesafe guide on employment rights and personal safety explains these changes in detail and outlines what preventative measures now constitute reasonable duty of care obligations.
Practical steps to manage liability
Understanding the legal framework is essential, but implementation is where real protection is built. Here are the key actions hotel managers should take.
Risk assessment and identification
Conduct a thorough review of where liability risks exist within your operation. This includes examining guest interactions, staff conduct policies, contractor arrangements, security procedures and how incidents are currently recorded. Document your assessment process so you have evidence that risks were identified and considered.
Clear procedures and staff training
Develop clear written procedures for common scenarios such as guest complaints, incidents involving staff misconduct, injuries, harassment and emergency situations. Ensure all staff members, particularly those in customer-facing roles, receive training on these procedures and understand their responsibilities. Training records are essential evidence of duty of care compliance.
Contractor and vendor management
Establish clear contracts with external service providers, particularly security firms, cleaning companies and maintenance contractors. Define who bears responsibility for staff conduct, how incidents should be reported and what standards must be met. Distinguish between employees under your direct control and independent contractors to clarify liability boundaries.
Incident documentation
When incidents do occur, document them thoroughly. Record what happened, who witnessed it, what actions were taken and what follow-up occurred. This documentation demonstrates that the hotel responded appropriately and can be crucial in legal disputes.
Regular review and updates
Duty of care requirements continue to evolve. Review your procedures regularly, particularly when employment law changes or after your own incident investigations reveal gaps. Stay informed about legislative updates that might affect your obligations.
A comprehensive duty of care guide, from Kingfisher Professional Services, outlines these steps in greater detail including how to structure risk assessments, implement control measures and assign responsibility across an organisation.
The operational and reputational case
From a purely legal standpoint, meeting these obligations protects hotels from liability claims and regulatory action, but the benefits extend beyond risk management. Hotels that invest in safety procedures, staff training and clear incident response systems tend to experience lower absence rates, higher staff retention and stronger guest satisfaction.
Conversely, a failure to meet duty of care can result in personal injury claims, HSE investigations, fines, reputational damage and erosion of guest confidence. For hotel brands, even a single serious incident can affect market perception and future bookings.
Moving forward
Duty of care is not optional or discretionary. It is a legal obligation that sits at the heart of responsible hotel management. The strengthened legal framework introduced in 2025 makes this clearer and more prescriptive than ever.
Hotel managers should review their current risk management procedures against the legal standards outlined, and prioritise where gaps exist. If your procedures need updating or if you face complex liability scenarios specific to your operation, consulting with legal experts who understand the hospitality business can provide the clarity and confidence needed to move forward.
About the author: Annie Button is a freelance writer based in the UK. She specialises in business development, sustainability, digital trends, marketing, and HR.
