This guide is maintained as a current resource for July 2026 and covers only the laws of England and Wales. Information is for general guidance, not legal advice. Consult a qualified solicitor for advice specific to your situation.
Employer liability for employee actions explained under UK law, covering vicarious liability, key case law, statutory responsibilities, defences, workplace claims, and compensation processes in England and Wales, including practical legal guidance for employers and claimants.

Employer liability for employee actions is primarily governed by the legal principle of vicarious liability. This doctrine allows an employer to be held responsible for wrongful acts carried out by an employee, even where the employer did not directly authorise or participate in the conduct.
The concept is central to UK employment and tort law, particularly in claims involving workplace injury, discrimination, harassment, data breaches, fraud, and negligence. It is designed to ensure that victims can obtain compensation from an organisation with the means to pay, rather than an individual employee alone.
Legal Basis of Employer Liability
Employer liability arises from two main legal sources:
1. Vicarious Liability (Tort Law)
Under common law, an employer may be liable for torts committed by an employee where:
- There is an employment (or employment-like) relationship, and
- The wrongful act is sufficiently connected to the employee's work duties
This principle has been refined through case law, including:
- Lister v Hesley Hall Ltd [2001] UKHL 22 – established the “close connection” test for intentional wrongdoing
- Mohamud v WM Morrison Supermarkets plc [2016] UKSC 11 – expanded analysis of employee conduct within the scope of employment
- WM Morrison Supermarkets plc v Various Claimants [2020] UKSC 12 – confirmed limits of liability where an employee acts on a “frolic of their own” for personal motives
2. Statutory Liability
Employers may also be liable under specific statutes, such as:
- Equality Act 2010 (discrimination, harassment, victimisation)
- Health and Safety at Work etc. Act 1974
- Data Protection Act 2018 (UK GDPR enforcement context)
These regimes can impose liability even where vicarious liability principles are not fully satisfied.
The Legal Test for Employer Liability
UK courts generally apply a two-stage approach.
Stage 1: Employment Relationship
The court considers whether the wrongdoer was:
- An employee, or
- Someone in a relationship “akin to employment” (e.g. agency staff in some circumstances)
Factors include control, integration into the business, and economic dependence.
Stage 2: Close Connection Test
The key question is whether the employee's conduct was so closely connected to their work that it is fair to hold the employer responsible.
Courts examine:
- The employee's assigned duties
- Whether the wrongdoing arose during work activities
- Whether the act was a misuse of their role or authority
- Whether the conduct was motivated by personal reasons
A clear boundary exists where the employee is acting entirely for personal reasons, even if the opportunity arose through their job.
When Employers Are Likely to Be Liable
1. Acts During Work Duties
Employers are commonly liable where harm occurs while the employee is performing assigned tasks.
Examples:
- A delivery driver causes a road traffic accident while working
- A retail worker negligently injures a customer during service duties
2. Misuse of Position or Authority
Liability often arises where the employee uses their role to commit wrongdoing.
Examples:
- Fraud committed by an employee handling customer payments
- Harassment of colleagues by a supervisor exercising workplace authority
3. Workplace Discrimination and Harassment
Under the Equality Act 2010, employers are generally liable for discriminatory acts carried out by employees “in the course of employment”, even if not authorised.
Employers may defend claims by showing they took all reasonable steps to prevent the conduct.
When Employers Are Not Liable
1. Personal Acts Outside Employment Scope
Employers are not usually liable where the employee acts independently for personal reasons.
In WM Morrison Supermarkets plc v Various Claimants, the Supreme Court held the employer was not liable when a senior employee deliberately leaked payroll data out of personal revenge, even though he used work systems to do so .
The key point was that:
- The employee was pursuing a personal vendetta
- The actions were not part of his assigned duties
- The connection to employment was insufficient
2. “Frolic of Their Own”
If an employee temporarily abandons their duties and engages in unrelated conduct, liability may not attach.
Example:
- An employee leaving a work assignment to commit an unrelated assault for personal reasons
3. Independent Contractors
Liability is generally limited where the wrongdoer is genuinely self-employed and not integrated into the business, although exceptions exist where the relationship closely resembles employment.
Employer Liability in Key Areas of Law
Workplace Injury and Negligence
Employers are frequently liable for negligence arising from unsafe systems of work, including:
- Poor training
- Unsafe equipment
- Lack of supervision
Data Protection and Confidentiality Breaches
Employers may be liable for employee misuse of personal data where it occurs in connection with authorised duties.
Fraud and Financial Misconduct
Financial institutions and businesses handling money face increased exposure where employees misuse access to funds or systems.
Harassment and Discrimination Claims
Employers are typically liable unless they can demonstrate reasonable preventative measures were in place.
Defences Available to Employers
Employers may limit or avoid liability by demonstrating:
1. Reasonable Preventative Steps
In discrimination cases, employers can rely on the statutory defence that they took all reasonable steps to prevent unlawful acts.
2. No Sufficient Connection
Arguing that the employee's actions were unrelated to their employment duties.
3. Contributory Negligence
In some tort claims, compensation may be reduced if the claimant contributed to the harm.
4. Acting Outside Authority
Evidence that the employee acted entirely outside authorised duties or instructions.
Legal Process for Claims
Claims involving employer liability are usually pursued through:
- County Court (personal injury, negligence, data protection claims)
- Employment Tribunal (discrimination and employment-related statutory claims)
Typical steps include:
- Pre-action correspondence
- Evidence gathering (witness statements, records, policies)
- Issuing a claim form
- Disclosure and witness evidence
- Settlement negotiations or trial
Time Limits
Common limitation periods include:
- 3 years for personal injury claims
- 3 months minus 1 day for Employment Tribunal claims (with early conciliation required)
- 6 years for most general tort claims (non-personal injury)
Time limits can vary depending on claim type and circumstances.
Practical Implications for Employers
Employer liability risk management generally involves:
- Clear workplace policies and training
- Supervision and monitoring of employee conduct
- Robust disciplinary procedures
- Data access controls and security measures
- Equality and harassment prevention systems
- Regular risk assessments
Failure to implement effective controls increases exposure to legal claims and regulatory action.
Common Questions from our Readers
Can an employer be liable for criminal acts of an employee?
Yes, if the criminal act is closely connected to employment duties. However, purely personal criminal acts are less likely to result in liability.
Does employer liability apply to remote workers?
Yes. Employers may still be liable for actions carried out in the course of employment, even remotely.
Is intent relevant?
Yes. Courts consider whether the employee was acting for the employer's business or for purely personal reasons.
Can both employer and employee be sued?
Yes. Claimants often sue both, although compensation is usually recovered from the employer or its insurer.
Key Takeaways
Employer liability for employee actions in UK law is governed primarily by vicarious liability principles and statutory duties. Liability depends on whether there is an employment relationship and whether the wrongful act is sufficiently connected to the employee's duties. Employers are commonly liable for workplace negligence, discrimination, and misconduct linked to job functions, but are not liable where employees act independently for personal reasons. The distinction is fact-sensitive and heavily dependent on case law interpretation.