| Part of thecommon law series |
| Tort law |
|---|
| (Outline) |
| Trespass to the person |
| Property torts |
| Dignitary torts |
| Negligent torts |
| Principles of negligence |
| Strict andabsolute liability |
| Nuisance |
| Economic torts |
| Defences |
| Liability |
| Legal remedy |
| Other topics in tort law |
| By jurisdiction |
| Othercommon law areas |

Intort law, aduty of care is a legalobligation that is imposed on an individual, requiring adherence to astandard ofreasonable care to avoid careless acts that could foreseeably harm others, and lead to claim in negligence. It is the first element that must be established to proceed with an action innegligence. The claimant mustbe able to show a duty of care imposed by law that the defendant has breached. In turn, breaching aduty may subject an individual to liability. The duty of care may be imposedbyoperation of law between individuals who have nocurrent direct relationship (familial or contractual or otherwise) but eventually become related in some manner, as defined bycommon law (meaning case law).
Duty of care may be considered a formalisation of thesocial contract, the established and implicit responsibilities held by individuals/entities towards others within society. It is not a requirement that a duty of care be defined by law, though it will often develop through thejurisprudence of common law.
At common law, duties were formerly limited to those with whom one was inprivity one way or another, as exemplified by cases likeWinterbottom v. Wright (1842). In the early 20th century, judges began to recognize that the cold realities of theSecond Industrial Revolution (in which end users were frequently several parties removed from the original manufacturer) implied that enforcing the privity requirement against hapless consumers had harsh results in manyproduct liability cases. The idea of a general duty of care that runs to all who could be foreseeably affected by one's conduct (accompanied by the demolishing of the privity barrier) first appeared in the judgment ofWilliam Brett (later Lord Esher),Master of the Rolls, inHeaven v Pender (1883). Although Brett's formulation was rejected by the rest of the court, similar formulations later appeared in the landmark U.S. case ofMacPherson v. Buick Motor Co. (1916) and, in the UK, inDonoghue v Stevenson (1932). BothMacPherson andDonoghue were product liability cases, and both expressly acknowledged and cited Brett's analysis as their inspiration.
Although the duty of care is easiest to understand in contexts like simpleblunt trauma, it is important to understand that the duty can be still found in situations where plaintiffs and defendants may be separated by vast distances of space and time.
For instance, an engineer or construction company involved in erecting a building may be reasonably responsible to tenants inhabiting the building many years in the future. This point is illustrated by the decision of theSouth Carolina Supreme Court inTerlinde v. Neely 275 S.C. 395, 271 S.E.2d 768 (1980), later cited by theSupreme Court of Canada inWinnipeg Condominium Corporation No. 36 v. Bird Construction Co. [1995] 1 S.C.R. 85:
The plaintiffs, being a member of the class for which the home was constructed, are entitled to a duty of care in construction commensurate with industry standards. In the light of the fact that the home was constructed as speculative, the home builder cannot reasonably argue he envisioned anything but a class of purchasers. By placing this product into the stream of commerce, the builder owes a duty of care to those who will use his product, so as to render him accountable for negligent workmanship.
Although the idea of a general duty of care is now widely accepted, there are significant differences among thecommon law jurisdictions concerning the specific circumstances under which that duty of care exists. Obviously, courts cannot impose unlimited liability and hold everyone liable for everyone else's problems; asJustice Cardozo put it, to rule otherwise would be to expose defendants "to a liability in an indeterminate amount for an indeterminate time to an indeterminate class."[1] There must be some reasonable limit to the duty of care; the problem is where to set that limit.
Whether a duty of care exists depends firstly on whether there is an analogous case in which the Courts have previously held there to exist (or not exist) a duty of care. Situations in which a duty of care have previously been held to exist include doctor and patient, manufacturer and consumer,[2] and surveyor and mortgagor.[3] Accordingly, if there is an analogous case on duty of care, the court will simply apply that case to the facts of the new case without asking itself any normative questions.[4]
If there is no similar case that the court will determine whether there is a duty of care by applying the three normative criteria theHouse of Lords set out inCaparo Industries plc v Dickman.[5] The criteria are as follows:
The High Court of Australia has deviated from the English approach, which still recognises a proximity element. Rather, Australian law first determines whether the case at hand fits within an established category of case where a duty of care has been found.[10]: p 217 For example, occupiers of a premises automatically owe a duty of care to any person on their premises.[11]
If this is not the case, then the plaintiff must prove that it was reasonably foreseeable that harm could result from the defendant's actions. If so, the Court then applies a "salient features" test to determine whether the plaintiff is owed a duty of care.[10] Some of the salient features which the Court considers in making this inquiry include:
Special rules exist for the establishment of duty of care where the plaintiff suffered mental harm, or where the defendant is a public authority.[12]
To establish a duty of care, the plaintiff has to satisfy the requirement of CLA Act ss 27–33. In light of this, a large number of individuals cannot claim injuries as well. Meanwhile, compared to the "No-Fault Compensation" system in New Zealand, the cost to claim injuries is much higher. In light of this, individuals especially the victims who lack knowledge or capability may choose not claim private nuisance after balancing the burden and outcomes. This view was affirmed in 1993 by ProfessorRegina Graycar, who commented that courts in Australia are reluctant to award damages for personal injuries.[13]
In New South Wales, a plaintiff is able to recover for non-economic loss, including pain and suffering, loss of amenities/expectation of life and disfigurement, upon the severity of the loss being at least 15% of 'most extreme case'.[14] As of October 2016, NSW Attorney General,Gabrielle Upton, has updated the maximum amount of damages for non-economic loss from $594,000 to $605,000.[15]
On 27 March 2017, the FrenchNational Assembly adopted a law entitled “Devoir de vigilance des entreprises donneuses d'ordre”,[16] whose title has been translated into English as a "duty of vigilance" or "duty of care".[17]
The law will oblige largeFrench companies (companies with at least 5,000 staff in France or 10,000 staff within their combined French and foreign offices over two consecutive years)[18] to
Establish and implement a diligence plan which should state the measures taken to identify and prevent the occurrence of human rights and environmental risks resulting from their activities, the activities of companies they control and the activities ofsub-contractors and suppliers on whom they have a significant influence.[17]

InSwitzerland, afederal popular initiative named 'For responsible businesses – protecting human rights and the environment' was launched by a coalition ofnon-governmental organizations. It proposed a mechanism ofpublic liability when activities of Swiss multinationals, or their subsidiaries, violate internationally recognisedhuman rights and environmental standards.[19]
On29 November 2020, the responsible business initiative was accepted by 51% of voters, but rejected by a majority ofcantons. The failure of the initiative leads to the entry into force of the legislative counter-project. The latter also introduces newdue diligence obligations. Criminalfines can be imposed for failure to report (but nor for breaches of international law).[19]
Because each of the 50U.S. states is a separatesovereign free to develop its own tort law under theTenth Amendment, there are several tests for finding a duty of care inUnited States tort law.
In several states, likeFlorida andMassachusetts, the sole test is whether the harm to the plaintiff from the defendant's actions was foreseeable.[20][21]
TheSupreme Court of California, in amajority opinion by JusticeDavid Eagleson, criticized the idea that foreseeability, standing alone, constitutes an adequate basis on which to rest the duty of care: "Experience has shown that . . . there are clear judicial days on which a court can foresee forever and thus determine liability but none on which that foresight alone provides a socially and judicially acceptable limit on recovery of damages."[22]
Drawing upon the work of scholars such as Fowler V. Harper, Fleming James Jr., andWilliam Prosser,California has developed a complicatedbalancing test consisting of multiple factors which must be carefully weighed against one another to determine whether a duty of care exists in a negligence action.
California Civil Code section 1714 imposes a general duty of ordinary care, which by default requires all persons to take reasonable measures to prevent harm to others.[23]In the 1968 case ofRowland v. Christian, the court held that judicial exceptions to this general duty of care should only be created if clearly justified based on the following public-policy factors:
A 1997 case added to this:
Contemporary California appellate decisions treat theRowland decision as the "gold standard" for determining the existence of a legal duty of care, and generally refer to the criteria for determining the existence of a legal duty of care as theRowland factors.[26]
In California, the duty inquiry focuses on the general category of conduct at issue and the range of foreseeable harm it creates, rather than the specific actions or injuries in each case.[27] Appellate lawyerJeffrey Ehrlich persuaded the California Supreme Court to clarify the central importance of this distinction with its 2011 decision inCabral v. Ralphs Grocery Co. which requires "no duty" rulings to be based on categorical public-policy rules that can be applied to a range of cases, without reference to detailed facts.[28] By requiring courts to apply theRowland factors at this high level of factual generality, theCabral decision preserved the role of juries in determining whether the defendant breached its duty of care based on the unique circumstances of each case.[23]
A majority of U.S. states have adopted some kind of multi-factor analysis based on the work of Prosser and others.[29] Some states simply copied California's factors but modified them, likeMichigan (which deleted the insurance factor and never picked up the social utility factor),[30] while others developed different lists of factors, such as this one fromTennessee:
A 2011 law review article identified 43 states that use a multifactor analysis in 23 various incarnations; consolidating them together results in a list of 42 different factors used by U.S. courts to determine whether a duty of care exists.[32]
The Tennessee Court of Appeal has also recently followed the California Supreme Court's lead by citingCabral for the proposition that duty determinations must be made at the highest level of factual generality.[33]
Once a duty exists, the plaintiff must show that the defendantbreached it. This is generally treated as the second element of negligence in the United States. Breach involves testing the defendant's actions against the standard of areasonable person, which varies depending on the facts of the case. For example,physicians will be held to reasonable standards for members of their profession, rather than those of the general public, in negligence actions formedical malpractice.
In turn, once the appropriate standard has been found, thebreach is proven when the plaintiff shows that the defendant's conduct fell below or did not reach the relevant standard of reasonable care.[34]
However, it is possible that the defendant took every possible precaution andexceeded what would have been done by any reasonable person, yet the plaintiff was injured. If that is the case, then as a matter of law, the duty of care has not been breached and the plaintiff cannot recover in negligence.[35][36] This is the key difference between negligence andstrict liability; if strict liability attaches to the defendant's conduct, then the plaintiff can recover under that theory regardless of whatever precautions were taken by the defendant.
Product liability was the context in which the general duty of care first developed. Manufacturers owe a duty of care to consumers who ultimately purchase and use the products. In the case ofDonoghue v Stevenson [1932] AC 562 of the House of Lords,Lord Atkin stated:
My Lords, if your Lordships accept the view that this pleading discloses a relevant cause of action you will be affirming the proposition that by Scots and English law alike a manufacturer of products, which he sells in such a form as to show that he intends them to reach the ultimate consumer in the form in which they left him with no reasonable possibility of intermediate examination, and with the knowledge that the absence of reasonable care in the preparation or putting up of the products will result in an injury to the consumer's life or property, owes a duty to the consumer to take that reasonable care.
At common law, in the case of landowners, the extent of their duty of care to those who came on their premises varied depending on whether a person was classified as atrespasser,licensee, orinvitee. This rule was eventually abolished in some common law jurisdictions. For example, England enacted theOccupiers Liability Act 1957. Similarly, in the 1968 landmark case ofRowland v. Christian,[24] theSupreme Court of California replaced the old classifications with a general duty of care toall persons on one's land, regardless of their status. After several highly publicized and controversial cases, theCalifornia Legislature enacted a statute in 1985 that partially restored immunity to landowners from some types of lawsuits from trespassers.[37]
Colorado's highest court adopted theRowland unified duty of care analysis in 1971. The resulting explosion of lawsuits against Colorado landowners caused the state legislature to enact the Colorado Premises Liability Act in 1986, which enacted a cleaned-up statutory version of the common law classificationsand simultaneously expressly displaced all common law remedies against landowners in order to prevent state courts from again expanding their liability.[citation needed]
In theRepublic of Ireland, under the Occupiers' Liability Act, 1995, the duty of care to trespassers, visitors and "recreational users" can be restricted by the occupier; provided reasonable notice is given, for which a prominent notice at the usual entrance to the premises usually suffices.[38]
In business, "the duty of care addresses the attentiveness and prudence of managers in performing their decision-making and supervisory functions."[39] The "business judgment rule presumes that directors (and officers) carry out their functions ingood faith, after sufficient investigation, and for acceptable reasons. Unless this presumption is overcome, courts abstain from second-guessing well-meaning business decisions even when they are flops. This is a risk that shareholders take when they make a corporate investment."[39]
With increased cyber threats and attacks, legislation has evolved to incorporate how to establish responsibility in the event of a breach. Key terms in privacy bills and laws cite 'reasonable security' or 'duty of care' as a requirement of organizations when managing sensitive data.[40] If a company manages private information such as social security numbers (SSN) or personal health information (PHI), it is their responsibility to practice 'duty of care' and establish 'reasonable controls' to protect this data. For example, if a hacker group attacks a bank with ransomware, and they exfiltrate all their client data - who is responsible for potential wire fraud, identity theft, and costs for litigation? Businesses are required to demonstrate they have implemented a security strategy based on their risk profile, as it is specific for each working environment. Legislation is outlining specific roles for executives in order to carry out 'duty of care' properly, as in the case of the Colorado Privacy Act. It states, "A controller shall take reasonable measures to secure personal data during both storage and use from unauthorized acquisition. The data security practices must be appropriate to the volume, scope, and nature of the personal data processed and the nature of the business."[41] The New York Privacy Act (NYPA)[42] also proposed a 'duty of care' for risk assessments by controllers regarding personal data.
The common theme in establishing duty of care is the assessment of risk,[43] the likelihood of these risks occurring, and how they would impact all parties potentially affected by those risks. Companies must comply with these new requirements of their duty to for reasonable security as it applies to their working landscape - to manage risk appropriately or be liable for the harm they could cause.
With compliance requirements of 'reasonable security' to protect data, there is also an increase in more data breach litigation examining if organizations practiced reasonable and appropriate security controls. Recent case settlements includeHerff Jones andDNA Diagnostics in which these organizations must implement an information security program to manage risks based on documented frameworks such as Duty of Care Risk Analysis (DoCRA), CIS RAM, NIST, ISO 27005, or The Sedona Conference Commentary on a Reasonable Security Test.[44]