When Are Employers Liable for Staff Actions in New Zealand?

If you run a business in New Zealand and you have staff (or even just one person helping out), you’ve probably had that nagging thought: “What happens if someone I employ messes up?”

That’s where vicarious liability in New Zealand comes in.

In plain terms, vicarious liability is about when your business can be legally responsible for the actions of someone working for you - even if you didn’t personally do anything wrong.

This can feel unfair at first, but it’s also manageable. Once you understand how vicarious liability works, you can put practical systems in place to reduce your risk and protect your business from day one.

What Is Vicarious Liability In New Zealand?

Vicarious liability is a legal principle where one person (usually an employer) can be held liable for the wrongful acts of another person (usually an employee), when those acts are connected to the employee’s work.

For small businesses, this usually shows up as:

• an employee causes injury or property damage while doing their job
• an employee makes misleading statements to customers
• an employee harasses or discriminates against someone in a work-related context
• an employee mishandles personal information

The key point is this: vicarious liability isn’t really about whether you were “at fault” personally - it’s about whether the law considers the act sufficiently connected to the employee’s role and whether it’s fair to place responsibility on the business.

In practice, this is why “we didn’t authorise it” isn’t always a complete defence. If the employee was acting in the course of their employment, the employer can still be on the hook.

When Can Your Business Be Vicariously Liable?

Vicarious liability usually depends on two big questions:

1. What is the relationship? (employee vs contractor vs something else)
2. Was the act connected to the work? (often described as “in the course of employment”)

1) The Person Must Usually Be Your Employee

Most commonly, employers are vicariously liable for employees.

That’s why it’s so important to correctly document and structure your working relationships. If you need an employee, a properly drafted Employment Contract matters (and it should reflect the reality of the relationship, not just what you’d like it to be).

If you’re engaging contractors, that relationship should be clearly set out in writing too, such as a tailored Contractor Agreement. While hiring a contractor can reduce some vicarious liability risk, it doesn’t automatically remove it (and misclassifying an employee as a contractor can create a whole different set of problems).

2) The Act Must Be “In The Course Of Employment”

This is where a lot of the grey area sits.

Generally, your business is more likely to be liable when the employee’s conduct is:

• done while working (during work hours or while on a shift)
• done using work tools or systems (company vehicle, POS system, email account)
• done while dealing with customers, suppliers, or other staff as part of their role
• closely connected to what you employed them to do

Your business is less likely to be liable if the employee’s conduct is:

• purely personal and unrelated to work
• well outside what they were employed to do
• done after a clear break from work duties (depending on the circumstances)

But it’s not always as simple as “on the clock” vs “off the clock”. For example, a staff event, work travel, after-hours customer communications, or work WhatsApp messages can still be “work-related”.

Common Vicarious Liability Scenarios For Small Businesses

Vicarious liability claims don’t just happen to big corporates. In fact, small businesses can be more exposed because teams are lean, processes are informal, and training is often “on the job”.

Here are some common situations where vicarious liability in New Zealand can come up.

Accidents And Property Damage

Examples include:

• a delivery driver crashes into another vehicle while making deliveries
• a staff member damages a customer’s property during installation or service work
• a worker injures someone at your premises through unsafe practices

You’ll also want to keep in mind your separate health and safety duties under the Health and Safety at Work Act 2015. Even if a claim isn’t framed as “vicarious liability”, regulators and insurers will still look closely at your systems, training, supervision, and risk controls.

Misleading Statements And Customer Disputes

If a staff member says something incorrect or over-promises to a customer, your business may wear the consequences - especially if the customer relied on what was said.

This can overlap with New Zealand consumer and fair trading laws (for example, marketing claims and representations). If your staff are involved in quoting, sales, customer service, or advertising, it’s worth training them on what they can and can’t say, and keeping key promises documented in writing.

Bullying, Harassment, Discrimination And Harmful Conduct

One of the most serious areas is where an employee causes harm to another person, such as:

• sexual harassment in the workplace
• bullying by a manager or team leader
• discriminatory conduct toward staff or customers

This can overlap with obligations under the Employment Relations Act 2000, the Human Rights Act 1993, and health and safety duties around psychosocial risks.

It’s also worth noting that intentional misconduct (like harassment or assault) can still expose a business to serious legal and reputational risk. Whether an employer is vicariously liable depends heavily on the facts and how closely the conduct is connected to the employee’s role and the workplace - and in many cases, employers may also face separate claims based on their own failures to take reasonable prevention and response steps.

Privacy Breaches And Mishandling Personal Information

If staff handle customer details, employee records, CCTV footage, or health information, mistakes can quickly become a compliance issue under the Privacy Act 2020.

For example:

• an employee shares a customer’s personal information with the wrong person
• a staff member loses a device with customer data on it
• an employee accesses personal data without authorisation

Depending on what happened, privacy issues are often dealt with under privacy laws as the business’s own obligations (rather than purely as “vicarious liability”). Practical steps like a clear Privacy Policy, training, access controls, and written procedures can make a real difference.

Monitoring, Surveillance And “Overstepping” By Staff

Sometimes the issue isn’t just what an employee does to a customer - it’s what they do while trying to protect the business, such as recording someone, monitoring them, or using surveillance tools without proper process.

If you’re considering workplace monitoring (like CCTV), you’ll want to think carefully about legality, transparency, and staff communication - are cameras legal in the workplace is a common question for a reason.

How Do You Reduce Vicarious Liability Risk As An Employer?

You can’t eliminate all risk (humans are human), but you can take reasonable steps to reduce the chance of issues - and to put your business in a much stronger position if something goes wrong.

Here’s a practical checklist many small businesses use as a starting point.

1) Get Your Employment Documents Right

Clear documentation won’t magically prevent wrongdoing, but it sets expectations and gives you stronger tools to manage performance, behaviour, and disputes.

At a minimum, consider:

• up-to-date Employment Contract terms (duties, boundaries, reporting lines, conduct expectations)
• well-defined contractor relationships via a Contractor Agreement if you use contractors
• confidentiality and IP protections where relevant

This is also where “DIY templates” can hurt you. If your documents don’t match how your business actually operates, they’re harder to rely on when you need them most.

2) Put Workplace Policies In Place (And Actually Use Them)

Policies aren’t just corporate red tape - they’re one of the most practical ways to show your business took reasonable steps to prevent harm.

A good baseline is having a clear Workplace Policy that covers:

• expected standards of behaviour
• anti-bullying and harassment expectations
• complaints and investigation processes
• social media and communications expectations
• disciplinary processes and consequences

If your staff deal with customers, cash, supplier relationships, or sensitive info, it can also help to have a Conflict Of Interest Policy. Conflicts can lead to poor decisions, misuse of information, or behaviour that creates liability for the business.

3) Train Staff And Refresh Training Regularly

Training is one of the most overlooked protections in small business - mostly because everyone’s busy.

But if you ever need to defend the business’s approach, it helps to show that staff were trained on:

• customer promises and how to handle complaints
• safe work practices and incident reporting
• privacy and handling personal information
• behavioural standards (including harassment and discrimination)

Training doesn’t have to be complex. Even short documented refreshers can be valuable.

4) Supervise Properly (Especially New Starters And Junior Staff)

Many vicarious liability issues arise because staff were thrown in the deep end.

Simple supervision systems can help, such as:

• checklists for common tasks
• sign-off processes for high-risk work
• clear escalation pathways (“if X happens, call the manager”)
• reviewing customer communications in the early weeks

Supervision is also relevant to your health and safety duties, especially if your business involves physical work, operating vehicles, or interacting with vulnerable customers.

5) Have An Incident Response Process

Even great businesses face issues sometimes. What matters is how you respond.

When something happens (accident, complaint, allegation, data issue), aim to:

• contain the issue quickly (stop the conduct, secure the site, restrict access to data)
• document what happened while details are fresh
• communicate carefully (internally and externally)
• investigate fairly and consistently
• take corrective action (training, discipline, process updates)

If you’re unsure what a “reasonable” response looks like, this is one of the best times to get tailored legal advice - early support can help you avoid compounding the problem.

6) Consider Insurance (But Don’t Treat It As A Substitute For Compliance)

Insurance can be an important part of your risk strategy, such as:

• public liability insurance
• professional indemnity insurance
• cyber insurance (if you hold personal data)
• employment practices liability cover (depending on your situation)

But keep in mind: insurers often expect you to have reasonable processes in place. If your business ignores obvious risks (no training, no policies, poor supervision), that can create claim disputes or limitations.

Employee Vs Contractor: Does Hiring Contractors Avoid Vicarious Liability?

Using contractors can reduce some vicarious liability exposure, but it’s not a “set and forget” solution.

There are a few reasons for this:

• Relationship labels aren’t decisive: if someone is really treated like an employee, calling them a contractor won’t necessarily protect you.
• Your business can still be liable in other ways: even if vicarious liability doesn’t apply, you might still face claims based on your own negligence, health and safety duties, or breach of statutory obligations.
• Brand and customer experience still sit with you: if a contractor represents your business to customers, disputes often land at your door first.

If you’re building a flexible workforce (mix of casual staff, contractors, labour hire, etc.), it’s worth getting advice early so your structure matches your actual operations and risk profile.

Key Takeaways

• Vicarious liability in New Zealand can make your business legally responsible for an employee’s wrongful acts if those acts are closely connected to their work.
• Whether liability applies usually depends on the working relationship (employee vs contractor) and whether the act occurred in the course of employment.
• Common risk areas for small businesses include workplace accidents, customer misrepresentations, harassment and discrimination, and privacy breaches under the Privacy Act 2020 (noting privacy claims are often based on the business’s own statutory obligations).
• Practical protections include strong employment documentation, clear workplace policies, regular training, proper supervision, and an incident response process.
• Hiring contractors may reduce some risk, but it doesn’t automatically remove liability - and misclassification can create bigger problems later.
• Getting your legal foundations right early helps you stay protected from day one and makes it easier to manage problems quickly and fairly if they arise.

This article is general information only and not legal advice. If you’d like advice for your specific situation, get in touch with a lawyer.

If you’d like help reviewing your risk exposure or putting the right documents and policies in place, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.