Your rights

Legal options

When a Rideshare Company Is Responsible for a Driver's Assault

Updated November 11, 2026

A modern corporate office building exterior with glass facade and low hedges.
Immediate answer

A rideshare company may be responsible for a driver's assault through negligent hiring, retention, failure to warn or vicarious liability. State law decides.

On this page
  1. Can the Company, Not Just the Driver, Be Responsible? What 'Rideshare Company Liability' Means in Law
  2. If the Driver Is Called an Independent Contractor: Why That Question Shapes Every Theory
  3. What Did the Company Know About the Driver? What a Negligent Hiring or Retention Claim Has to Show
  4. Should Riders Have Been Told? What the Failure-to-Warn Theory Asks
  5. If You Are Wondering Which Records Matter: Facts That Courts and Parties Examine in These Cases
  6. If the Ride Happened in a Particular State: How State Law Shapes What a Claim Can Reach
  7. Frequently asked questions
  8. Sources

If a rideshare driver assaulted you or someone you love, the company itself can be legally responsible, not only the driver. That usually turns on four theories: negligent hiring, negligent retention, failure to warn and vicarious liability. Whether any of them applies depends on what the company knew, what it did and the law of the state where the assault happened.

Most people facing this question have already been told two things that seem to cancel each other out: that the app connected them with the driver, and that the driver does not work for the app. If you are a survivor trying to understand whether the company that sent that car carries any responsibility, or a parent or family member asking on someone else's behalf, the answer is rarely a simple yes or no. This page explains how the law frames that question, what each theory asks, and which facts tend to decide it.

Can the Company, Not Just the Driver, Be Responsible? What 'Rideshare Company Liability' Means in Law

Rideshare company liability means the legal responsibility of the platform company itself, separate from the driver's personal responsibility, for harm that happens during a ride. A driver who commits an assault can face a civil claim for his own conduct. A claim against the company asks a different question: whether the company's own choices, or its legal relationship with the driver, make it answerable too.

Four main theories carry that question.

Negligent hiring asks whether the company acted carelessly in letting a driver onto its platform in the first place, given what it knew or should have known about that person. Negligent retention asks whether the company acted carelessly in keeping a driver on the platform after it learned, or should have learned, of warning signs. Failure to warn asks whether the company had a duty to tell riders about a risk it knew of and did not adequately disclose. Vicarious liability is responsibility one party carries for another's conduct because of the relationship between them, most often an employer's responsibility for an employee.

The distinction matters for a practical reason. A company and an individual driver are not in the same position: their insurance, their records and their resources differ, and the theories that reach a company are not the same ones that reach a person. A survivor's civil case may name the driver, the company or both, as the page on a rideshare sexual assault lawyer describes.

These theories arise under state law, and state law differs. The same theories can apply across the types of rideshare assault, from unwanted touching to rape.

If you are sorting through what happened, it can help to treat it as two separate questions: what the driver did, and what the company did or failed to do before and after the ride. Which theories might fit, and whom to name, is the kind of question a conversation with an attorney can help sort out.

If the Driver Is Called an Independent Contractor: Why That Question Shapes Every Theory

Rideshare companies classify their drivers as independent contractors rather than employees, and that classification sits underneath almost every company-liability case. An independent contractor is a person who does work for a business without being its employee, generally controlling how the work is done. The label matters because the traditional form of vicarious liability, called respondeat superior (Latin for "let the master answer"), holds employers responsible for wrongs employees commit within the scope of their work. It generally does not reach independent contractors in the same way.

Some states have written the classification into statute. As one state's example only, section 2402.114 of the Texas Occupations Code, Chapter 2402, provides that "a driver who is authorized to log in to a transportation network company's digital network is considered an independent contractor for all purposes, and not an employee of the company in any manner, if" the conditions the section lists are met, beginning with things the company does not do. That is Texas's rule, and it applies only on the terms the section sets out. Other states have different statutes, or none on this point, and no one state's rule is the rule everywhere.

Respondeat superior is the form of vicarious liability this page describes, and its reach depends on the driver's classification. Whether any other relationship between a company and a driver could support responsibility for the driver's conduct is a question of state law, and courts in some states have looked at whether a contractor label holds up in particular circumstances. How a court answers that varies by jurisdiction.

For a survivor, this is why the other three theories carry so much weight. Negligent hiring, negligent retention and failure to warn are claims about the company's own conduct: its screening, its response to complaints, its communication with riders. They do not depend on the driver being an employee, so they can apply even where vicarious liability does not.

If you have been told the driver "doesn't work for" the company, that statement does not by itself end the question. Noting where the ride began and ended is a useful starting point, since the state shapes the answer, and how the classification plays out there is something an attorney can help clarify.

What Did the Company Know About the Driver? What a Negligent Hiring or Retention Claim Has to Show

Two moments in time separate these theories. Negligent hiring looks at the moment before a driver is allowed onto the platform: what the company knew, or should reasonably have known, about that person when it said yes. Negligent retention looks at everything after: what the company learned once the driver was working, and whether it kept allowing that driver to take rides anyway.

Both are forms of negligence, generally built from four parts. For someone asking whether a company is responsible, each part becomes a question: did the company owe riders a legal obligation to act with reasonable care (a duty); did it fail to meet that obligation (a breach); is that failure linked to the harm (causation); and what losses did the harm cause (damages). How each part is defined and applied differs from state to state. An assault alone does not show that a company breached any duty.

Background checks, complaint-response practices and driver monitoring sit at the center of these theories because they are how a company learns about the people on its platform. Some states set screening rules by statute. As Texas's example, section 2402.107 of the Texas Occupations Code requires a transportation network company, before letting someone log in as a driver, to "conduct, or cause to be conducted, a local, state, and national criminal background check" that includes the use of "the national sex offender public website maintained by the United States Department of Justice or a successor agency," among other listed sources, and it requires that check annually for each authorized driver. What a statute requires and what a careful company does are related but separate questions in a negligence case.

Pending federal litigation shows how these theories are being raised. The court's page for In re: Uber Technologies, Inc., Passenger Sexual Assault Litigation, Case No. 3:23-md-03084-CRB in the United States District Court for the Northern District of California, describes it as a multidistrict litigation that "centralizes dozens of passenger cases alleging that Uber failed to implement adequate safety precautions (e.g., background checks, training, safety measures, and complaint-response practices), resulting in passengers being sexually assaulted or harassed by Uber drivers," as stated on the case page for the Uber MDL. The case is pending, with new filings and post-trial motions listed on that page, and an allegation in a lawsuit is not a finding that any company was negligent or liable.

If you know of earlier complaints about the same driver, or something about the driver's background, those details go to exactly what these theories ask. The company's own records on screening and complaints are usually not visible to a rider, and how they can be obtained is a question an attorney can help answer.

Should Riders Have Been Told? What the Failure-to-Warn Theory Asks

This theory asks not how the company chose or supervised drivers, but what it told riders. Failure to warn is the claim that a company knew, or should have known, of a risk to people using its service, did not adequately disclose it, and that the missing warning contributed to the harm.

In general terms, the theory asks three things. Was there a risk the company knew of or could reasonably have known of? Did the company fail to disclose it adequately to riders? Did that failure play a part in causing the injury? Each piece is defined by state law.

The practical difference for a survivor is focus. Negligent hiring and retention point at the company's handling of a particular driver. Failure to warn points at the company's communication with the rider: the information a person had, or did not have, when they got into the car. What the app displays before a ride is part of that picture; in Texas, for example, section 2402.104 requires that a rider be shown the driver's first name and picture before entering the vehicle. Safety information and in-app features the company offered, and how it described them, can also bear on what riders were told. The two kinds of theory can sit side by side, because a company's screening and its warnings are separate choices.

Whether a duty to warn exists at all, and how far it reaches, varies by state. If you are wondering whether the company should have told riders something, recalling what the app showed before the ride and what safety information it offered can help. Whether the governing state recognizes a duty to warn in those circumstances is something an attorney can help sort out.

If You Are Wondering Which Records Matter: Facts That Courts and Parties Examine in These Cases

When a company's responsibility is in dispute, the case usually moves from theory to records, and each category connects to a particular theory.

Background check records bear most directly on negligent hiring: what the company checked before approving a driver, what came back, and what it did with the result. Complaint histories bear on negligent retention, since earlier reports about a driver may show what the company knew while that driver kept working. Driver account activity, such as deactivations, reinstatements and account changes, can bear on both. Platform communications, including messages exchanged through the app, can bear on what happened during the trip and on what the company was told afterward. The company's written safety policies bear on every theory, because they show what the company said it would do, and they may be compared with what riders were told.

Some records begin with the rider. Survivors and families often keep the trip record and receipt, in-app messages, incident reports, police reports and medical records. As Texas's example of what a state may require, section 2402.105 of the Texas Occupations Code requires a company to send the passenger an electronic receipt that includes the origin and destination of the ride, among other listed items.

A civil case can go forward without every record in hand; a separate page covers a rideshare lawsuit without a police report only in the sense of how a civil claim works apart from a criminal one. What records exist, who holds them and how they can be obtained is one of the things a conversation with an attorney can help clarify.

If the Ride Happened in a Particular State: How State Law Shapes What a Claim Can Reach

Every rule that decides how far a claim against a company can go comes from the law of a particular state. Limitation periods, fault rules and damages rules differ from one state to the next, and together they decide whether a claim can be heard and what it can cover.

A statute of limitations is the time limit, set by law, for filing a civil claim. When it runs out, a claim is typically barred no matter how strong it might otherwise be. Each state sets its own periods, decides when they begin to run and what exceptions apply, and some states treat claims arising from sexual assault differently from other injury claims. For that reason this page states no period.

Fault rules can affect what a claim may recover. Under comparative fault, recovery is reduced by the share of fault assigned to the injured person. Under contributory fault, an older rule kept in a few places, being found partly at fault can bar recovery entirely. How a state applies these rules in an assault case depends on its own law and the facts.

Damages are the losses a claim may seek to cover: economic losses, such as medical expenses and lost income, and non-economic losses, such as pain and suffering. Some states also allow punitive damages, which are meant to punish especially serious misconduct rather than to repay a loss. What any category may allow depends on the state's law and the facts, and no result is assured. For families who have lost someone, wrongful-death rules, which set who may bring a claim after a death and what it may cover, also vary by state.

The state question can matter as much as the facts, since it sets the deadline, the fault rule and the categories of loss. A case evaluation with our attorney is one way to talk through which state's law may apply to a ride and what that law allows.

Free case evaluation

Tell Us What Happened

Frequently asked questions

Can a rideshare company be held responsible for a driver's assault?

It can, under theories such as negligent hiring, negligent retention, failure to warn and, in some circumstances, vicarious liability. Whether any of them applies depends on the facts of the case and the law of the state where the assault happened. An assault on its own does not establish that a company is responsible.

Does it matter that rideshare drivers are classified as independent contractors?

Yes. The classification often limits vicarious liability, which traditionally applies to employees. That is why negligent hiring, negligent retention and failure to warn matter: they concern the company's own conduct and can apply even when vicarious liability does not. State law governs the classification, and states differ.

What is negligent hiring in a rideshare assault case?

Negligent hiring is a theory about what the company knew or should have known before letting a driver onto its platform. A claim generally involves a duty, a breach of that duty, causation and damages. How each part is defined and applied varies by state.

What is the difference between negligent hiring and negligent retention?

Negligent hiring concerns the decision to approve a driver in the first place. Negligent retention concerns what the company learned afterward, for example through complaints, and whether it kept the driver working anyway. Both are negligence claims judged under the governing state's law.

What is the Uber passenger sexual assault lawsuit about?

It is a pending federal multidistrict litigation, Case No. 3:23-md-03084-CRB, in the Northern District of California. The court's page describes cases alleging that Uber failed to implement adequate safety precautions, such as background checks, training, safety measures and complaint-response practices. Those are allegations, not findings of liability.

How does state law affect a rideshare assault claim against the company?

State law sets the elements of each theory, the statute of limitations, the fault rules and the damages categories. These rules differ from state to state, and no single state's rule applies everywhere. Which state's law governs depends on the facts.

What kinds of records are relevant to a rideshare company liability claim?

Courts and parties often examine background check records, complaint histories, driver account activity, platform communications and the company's written safety policies. Survivors and families often keep trip records, in-app messages, incident and police reports, and medical records. What exists depends on the case.

What damages can someone pursue in a rideshare assault case against the company?

State law defines the categories, which may include economic losses such as medical expenses and lost income, non-economic losses such as pain and suffering, and in some states punitive damages. Wrongful-death rules also vary by state. What any category allows depends on the facts and the law; no outcome is assured.