Vicarious Liability in Singapore: Is Your Company Liable for an Employee’s Wrongdoing?

Short answer: Yes, a Singapore company can be held liable for a wrong committed by its employee even if the company itself did nothing wrong. The Court of Appeal applies a two-stage test: the relationship must be employment or closely akin to it, and that relationship must have created or significantly enhanced the risk of the harm that occurred.

Vicarious liability in Singapore is the rule that makes one person answer in law for a civil wrong (a tort) committed by another, most often an employer answering for an employee. It applies without any fault on the company’s part, so a careless driver, a staff member who leaks customer data or a manager who defrauds a counterparty can each expose the company to a claim. This guide explains the test, where the line falls for contractors and fraud, which statutes impose liability separately, and what to do when a claim arrives.

Raffles Corporate Services works with a panel of experienced Singapore law firms who offer cost-effective and efficient legal service and advice. This article is general information only and is not legal advice.

What is vicarious liability, and where does it come from?

Vicarious liability is secondary liability: the court holds a defendant liable for another person’s tort even though the defendant has not been negligent at all. In Singapore it is a common law doctrine developed by the courts, not a rule in a single statute.

The Court of Appeal in Ng Huat Seng v Munib Mohammad Madni called it an uncommon situation whose limits must be properly understood. The policy behind it is that the party who puts a worker to work, benefits from it, controls it and is better placed to insure against it should, where fair, just and reasonable, bear the cost when that work causes harm.

• The employee who committed the wrong remains personally liable. Vicarious liability adds the company as a defendant; it does not replace the employee.
• It differs from the company’s own (primary) liability. Claimants often plead both, for example that the employee was negligent and that the company failed to train or supervise him.

There is no special court application. Anyone who suffered loss, whether a customer, a member of the public, a counterparty or another employee, starts an ordinary civil claim under the Rules of Court 2021 and names the company, usually with the employee. Court proceedings are conducted by a Singapore Advocate and Solicitor, and a company facing a claim should speak to a lawyer early.

What is the two-stage test for vicarious liability in Singapore?

The court asks, first, whether the relationship between the company and the wrongdoer can give rise to vicarious liability and, second, whether there is a sufficient connection between that relationship and the wrong. The second stage is reached only if the first is satisfied.

An independent contractor relationship is, in the Court of Appeal’s words, the very antithesis of the relationship required, and will generally exclude vicarious liability on its own. In Ng Huat Seng a homeowner was not liable for a demolition contractor that damaged the neighbouring house, because the contractor contracted with consultants and subcontractors in its own name, hired and supervised its own staff, took out its own insurance and kept the payments as its own profit.

Labels do not decide the question. A “freelancer” who works only for you, under your supervision and within your business may be treated as close to an employee. The courts also accept that a company which lends an employee to work under another’s directions is not exempt merely because it had no direct control: in a 2021 case about a lent excavator operator, the Appellate Division of the High Court confirmed that the lending employer could still be vicariously liable.

Is an employer liable for an employee’s fraud or criminal act?

Sometimes. A deliberate or criminal act is not automatically outside vicarious liability, but the court examines all the circumstances, including policy considerations, to decide whether it is fair and just to hold the employer liable.

In Skandinaviska Enskilda Banken AB v Asia Pacific Breweries (Singapore) Pte Ltd [2011] 3 SLR 540, the company’s finance manager carried out an elaborate fraud on several banks for more than four years. The Court of Appeal applied the “close connection” test using factors from the Canadian case of Bazley v Curry:

• the opportunity the business gave the employee to abuse his power;
• how far the wrong furthered the employer’s aims;
• whether the wrong related to friction, confrontation or intimacy inherent in the business;
• the power conferred on the employee in relation to the victim; and
• the vulnerability of potential victims.

The company was held not vicariously liable. The link between the finance manager’s role and the fraud was described as illusory, and the banks could have prevented the fraud by taking basic precautions. The court nonetheless noted the company’s own failure of oversight, a reminder that weak controls invite claims even where vicarious liability fails.

Criminal liability is separate: the employee may be prosecuted, while the company’s civil exposure turns on the tests above. See our guides to employee criminal breach of trust and secret commissions and employee kickbacks.

When does a statute make the company liable for its employees?

Several statutes impose liability on the company directly, which is distinct from vicarious liability at common law. For most businesses the key ones are the Personal Data Protection Act 2012 (PDPA) and the work injury compensation regime.

Section 53 is on Singapore Statutes Online. See also our guides to data breach notification under the PDPA, WICA for employers and Workplace Safety and Health Act penalties.

How should a company respond to a claim?

Act quickly, preserve evidence and involve your insurer and a solicitor before replying. Note the limitation periods: 6 years for most tort claims and 3 years for personal injury (from accrual or later knowledge), so old incidents can still produce claims.

1. Record when the letter of demand or court papers arrived and any deadline. A missed court deadline can lead to judgment in default.
2. Notify every insurer whose policy may respond. Most policies require prompt notice and forbid admitting liability without consent.
3. Preserve documents, emails, CCTV and system logs, and suspend routine deletion for relevant mailboxes.
4. Establish internally who the person was, what they were authorised to do and whether the act happened in the course of their work.
5. Engage a Singapore Advocate and Solicitor to assess both stages of the test, any primary liability allegations and limitation.
6. Consider bringing in others. Order 10 of the Rules of Court 2021 governs third party proceedings, the route for bringing the employee or a contractor into the same action to claim contribution or an indemnity; in some cases the court’s permission is needed (Order 10, Rule 2).
7. Explore settlement or mediation where liability is likely, with the insurer’s written consent.
8. Record the board’s decision to defend or settle in minutes or a directors’ resolution.

How long does a claim take, and what will it cost?

There is no fixed timeline or fee; both depend on the claim’s value, the court and whether it settles. The table describes cost drivers rather than estimates.

Assumptions: a represented claim in the State Courts or the General Division of the High Court. Court fees vary by claim type and amount; your solicitor will confirm them.

Can the company recover its losses from the employee?

In principle, yes. Because the employee is personally liable for the same damage, a company that pays can claim contribution from him under section 15 of the Civil Law Act 1909, and the court may order a complete indemnity under section 16.

In practice recovery is often limited, because the employer is usually the party with the means to pay and the insurance. Weigh the cost against the employee’s assets and any contractual indemnity. In the 2021 lent-operator case, the Appellate Division pointed to two protections for businesses that lend staff: a contractual indemnity from the business directing the work, and carefully framed insurance cover for vicarious liability.

What does the company secretary prepare, and what does the solicitor do?

The company secretary or corporate service provider keeps the corporate records around the claim; the solicitor runs the claim itself.

A judgment against the company does not itself require an ACRA filing, but a material claim may need to be reflected in the financial statements. Directors concerned about personal exposure should review the company’s D&O liability insurance.

What mistakes should employers avoid, and which controls help?

The most common mistakes are assuming that a “contractor” label or a rogue act ends the matter, and acting before the insurer and lawyer are involved.

• Do not rely on labels; the court looks at the substance of the relationship.
• Do not admit liability or offer payment before telling the insurer.
• Do not wipe a departed employee’s mailbox or laptop before a claim is assessed.
• Do not forget the PDPA, under which the employee’s act is the company’s act regardless of approval.
• Do consider a contribution claim against the employee or contractor at the outset.

Controls will not abolish a liability that arises without fault, but they reduce incidents, support the PDPA defence and rebut negligence allegations: written contracts that match reality, payment approval limits with two signatories, trained and documented policies on conduct, data and bribery, role-based system access removed on exit, and an annual insurance review covering employee dishonesty, cyber incidents and seconded staff. When hiring foreign staff, a licensed agency such as Little Big Employment Agency keeps work pass compliance documented, and our free tools help with related compliance tasks.

Frequently asked questions

Is my company liable if the employee broke company rules?

Possibly. Breaching an instruction does not automatically take the act outside the employment. The court asks whether the job created or significantly enhanced the risk of that kind of wrong.

Are we liable for staff supplied by another company?

It depends on the relationship and who directs the work. Both the business directing the work and the lending employer can be liable, and the lending employer is not exempt simply because it lacked direct control.

Can a director be personally liable instead of the company?

Vicarious liability usually attaches to the employer, which is the company. A director can be liable for his own wrongs or under specific statutes, which is a separate question for a lawyer.

Does section 53(2) PDPA protect us from all PDPA action?

No. It is a defence in proceedings for an offence under the PDPA. On its terms it does not cover the PDPC’s separate power to impose financial penalties.

Will our insurance cover a vicarious liability claim?

It depends on the wording. Check which policies respond to claims caused by staff, whether deliberate or dishonest acts are excluded, and what notice the insurer requires.

Last reviewed: 2 November 2026. The Editorial Team, Raffles Corporate Services.