Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you run a small business, you probably already care about your clients - you want them to have a great experience, get results, and come back again.
But a business’s duty of care to clients isn’t just good customer service. It’s also a legal concept that can affect your risk exposure, your contracts, your policies, your insurance, and even your day-to-day decisions (like what warnings you give, what instructions you provide, and what you do when something goes wrong).
The tricky part is that duty of care often shows up after an incident - for example, when a client claims they suffered loss, injury, or harm and says you should have prevented it.
Below, we break down what a duty of care to clients can mean for Australian SMEs, when it commonly applies, what “reasonable care” looks like in practice, and the simple steps you can take to reduce legal risk while still running a customer-friendly business.
What Does “Duty Of Care To Clients” Mean For Small Businesses?
In plain English, a duty of care to clients is your legal responsibility to take reasonable steps to avoid causing foreseeable harm to your clients.
That harm could be:
- Physical harm (e.g. an injury on your premises, or injury during a service you provide).
- Financial loss (e.g. a client relies on your professional advice and suffers loss because it was careless).
- Property damage (e.g. you damage a client’s equipment during an installation or repair).
- Other forms of loss that can arise from negligent conduct (depending on the situation).
Importantly, “duty of care” usually comes up in a negligence claim. A typical negligence argument from a client is:
- You owed them a duty of care;
- You breached that duty (you didn’t act with reasonable care);
- That breach caused their harm; and
- They suffered loss or damage as a result.
For small businesses, the practical takeaway is this: if your business activities create a risk to clients, you should assume there are some legal responsibilities attached - and then put sensible systems in place to manage those risks.
Does Duty Of Care Only Apply In “High-Risk” Industries?
No. While duty of care is most obvious in industries like construction, health, fitness, childcare, and hospitality, it can apply to almost any business that deals with clients.
Even “low-risk” industries can create duty of care issues, especially where clients rely on what you say or do. For example:
- A professional services provider (consultant, advisor, marketer, IT provider) whose client relies on their recommendations.
- An online business whose instructions or product warnings are unclear.
- A service provider who enters a client’s premises and creates a hazard.
When Do You Owe A Duty Of Care To Clients (And When Might You Not)?
Duty of care is not a one-size-fits-all rule, but there are common factors that tend to matter in practice.
Common Situations Where Duty Of Care Is Likely
You’re more likely to owe a duty of care to clients where:
- You have a client relationship (paid or unpaid) and the client is relying on you to perform something safely or competently.
- The risk of harm was foreseeable - meaning a reasonable person in your position could have predicted the possibility of harm.
- You have control over the risk (e.g. your premises, your equipment, your staff, your instructions, your product design, or your processes).
- The client is vulnerable in the situation (e.g. they don’t have the knowledge, ability, or opportunity to protect themselves from the risk).
Situations Where Duty Of Care Arguments Get Harder
A duty of care claim may be harder for a client to establish where:
- The client did something that clearly went against your explicit instructions or warnings.
- The harm was not reasonably foreseeable (it was truly unusual or unexpected).
- The client knowingly accepted a risk after it was clearly explained to them (this is very fact-specific, and warnings won’t automatically prevent liability if your business was still unreasonable in the circumstances).
That said, relying on these “exceptions” is not a great risk strategy. It’s usually far better to build a business process that prevents harm in the first place (and leaves a clear paper trail showing you took reasonable steps).
What Does “Reasonable Care” Look Like In Practice?
A lot of business owners get stuck here: what counts as “reasonable” depends on the facts.
However, most duty of care issues for SMEs come down to a few practical themes.
1. Clear Communication And Warnings
If there is a known risk - even if it feels obvious to you - you should consider whether your clients need clear warnings and instructions.
This can include:
- Safety signage at your premises.
- Written instructions for using products or equipment.
- Pre-service explanations (including what clients should and shouldn’t do).
- Risk disclosures for higher-risk services.
One common mistake is assuming that a client “should have known.” In disputes, the question often becomes: did you actually tell them in a way they could understand and follow? And even where you did warn them, you may still need to take reasonable steps to control risks (not just point them out).
2. Safe Systems Of Work (Even If You Don’t Have Employees)
Duty of care isn’t just about the final outcome - it’s also about your processes.
Examples of “safe systems” include:
- Basic checklists before delivering a service.
- Cleaning and maintenance schedules for equipment or premises.
- Incident reporting and response steps (so staff know what to do).
- Training processes for anyone dealing with clients (including contractors).
If you do have staff, your employment documentation and policies can support safe processes. For example, having a fit-for-purpose Employment Contract helps clarify expectations and responsibilities, which can reduce the chance of unsafe “winging it” on the job.
3. Competent Advice And Deliverables (For Service Providers)
If you provide professional or technical services, “reasonable care” often includes:
- Staying within your scope of expertise (and being clear where your scope ends).
- Asking the right questions before advising a client.
- Documenting assumptions and limitations.
- Flagging risks early and in writing.
This is where well-drafted client terms can be particularly useful. Many SMEs use a Service Agreement to define scope, deliverables, timelines, and what the client must provide - which can reduce misunderstandings that later turn into claims.
4. Managing Client Data And Confidentiality
Not all “harm” is physical. If you collect client personal information (names, emails, addresses, health information, payment details), carelessness can create legal risk and reputational damage.
For many SMEs, a good baseline step is having a properly tailored Privacy Policy and making sure your actual data practices match what it says.
How Contracts And Policies Help Manage Your Duty Of Care To Clients
One concern we often hear is: “If I have strong terms and conditions, does that remove my duty of care?”
In most cases, contracts don’t make your duty of care disappear entirely. But they can reduce risk by setting expectations, limiting misunderstandings, and creating a clearer framework for how issues are handled.
Key Documents That Support Safer Client Relationships
Depending on your business model, these documents can help manage your duty of care to clients:
- Client-facing terms (services or sales): Sets out scope, exclusions, client responsibilities, timeframes, fees, and dispute processes. Often used as a Customer Contract or service terms.
- Website Terms: Particularly important if clients rely on information you publish online (or if you accept bookings/orders through your site). If you operate online, Website Terms and Conditions can help set boundaries around how your site is used.
- Refund and complaint processes: Helps your team respond consistently when something goes wrong, which can prevent escalation.
- Workplace policies and training materials: Ensures consistent service delivery and safer practices (especially if multiple team members interact with clients).
A Quick Note On “Limiting Liability” Clauses
Many SMEs want to include limitation of liability clauses to reduce legal exposure.
These clauses can be useful, but they need to be drafted carefully. Depending on your industry and client type (consumer vs business), certain terms may be restricted or unenforceable - and some liability (including for statutory guarantees) can’t simply be contracted out of.
This is also where Australian Consumer Law (ACL) becomes critical.
How Australian Consumer Law And Other Regulations Overlap With Duty Of Care
Duty of care to clients often intersects with other legal obligations - and for many small businesses, that overlap is where risks sneak in.
Australian Consumer Law (ACL)
If you supply goods or services to a “consumer” under the ACL, you need to comply with the ACL. Importantly, “consumer” doesn’t always mean a member of the public - some business purchases are also covered, for example where the price is under the statutory threshold (currently $100,000), or the goods/services are of a kind ordinarily acquired for personal, domestic or household use, or they’re a vehicle/trailer acquired mainly to transport goods on public roads.
Key ACL risk areas that commonly connect with duty of care issues include:
- Misleading or deceptive conduct: If your marketing overpromises or implies outcomes you can’t guarantee, clients may rely on it and later claim loss.
- Consumer guarantees: Services must generally be provided with due care and skill, and goods must meet certain standards. If something goes wrong, you may need to provide a remedy.
- Unfair contract terms: These rules can apply to standard form consumer contracts and also many standard form small business contracts (and there can be serious consequences for getting this wrong).
Putting clear terms in place helps, but those terms must still be ACL-compliant.
Work Health And Safety (WHS)
If clients come onto your premises, or you deliver services in environments where safety is relevant, WHS obligations may apply alongside your duty of care.
Even if you’re a small operation, WHS is not just “for big companies.” The practical steps (like hazard identification and risk controls) are often the same - just scaled to your business.
Privacy And Data Protection
As mentioned earlier, client data mishandling can create harm and liability. Many small businesses are exempt from the Privacy Act 1988 (Cth) if their annual turnover is $3 million or less, but there are important exceptions (for example, some health service providers and businesses that trade in personal information). Even where the Act doesn’t apply, clients still expect responsible handling of their information.
Good privacy practices can also reduce the chance of disputes and complaints, which is a very real commercial risk for SMEs.
Practical Steps To Reduce Risk And Meet Your Duty Of Care To Clients
Most small businesses don’t get into trouble because they’re reckless - it’s usually because they’re busy, moving fast, and don’t have systems yet.
Here are practical steps you can take to strengthen how you meet your duty of care to clients.
1. Map Your Client Journey (And Identify Where Harm Could Occur)
Start with a simple exercise: write out your client journey from first contact to delivery to after-sales support.
Then ask:
- Where could a client misunderstand something?
- Where could a client get injured or suffer loss?
- Where does a client rely heavily on your advice?
- Where do you collect or store sensitive information?
This isn’t about being pessimistic - it’s about identifying foreseeable risks so you can manage them.
2. Put Key Warnings And Instructions In Writing
Verbal warnings can be forgotten. Written warnings can be referenced later, used in training, and updated over time.
Where possible, include key warnings in:
- booking confirmations;
- pre-service emails;
- packaging inserts or user guides;
- signage at your premises; and
- your client terms.
3. Make Your Contracts Match How You Actually Work
One of the biggest legal risks is having client terms that don’t match reality. For example, your terms might say you provide something in 48 hours, but your real process takes a week. Or your terms might say “no refunds,” which can conflict with ACL in consumer contexts.
Your contract should reflect:
- your actual delivery process;
- who does what (you vs the client);
- how changes are handled (scope creep is a common pain point); and
- what happens if something goes wrong.
4. Train Anyone Who Represents Your Business
Your duty of care to clients isn’t just about what you personally do. It can be affected by your staff, contractors, and anyone dealing with clients on your behalf.
Training doesn’t need to be complex. Even simple onboarding that covers:
- safety procedures;
- how to explain risks to clients;
- when to escalate an issue; and
- how to document incidents;
can significantly reduce your risk.
5. Keep Basic Records (So You Can Prove What Happened)
If there’s ever a complaint or claim, good records make it easier to respond fairly and quickly.
Depending on your business, helpful records might include:
- signed acceptance of terms;
- emails confirming scope and deliverables;
- incident reports;
- maintenance logs;
- photos of completed work; and
- notes of key conversations.
This isn’t about creating admin for the sake of it. It’s about having enough information to resolve issues without it turning into a “your word vs their word” situation.
6. Review Your Approach As You Grow
Your duty of care risk profile changes as you grow. A sole trader working with a handful of clients a month is in a different position to a business with staff, multiple locations, high-value contracts, or high-risk services.
As a general rule, it’s worth reviewing your contracts and processes when you:
- hire staff or contractors;
- change your offerings;
- increase prices or take on larger clients;
- expand into new states; or
- launch online sales or a new platform.
Key Takeaways
- Duty of care to clients is your legal responsibility to take reasonable steps to avoid foreseeable harm to your clients, and it can apply across many industries.
- “Reasonable care” often comes down to clear warnings, competent service delivery, safe processes, and good documentation - not perfection.
- Strong contracts and clear client terms won’t always remove a duty of care, but they can reduce disputes by setting expectations and allocating responsibilities.
- Australian Consumer Law (ACL), privacy, and safety obligations often overlap with duty of care issues, especially where clients rely on your advice or your advertising.
- Practical risk management (training, checklists, incident response steps, written instructions) is one of the best ways to protect your clients and your business.
General information only: This article is not legal advice and is not a substitute for getting advice on your specific circumstances.
If you’d like help putting the right client terms, policies, or contracts in place to manage your duty of care to clients, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.







