Affirmative Duty: When the Law Requires You to Act

An affirmative duty is a legal obligation to take a specific action rather than merely avoid causing harm. Most legal rules tell you what not to do; an affirmative duty flips that framing and requires you to step up. These duties come from statutes, from contracts you’ve signed, and from certain relationships the law treats as demanding action. Ignore one and the consequences can range from a civil lawsuit to regulatory fines to, in serious cases, criminal charges.

Where These Duties Come From

Three sources account for nearly every affirmative duty you’re likely to encounter. Knowing which one applies tells you who can enforce it and what a breach costs.

Statutes and regulations create them constantly. The Occupational Safety and Health Act requires every employer to provide a workplace free from recognized hazards likely to cause death or serious physical harm.¹ The Americans with Disabilities Act makes it illegal for a covered employer to refuse reasonable accommodations for a qualified employee with a disability, unless the accommodation would impose an undue hardship.² Healthcare providers must notify affected individuals within 60 calendar days of discovering a breach of protected health information.³ These duties exist because legislatures decided the public interest requires action, not because of any private relationship.

Contracts create them voluntarily. Sign a contract to renovate a kitchen by June and you’ve taken on an affirmative duty to complete the work by that date. The duty is only as wide as the agreement, but breaching it triggers standard contract remedies such as damages or specific performance.

Special relationships create them by operation of law. When one party depends on another for protection, or one party controls the situation, the law refuses to treat passivity as acceptable. No contract or statute has to spell it out. The list of qualifying relationships is specific, not open-ended.

Special Relationships That Require You to Act

Courts across the country rely on the Restatement (Third) of Torts, which identifies several categories of relationships that impose affirmative duties of reasonable care:

Common carriers (airlines, buses, railroads) owe passengers protection from foreseeable harm and first aid when a passenger is injured or ill.
Innkeepers owe guests reasonable care, including safe premises and response to known dangers.
Land possessors who open property to the public owe visitors protection from foreseeable hazards.
Employers owe employees action when a worker faces imminent danger or is helpless on the job.
Schools owe students safety during school hours and activities.
Custodians (jailers, mental health facilities) owe those in their custody reasonable protection.
Landlords owe tenants maintenance of common areas and attention to known hazards.

The list isn’t closed. Courts have expanded it over the years, and some jurisdictions recognize additional relationships, including among family members. The common thread is dependence on one side and control or superior ability to protect on the other.

The No-Duty-to-Rescue Rule

American law, as a general matter, imposes no duty to rescue a stranger. You can watch someone drowning in a pool without legal obligation to throw a life preserver, however obvious the moral case for doing so. The rule has deep roots in a common-law tradition that draws a hard line between causing harm and failing to prevent it.

The exceptions matter more than the rule in practice. A duty to act arises when:

You created the danger. Put someone in peril, even accidentally, and you pick up a duty to help.
You started the rescue. Once you begin, you generally can’t abandon the effort if walking away would leave the person worse off than before you intervened.
A special relationship exists. The categories above all carry rescue and protection obligations built in.
A statute requires it. About eight states have enacted duty-to-rescue or duty-to-report laws that override the common-law rule. Most only require making a phone call when you witness a serious crime or someone in grave danger, and only when doing so wouldn’t put you at risk.

Good Samaritan laws, which exist in every state, are a different animal. They protect voluntary rescuers from being sued for inadvertent harm during the effort. They don’t create a duty to act; they remove a barrier to acting.

Workplace Duties

The broadest workplace obligation comes from OSHA’s General Duty Clause: every employer must provide a workplace free from recognized hazards causing or likely to cause death or serious physical harm.¹ Employers can’t wait for an injury and react. They must find and address hazards first.

The penalties are meaningful. As of the January 2025 adjustment, OSHA can impose fines up to $16,550 per serious violation and up to $165,514 per willful violation, adjusted annually for inflation.⁴ Repeated violations or a pattern of ignoring known dangers compound quickly.

The ADA adds a separate affirmative duty for employers with 15 or more employees. Failing to make a reasonable accommodation for a qualified individual with a known disability counts as discrimination, unless the accommodation would impose undue hardship.² In practice this means engaging in an “interactive process” with the employee to identify limitations, essential job functions, and workable accommodations.⁵ Saying no and moving on isn’t enough. Neither is going through the motions without good faith.

Property Owner Duties

Owners who open premises to the public — stores, restaurants, offices, venues — must keep conditions reasonably safe for visitors. This is the foundation of premises liability. The duty isn’t limited to fixing known problems. Reasonable inspections to find hazards that aren’t yet obvious are part of the obligation.

Take a grocery store spill. The store’s duty is not just to avoid pouring water on the floor. It must check aisles, clean spills promptly, and post warnings when the hazard can’t be addressed immediately. If a customer slips, the question isn’t intent. It’s whether the store took reasonable steps to prevent the harm.

Owners aren’t insurers of visitor safety. The standard is reasonable care, not perfection. A pothole that appeared five minutes ago is treated differently from one that’s been there for weeks. Still, “I didn’t know” isn’t automatically a defense, because the owner had a duty to look.

Professional and Fiduciary Duties

Once a doctor-patient relationship begins, the physician takes on an affirmative duty to provide competent care, give sufficient information for informed consent, and support continuity of treatment.⁶ A doctor walking past a stranger on the street has no such duty. Once the professional relationship attaches, though, the obligation is broad: diagnose competently, recommend appropriate treatment, refer out when the problem exceeds your expertise, and don’t abandon the patient mid-treatment. Failure to meet this standard is the basis for medical malpractice claims.

Attorneys owe clients fiduciary duties that include loyalty and the obligation to avoid conflicts of interest.⁷ The duty isn’t satisfied by not stealing from the client. The attorney has to actively identify potential conflicts, disclose them, and either obtain informed consent or withdraw.

Registered investment advisers face parallel constraints. The Investment Advisers Act makes it unlawful for an adviser to employ any scheme to defraud clients or engage in any practice that operates as fraud or deceit on a client.⁸ Courts have read this to impose a fiduciary duty to act in the client’s best interest, disclose material conflicts, and give advice suitable for the client’s situation. Steering a retiree into high-risk investments to generate commissions is a breach, not merely bad advice.

Duties to Report and Disclose

Some of the sharpest affirmative duties are reporting rules where silence itself is the violation.

Federal law doesn’t directly require individuals to report child abuse. Instead, the Child Abuse Prevention and Treatment Act conditions federal funding on each state maintaining laws that require reporting of known or suspected child abuse and neglect.⁹ Every state has responded with mandatory reporting statutes, though who counts as a mandatory reporter varies. Teachers, doctors, nurses, social workers, and childcare providers are almost universally covered. Many states extend the duty to any person who suspects abuse. Penalties for failing to report typically include misdemeanor charges, fines, or both. In most states, telling a supervisor or coworker doesn’t satisfy the obligation. The report has to go to a designated child protective services agency or law enforcement.

When a covered entity discovers a breach of unsecured protected health information, federal regulations require notice to each affected individual without unreasonable delay and no later than 60 calendar days after discovery.³ The clock starts when the entity knew or should have known with reasonable diligence. Breaches affecting 500 or more people also require notice to HHS and prominent media outlets in the affected area.

Public companies face their own affirmative disclosure duty for cyberattacks. Under SEC rules effective in late 2023, a company that determines it has experienced a material cybersecurity incident must file a Form 8-K within four business days of that materiality determination.¹⁰ The filing must describe the nature, scope, and timing of the incident and its material impact on financial condition. Information not yet available within the four-day window must be flagged, and the filing amended once the details come in.¹¹

What a Breach Costs

The most common consequence of failing to fulfill an affirmative duty is a negligence lawsuit. The injured party has to prove four elements: a duty existed, it was breached, the breach caused harm, and measurable damages resulted.¹² When the duty is affirmative, the breach is something you didn’t do. A property owner who ignores a crumbling staircase for months doesn’t need to push anyone to face liability. The failure to repair or warn is the breach. Damages can include medical expenses, lost income, pain and suffering, and future care. When the duty came from a contract, the claim is breach of contract, and damages are measured by what it takes to put the injured party where they’d have been if the contract had been honored.

When the duty comes from a statute, the government doesn’t have to wait for anyone to get hurt. Agencies can impose fines, require corrective action, or shut down operations. Clean Air Act violations, for instance, can bring civil penalties exceeding $124,000 per violation.¹³ The EPA can also require corrective measures, from cleaning up contamination to installing pollution controls, on top of any monetary penalty.¹⁴ OSHA fines can stack across violations found in a single inspection, with deliberate violations drawing the steepest amounts.

Criminal liability is the exception, not the norm, but it isn’t theoretical. Mandatory reporters who don’t report suspected child abuse face misdemeanor charges in most states. Healthcare entities that deliberately ignore HIPAA notification requirements can face criminal referrals. Environmental violators who intentionally circumvent regulations can be prosecuted with penalties that include imprisonment and restitution.¹⁴ Criminal exposure tends to appear when the breach is willful and the potential harm is severe.

Affirmative Duty Is Not Affirmative Defense

The two terms sound alike and get confused constantly, but they’re unrelated. An affirmative duty is an obligation to act; it exists before anything goes wrong. An affirmative defense is a legal argument raised during a lawsuit. A defendant raising one is saying that even if everything the plaintiff claims is true, the defendant still shouldn’t lose because of some additional fact. Self-defense in a criminal case and the statute of limitations in a civil case are classic affirmative defenses, and the defendant carries the burden of proving them. In “affirmative duty,” the word means you must take positive action. In “affirmative defense,” it means the defendant is affirmatively raising a new issue rather than simply denying the plaintiff’s claims.

1
Office of the Law Revision Counsel. 29 USC 654 – Duties of Employers and Employees
2
Office of the Law Revision Counsel. 42 USC 12112 – Discrimination
3
eCFR. 45 CFR 164.404 – Notification to Individuals
4
Occupational Safety and Health Administration. OSHA Penalties
5
Department of the Interior. Reasonable Accommodation: An Effective Interactive Process
6
AMA Code of Medical Ethics. Patient-Physician Relationships
7
American Bar Association. Model Rules of Professional Conduct Rule 1.7 – Conflict of Interest: Current Clients
8
GovInfo. 15 USC 80b-6 – Prohibited Transactions by Investment Advisers
9
Office of the Law Revision Counsel. 42 USC 5106a – Grants to States for Child Abuse or Neglect Prevention and Treatment Programs
10
U.S. Securities and Exchange Commission. Form 8-K
11
U.S. Securities and Exchange Commission. Disclosure of Cybersecurity Incidents Determined To Be Material
12
Legal Information Institute. Negligence
13
eCFR. 40 CFR 19.4 – Adjusted Civil Monetary Penalties
14
U.S. Environmental Protection Agency. Fact Sheet: EPA’s Civil Enforcement Program