A guest incident report is a written record a business creates when a visitor is hurt, has property damaged, or is involved in a security event on the premises. To file one well, document the facts within 24 hours on a standardized form, capture photos and preserve any video, collect witness contact information, keep the narrative strictly factual, and notify your insurance carrier right away. The sections below walk through each step and the traps that cost businesses the most money when a claim turns into litigation.
When a Report Is Required
The threshold for filing is lower than most managers assume. Any time a guest suffers a physical injury on your property, create a report. Slips on wet floors, trips over uneven surfaces, falls on stairways, burns from hot equipment, items falling from shelves, and parking-lot injuries all qualify. If the guest mentions pain or accepts first aid, that alone justifies documentation.
Property damage incidents deserve reports too, even when no one is hurt. A guest’s car struck by a shopping cart, water damage to belongings from a ceiling leak, or a cracked phone after a fall caused by a loose handrail are all situations where a report heads off a dispute weeks later. Security events like altercations between guests, alleged thefts, and trespassing should also be documented immediately, because these escalate into legal claims at a higher rate than ordinary accidents.
A useful rule of thumb: if there is any chance the guest might later seek medical attention or legal advice, file the report. If they have already said they intend to contact a lawyer or a doctor, the report shifts from precaution to necessity, and your insurance carrier needs to hear about it promptly.
One common misconception: federal OSHA recordkeeping does not require guest injuries to be logged the way employee injuries are. OSHA’s injury and illness recordkeeping requirements apply to employees, not visitors.
What to Record
The goal is to freeze the scene in writing before details blur. Start with the basics: the guest’s full name, phone number, email, and mailing address. Collect the same information from anyone who witnessed the event. Witnesses who leave without providing contact details are effectively lost, so treat that step as urgent.
Next, pin down when and where. Record the exact date and time, the specific location within the premises (a particular aisle, stairwell, room number, or section of the parking lot), and the environmental conditions at the time. Was the floor wet? Was the lighting adequate? Was a warning sign posted? These details correspond directly to what a plaintiff’s attorney would need to prove in a premises liability case: that a duty of care existed, that conditions fell short, and that those conditions caused the injury.
If the guest received first aid on-site, note what was provided, who administered it, and what supplies were used. Record the guest’s own description of their symptoms, but do not attempt a diagnosis. “Guest stated her left ankle was swollen and painful” is useful. “Guest appeared to have a sprained ankle” crosses into speculation.
Photographs, Video, and Physical Evidence
A written description of a hazard helps. A photograph of that hazard is far more persuasive. Take multiple photos from different angles right after the event, before anyone cleans up a spill, repositions furniture, or otherwise changes the conditions. Photograph the guest’s injury if they consent. Include wide shots of the surrounding area, not just close-ups of the hazard itself.
If your facility has surveillance cameras, determine right away whether the incident was captured. This is where businesses routinely make expensive mistakes. Many commercial systems overwrite footage on a loop, sometimes within as little as 72 hours. If you don’t flag the relevant footage for preservation immediately, it may be gone before anyone requests it.
Failing to preserve evidence once you reasonably anticipate a claim can trigger what courts call spoliation sanctions. When a business lets relevant surveillance footage or physical evidence be destroyed, a court may instruct the jury to assume the missing evidence would have been unfavorable to the business. That presumption can be devastating in a negligence case. The moment an incident occurs, notify whoever manages your camera system to preserve the footage, and document that step in the report itself.
Language That Helps You and Language That Hurts You
The narrative section is not the place for opinions, apologies, or conclusions about fault. More claims files go sideways here than anywhere else. The report should read like a camera would see it: objective, factual, stripped of editorial commentary.
Phrases to avoid:
- “We are sorry for the accident.” An expression of sympathy can be reframed as an admission of fault during litigation.
- “The floor should have been mopped earlier.” This concedes a breach of duty before anyone has investigated the timeline.
- “We failed to” or “We neglected to.” These admit negligence in the business’s own words.
Instead, describe what you observed. “Guest reported slipping near the entrance. Floor was wet at the time of the event. A wet-floor sign was positioned at the south entrance but not at the north entrance.” That version captures the same facts without drawing legal conclusions. Let the adjuster and the attorneys sort out liability. Your job is to record what happened.
One more thing that catches businesses off guard: do not offer the guest compensation, gift cards, free stays, or other concessions at the scene. Any offer made before your risk management team or insurer has evaluated the situation can be treated as an acknowledgment that the business bears responsibility. Wait for guidance from your carrier.
Completing and Submitting the Report
Most businesses use a standardized form, whether from a corporate template, a risk management platform, or the insurance carrier directly. Fill out every field. Blank fields invite later questions about whether information was collected and lost or never gathered at all.
Complete the report as close to the event as possible. Best practice across the hospitality and retail industries is to finish the initial write-up within 24 hours while details are still sharp. Waiting days or weeks introduces memory errors and undermines the report’s credibility if it is ever examined in litigation.
Submission typically goes to an on-site manager, a corporate risk management department, or a dedicated digital portal. Many larger businesses use third-party administrators that offer round-the-clock claims intake. Whatever the channel, get a timestamped confirmation: a digital receipt, a confirmation email, or a signed acknowledgment from the manager who received it. That timestamp proves you met your internal reporting obligations and can matter later if there is a dispute about when the business became aware of the incident.
Notifying Your Insurance Carrier
Filing an internal report and notifying your insurer are two different steps, and skipping the second is a common and costly mistake. Most commercial general liability policies require the policyholder to report an occurrence “as soon as practicable” or within a “reasonable” amount of time. The policies rarely attach a specific number of days to those phrases, which means the safest approach is to notify your carrier immediately after learning of any incident that could produce a claim.
Late notice is one of the most common grounds insurers use to deny or limit coverage. In many states, the insurer must show it was actually harmed by the delay before it can deny a claim on that basis alone. In other states, late notice by itself is enough for a denial, regardless of whether the insurer suffered any disadvantage. You do not want to find out which rule your state follows the hard way. Report early, even if the incident seems minor. A guest who walks away saying they are fine can show up six months later with a demand letter and a stack of medical bills.
Can the Report Be Used Against You in Court
Business owners sometimes assume that because an incident report is internal, it stays internal. That assumption is usually wrong. Most guest incident reports are fully discoverable, meaning the injured guest’s attorney can demand a copy and use it as evidence.
Under federal rules and most state equivalents, a document is only protected from discovery as “work product” if it was prepared because of anticipated litigation, not simply in the ordinary course of business. An incident report you would have created regardless of whether a lawsuit was likely does not qualify. If company policy requires a report after every guest injury as a routine matter, those reports are created in the ordinary course of business and are almost certainly discoverable.
Some businesses try to route incident reports through legal counsel first, hoping to shield them under attorney-client privilege. This only works if the report’s primary purpose was to seek or provide legal advice. A report that also serves safety tracking, insurance notification, and training purposes will likely lose that protection, because its main purpose was not legal consultation. Courts look at the “dominant purpose” of the document, and a routine incident form filled out by a floor manager rarely passes that test.
Write every incident report as though a jury will eventually read it, because in a contested claim they very well might.
Medical Information and Guest Privacy
When a guest is injured and receives first aid, the report inevitably contains some health-related information. A natural question is whether federal medical privacy law restricts what you can record or share.
For most businesses, the answer is no. HIPAA applies only to “covered entities,” which the law defines as health care providers that transmit information electronically in connection with certain transactions, health plans, and health care clearinghouses. A retail store, hotel, restaurant, or office building that happens to administer first aid to a guest is not a covered entity and is not bound by HIPAA’s privacy rules.1U.S. Department of Health and Human Services. Covered Entities and Business Associates
Basic data-handling principles still apply. Collect only the medical information relevant to documenting the incident. You need to know what injury the guest reported and what first aid was provided. You do not need their broader medical history, current medications, or unrelated diagnoses. Store the completed report in a secure location with access limited to management and risk personnel. Sharing it with people who have no operational need to see it creates unnecessary exposure if the guest later claims their private information was mishandled.
How Long to Keep the Report
Incident reports need to survive long enough to be useful if a lawsuit is filed. Statutes of limitations for personal injury claims vary by state, generally running from one to six years. Many risk management guidelines recommend retaining accident reports for at least six years after the claim is settled or closed. For incidents involving minors, the retention period should be longer, because the statute of limitations in most states does not begin running until the injured person turns 18.
Once litigation is reasonably anticipated, you have an independent obligation to preserve the report and all related evidence regardless of any routine destruction schedule. Shredding files on a standard retention cycle does not excuse you from spoliation consequences if you knew or should have known a claim was coming.
What Happens After You File
After the report is submitted and the insurer is notified, the claim enters an investigation phase. An insurance adjuster may contact your staff within a few days to several weeks to ask follow-up questions and clarify details. Staff who speak with the adjuster should stick to the same factual, non-speculative tone they used in the report itself.
If the guest files a formal claim, the adjuster evaluates liability and damages using the report, photographs, surveillance footage, witness statements, and the guest’s medical records. A thorough, clearly written report filed within 24 hours, supported by photographs and preserved video, gives the adjuster something solid to work with. A vague report completed a week later with no photos and overwritten footage leaves the business in a much weaker position, whether the goal is to defend against the claim or settle it quickly.