Statutory liability is a legal obligation that exists because a legislature wrote it into law. When Congress or a state legislature passes a statute imposing a specific duty on specific people or organizations, violating that duty triggers the penalties the statute itself prescribes. You don’t have to breach a contract or act unreasonably to be on the hook. The statute is the source of the duty, and the statute is the source of the consequence.
This kind of liability runs through most of modern business regulation in the United States, from securities disclosures to hazardous waste cleanup to consumer data protection. A manufacturer that misses a federal deadline to report a known product defect faces liability regardless of whether anyone was actually hurt. The violation itself is enough.
How Statutory Liability Differs From Common Law Liability
Common law liability asks whether you acted reasonably. Statutory liability asks whether you followed the rule. That difference changes what a plaintiff has to prove, what defenses apply, and what penalties you face.
Where the Duty Comes From
Common law duties built up over decades of judicial decisions. Judges spotted patterns of harmful conduct and recognized that people in certain relationships owe each other a duty of care. Statutory duties are deliberate legislative creations aimed at specific problems. Congress treated securities fraud as a threat to capital markets and passed the Securities Exchange Act. It treated hazardous waste as a public health crisis and passed CERCLA.
The practical consequence is specificity. Common law duties tend to be broad and flexible, like “drive with reasonable care.” Statutory duties tend to be narrow and precise, like “file this form within four business days of a triggering event.” That makes compliance more predictable, and it makes violations easier to identify.
Whether Fault Matters
Most common law tort claims require proof that the defendant was at fault—negligence, recklessness, or something worse. Many statutory schemes eliminate that element entirely by imposing strict liability, where the violation alone is enough.
CERCLA is the classic case. If your company generated hazardous waste that ended up at a contaminated site, you’re liable for cleanup costs regardless of whether you followed industry best practice at the time. The government doesn’t need to prove carelessness. It only needs to prove you’re connected to the contamination.
Not every statute works this way. Some reserve the harshest penalties for willful or knowing violations. The Fair Credit Reporting Act, for example, has separate penalty structures for willful noncompliance and negligent noncompliance, with higher damages available when the violation was deliberate.
When a Statutory Violation Feeds a Common Law Claim
The two tracks sometimes merge. Under the doctrine of negligence per se, violating a safety statute can automatically establish that you breached your duty of care in a negligence lawsuit. Run a red light, hit a pedestrian, and the traffic violation itself proves your negligence. The plaintiff doesn’t have to separately argue that running a red light was unreasonable.
Negligence per se applies when the statute was designed to prevent the kind of harm that occurred and the plaintiff is within the class of people the statute was meant to protect. Where both conditions are met, the statutory fine may be modest, but the negligence per se finding can unlock substantial common law damages on top of it.
Common Examples of Statutory Liability
Statutory liability appears in nearly every regulated industry. Four areas generate most of the litigation and most of the dollars.
Securities Law
The Securities Exchange Act of 1934 makes it illegal to use any deceptive scheme in connection with buying or selling securities. Under Rule 10b-5, executives can be sued for material misstatements or omissions in public filings that cause investor losses. The SEC enforces these rules, and private shareholders bring their own class actions.
The Act also reaches people who control the violator. Under Section 20(a), anyone who directly or indirectly controls a securities violator can be held jointly and severally liable to the same extent as the violator, unless they can show they acted in good faith and didn’t induce the violation.1Office of the Law Revision Counsel. 15 U.S. Code 78t – Liability of Controlling Persons and Persons Who Aid and Abet Violations Corporate officers and directors cannot hide behind the company.
Sarbanes-Oxley adds another layer. CEOs and CFOs must personally certify that their company’s periodic financial reports are accurate. A knowing false certification can draw fines up to $1,000,000 and up to 10 years in prison. A willful false certification raises those ceilings to $5,000,000 and 20 years.2Office of the Law Revision Counsel. 18 U.S. Code 1350 – Failure of Corporate Officers to Certify Financial Reports
Environmental Law
CERCLA, commonly called Superfund, is one of the most powerful statutory liability regimes in American law. It imposes strict, joint and several liability on parties responsible for hazardous waste sites. “Strict” means the government doesn’t have to prove negligence. “Joint and several” means any single responsible party can be forced to pay the entire cleanup bill, even where dozens of other parties also contributed.3US EPA. Superfund Liability Cleanup costs for a single site routinely run into the millions.
CERCLA reaches current owners and operators of the contaminated facility, owners and operators at the time of disposal, companies that arranged for disposal or transport, and transporters who selected the site.3US EPA. Superfund Liability
Consumer Protection
Consumer protection statutes are where most individuals encounter statutory liability, usually as beneficiaries rather than targets. The Telephone Consumer Protection Act restricts automated calls, prerecorded messages, and unsolicited texts, with statutory damages of $500 per violation. Courts can triple that to $1,500 per violation when the conduct was willful or knowing.4Office of the Law Revision Counsel. 47 U.S. Code 227 – Restrictions on Use of Telephone Equipment No proof of actual financial loss is required.
The Fair Debt Collection Practices Act allows individuals to recover up to $1,000 in statutory damages per case for abusive collection practices, on top of any actual damages they can prove.5Office of the Law Revision Counsel. 15 U.S. Code 1692k – Civil Liability The Fair Credit Reporting Act allows between $100 and $1,000 per consumer for willful noncompliance, plus punitive damages and attorney fees.6Office of the Law Revision Counsel. 15 U.S. Code 1681n – Civil Liability for Willful Noncompliance
Workplace Safety
The Occupational Safety and Health Act requires every employer to maintain a workplace free from recognized hazards likely to cause death or serious physical harm.7Occupational Safety and Health Administration. OSH Act of 1970 – Section 5 Duties This general duty clause applies even when no specific OSHA standard addresses the hazard. If the risk is recognized in your industry and you haven’t dealt with it, you’re exposed to a citation.
OSHA penalties scale with the nature of the violation. As of the most recent annual adjustment, the maximum penalty for a serious or other-than-serious violation is $16,550, while willful or repeated violations carry a maximum of $165,514 per violation.8Occupational Safety and Health Administration. OSHA Penalties These caps are adjusted annually for inflation. For a company with safety failures across multiple worksites, aggregate exposure climbs quickly.
Penalties and Remedies for Statutory Violations
Statutes define their own remedies. That makes the exposure more predictable than common law damages, but no less serious. Most statutes deploy some mix of the following.
Government-Imposed Fines
Civil monetary penalties are paid to the government, not to any injured party. They function as punishment and deterrence rather than compensation. OSHA’s penalty structure is representative: the statute sets maximum amounts that scale with severity and willfulness, and regulators impose specific amounts within those caps based on the facts of the case.
Statutory Damages
Statutory damages are fixed or formula-based amounts paid to the injured party. They exist for situations where calculating actual harm would be impractical or where the harm per person is small but the misconduct is widespread. The TCPA’s $500-per-call penalty and the FDCPA’s $1,000-per-case cap are the standard examples.4Office of the Law Revision Counsel. 47 U.S. Code 227 – Restrictions on Use of Telephone Equipment5Office of the Law Revision Counsel. 15 U.S. Code 1692k – Civil Liability Combine fixed per-violation damages with class action procedure and a modest individual claim becomes a very large aggregate exposure.
Injunctions and Compliance Orders
Courts and agencies can order a violator to stop the prohibited conduct or take specific corrective action. That might mean halting a deceptive marketing campaign, ending automated calls made without consent, or shutting down a facility until safety problems are fixed. Injunctions directly prevent ongoing harm and can reshape how a business operates.
Restitution, Disgorgement, and Fee Shifting
Financial misconduct cases often add restitution, which returns funds to victims, and disgorgement, which forces the violator to surrender profits earned through the illegal activity. Disgorgement removes the economic incentive for misconduct even where individual losses can’t be precisely calculated.
Many federal statutes also shift attorney fees to a losing defendant. The FCRA, FDCPA, and TCPA all contain fee-shifting provisions.6Office of the Law Revision Counsel. 15 U.S. Code 1681n – Civil Liability for Willful Noncompliance Under the American Rule, each side normally pays its own costs. Fee-shifting reverses that default and makes claims economically viable where statutory damages alone wouldn’t cover the cost of litigation.
Defenses Against Statutory Liability
Strict liability doesn’t always mean inescapable liability. Many statutes build in defenses or safe harbors that protect good-faith actors.
A safe harbor shields you from liability if you meet specific conditions, even where your conduct would otherwise violate the law. The TCPA, for example, provides an affirmative defense for defendants who established and implemented reasonable practices and procedures to prevent violations, with due care, before the violation occurred.4Office of the Law Revision Counsel. 47 U.S. Code 227 – Restrictions on Use of Telephone Equipment It won’t excuse intentional wrongdoing, but it protects companies that made real compliance efforts and still fell short.
CERCLA’s innocent landowner defense works on the same principle. A buyer can avoid Superfund liability by acquiring property with no reason to know of contamination, after conducting all appropriate inquiries into the property’s history, taking reasonable steps to stop any continuing release, cooperating fully with cleanup, and complying with land use restrictions tied to the response action.9Office of the Law Revision Counsel. 42 U.S. Code 9601 – Definitions Missing any element can destroy the defense, which is why environmental due diligence before any commercial property purchase is standard practice.
The Securities Exchange Act offers a parallel good faith defense for controlling persons: a controlling person can escape joint liability by proving they acted in good faith and didn’t induce the violation.1Office of the Law Revision Counsel. 15 U.S. Code 78t – Liability of Controlling Persons and Persons Who Aid and Abet Violations The common thread across these defenses is documented, proactive compliance. Regulators and courts want to see that you tried to follow the law before they’ll excuse a violation.
Time Limits for Statutory Claims
Every statutory claim has a deadline. The default federal rule is a five-year statute of limitations for any civil fine, penalty, or forfeiture, running from the date the claim first arose.10Office of the Law Revision Counsel. 28 U.S. Code 2462 – Time for Commencing Proceedings Many individual statutes override this default with their own shorter or longer periods.
The limitations period cuts both ways for businesses. It eventually closes the window on old violations, but it also means waiting to self-report or remediate doesn’t necessarily run the clock. The period typically starts when the claim accrues, often when the violation occurs or when it’s discovered, not when a potential plaintiff decides to act.
Tax Consequences of Statutory Penalties
Fines and penalties paid to a government for violating the law are generally not tax-deductible. Federal tax rules disallow deductions for any amount paid to or at the direction of a government in connection with a legal violation or an investigation into a potential violation.11Internal Revenue Service. Transitional Guidance Under Sections 162(f) and 6050X With Respect to Certain Fines, Penalties, and Other Amounts
There are narrow exceptions. Restitution payments, meaning money paid to compensate victims or clean up damage, can be deductible if the court order or settlement agreement specifically identifies the payment as restitution and the taxpayer can establish that it genuinely constitutes restitution for harm caused by the violation. Amounts paid to come into compliance with the law you violated can also qualify.12eCFR. 26 CFR 1.162-21 – Denial of Deduction for Certain Fines, Penalties, and Other Amounts The punitive portion of a statutory penalty, the part designed to punish rather than restore, stays nondeductible. For a company paying both CERCLA cleanup costs and EPA civil penalties, the tax treatment of each component can meaningfully change the real financial impact.