Subcontractor Mistake Liability in the UK

A subcontractor misses a deadline, damages a client's equipment, leaks personal data or delivers work that has to be redone. The client does not usually care that someone else made the mistake. They look to the business they contracted with and ask for a refund, repair, compensation or an urgent fix.

The risk often sits in the gap between two contracts: your agreement with the client and your agreement with the subcontractor. Common mistakes include promising strict service levels to the client but giving the subcontractor softer obligations, failing to get an indemnity, and assuming the subcontractor's insurance will automatically cover your loss.

For UK startups, agencies, trades, consultancies and service businesses, the key question is not just who made the error. It is who promised what, who controls the work, what the contracts say, and whether insurance and liability caps line up with the real commercial risk.

When Is the Contractor Responsible for a Subcontractor?

The main contractor is usually responsible to the client under the service agreement for delivering the agreed services, even where part of the work is outsourced to a subcontractor.

If your business signs the client contract, the client-facing promise is normally yours. A marketing agency that hires a freelance designer, an IT consultancy that brings in a developer, or a facilities business that uses a specialist maintenance contractor will commonly remain on the hook to the client if the end result is late, defective or non-compliant.

This is different from saying the subcontractor has no responsibility. The subcontractor may be responsible to you under your subcontractor agreement. The practical issue is that the client will usually claim against the party it contracted with first. You then need a way to recover losses from the subcontractor if their error caused the problem.

Liability for subcontractors in the UK often depends on four connected questions:

• What does the client contract say? Some contracts expressly say the contractor is responsible for acts and omissions of its subcontractors as if they were its own.
• Was subcontracting permitted? If the client contract required consent before subcontracting, using a subcontractor without approval can be a separate breach.
• What did the subcontractor agree to do? A vague purchase order or email trail may not give you the same rights as a detailed subcontractor agreement.
• What loss has actually been suffered? The client may claim direct costs, rework costs, wasted management time, data incident costs, lost profit or reputational harm, depending on the contract and the facts.

Under English contract law, a party that promises to provide services cannot usually avoid liability by saying it delegated the work to someone else. If the services are provided to a consumer, the Consumer Rights Act 2015 requires services to be performed with reasonable care and skill. For many business-to-business service contracts, similar concepts can arise from the Supply of Goods and Services Act 1982 where terms have not been fully set out in writing.

In a B2B setting, the contract will usually do much of the heavy lifting. A well-drafted client contract may limit your liability, exclude certain types of loss and set a clear process for defects or delays. A poorly drafted one may leave you exposed for wide categories of loss while your subcontractor agreement gives you only limited recovery.

There are also situations where responsibility can arise outside a simple breach of contract analysis. For example, if a subcontractor negligently damages a client's property while attending site, the client may allege negligence. If a subcontractor mishandles personal data, UK GDPR and the Data Protection Act 2018 may require a careful look at controller and processor roles. If a worker is misclassified as a subcontractor but operates under close control, employment status and health and safety issues can also complicate the risk picture.

For most SMEs, the commercial reality is straightforward: the client expects one accountable supplier. Your legal documents need to reflect that reality by making sure any subcontractor mistake can be managed, fixed and, where appropriate, claimed back from the subcontractor.

Map the Contract Chain Before a Problem Happens

The safest subcontracting setup has matching promises from client to contractor and contractor to subcontractor.

Before you allocate work to a subcontractor, compare the client-facing obligations with the subcontractor's obligations. This is sometimes called checking the contract chain. The goal is to avoid promising more to the client than you can enforce against the subcontractor.

A common agency example shows the problem. Your agency signs a client agreement promising final campaign assets by Friday, full ownership of deliverables, confidentiality, UK GDPR compliance, and a broad indemnity for third-party intellectual property claims. You then brief a freelancer by email, ask them to create images, and pay them through an invoice. If the freelancer uses unlicensed stock imagery and the client receives an infringement claim, your agency may face the client claim while having limited contractual protection against the freelancer.

The same issue appears in construction, software, consulting, events, manufacturing, logistics and professional services. A contractor responsible for subcontractor performance needs a contract chain that passes down the obligations that matter.

A practical contract chain review should cover:

• Scope of work: The subcontractor's deliverables should clearly cover the part of the client scope they are responsible for.
• Timing: Subcontractor deadlines should be earlier than client deadlines where you need review, integration, testing or approval time.
• Standards: Quality standards, specifications, policies and service level agreement commitments should match the client contract where relevant.
• Approval rights: You should be able to reject, require correction or withhold payment for work that does not meet the required standard.
• Confidentiality: Client confidential information should be protected at subcontractor level.
• Intellectual property: Ownership or licensing terms must allow you to give the client what you promised.
• Data protection: If personal data is involved, the subcontractor agreement should reflect UK GDPR processor obligations where applicable.
• Insurance: The subcontractor should hold insurance that is suitable for the type and scale of work.
• Liability and indemnities: Your ability to recover losses should not be weaker than your exposure to the client.

Client consent is another point business owners often miss. Some client contracts prohibit subcontracting without prior written approval. Others allow subcontracting but say the original contractor remains liable. Some require subcontractor details, specific qualifications, security checks or named personnel.

If you ignore these terms, the client may argue that the act of subcontracting was itself a breach, even if the work was otherwise acceptable. This can be especially sensitive where the client chose your business for a particular founder, specialist or regulated process.

Documentation also matters when a client claim over a subcontractor error becomes contested. Keep clear records of the client brief, subcontractor brief, approvals, change requests, site instructions, test results, delivery notes and incident reports. If the dispute is about who caused the error, contemporaneous records can be more persuasive than a reconstruction months later.

For growing businesses, a standard subcontractor onboarding process is often worth creating. It can include a template agreement, insurance checks, IP assignment wording, data protection questions, conflict checks, safety requirements and a sign-off process before work starts. This is much easier than trying to negotiate after the client has already complained.

Flow-Down Obligations That Protect the Main Contractor

Flow-down obligations make the subcontractor comply with the parts of the client contract that relate to their work.

A flow-down clause is designed to stop the mismatch between what you owe the client and what the subcontractor owes you. It can say that the subcontractor must perform its services in a way that enables you to comply with the client contract, and must comply with relevant client requirements that have been provided to them.

Flow-down wording should not be a lazy copy-and-paste of the entire client agreement. Subcontractors may resist being bound by terms they have never seen, terms that do not apply to their work, or obligations that are commercially unrealistic. A better approach is to identify the clauses that matter for the subcontractor's role and attach or summarise them clearly.

Useful flow-down topics include:

• Specifications and service levels: Technical requirements, response times, delivery milestones and acceptance criteria.
• Client policies: Security, site access, health and safety, anti-bribery, modern slavery, equality and supplier conduct policies where relevant.
• Confidential information: Restrictions on use, storage, disclosure and return or deletion.
• Data protection: Processor terms, security measures, assistance with data subject requests and breach notification steps.
• IP and licensing: Assignment of rights, waiver of moral rights where appropriate, licence permissions and restrictions on third-party materials.
• Change control: A rule that the subcontractor cannot agree client changes directly without your approval.
• Audit and reporting: Records, progress updates and access to evidence needed to satisfy client requests.

Flow-down obligations are particularly valuable where the client contract contains strict operational requirements. For example, a SaaS business might promise uptime, security controls and incident notification procedures to an enterprise customer. If a specialist infrastructure subcontractor is responsible for hosting or monitoring, the subcontractor agreement needs matching operational commitments and escalation procedures.

Data protection needs special care. Under UK GDPR, if your business is a processor for the client and you appoint a sub-processor, the client contract may require prior specific or general written authorisation. The sub-processor should be subject to data protection obligations that provide equivalent protection. If the subcontractor causes a personal data breach, you may need to notify the client quickly, assist with investigations and preserve evidence.

Intellectual property is another common source of client claim subcontractor error issues. A subcontractor might use open-source code without checking licence terms, copy a competitor's content, use stock images outside the licence scope or fail to assign copyright. If you promised the client ownership of deliverables, your subcontractor agreement must give you enough rights to pass that ownership or licence on.

Flow-down terms should also deal with subcontractor communications. The subcontractor should not make promises directly to the client, admit liability, agree variations or offer compensation without your approval. Well-meaning comments can create confusion about scope and responsibility.

A strong practical clause might require the subcontractor to promptly notify you of anything that could affect quality, timing, compliance, safety, data protection or client satisfaction.

Early notice gives you options: reassign work, send additional instructions, seek client approval for a change, or correct the issue before it becomes a formal complaint.

The best flow-down arrangements are operational as well as legal. Share the relevant requirements, brief the subcontractor properly, confirm they have capacity, and make sure your project manager checks compliance during the job. A clause helps, but it cannot replace clear management of outsourced work.

Indemnities, Insurance and Caps on Liability

A subcontractor indemnity clause can help you recover losses caused by the subcontractor, but it needs to work alongside sensible liability caps and insurance.

An indemnity is a promise to compensate another party for specified losses. In subcontracting, it often covers losses arising from the subcontractor's breach, negligence, wilful misconduct, IP infringement, confidentiality breach, data protection breach, employee claims, or damage to property.

Indemnities are attractive because they can create a clearer recovery route when the client makes a claim. If the client claims against you for a subcontractor's error, you may want the subcontractor to cover settlement amounts, rework costs, investigation costs, third-party claims and reasonable professional costs, depending on what is fair and negotiated.

A subcontractor indemnity clause should be specific. Very broad wording can be difficult to negotiate and may not reflect the actual risk. Too narrow a clause may fail when you need it. Focus on the areas where a subcontractor mistake could genuinely hurt your business.

Common indemnity categories include:

• Third-party IP claims: For example, a designer supplies infringing artwork or a developer includes code they were not entitled to use.
• Personal data incidents: For example, a subcontractor sends customer records to the wrong recipient or stores data insecurely.
• Property damage: For example, a trades subcontractor damages client premises or equipment during installation.
• Regulatory breaches: For example, a subcontractor fails to follow legal requirements that apply to their specialist work.
• Employment-related claims: For example, a subcontractor's worker alleges rights against your business because of how the engagement was managed.

Liability caps need equal attention. It may be commercially reasonable for a subcontractor to limit its liability, but the cap should reflect the risk they are taking on. If your client contract exposes you to a large claim, while your subcontractor's liability is capped at one month's fees, you may be left with a significant uninsured gap.

Some liabilities are often carved out of caps or treated differently, such as confidentiality breaches, IP infringement, data protection breaches, fraud, deliberate default, death or personal injury caused by negligence, and payment obligations. The right approach depends on bargaining power, fees, risk level and insurance.

Insurance is not a substitute for a good contract. It is a financial backstop. Ask for the type of insurance that matches the work, such as professional indemnity insurance for advice or design errors, public liability insurance for property damage or injury risks, employers' liability insurance where the subcontractor has employees, product liability insurance for goods, and cyber insurance for technology and data risks.

Do not assume that a policy covers every subcontractor mistake. Professional indemnity policies may exclude contractual liabilities that go beyond negligence. Cyber policies may have conditions about security controls. Public liability may not cover defective workmanship itself. Policy limits, excesses, exclusions and notification rules can make a major difference.

Your client contract may also require your business to maintain certain insurances. If you use subcontractors, check whether your own insurance covers subcontracted work and whether insurers require particular controls. Some policies exclude work performed by subcontractors unless you have written agreements, verified insurance or quality control processes in place.

Where a mistake occurs, avoid rushing into admissions. A client-facing apology and commitment to investigate can be useful, but admitting legal liability, agreeing compensation or altering evidence may prejudice insurance cover or your ability to recover from the subcontractor. Notify insurers promptly where required, gather documents, and follow any contractual dispute or defect process.

A balanced subcontractor agreement usually combines a clear standard of work, acceptance and correction rights, targeted indemnities, appropriate liability caps, insurance requirements and a process for handling client complaints. That combination gives you a practical way to manage the problem without relying on a single clause to do all the work.

FAQs

Can a Client Sue My Business If the Subcontractor Made the Mistake?

Yes, if your business contracted with the client, the client will usually bring the claim against your business. You may then have a separate claim against the subcontractor if their breach, negligence or other wrongdoing caused the loss.

Does Hiring an Independent Subcontractor Remove My Liability?

No, not usually. The subcontractor's independent status may affect employment, tax and control issues, but it does not automatically remove your contractual responsibility to the client. The client contract, subcontractor agreement and any employment contract audit findings are all critical.

What Should I Do When a Client Claim Involves a Subcontractor Error?

Preserve evidence, check both contracts, notify the subcontractor, avoid admissions of liability, review insurance notification requirements and create a clear rectification plan. Keep communications factual and coordinated so the client receives one consistent response.

Can I Pass All Client Liability on to the Subcontractor?

You can try to pass through relevant risks, but it may not be commercially or legally realistic to pass on everything. The subcontractor may negotiate caps, exclusions and limits. Your aim should be to align the main risks as closely as possible and avoid uninsured gaps.

Do I Need a Written Subcontractor Agreement for Small Jobs?

Yes, a short written agreement is still valuable for small jobs. It can confirm scope, deadlines, fees, IP ownership, confidentiality, data protection, insurance and who pays if an error causes loss. Small jobs can still create large client problems.

Key Takeaways

• The client will usually hold the main contractor responsible where the main contractor promised to deliver the work, even if a subcontractor made the mistake.
• Flow-down obligations help align the client contract with the subcontractor agreement, especially for quality, deadlines, confidentiality, IP and data protection.
• A subcontractor indemnity clause should target the real risks, such as IP infringement, data breaches, property damage and third-party claims.
• Liability caps and insurance need to be checked together, as a low subcontractor cap or policy exclusion can leave your business carrying the loss.
• Client consent, clear records, early issue reporting and a controlled complaints process can reduce the damage when outsourced work goes wrong.

If your business relies on subcontractors, Sprintlaw UK can help with your client contract, subcontractor agreement, indemnity wording, IP clauses and data protection terms. Contact our legal team on 08081347754 or at team@sprintlaw.co.uk for a free, no-obligations chat.