OPINION
This case presents the question of the continued viability of
Cornpropst v. Sloan,
I.
On September 7, 1990, thirty-seven year-old Dorothy McClung, plaintiffs wife, went shopping at Wal-Mart in the Delta Square Shopping Center in Memphis. As she was returning to her parked car around noon, *894 Mrs. McClung was abducted at gunpoint and forced into her car by Joseph Harper, a fugitive from Chattanooga. 1 Later, Harper raped Mrs. McClung and forced her into the trunk of her car where she suffocated. Her body was found by hunters in a field in Arkansas the day after the abduction. Harper confessed, and was convicted of kidnapping, rape, and murder. He committed suicide after being sentenced to life in prison.
Plaintiff filed suit against defendants on his own behalf and on behalf of his and Mrs. McClung’s three minor children. In his suit, he alleged that defendant Wal-Mart, the anchor tenant at the Delta Square Shopping Center, and defendant Delta Square, the owner and operator of the center, were negligent in failing to provide security measures for the parking lot and that their negligence was the proximate cause of Mrs. MeCIung’s death.
Feeling compelled to follow this Court’s decision in
Cornpropst v. Sloan,
II.
A.
As is noted, this ease is before the Court on the trial court’s grant of summary judgment. Therefore, we must review the record without attaching any presumption of correctness to the trial court’s judgment to determine whether the absence of genuine issues of material facts entitle defendants to judgment as a matter of law.
Carvell v. Bottoms,
B.
To establish negligence, one must prove: (1) a duty of care owed by defendant to plaintiff; (2) conduct falling below the applicable standard of care that amounts to a breach of that duty; (3) an injury or loss; (4) cause in fact; and (5) proximate, or legal, cause.
McCall v. Wilder,
We have defined duty of care to be the legal obligation owed by defendant to plaintiff to conform to a reasonable person standard of care for protection against unreasonable risks of harm.
McCall v. Wilder,
Assuming a duty is owed, it must be determined whether defendant has exercised reasonable care under the circumstances.
McCall v. Wilder,
The trial court and the Court of Appeals based the award of summary judgment in this case on
Cornpropst v. Sloan,
The Court in
Compropst
began its analysis by observing that the common law imposed no duly on anyone, except the government, to protect others from criminal acts of unknown third persons, even though it did impose upon merchants a duty to exercise reasonable care to maintain their premises in a reasonably safe condition.
Cornpropst v. Sloan,
Choosing to follow the then-prevailing rule, the Compropst Court refused to impose a duty in the case which it characterized as involving “vague allegation[s] that various crimes, assaults and other acts of violence had been committed either on the premises or in the immediate area.” Id. at 193. The Court deemed it unfair to impose a duty upon the shopping center owner because the attacker “gave no notice by word, act, dress or deed prior to the commission of the attack that would have indicated to anyone an intention of purpose to commit an assault.” Id. at 197. In affirming the dismissal of the complaint, the Court adopted the following rule, which has become the analytical focal point in these types of cases:
There is no duty upon the owners or operators of a shopping center, individually or collectively, or upon merchants and shopkeepers generally, whose mode of operation of their premises does not attract or provide a climate for crime, to guard against the criminal acts of a third party, unless they know or have reason to know that acts are occurring or about to occur on the premises that pose imminent probability of harm to an invitee; whereupon a duty of reasonable care to protect against such act arises.
*896 Id. at 198 (emphasis added). Thus, Com-propst established the principle in Tennessee that businesses not attracting or providing a favorable environment for crime have no duty to protect customers, unless (1) the business knows or has reason to know that criminal acts are occurring or about to occur on the premises, which (2) pose an imminent probability of harm to a customer. In determining whether the business had reason to know, the Court concluded that “[c]onditions in the area [of the defendant business] are irrelevant.” Id. at 197.
The Court’s decision was not unanimous. In a dissent, Justice Henry opined that the standard “affords virtually no protection to shopping center invitees ... and virtually immunizes the owner against liability....” Id. at 200 (Henry, J., dissenting). He found the rule to be unduly restrictive and “not in the best interest of the consuming public” given the “modern phenomenon of merchandising and marketing through community shopping centers” that result in “enormous congregations of potential and actual shoppers in relatively compact areas_” Id. at 199-200 (Henry J., dissenting). Justice Henry advocated (as did the trial judge in this case) the adoption of the rule expressed in the Restatement (Second) of Torts, § 344 (1965). That rule provides:
A possessor of land who holds it open to the public for entry for ... business purposes is subject to liability to members of the public while they are upon the land for such a purpose, for physical harm caused by the accidental, negligent, or intentionally harmful acts of third persons or animals, and by the failure of the possessor to exercise reasonable care to (a) discover that such acts are being done or are likely to be done, or (b) give a warning adequate to enable the visitors to avoid the harm, or otherwise to protect them against it.
Cornpropst v. Sloan,
Although
Cornpropst
is the only case of its kind decided by this Court, the Court of Appeals has decided several similar cases.
See, e.g., Lewter v. O’Connor Mgmt. Inc.,
C.
The
Compropst
Court had little case law to guide its decision.
See generally
Annotation,
Liability of Owner or Operator of Shopping Center, or Business Housed Therein, for Injury to Patron on Premises from Criminal Attack by Third Party,
In the early cases, courts generally denied recovery to customer victims under the theory that the business had no duty to protect its patrons from criminal attacks.
See, e.g., Davis v. Allied Supermarkets, Inc.,
Notwithstanding the reluctance to impose a duty on business owners, the majority of courts that have considered the issue have been unwilling to hold that a business never has a duty to protect customers from crimi- . nal acts. Instead, most have held that, while not insurers of their customers’ safety, businesses do have a duty to take reasonable precautions to protect customers from foreseeable criminal acts.
Taco Bell, Inc. v. Lannon,
Based on this analysis of the decisions of other jurisdictions, we must disavow the observation made in
Compropst
that “conditions in the area [of the defendant business] are irrelevant” in assessing the foreseeability of a criminal act.
Cornpropst v. Sloan,
We, therefore, join those courts which generally impose a duty upon businesses to take reasonable measures to protect their customers from foreseeable criminal attacks. Because those courts do not universally agree on the meaning of “foreseeability,” further consideration is required. In determining foreseeability, some courts have utilized the so-called
“prior
incidents rule.”
See, e.g., Polomie v. Golub Corp.,
— A.D.2d-,
The prior incidents approach to foreseeability has been lauded as preventing businesses from effectively becoming insurers of public safety since “[i]t is difficult, if not impossible, to envision any locale open to the public where the occurrence of violent crime seems improbable.”
Ann M. v. Pacific Plaza Shopping Center,
First, the rule leads to results which are contrary to public policy. The rule has the effect of discouraging landowners from taking adequate measures to protect premises which they know are dangerous. This result contravenes the policy of preventing future harm. Moreover, under the rule, the first victim always loses, while subse *900 quent victims are permitted recovery. Such a result is not only unfair, but it is inimical to the important policy of compensating injured parties. Surely, a landowner should not get one free assault before he can be held liable for criminal acts which occur on his property.
Second, a rule which limits evidence of foreseeability to prior similar criminal acts leads to arbitrary results and distinctions. Under this rule, there is uncertainty as to how “similar” the prior incidents must be to satisfy the rule. The rule raises a number of other troubling questions. For example, how close in time do the prior incidents have to be? How near in location must they be? The rule invites different courts to enunciate different standards of foreseeability based on their resolution of these questions.
Third, the rule erroneously equates foreseeability of a particular act with previous occurrences of similar acts.... “[T]he fortuitous absence of prior injury does not justify relieving defendant from responsibility for the foreseeable consequences of its acts.”
Finally, the “prior similar incidents rule” improperly removes too many cases from the jury’s consideration. It is well-established that foreseeability is ordinarily a question of fact.
Isaacs v. Huntington Memorial Hosp.,
Because of these criticisms, several courts have rejected the prior incidents rule in favor of a “totality of the circumstances” approach, in which the foreseeability of criminal conduct may be determined by considering all of the circumstances including the nature or character of the business, its location, and prior incidents of crime, if any.
See, e.g., Doud v. Las Vegas Hilton Corp.,
Nonetheless, the totality of the circumstances approach has been criticized as well, as being too broad a standard, effectively imposing an unqualified duty to protect customers in areas experiencing any significant level of criminal activity.
See Ann M. v. Pacific Plaza Shopping Center,
Having found that because of its severe limitations, the rule advanced in Compropst is obsolete, and having found further that the prior incidents rule and the totality of the circumstances approach do not provide a suitable balance between the burden of the duty to be imposed and the nature of the *901 rights to be protected, we turn to our own decisions for guidance in determining the appropriate duty of care.
Our recent pronouncements concerning the duty of care in negligence cases reveal a balancing approach consistent with our prevailing principles of fairness and justice. In
McCall v. Wilder,
Similarly, all of our recent cases addressing the existence or non-existence of a duty utilize a balancing approach.
See Woodson v. Porter Brown Limestone Co.,
Thus, our decisions regarding the existence of a duty in a negligence action generally demonstrate a balancing approach. At least one other state, California, has adopted a “balancing” approach to determine duty. This approach retains some beneficial features of both the prior incidents and totality of the circumstances tests, but avoids some of the problems associated with each.
Ann M. v. Pacific Plaza Shopping Center,
D.
After careful consideration of the jurisprudence of other jurisdictions and our own, we *902 adopt the following principles to be used in determining the duty of care owed by the owners and occupiers of business premises to customers to protect them against the criminal acts of third parties: A business ordinarily has no duty to protect customers from the criminal acts of third parties which occur on its premises. The business is not to be regarded as the insurer of the safety of its customers, and it has no absolute duty to implement security measures for the protection of its customers. However, a duty to take reasonable steps to protect customers arises if the business knows, or has reason to know, either from what has been or should have been observed or from past experience, that criminal acts against its customers on its premises are reasonably foreseeable, either generally or at some particular time.
In determining the duty that exists, the foreseeability of harm and the gravity of harm must be balanced against the commensurate burden imposed on the business to protect against that harm. In cases in which there is a high degree of foreseeability of harm and the probable harm is great, the burden imposed upon defendant may be substantial. Alternatively, in eases in which a lesser degree of foreseeability is present or the potential harm is slight, less onerous burdens may be imposed. By way of illustration, using surveillance cameras, posting signs, installing improved lighting or fencing, or removing or trimming shrubbery might, in some instances, be cost effective and yet greatly reduce the risk to customers.
See Seibert v. Vic Regnier Builders, Inc.,
As a practical matter, the requisite degree of foreseeability essential to establish a duty to protect against criminal acts will almost always require that prior instances of crime have occurred on or in the immediate vicinity of defendant’s premises. Courts must consider the location, nature, and extent of previous criminal activities and their similarity, proximity, or other relationship to the crime giving rise to the cause of action. 8 To hold otherwise would impose an undue burden upon merchants.
The balancing approach we adopt appropriately addresses both the economic concerns of businesses and the safety concerns of customers who are harmed due to the negligence of one seeking their business. The interpretation of the notice requirement of Compropst, see text preceding n. 2, supra, virtually eliminated these causes of action. The criminal who intends to strike in defendant’s parking lot will not enter defendant’s store to announce his intentions and thereby provide defendant actual notice of the impending attack. In short, this new rule provides the fairest and most equitable results. It creates a duty in limited circumstances, giving merchants neither absolute immunity nor imposing absolute liability. It recognizes the national trend that businesses must justifiably expect to share in the cost of crime attracted to the business. It encourages a reasonable response to the crime phenomenon without making unreasonable demands.
The standard we adopt is the product of attempts by many jurisdictions to deal with this admittedly difficult issue. While embracing neither the totality of the cireum-
*903
stances nor the prior incidents tests in toto, we have retained the desirable features of both approaches, while avoiding the inherent problems associated with each. For example, we have preserved the primary advantage of the prior incidents rule by not creating an environment where businesses are essentially held strictly liable for customer safety. At the same time, our approach should enable meritorious cases to proceed to the jury which is typical of deserving cases tried under the totality of the circumstances approach. Moreover, rather than having an incentive to do nothing (out of fear of having assumed a duty), businesses will be encouraged to take reasonable security precautions, another characteristic of the totality of the circumstances test.
9
The merchant is in the best position to know the extent of crime” on the premises and is better equipped than customers to take measures to thwart it and to distribute the costs.
Craig v. A.A.R. Realty Corp.,
E.
Having established the appropriate test for determining the duty of care in cases involving business premises liability for the acts of unknown third parties and for the purpose of offering an illustration of the analysis required of courts in these type of cases, we return to the facts of the case at bar. Here, plaintiffs wife was returning to her car m defendants’ parking lot when she was accosted. Plaintiff argues that because of past crimes committed on or near defendants’ parking lot, a requisite degree of foreseeability to impose a duty to take reasonable precautions was established. To support this contention, plaintiff relies upon records from the Memphis Police Department, which indicate that from May, 1989 through September, 1990, when plaintiffs wife was abducted, approximately 164 criminal incidents had occurred on or near defendants’ parking lot. He also relies on the fact that defendants’ nearby competitors provide outdoor security measures and that Wal-Mart uses heightened security measures at other locations.
In response, defendants argue that no duty of reasonable care should be imposed because the attack on plaintiffs wife was neither foreseeable nor preventible. Defendants claim they had no notice that Harper was likely to abduct plaintiffs wife, no reason to have anticipated the attack when it occurred, and no reasonable way to have prevented it. They also assert that providing security is prohibitively expensive, and that security has little impact on preventing crime.
We reject defendants’ argument that it owed plaintiffs wife no duty because the attack was not reasonably foreseeable. In *904 the seventeen months prior to the abduction, the numerous reports of crime to police on or near defendants’ premises included a bomb threat, fourteen burglaries, twelve reports of malicious mischief, ten robberies, thirty-six auto thefts, ninety larcenies, and one attempted kidnapping on a parking lot adjacent to defendants’ parking lot. All of these crimes occurred on or in the immediate vicinity of defendants’ parking lot, took place within a relatively short period of time prior to the abduction of plaintiff’s wife, and involved a significant threat of personal harm. The record also establishes that defendants’ premises was located in a high crime area, and that other nearby major retail centers utilized security measures to protect customers. 11 The manager of the Wal-Mart store at the time of the abduction testified that he would not hold “sidewalk sales” or place merchandise outside the store, except for “dirt,” out of fear it would be stolen.
Considering the number, frequency, and nature of the crimes reported to police, management’s acknowledgement of security problems, and other evidence in the record, we conclude that the proof would support a finding that the risk of injury to plaintiff’s wife was reasonably foreseeable. Of course, foreseeability alone does not establish the existence of a duty. On remand, the magnitude of the potential harm and the burden imposed upon defendants must also be weighed to determine the existence of a duty. While we know little from this record about the extent of injury to customers as a result of criminal acts on or near defendants’ premises, we are persuaded that whatever the extent of the injuries, the magnitude of the potential harm was substantial given the nature of the crimes reported to police. 12
On remand, the court must also consider the burden which the duty would impose upon defendants. We note, for example, that defendants contend that they have no reasonable means of foreseeing the possibility of crime on their premises; that security measures are not effective in reducing crime; and that providing security is cost prohibitive. These arguments must be considered on remand in light of conflicting information supplied by one of Wal-Mart’s senior security and loss prevention executives. 13
In weighing the magnitude of harm and the burden imposed upon defendant, the court must consider whether imposing a duty to take reasonable measures to protect patrons from the consequences of criminal acts of third persons would place an onerous burden — economic or otherwise — upon defendants. If it does not, then the court must consider whether the burden outweighs the foreseeability and gravity of the possible harm, so as to preclude the finding of a duty to take reasonable steps to protect patrons. We hasten to point out, however, that the question of duty and of whether defendants have breached that duty by taking or not taking certain actions is one for the jury to determine based upon proof presented at trial. Additionally, if properly raised as a defense, under our doctrine of comparative fault, a plaintiffs duty to exercise reasonable care for her own safety would be weighed in the balance.
Perez v. McConkey,
*905 Finally, we must address defendants’ argument that random criminal acts of unknown third persons amount to superseding, intervening causes for which defendants cannot be held liable as a matter of law. It is true, as pointed out by defendants, that a superseding, intervening cause can break the chain of causation. In this regard, we have stated that
[t]here is no requirement that a cause, to be regarded as the proximate cause of an injury, be the sole cause, the last act, or the one nearest to the injury, provided it is a substantial factor in producing the end result. An intervening act, which is a normal response created by negligence, is not a superseding, intervening cause so as to relieve the original wrongdoer of liability, provided the intervening act could have reasonably been foreseen and the conduct was a substantial factor in bringing about the harm.
Haynes v. Hamilton County,
In conclusion, this record, viewed in light of the principles set forth in this opinion, precludes an award of summary judgment. Assuming for purposes of this analysis that defendants were negligent, we are unable to conclude that all reasonable persons must agree, as a matter of law, that defendants’ negligence in falling to provide any security measures did not create a favorable environment for criminal activity. Considering the number, nature, and frequency of crimes committed on or near defendants’ premises, it is not beyond the realm of reasonable anticipation that a jury could conclude that defendants’ negligence created a foreseeable risk of harm to plaintiffs wife, and that defendants’ negligence was a substantial factor in bringing about that harm.
See
Tenn. R. Civ. P. 56.03. Such questions are “peculiarly for the jury” given the present state of this record.
McClenahan v. Cooley,
For the reasons stated above, the judgments of the lower courts are reversed. The case is remanded to the trial court for further proceedings consistent with this opinion. The principles set forth today apply to all cases tried or retried after the date of this opinion and all cases on appeal in which the issue in this case has been raised. Costs shall be taxed to defendants.
Notes
. Harper was sought by police for robbing a Chattanooga man, forcing him into the trunk of his car, and stealing the car two days prior to his abduction of Mrs. McClung. It was this stolen car that Harper drove from Chattanooga to the Memphis parking lot where he abducted Mrs. McClung.
. “Duty to police premises. Since the possessor is not an insurer of the visitor’s safety, [the possessor] is ordinarily under no duty to exercise any care until [the possessor] knows or has reason to know that the acts of the third person are occurring, or are about to occur. [The possessor] may, however, know or have reason to know, from past experience, that there is a likelihood of conduct on the part of third persons in general which is likely to endanger the safety of the visitor, even though [the possessor] has no reason to expect it on the part of any particular individual. If the place or the character of [the] business, or [the] past experience, is such that [the possessor] should reasonably anticipate careless or criminal conduct on the part of third persons, either generally or at some particular time, [the possessor] may be under a duty to take precautions against it_" Restatement (Second) of Torts, § 344, comment f (1965).
. The rule adopted in
Compropst
has also been applied to criminal acts of third parties not occurring on defendant’s parking lot, or even its premises.
See e.g., Louria v. Brummett,
. See, e.g., Comment, Ann M. v. Pacific Plaza Shopping Center: The California Supreme Court Retreats From Its Totality of the Circumstances Approach to Premises Liability, 28 Ga. L.Rev. 1053 (1994); Comment, Business Owners’ Duty to Protect Patrons from the Criminal Acts of Third Parties in Louisiana, 53 La. L.Rev. 1847 (1993); Robertson, Negligence Liability for Crimes and Intentional Torts Committed by Others, 67 Tut. L.Rev. 135 (1992); Friedman and Worthington, Trends in Holding Business Organizations Liable for the Criminal Acts of Third Persons on the Premises: A Texas Perspective, 32 S. Tex. L.Rev. 257 (1991); Kaufman, When Crime Pays: Business Landlord's Duty to Protect Customers from Criminal Acts Committed on the Premises, 31 S. Tex. L.Rev. 89 (1990); Comment, Business Owners’ Duty to Protect Invitees from Third Party Criminal Attacks, 54 Mo. L.Rev. 443 (1989); Comment, Business Inviters’ Duty to Protect Invitees from Criminal Acts, 134 U. Pa. L.Rev. 883 (1986); Comment, “Am I my Brother's Keeper?": Compropst v. Sloan, A Business Proprietor’s Civil Liability for Criminal Attacks to an Invitee by a Third Party, 9 A.J. Trial Advoc. 473 (1986).
. It should be noted that
Goldberg,
one of the primary cases relied upon by the majority in
Compropst,
has since been abandoned by the New Jersey Supreme Court, as that court has adopted the approach espoused by
Restatement (Second
) § 344.
Butler v. Acme Markets, Inc.,
. Everyone can foresee that commission of crime virtually anywhere and at any time. If foreseeability itself gave rise to a duty to provide "police protection for others, every residential curtilage, every shop, every store, every manufacturing plant would have to be patrolled by the private arms of the owner. And since hijacking and attach upon occupants of motor vehicles are also foreseeable, it would be the duty of every motorist to provide armed protection for his passengers and the property of others. Of course, none of this is at all palatable.
The question is not simply whether a criminal event is foreseeable, but whether a duty exists to take measures to guard against it. Whether a duty exists is ultimately a question of fairness ....”
Goldberg v. Housing Auth. of Newark,
. "[I]t does not seem that shifting the financial loss caused by crime from one innocent victim to another innocent victim is proper.”
Davis v. Allied Supermarkets, Inc.,
. This approach is consistent with the approach taken in
Doe v. Linder Const. Co., Inc.,
. As stated by one of the amicus participants in this case, "[i]f the premises owner does nothing to make himself or herself aware of the potential imminent probability of harm to a customer, then no liability will extend under the [current] rule. The effect is that ignorance translates into nonliability and economic bliss for merchants, while business patrons can easily be victimized by criminals who stalk the malls and parking lots of shopping and retail centers.” See also 31 So. Tex. L.Rev. at 110-11 ( "Only by imposing a duty to protect will business proprietors have the necessary incentive to take measures that will limit the number of crimes committed.... While very generalized economic incentives will encourage owners to take some steps to reassure customers about their safety, common experience demonstrates that these incentives are not enough to encourage efficient crime prevention.”).
.
[O]f all the involved parties, the cost of crime reduction is cheapest to the landowner. For the criminal, imposing civil liability on him in addition to existing criminal sanctions does not deter him from committing the crime. Imposing duty on the patron, so that he must protect and compensate himself, may result in crime reduction, but only at the expensive cost of the patron staying home. While the patron can prevent crime by not going out at night, the price of staying home is high not only for him but also for society in general. As opposed to the transient patron, who has little information about the crime problem on the landowner’s premises and little ability to directly influence it, the landowner can be much more effective in dealing with the problem. While the patron holds just one expensive option, staying home, the landowner holds many options ranging from installation of better lighting, fences, or guard service, to even varying hours of operation. All of these options should be less expensive and much more effective in deterring crime than the patron’s sole choice of staying home.
Bazyler, “The Duty to Provide Adequate Protection: Landowner’s Liability for Failure to Protect Patrons from Criminal Attack,” 21 Ariz L.Rev. 727, 747-48 (1979).
. Although the measures varied, one business even posted guards in five separate watch towers located throughout its parking lot.
. As we have said before, “the degree of foreseeability needed to establish a duty decreases in proportion to the magnitude of the foreseeable harm.”
Pittman v. Upjohn Co.,
. In an article written for a trade publication, it was acknowledged that 80% of crime at WalMart stores occurred in the parking lots or the exterior perimeter of the stores. The article praised newly implemented parking lot security measures ranging from roving patrols to employees wearing orange vests to surveillance cameras. These measures were said to produce "outstanding” results in reducing crime, helping "halt many crimes in progress,” and providing "crucial evidence to local [law enforcement authorities].” The article also noted that the costs of these security measures "wasn’t quite as expensive as what [the store] had been doing. So [the store] saved a little money and did much more effective work."
