Clause Guide

Limitation of Liability clause: meaning, risks, and what to negotiate

A limitation of liability clause caps the maximum financial exposure of one or both parties under a contract.

What it means

Without a limitation of liability clause, a party in breach is potentially exposed to the full extent of the loss caused — which in a technology, outsourcing, or supply agreement could run to many multiples of the contract value. The clause exists to create commercial certainty and to allow both parties to price and insure their risk appropriately. However, a cap that is set too low, combined with broad exclusions of consequential loss, can leave the non-defaulting party with an entirely inadequate remedy. A customer whose mission-critical system fails because of a vendor's negligence may find that the liability cap limits recovery to a few months of fees — far less than the actual business loss suffered. Understanding exactly what the cap covers, what it excludes, and how it interacts with the indemnity clause is essential before signing any significant commercial contract.

Common risks

12 risks identified

The liability cap may be set at a fraction of the actual risk — for example, one month of fees on a contract where a failure could cause millions in business losses.

Broad exclusions of indirect and consequential loss can eliminate the most significant categories of damage a customer is likely to suffer, such as lost revenue, lost data, and wasted expenditure.

The cap and the exclusions may apply asymmetrically, protecting the vendor far more than the customer.

Indemnity obligations are frequently carved out of the cap — but the cap may still apply to direct loss claims, leaving you with a low ceiling on your most straightforward remedies.

The cap may be calculated on fees paid rather than fees payable, making it very low in the early months of a long-term contract when the relationship is most likely to fail.

Excluding consequential loss can prevent recovery of the very damages that matter most — lost profits, lost contracts with third parties, and costs of remediation.

The clause may not carve out liability for death or personal injury caused by negligence, which is void under the Unfair Contract Terms Act 1977 — a drafting error that courts will sever but that creates uncertainty.

A mutual cap that appears balanced may in practice favour one party if their realistic exposure is far lower — for example, a vendor whose only realistic loss is unpaid fees, versus a customer whose losses from a service failure could be catastrophic.

The cap may reset annually, meaning persistent low-level failures that accumulate over time can each be treated as falling within a fresh cap period.

No carve-out for fraud or wilful misconduct can in principle allow a party to limit its liability even for deliberate wrongdoing — though English courts are unlikely to permit this in practice.

The clause may exclude liability for misrepresentation made before the contract was signed, cutting off pre-contractual claims that may be your most valuable remedy.

In a data breach scenario, the limitation cap may prevent recovery of the full cost of regulatory fines, notification obligations, and reputational damage — which can far exceed the contract value.

What to check before signing

Checklist

What is the liability cap — is it a fixed sum, a multiple of fees, or fees paid in a defined period?

Is the cap calculated on fees paid or fees payable, and over what period — one month, six months, twelve months?

Is the cap mutual, or does it apply differently to each party?

What categories of loss are excluded entirely — indirect loss, consequential loss, loss of profit, loss of data, loss of revenue, loss of goodwill?

Are direct damages recoverable in full, or are they also subject to the cap?

Which claims are carved out from the cap — death and personal injury, fraud, wilful misconduct, confidentiality breaches, IP infringement?

How does the cap interact with the indemnity clause — are indemnity obligations inside or outside the cap?

Does the exclusion of consequential loss carve out losses that were in the reasonable contemplation of the parties at the time of contracting?

Is liability for misrepresentation (including pre-contractual misrepresentation) addressed, and if so, is it capped or excluded?

Does the clause comply with the Unfair Contract Terms Act 1977 — in particular, does it attempt to exclude liability for death or personal injury caused by negligence?

Does the cap reset periodically, and if so, how does that affect claims arising from persistent or cumulative failures?

Is there a separate sub-cap for specific categories of claim such as data protection breaches or IP infringement?

Does the clause apply to claims in tort and misrepresentation as well as contractual claims, or only to breach of contract?

Negotiation ideas

Actionable

Set the cap at a meaningful multiple of annual contract value — 12 months of fees is a common starting point, but higher-risk engagements warrant a higher multiple.

Push for the cap to be calculated on fees payable for the relevant contract year, not fees already paid — this avoids an artificially low cap in the early months of the contract.

Carve out liability for death and personal injury, fraud, wilful misconduct, and fraudulent misrepresentation from the cap entirely — these should be uncapped as a minimum.

Carve out confidentiality and data protection breaches, as the losses from these events can significantly exceed the contract value and are best addressed through a separate sub-cap or indemnity.

Carve out IP indemnity obligations from the cap, as third-party IP infringement claims are outside the customer's control and can generate very large liabilities.

Where consequential loss is excluded, negotiate carve-outs for losses that were within the reasonable contemplation of the parties at the time of contracting — for example, loss of data in a data processing agreement.

Ensure the cap and exclusions are mutual — if the vendor's liability is capped, the customer's liability should be capped on equivalent terms.

For data-intensive agreements, negotiate a specific sub-cap for data protection breaches linked to regulatory exposure — for example, a multiple of annual fees with a defined maximum.

Resist attempts to exclude liability for misrepresentation made during the sales process — pre-contractual representations that induced you to sign should remain actionable.

Where the contract involves a critical service whose failure could cause significant business loss, push for a higher cap or a separate uncapped remedy for specific failure events.

Agree that the cap applies per claim period (e.g. per contract year) rather than in aggregate across the entire contract term, so that a series of separate failures does not exhaust a single lifetime cap.

If the vendor insists on a low cap, negotiate enhanced service level remedies — service credits, step-in rights, or termination for cause rights — that provide a practical remedy where the financial cap is insufficient.

Example clause

Subject to Clause [X] (Excluded Claims), each party's aggregate liability to the other under or in connection with this Agreement, whether in contract, tort (including negligence), misrepresentation, or otherwise, shall not exceed the total fees paid or payable by the Customer in the twelve (12) months immediately preceding the event giving rise to the claim. Neither party shall be liable to the other for any indirect, special, or consequential loss, loss of profits, loss of revenue, loss of data, or loss of anticipated savings, whether or not such losses were foreseeable or the party had been advised of their possibility. Nothing in this Agreement shall limit or exclude either party's liability for: (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; (c) wilful misconduct; (d) breach of confidentiality obligations under Clause [X]; or (e) any other liability that cannot be limited or excluded by applicable law.

Frequently asked questions

8 questions

Should every commercial contract have a liability cap?

Most do, and for good reason — without a cap, a party in breach is theoretically exposed to the full extent of all losses caused, which can be commercially ruinous in a technology or outsourcing context. The right cap depends on the deal value, the nature of the risk, and the parties' ability to insure. A cap that is too low is almost as bad as no cap from the innocent party's perspective — it provides a remedy in name only.

What is the difference between a liability cap and an exclusion of consequential loss?

They operate differently. A liability cap sets a financial ceiling on total recoverable damages — even direct losses are limited to the cap amount. An exclusion of consequential loss removes entire categories of damage from recovery regardless of their value — lost profits, lost contracts, and lost data are typically excluded even if they are far below the cap. Both provisions working together can dramatically limit the real-world remedy available to an injured party.

What counts as consequential or indirect loss?

Under English law, consequential loss broadly refers to losses that do not flow directly and naturally from the breach — losses in the second limb of Hadley v Baxendale, which are recoverable only if they were in the reasonable contemplation of both parties at the time of contracting. In practice, courts have interpreted 'consequential loss' exclusion clauses inconsistently, and the label does not always determine what is excluded. Lost profits and lost revenue can be either direct or consequential depending on the circumstances, which is why precisely defining excluded categories in the contract is important.

What claims are typically carved out of a liability cap?

The minimum carve-outs in any well-drafted contract are: death and personal injury caused by negligence (legally required under UCTA 1977); fraud and fraudulent misrepresentation; and wilful misconduct. Beyond that, commercial practice typically carves out confidentiality breaches, IP indemnity obligations, and data protection breaches — categories where the loss can significantly exceed the contract value and where the cap would otherwise provide an inadequate remedy.

Can a party limit its liability for its own fraud?

No — under English law a party cannot contractually exclude or limit liability for its own fraud or fraudulent misrepresentation. Any attempt to do so is void. Courts will sever the offending provision and the defrauded party's claim proceeds uncapped. This applies regardless of how the limitation clause is drafted.

How does the limitation of liability clause interact with the indemnity clause?

This is one of the most important — and most overlooked — interactions in any commercial contract. Indemnity obligations are frequently carved out of the liability cap entirely, meaning the indemnifying party's exposure under the indemnity is potentially unlimited while their exposure for direct breach of contract is capped. If you are the indemnifying party, push for a sub-cap on indemnity exposure. If you are the indemnified party, ensure the carve-out is clearly drafted so the cap cannot be used to reduce an indemnity payment.

Is a limitation of liability clause enforceable under English law?

Generally yes in B2B contracts, subject to the reasonableness test under the Unfair Contract Terms Act 1977 where it applies. UCTA prevents parties from excluding liability for death or personal injury caused by negligence, and requires that other negligence-based liability exclusions satisfy a reasonableness test. In negotiated commercial contracts between businesses of comparable bargaining power, courts give significant weight to the agreed allocation of risk and are slow to interfere with clearly drafted limitation clauses. The position is different in consumer contracts, where the Consumer Rights Act 2015 applies stricter controls.

What happens if the liability cap is exhausted by one claim — can further claims be brought?

It depends on how the cap is drafted. If it is expressed as an aggregate cap across the entire contract term, once exhausted it covers all future claims too. If it resets annually or per claim event, further claims in subsequent periods may still be recoverable up to the cap amount. This is a key drafting point — a single aggregate lifetime cap heavily favours the party most likely to cause repeated failures, as a series of separate events can each draw down the same fixed pool.

Related clauses

Want help reviewing the full contract?

A single clause rarely tells the whole story. Scan the full agreement to spot risks, missing protections, and negotiation points across the whole document.

Scan a Contract