Use of Force Legislation for Security in Australia

Few topics in the Australian security industry carry as much legal weight as the use of force. Security operators — whether working in executive protection, close protection, crowd management, or static guarding — must understand exactly where the legal boundaries lie. Getting it wrong can result in criminal charges, civil liability, loss of licensing, and the end of a career.

This article examines the legal framework governing use of force by security personnel in Australia, highlights the key differences between states and territories, and explains how proper training, documentation, and policy can reduce legal exposure for both operators and their employers.

Legal Framework for Use of Force in Australian Security

Security operators in Australia are civilians. They do not hold the same powers as police officers, and the law treats them accordingly. The authority of a security operator to use force is derived from the same legal principles that apply to any private citizen, supplemented by limited statutory powers in specific circumstances.

Self-defence. Every person in Australia has a right to use reasonable force to defend themselves or another person from an unlawful attack. The criminal codes and common law across all jurisdictions recognise self-defence, but the force used must be proportionate to the threat. A security operator who responds to a verbal confrontation with significant physical force will struggle to mount a self-defence argument.

Defence of property. The common law permits the use of reasonable force to protect property from damage or theft. However, the threshold for what is considered "reasonable" in defence of property is generally lower than for self-defence. Courts have consistently held that force likely to cause serious injury cannot be justified solely to protect property.

Citizen's arrest. Under the criminal legislation of each state and territory, any person may arrest another person they find committing a criminal offence — typically an indictable offence or a breach of the peace. Security operators frequently rely on citizen's arrest provisions. However, the force used to effect the arrest must be no more than reasonably necessary, and the arrested person must be handed over to police as soon as practicable.

Trespass and removal. Security operators working on private property have the authority, on behalf of the occupier, to request a person to leave and to use reasonable force to remove a trespasser who refuses to comply. This authority derives from the property occupier's common law rights, which are typically delegated to the security operator through the service contract.

The critical concept running through all of these authorities is reasonableness. The force must be proportionate to the threat or situation, necessary in the circumstances, and the minimum required to achieve the lawful objective. Courts assess reasonableness based on what a reasonable person would have done in the same circumstances, taking into account the information available to the operator at the time.

State-by-State Variations in Use of Force Laws

While the broad principles are consistent across Australia, significant differences exist in how each jurisdiction defines and regulates the use of force. Security businesses operating across state borders must be aware of these variations.

New South Wales. The Crimes Act 1900 (NSW) provides for self-defence under section 418. The test is whether the conduct was a reasonable response to the circumstances as the accused perceived them. NSW also has specific provisions regarding citizen's arrest under the Law Enforcement (Powers and Responsibilities) Act 2002.

Victoria. The Crimes Act 1958 (Vic) codifies self-defence under section 322K. Victoria's self-defence provisions require that the person believed the conduct was necessary and that the response was proportionate to the perceived threat. Notably, Victoria has introduced specific restrictions on the use of force by crowd controllers under the Private Security Act 2004.

Queensland. The Criminal Code Act 1899 (Qld) addresses self-defence and defence of others under Chapter 25. Queensland's provisions are often considered among the more detailed, with specific sections covering provocation, excessive force, and the duty to retreat where possible.

Western Australia. The Criminal Code Act Compilation Act 1913 (WA) provides for self-defence and related defences. WA also imposes specific obligations on security officers under the Security and Related Activities (Control) Act 1996, including requirements around the use of restraint techniques.

South Australia. The Criminal Law Consolidation Act 1935 (SA) codifies self-defence provisions. South Australia's legislation includes detailed guidance on what constitutes a proportionate response and places particular emphasis on the duty to retreat where it is safe to do so.

For security businesses operating nationally, these variations mean that a use-of-force policy developed for one state may not be adequate in another. Training programmes must be tailored to the jurisdiction in which operators will be working.

US comparison. The United States has an equally complex patchwork of use-of-force laws for private security. US security operators are also civilians without police powers, relying on the same basic legal authorities: self-defence, defence of others, citizen's arrest, and trespass removal. However, the specifics vary dramatically by state. Some US states have "Stand Your Ground" laws that remove the duty to retreat, while others require retreat where safely possible. "Castle Doctrine" laws in many states provide broader use-of-force protections on private property. Citizen's arrest powers vary significantly — some states limit them to felonies witnessed in progress, while others are broader. US security companies operating across state lines face the same challenge as Australian companies: a use-of-force policy developed for one state may create legal exposure in another.

Training Requirements and Documentation

Proper training is the single most effective measure for reducing use-of-force incidents and the legal exposure that follows them. Regulators, courts, and clients all expect security operators to be trained in the legal boundaries of force, de-escalation techniques, and physical intervention methods.

Mandatory training. The Certificate II and Certificate III in Security Operations — the minimum qualifications for most security licence classes — include units on managing conflict and applying legal and procedural requirements. However, these qualifications provide only a foundation. For executive protection and close protection work, additional training in threat assessment, tactical communication, and physical protection techniques is essential.

De-escalation. The overwhelming majority of confrontations in security work can and should be resolved without physical force. Training in verbal de-escalation, body language, and conflict resolution is not only best practice — it is increasingly expected by regulators and courts. An operator who can demonstrate that they attempted to de-escalate a situation before resorting to force is in a far stronger legal position.

Use-of-force continuum. Many professional security organisations adopt a use-of-force continuum or response model that provides a structured framework for escalating and de-escalating responses based on the level of threat. This model typically progresses from presence and verbal commands through to physical control techniques and, in extreme circumstances, defensive force. Training operators to operate within a defined continuum provides both practical guidance and legal defensibility.

Documentation. Every use-of-force incident must be documented in detail, ideally immediately after the event. The report should include the circumstances leading to the incident, the perceived threat, the actions taken, the force used, any injuries sustained, and the names of witnesses. Contemporaneous notes carry significant weight in court and regulatory proceedings.

Security employers have a duty to maintain training records for all operators. In the event of a legal challenge, the ability to demonstrate that an operator was properly trained — and that the training was current and relevant to the assignment — can be decisive.

Reducing Legal Exposure Through Policy and Technology

Beyond training, security businesses should implement comprehensive use-of-force policies that set clear expectations, define reporting procedures, and establish accountability. A well-drafted policy serves multiple purposes: it guides operator behaviour, demonstrates organisational commitment to lawful practice, and provides a framework for investigating and learning from incidents.

Key elements of an effective use-of-force policy include:

• A clear statement that force is a last resort and must always be proportionate and reasonable
• A defined use-of-force continuum or response model
• Mandatory reporting requirements for all use-of-force incidents
• A review and investigation process for reported incidents
• Consequences for unjustified or excessive use of force
• Regular policy reviews informed by incident data and legal developments

Technology plays an increasingly important role in managing use-of-force risk. EP-CP, Australia's command platform for executive protection and close protection, enables security businesses to embed use-of-force policies directly into their operational workflows. Mission briefings can include site-specific threat assessments and rules of engagement. Incident reports can be filed in real time from the field, creating a timestamped record that is far more reliable than notes written hours or days after an event.

EP-CP's centralised mission logs and operator records also make it straightforward to demonstrate compliance during audits, regulatory investigations, or legal proceedings. When every assignment, briefing, and incident is documented in a single platform, you have the evidence you need to defend your business and your operators.

Use of force is an area where legal knowledge, practical training, clear policy, and reliable documentation must all work together. Australian security businesses that invest in all four — and use technology to tie them together — are far better positioned to protect their operators, their clients, and their licence to operate.