A business generally cannot lock customers inside. Federal workplace safety rules require exit doors in commercial buildings to be openable from the inside at any time, without keys, tools, or special knowledge, and a business that confines customers anyway can be sued for false imprisonment and charged criminally. Three narrow situations change the answer: a reasonable, brief detention of a suspected shoplifter; a genuine immediate safety emergency; and ticketed events where guests agreed in advance to a locked-door format. Outside those, locking customers in is unlawful.
The Baseline Rule: Exits Have to Open From the Inside
OSHA regulations require that employees be able to open an exit route door from the inside at all times without keys, tools, or special knowledge. A device like a panic bar that locks only from the outside is fine; a mechanism that could trap people inside during an emergency is not. The only federal exception covers mental health facilities, prisons, and correctional institutions, and even those require continuous supervisory staffing and an emergency evacuation plan.1Occupational Safety and Health Administration. Design and Construction Requirements for Exit Routes
The International Fire Code, adopted by most local jurisdictions, says the same thing: egress doors must be readily openable from the egress side without a key, special knowledge, or effort. Assembly and educational venues with an occupant load of 50 or more have to install panic hardware on swinging doors.2International Code Council. Chapter 10 Means of Egress – 2021 International Fire Code
Delayed-egress locks that hold a door for 15 or 30 seconds after someone pushes on it are permitted in buildings with approved sprinkler or fire detection systems, but they must release automatically when the alarm sounds, the sprinklers activate, or power is lost. The door has to be labeled “Push Until Alarm Sounds.” A customer who pushes a door and nothing happens is not looking at one of these systems; they’re looking at a violation.
The Three Situations Where a Business Can Hold You
Suspected Shoplifting (The Shopkeeper’s Privilege)
Common law, codified by statute in most states, lets a merchant briefly detain someone they reasonably suspect of shoplifting. The privilege is narrow, and all three of these conditions have to be met:
- Reasonable suspicion based on specific, observable facts. Watching someone conceal merchandise or walk past every checkout without paying qualifies. A gut feeling, the person’s appearance, or the size of their bag does not.
- A reasonable manner of detention. The store can ask the customer to wait in an office or near the exit, but excessive force, unjustified handcuffing, public humiliation, or threats are not allowed.
- A reasonable length of time. Long enough to ask questions, check a receipt or security footage, and call police if warranted. Not hours.
Fail any one condition and the privilege disappears. What’s left is ordinary false imprisonment.
Immediate Safety Emergencies
When there’s an immediate external threat, like an active shooter nearby, civil unrest outside the building, or a hazardous materials incident, locking the doors is a protective measure. The legal justification is necessity: keeping people inside prevents a greater harm than briefly losing the freedom to leave. The threat has to be immediate. A vague concern about the neighborhood doesn’t qualify, and a store that routinely locks its doors in the evening with customers still inside is not running a legitimate emergency response.
Consensual Lock-In Events
Ticketed after-hours parties, overnight museum events, promotional lock-in sales, and similar gatherings where the locked format is part of the advertised experience are legally distinct from false imprisonment. Attendees consented by buying the ticket. Organizers should state the arrangement up front, set clear start and end times, and have a way to let people out for medical issues or emergencies. Consent is what separates the event from a lawsuit.
What Makes It False Imprisonment
If none of those three exceptions apply, confining a customer is false imprisonment, which is both a civil wrong and a crime in every state.3Legal Information Institute. False Imprisonment Physical force isn’t required. Locking the doors, blocking an exit, making threats, or using apparent authority to make someone feel unable to leave all count.
To win a civil false imprisonment claim, a customer has to establish four things:3Legal Information Institute. False Imprisonment
- A willful act. The business intentionally did something that confined the customer. A timed security system engaging by accident while a customer is still browsing isn’t automatically false imprisonment, unless staff then refused to let the person out.
- No consent and no legal authority. The customer didn’t agree to stay, and the business had no recognized legal basis to hold them.
- Actual confinement. The conduct directly caused the person to be confined. A safe, usable alternate exit may defeat the claim; one that would expose the customer to physical harm or humiliation does not.
- Awareness of the confinement. The customer knew they were being confined at the time, or was harmed by it. Discovering after the fact that a door was briefly locked while you happily shopped probably isn’t a case. Panicking and getting hurt trying to find a way out is.
What to Do If a Business Locks You Inside
Stay calm. Forcing your way out creates complications and gives the business a story about you being the aggressor. Tell a manager or employee clearly that you do not consent to being held and that you want to leave. Use those words. “I do not consent to being detained,” said on camera, is powerful evidence later.
If staff still won’t let you out, call 911. Police can respond to false imprisonment in progress, and their arrival usually ends the situation on the spot. If things feel physically threatening, prioritize getting help over documenting anything.
Once you’re out and safe, write down what happened while it’s fresh:
- The date, the time you realized you couldn’t leave, and the time you got out.
- The names or descriptions of every employee who took part or watched, and what each said.
- Contact information for any other customers who saw it, before everyone scatters.
- Any video, photos, receipts, or texts from the incident, and the locations of visible security cameras.
You can file a complaint with your local fire marshal’s office if the exits were locked, because that’s a fire code violation on its own, separate from any false imprisonment claim. For the false imprisonment itself, talk to a personal injury attorney. Most offer free consultations. The civil statute of limitations varies by state and is often only one to two years from the date of the incident, so waiting can cost you the right to sue.
What the Business Can Be Held Responsible For
A customer who was falsely imprisoned can sue for compensatory damages covering physical injuries, medical bills, and lost wages. Mental and emotional suffering is compensable without any physical injury; courts recognize that being trapped against your will causes humiliation, fear, and anxiety.
If the business acted with malice, recklessness, or deliberate indifference, a court can add punitive damages to punish the conduct and deter repeats. A manager who locked the doors and berated a customer out of spite faces a far bigger potential judgment than one who made a bad call during a confusing shoplifting investigation.
False imprisonment is also a crime in every state, chargeable as a misdemeanor or a felony depending on the circumstances.3Legal Information Institute. False Imprisonment Length of the confinement, use of force or threats, whether the victim was a minor or vulnerable adult, and whether anyone was physically hurt all push the charge toward the more serious end.
And a business with locked or obstructed exits can draw fire code citations, fines, and even forced closure until the violations are fixed. A single locked exit door in an occupied building is enough. Local fire marshals and building inspectors have enforcement authority, and public complaints trigger inspections.