Rideshare Passenger Assault: Legal Options in Oklahoma

You did everything right. You requested a ride through the app, confirmed the driver's name and license plate, shared your trip with a friend, and got in the car. What happened next — an assault by someone a billion-dollar company vetted, approved, and sent to pick you up — was not your fault. And the law gives you the right to hold both the driver and the company accountable.

Rideshare passenger assault is not a rare aberration. It is a documented, recurring failure of the rideshare business model. Uber's own US Safety Report — which the company was forced to publish after years of pressure — disclosed 3,824 reports of sexual assault on its platform in 2019 and 2020 combined. Lyft's Community Safety Report documented over 4,000 sexual assault reports across 2017–2019. These are only the incidents that were reported through the apps. The actual numbers are almost certainly far higher.

Oklahoma passengers face the same risks as riders anywhere else. The difference is what happens next — and Oklahoma law provides meaningful avenues for holding rideshare companies responsible when their drivers assault passengers.

How Rideshare Companies Enable Assault

The rideshare business model creates a unique vulnerability. Passengers get into a vehicle with a stranger — someone they've never met, in a car they don't control, often late at night, often alone. The companies know this. They market safety as a core feature. They promise background checks, driver ratings, GPS tracking, and in-app safety tools. These promises create the trust that gets passengers into the car.

But the safety infrastructure is thinner than the marketing suggests.

Background check failures. Uber and Lyft rely on third-party background check companies — not fingerprint-based FBI checks that taxi and livery services have historically required. These name-based checks miss convictions recorded under aliases, crimes in jurisdictions that don't digitize records, pending charges, and offenses in states that restrict background check access. A 2019 CNN investigation found that Uber and Lyft approved drivers with criminal histories including sexual offenses, kidnapping, and murder — drivers that a fingerprint-based system would have flagged.

No in-person vetting. Neither company conducts in-person interviews or vehicle inspections before approving drivers. The entire onboarding process happens through the app. There is no assessment of a driver's temperament, interpersonal conduct, or fitness to transport vulnerable passengers alone.

Inadequate monitoring. Once a driver is approved, ongoing monitoring is minimal. Complaint patterns that should trigger investigation — multiple reports of inappropriate comments, route deviations, or passenger discomfort — can accumulate without triggering removal. News investigations and lawsuits have alleged that drivers accused of assault have remained on the platform while complaints were pending.

Design choices that increase risk. Passengers cannot choose their driver. Drivers know the passenger's destination (and whether it's a private residence). Until recent safety updates, there was no in-ride audio recording, no panic button, and no way to silently alert emergency services. The companies chose to optimize for convenience and speed over passenger safety — and passengers paid the price.

Legal Theories Against Rideshare Companies

When a rideshare driver assaults a passenger, the driver is obviously liable — both criminally and civilly. But the more important legal question is whether the rideshare company itself bears responsibility. In most cases, the answer is yes, through several overlapping legal theories.

Negligent hiring and screening is often the lead claim. Employers who fail to exercise reasonable care in hiring can be held liable for harm those employees cause. While Uber and Lyft classify drivers as independent contractors — a classification that is itself the subject of ongoing litigation — Oklahoma courts can look beyond labels to the substance of the relationship when the company exercises significant control over the manner and means of the work. A negligent hiring claim requires showing that the company failed to conduct adequate background checks, that a reasonable screening process would have revealed the driver's danger, and that the inadequate screening was a proximate cause of the assault. The strength of this claim depends on the specific driver's history — if the driver had prior offenses that a fingerprint-based check would have caught, the company's screening failure is directly causative. But even without a specific prior offense, the industry-wide reliance on inadequate name-based checks, when fingerprint-based alternatives exist and are used by taxi commissions nationwide, can establish that the screening standard itself is unreasonable.

Negligent retention and supervision provides an alternative path even if the initial hiring was non-negligent. A company can become liable by retaining a driver after warning signs emerge. If the rideshare company received prior complaints about the driver — inappropriate comments, route deviations, requests for personal information, boundary violations — and failed to investigate or remove the driver, it may be liable for negligent retention. This theory is often powerful because rideshare companies maintain detailed complaint records. Discovery in litigation can reveal a pattern of ignored red flags: prior passengers who reported feeling unsafe, low ratings with narrative complaints, or previous assault allegations that triggered only a temporary suspension rather than permanent removal.

Common carrier liability imposes a heightened standard. Oklahoma law holds common carriers — businesses that transport the public for hire — to the "highest degree of care" for passenger safety, a standard significantly more demanding than ordinary negligence. The question of whether rideshare companies qualify as common carriers is actively litigated. Oklahoma's TNC statutes (47 O.S. § 1011) state that a TNC is not a taxicab, limousine, or for-hire motor carrier and is not deemed to control its drivers absent a contract saying otherwise — language the companies cite to resist common-carrier classification. However, the functional reality — accepting paying passengers for point-to-point transportation — aligns with the traditional common-carrier definition. If a court treats Uber or Lyft as a common carrier under Oklahoma law, the company owes passengers the highest degree of care, must protect passengers from foreseeable harm including criminal acts by its own drivers, and its failure to implement reasonable safety measures constitutes a breach of that heightened duty.

Premises liability and negligent security analogies round out the available theories. While rideshare assaults don't occur on traditional "premises," courts have applied negligent security principles by analogy. The rideshare platform is the environment the company creates and controls. Just as a hotel must take reasonable steps to protect guests from foreseeable criminal acts, a rideshare company must take reasonable steps to protect passengers from foreseeable driver misconduct. This analogy is strongest when the company's own data reveals the scope of the risk. Uber's safety report — documenting thousands of assaults — is itself evidence that the company knows assault is a foreseeable risk of its platform. Knowledge of the risk triggers a duty to implement reasonable preventive measures.

What to Do After a Rideshare Assault

The steps you take in the hours and days after an assault can determine the viability of your legal claim. Your safety and wellbeing come first — but preserving evidence is also critical.

Get to safety and call 911. Report the assault to law enforcement immediately. A police report creates an official record of the incident, including the driver's information and the circumstances of the assault. Request a forensic examination (SART exam) at a hospital — even if you're unsure about pursuing charges, the exam preserves biological evidence that becomes impossible to collect after days pass. Under Oklahoma's Sexual Assault Examination Fund (21 O.S. § 142.20), victims are entitled to a forensic exam at no cost, regardless of whether they choose to report to police.

Do not delete or alter your phone data. Your ride history, in-app messages, GPS data, and text messages with the driver (if any) are all evidence. Screenshot your ride details, driver profile, and any post-ride communications immediately — before the company can alter or remove them.

Report through the app — but know its limitations. Reporting the assault through the Uber or Lyft app creates a record, but the company's internal investigation is designed to protect the company, not you. Do not provide detailed statements to the company's representatives without legal guidance. What you tell them can be used to shape the company's defense.

Seek medical care and counseling. Beyond the forensic exam, get comprehensive medical treatment. Document all injuries — physical and psychological. Sexual assault frequently causes PTSD, anxiety, depression, and other trauma responses that constitute compensable damages. Establishing treatment early creates the medical records that support your claim.

Contact a personal injury attorney. An attorney experienced in rideshare assault cases can immediately send a spoliation letter to Uber or Lyft, demanding preservation of all ride data, driver records, prior complaint history, internal investigations, and communications. This evidence can be deleted or overwritten if not preserved promptly. The attorney can also guide you through the parallel criminal and civil processes.

Evidence That Builds Your Case

Rideshare assault cases are evidence-intensive. The strongest claims combine multiple categories of proof.

Ride data and GPS records. Uber and Lyft track every ride in granular detail — the pickup and dropoff locations, the planned route versus actual route taken, stops and deviations, and timestamps for every segment. A driver who deviated from the planned route, made unexplained stops, or drove to an unplanned location creates a powerful evidentiary record.

Driver history and prior complaints. Discovery can compel the company to produce the driver's complete complaint history, rating trends, prior suspension records, and any internal investigations. A pattern of prior complaints — even if each individual complaint didn't result in removal — establishes that the company had notice of the driver's dangerous propensities.

Background check records. The company's screening file on the driver reveals what checks were conducted, what was discovered, and what was missed. If a more thorough check would have uncovered disqualifying history, the gap between what was done and what should have been done is direct evidence of negligent hiring.

In-app communications. Messages between the driver and passenger within the app, as well as the driver's communications with support before and after the incident, can reveal intent, premeditation, or post-assault cover-up attempts.

Medical and forensic evidence. SART exam results, medical records documenting physical injuries, and psychological treatment records documenting trauma responses all corroborate the assault and establish damages.

Other victim reports. In some cases, discovery reveals that the same driver assaulted or harassed other passengers. Pattern evidence is devastating — it proves both that the driver was dangerous and that the company failed to act on prior warnings.

Damages in Rideshare Assault Cases

The damages from a rideshare assault extend far beyond medical bills. Oklahoma law allows recovery for the full scope of harm.

Medical expenses — Emergency treatment, forensic examination, ongoing medical care, and any future treatment related to the assault. Mental health treatment — Therapy, counseling, psychiatric care, and medication for PTSD, anxiety, depression, and other trauma-related conditions. These costs often continue for years. Lost wages and earning capacity — Time missed from work during recovery and any long-term impact on the victim's ability to work. Pain and suffering — Oklahoma allows recovery for physical pain, emotional anguish, humiliation, loss of enjoyment of life, and the ongoing psychological impact of the assault. Loss of consortium — A spouse may have a separate claim for the impact on the marital relationship. See our guide on loss of consortium in Oklahoma.

Punitive damages are available under 23 O.S. § 9.1 when the plaintiff proves by clear and convincing evidence that the defendant acted with reckless disregard for the rights of others. Oklahoma law requires that actual compensatory damages be awarded first; punitive damages are then determined in a separate proceeding and are subject to statutory caps. A rideshare company that knowingly employed inadequate screening, ignored prior complaints about a dangerous driver, or prioritized growth over passenger safety may face punitive damages designed to punish and deter.

The Statute of Limitations

Oklahoma's statute of limitations for civil assault and battery claims is one year from the date of the incident under 12 O.S. § 95(A)(4). This is a significantly shorter deadline than the two-year limit that applies to most other personal injury claims under § 95(A)(3). Missing the one-year deadline permanently bars the civil assault claim — making early consultation with an attorney critical.

However, rideshare assault cases often involve claims beyond assault and battery — including negligence, negligent hiring, and negligent retention — which carry the standard two-year limitation period. Your attorney can evaluate which claims apply and ensure all deadlines are met. Critical evidence — ride data, driver records, internal communications, and surveillance footage — can be lost well before either deadline. Acting quickly to preserve this evidence is essential, even if you're not ready to file suit immediately.

For criminal prosecution, sexual assault carries different (and often longer) statutes of limitations. The civil and criminal timelines are separate, and pursuing one does not preclude the other.

The Arbitration Clause Problem

Both Uber and Lyft include mandatory arbitration clauses in their terms of service. When you accept the terms to create an account, you typically agree to resolve disputes through individual arbitration rather than in court — and waive the right to join a class action.

These clauses are aggressively enforced. However, they are not always insurmountable. Oklahoma courts scrutinize arbitration agreements for unconscionability — both procedural (Was the clause buried in terms nobody reads? Was there meaningful opportunity to negotiate?) and substantive (Does the clause eliminate remedies that public policy demands?). In the context of sexual assault, courts have shown willingness to find arbitration clauses unconscionable or unenforceable.

Additionally, both Uber and Lyft have, under public pressure, carved out exemptions for sexual assault claims from their arbitration requirements. In 2018, Uber announced it would no longer require arbitration for individual sexual assault and harassment claims. Lyft followed with a similar policy change. These carve-outs may allow assault claims to proceed in court — but the specific terms and their enforcement require careful legal analysis based on the applicable version of the terms of service.

Frequently Asked Questions

Can I sue Uber or Lyft for an assault by their driver, or only the driver?

You can pursue claims against both the individual driver and the rideshare company. Against the driver, you have direct claims for assault and battery. Against the company, you can pursue claims for negligent hiring, negligent retention, negligent supervision, and failure to implement reasonable safety measures. The company's $1 million commercial rideshare insurance applies to accident injuries, but assault claims target the company's own negligence.

What if the driver was never criminally charged or convicted?

A criminal conviction is not required to file a civil lawsuit. The burden of proof in civil cases is "preponderance of the evidence" (more likely than not) — significantly lower than the criminal standard of "beyond a reasonable doubt." Many rideshare assault victims win civil cases even when criminal charges were dropped or never filed.

Will my identity be public if I file a lawsuit?

Oklahoma courts have discretion to allow plaintiffs in sexual assault cases to proceed under a pseudonym (such as "Jane Doe") to protect their privacy. Your attorney can file a motion requesting leave to proceed anonymously, explaining why privacy concerns justify departure from the general rule of open proceedings. While not guaranteed, courts frequently grant these motions in sexual assault cases, particularly when the risk of retraumatization or retaliation is high.

How long does a rideshare assault lawsuit take?

Rideshare assault cases generally take one to three years or longer from filing to resolution, depending on complexity. Cases involving extensive discovery of company records, depositions of corporate representatives, and disputes over arbitration clauses tend toward the longer end. Many cases settle before trial, but preparation for trial is essential to achieving a fair settlement.

What if I don't remember all the details of the assault?

Memory gaps are normal and expected after traumatic events — they are not evidence that the assault didn't happen. Trauma affects memory consolidation, and fragmented recall is actually consistent with genuine assault. Your attorney and any retained experts will explain this to the jury. What matters most is the contemporaneous evidence: the ride data, forensic exam, medical records, and your earliest statements.

Does the rideshare company's insurance cover assault claims?

The $1 million commercial liability policy that Uber and Lyft maintain covers accidents — not intentional criminal acts by drivers. Assault claims typically fall outside the commercial auto policy. Instead, they target the company's general corporate liability for its own negligence (inadequate screening, failure to respond to complaints, etc.). This distinction matters for how damages are pursued and collected.

This article is for general information only and is not legal advice.