Gross Negligence and Wilful Misconduct in Malaysian Oil and Gas Contracts: When Does the Liability Protection End?

Introduction

Gross negligence and wilful misconduct commonly appear in Malaysian oil and gas contracts as exceptions to indemnities, liability caps and exclusions of loss. Their inclusion can fundamentally alter the parties’ agreed allocation of risk.

A contractor may accept a demanding scope of work on the basis that its total liability is capped and that each contracting group bears specified categories of loss under a knock-for-knock arrangement. If gross negligence or wilful misconduct removes those protections, the contractor may face substantial and potentially uninsured exposure. Conversely, an operator may reasonably resist allowing a party to rely on contractual protection after consciously disregarding a serious operational risk.

The position becomes more complicated when the contractor is required to use local personnel, a PETRONAS-licensed supplier, a subcontractor from an operator-approved list or a particular operator-nominated resource. If the contractor did not freely select, and cannot readily replace, the person responsible for the loss, should that person’s gross negligence or wilful misconduct automatically be attributed to the contractor?

Malaysian legislation does not prescribe a universal definition of gross negligence or wilful misconduct for commercial contracts. Malaysian judicial decisions nevertheless provide useful guidance. The complete contractual framework remains decisive, including the applicable indemnity, definitions of the contracting groups, liability caps, causation language and any express treatment of gross negligence, wilful misconduct and nominated subcontractors.

Why the distinction matters in oil and gas contracts

Oil and gas operations bring together operators, drilling contractors, engineering contractors, vessel owners, equipment suppliers and specialist service providers. Each may employ subcontractors and work alongside other contractors whose activities affect the same facility, well or operation.

An incident may involve several contributing failures. A lifting accident might result from defective equipment, incorrect load information, an unsuitable lifting plan, defective supervision and an instruction to continue in poor weather. A process-safety event may involve an alarm that was not investigated, an isolation error, deficient maintenance and management pressure to avoid a shutdown.

The operator wants critical obligations to be taken seriously. The contractor requires a risk allocation that remains predictable, insurable and proportionate to the contract price. Gross negligence and wilful misconduct sit at the point where those interests meet.

The drafting challenge is to establish a threshold that catches exceptional conduct without allowing every serious incident to be retrospectively recharacterised as gross negligence.

Ordinary negligence, gross negligence, wilful misconduct and sole negligence

The four expressions perform different legal and contractual functions.

The contractual definitions must always be checked. Parties may adopt thresholds that are narrower or broader than these working descriptions.

Ordinary negligence concerns reasonable care

Ordinary negligence involves a failure to exercise the care expected in the circumstances. Depending on the claim, the claimant must generally establish the relevant duty, a breach of that duty, causation and recoverable loss.

In an oil and gas contract, the duty may arise from express obligations to:

• perform the services with reasonable skill and care;
• provide competent and appropriately trained personnel;
• comply with approved procedures and applicable laws;
• inspect and maintain equipment;
• follow health, safety and environmental requirements;
• investigate alarms or abnormal operating conditions; and
• notify the operator of identified hazards or deviations.

The occurrence of catastrophic loss does not by itself establish gross negligence. A relatively modest human error may have severe consequences in a high-hazard facility. Conversely, exceptionally careless conduct may cause no loss because another safeguard operates successfully.

The inquiry must therefore focus on the conduct, the applicable duty, the risk apparent at the time and the causal connection with the loss. Hindsight should not replace proof.

What amounts to gross negligence under Malaysian law?

There is no generally applicable statutory definition of gross negligence in Malaysian commercial law. However, Malaysian decisions recognise that it represents more than ordinary carelessness.

In Md Rojis Bin Long v PSC-Naval Dockyard Sdn Bhd [2010] ILJU 354, the Industrial Court recognised that the precise line between negligence and gross negligence is difficult to demarcate. It described gross negligence as a higher degree of negligence arising not merely from a lack of foresight or an error of judgment, but from culpable default. The Court also considered a formulation involving intentional failure to perform a manifest duty in reckless disregard of the consequences affecting another’s life or property.

In Chan Pei Kuan v Ambank (M) Bhd [2024] ILJU 119, the Industrial Court treated gross negligence as something more than mere carelessness. The Court referred to carelessness of such an aggravated nature that it amounts to neglect of precautions an ordinarily reasonable person would observe. The assessment was said to depend on the circumstances, the nature of the work and the position or status of the person concerned.

Both decisions arose in the employment context. They should not be treated as establishing a statutory or universal test for every commercial indemnity. They nevertheless identify several features relevant to Malaysian oil and gas contracts:

• gross negligence requires a materially higher degree of fault than ordinary negligence;
• an error of judgment is not necessarily gross negligence;
• neglect of a manifest or elementary precaution may be significant;
• the nature and importance of the duty matter;
• the person’s position, competence and responsibility are relevant;
• reckless disregard of consequences is strong evidence; and
• the alleged loss and causation must be proved.

Intention should not be made an indispensable element unless the contract defines gross negligence in those terms. Otherwise, gross negligence risks becoming indistinguishable from wilful misconduct.

A practical test for potential gross negligence

Subject to the contractual definition, the following test is consistent with the principles emerging from the Malaysian authorities:

Gross negligence is potentially established where a party responsible for a material duty commits a culpable and markedly serious departure from the standard required by that duty, by neglecting an obvious or manifest precaution or acting with reckless disregard of a material consequence, and that departure is an effective cause of the proved loss.

The test involves six questions.

1. What duty did the party actually undertake?

The precise contractual, statutory, technical or operational duty must first be identified. It is not enough to allege generally that a party acted with serious carelessness.

In CIMB Bank Bhd v Maybank Trustees Bhd and other appeals [2014] 3 MLJ 169, the Federal Court rejected the imposition of an independent verification duty on the lead arranger where the transaction documents did not require that verification. The relevant documents required specified confirmations, and the lead arranger was entitled to rely on the written certification of the transactional solicitor. A higher duty could not be imposed simply because additional verification might have prevented the loss.

For oil and gas contracts, the inquiry should begin with the scope of work, interface documents, operating procedures and allocation of responsibilities. A tribunal should not impose a new supervisory or verification duty after the event merely because it would have prevented the incident.

2. How serious was the departure?

The conduct must go beyond inadvertence, ordinary carelessness or a reasonable but incorrect judgment. It should amount to culpable default or aggravated neglect.

Examples that may point towards gross negligence include:

• proceeding without a mandatory safety-critical test;
• continuing operations after repeated abnormal readings;
• ignoring a failed integrity inspection;
• assigning unverified personnel to a critical function;
• repeatedly disregarding a stop-work request;
• disabling a protective system without an approved basis; or
• knowingly allowing a serious competence deficiency to continue.

No single example is determinative. Context and contractual wording remain important.

3. Was an obvious or manifest precaution neglected?

The clearer and more fundamental the precaution, the stronger the potential case.

Evidence may include operating procedures, risk assessments, manufacturer instructions, alarm histories, integrity reports, previous near misses, internal warnings and regulatory requirements. The nature of the person’s role matters because a precaution that is obvious to a well-control specialist may not be obvious to a worker performing an unrelated function.

The hazardous nature of oil and gas operations does not automatically lower the legal threshold. It does, however, affect which risks and precautions should be understood by a competent person occupying a safety-critical role.

4. What did the party know, and why did it proceed?

Actual knowledge is powerful evidence, although it may not always be essential to gross negligence.

The inquiry may examine whether the decision-maker:

• received repeated warnings;
• understood the purpose of the required safeguard;
• concealed or misrepresented the true position;
• proceeded for cost, schedule or production reasons;
• believed, on reasonable technical grounds, that the operation remained safe; or
• relied on inaccurate information supplied by another party.

In Chan Pei Kuan v Ambank (M) Bhd, the findings went beyond accidental data entry. The employee falsely represented who had carried out a site visit, failed to disclose obvious discrepancies and uploaded unrelated photographs to support the application. The Court found that the conduct was knowing and directed towards securing approval, with the employee’s KPI and commission providing the motivation.

Contemporaneous evidence will therefore be critical. Alarm records, emails, permits, work instructions, shift logs and objections may be more probative than the seriousness of the eventual outcome.

5. What power and control did the party possess?

A party cannot ordinarily be grossly negligent for failing to exercise a power it did not have. Selection rights, stop-work authority, supervisory powers, access to information and replacement rights are all relevant.

In CIMB Bank Bhd v Maybank Trustees Bhd and other appeals, the Federal Court focused on the trustee’s extensive powers under the trust deed and power of attorney. The trustee had the ability to ring-fence the accounts or prevent their operation by the issuer but failed to act. The Federal Court held that this failure was the most proximate cause of the loss and that the trustee was wholly liable to the bondholders.

Control should not be considered in the abstract. The question is whether the party had the contractual and practical capacity to prevent the particular loss.

6. Did the serious departure cause the proved loss?

The claimant must prove both the loss and the causal connection.

In Md Rojis Bin Long v PSC-Naval Dockyard Sdn Bhd, the employer alleged that the employee’s gross negligence caused financial loss. The evidence showed that the amount remained uncollected, but the employer had not established that it was legally or practically lost. The employer therefore failed to prove the causal and loss components of its charge.

Similarly, the Federal Court in CIMB Bank Bhd v Maybank Trustees Bhd and other appeals limited the trustee’s liability to the amount actually dissipated rather than the full face value of the bonds. The trustee was not to be treated as the primary debtor or guarantor for losses it did not cause.

Wilful misconduct requires a distinct mental element

Wilful misconduct should not be treated as merely a more serious form of negligence. It ordinarily requires deliberate improper conduct accompanied by the state of mind specified in the contract.

A workable definition may require:

• an intentional act or omission;
• knowledge that the conduct is wrongful or contrary to the contract; and
• knowledge that the harmful consequence is probable, or reckless disregard of whether it will occur.

An intentional physical act is not necessarily wilful misconduct. A technician may deliberately close a valve while mistakenly believing it is the correct valve. The act is intentional, but the mistake may remain negligent.

The position differs where a person disables a critical alarm to avoid a shutdown while knowing the alarm protects against an identified process-safety risk. That may involve deliberate misconduct and conscious disregard of probable consequences.

The contract should identify whose state of mind is attributable to the contracting party. An exception applying to wilful misconduct by any employee may expose an organisation to uncapped liability because of a deliberate act by a relatively junior worker. Many commercial contracts restrict the exception to directors, senior management or defined senior supervisory personnel.

Sole negligence addresses causation, not culpability

Sole negligence does not describe a higher standard of wrongdoing. It asks whether one party’s negligence was the only effective cause of the loss.

A minor negligent act may be solely causative. Gross negligence may not be the sole cause if defective information, another contractor’s conduct or an operator’s instruction materially contributed to the incident.

This distinction is particularly important in indemnities. A provision disapplying an indemnity where loss is caused by the indemnitee’s negligence is broader than one disapplying it only where loss is caused by the indemnitee’s sole negligence.

The latter requires proof that no other effective cause contributed to the loss. “Sole” should not be treated as meaning primary, predominant or principally responsible.

Section 12 of the Civil Law Act 1956 separately provides for the apportionment of damages where loss results partly from the claimant’s fault and partly from another person’s fault. It also preserves contractual defences and applicable limitations of liability. A contractual sole-negligence exception and statutory contributory negligence therefore perform different functions.

Compelled local and operator-nominated resources

The attribution question becomes difficult when the contractor did not exercise an entirely free choice of personnel or subcontractor.

PETRONAS uses Standardised Work and Equipment Categories, commonly called SWEC, to classify categories of goods and services within its licensing and procurement system. Vendors supplying the Malaysian upstream sector generally require an appropriate PETRONAS licence, and certain strategic SWECs carry Minimum Technical Requirements or prescribed participation attributes.

A SWEC-qualified supplier should not automatically be described as an operator-nominated subcontractor. Several arrangements must be distinguished:

1. The contractor must appoint a supplier holding an appropriate PETRONAS licence or SWEC.
2. The contractor must satisfy applicable local equity, employment or participation requirements.
3. The contractor may select only from an operator-approved vendor list.
4. The operator nominates or directs the appointment of a particular subcontractor.
5. The operator requires the engagement or retention of specified individuals.

The contractor ordinarily remains responsible for due diligence, induction, interface management and supervision within its control. Local-content requirements do not excuse inadequate management.

However, responsibility should also reflect the allocation of selection and operational power. The analysis changes if the operator directs the use of a particular resource, rejects the contractor’s reasonable objection, withholds adverse performance information or denies the contractor a practical replacement right.

The relevance of superior instructions

Md Rojis Bin Long v PSC-Naval Dockyard Sdn Bhd is instructive. The employee had initially refused to release goods without payment. According to the evidence, the Yard Director and Group Chief Executive Officer instructed the employee to estimate the value, accept a cheque and release the goods. The employer’s own witnesses accepted that the superior had authority to issue the instruction and that it was reasonable for the employee to comply. The employer did not call the superior to rebut the employee’s account. The Court held that gross negligence had not been proved.

Applied to an oil and gas contract, this suggests:

A contractor should not ordinarily be characterised as grossly negligent for complying with a lawful and reasonable operator instruction concerning a matter within the operator’s contractual control, unless the instruction was manifestly unlawful, unsafe or improper, or the contractor independently neglected precautions that remained within its responsibility.

An operator instruction is not a complete defence. Contractors retain obligations concerning safety, legal compliance and stop-work intervention. A contractor cannot knowingly implement a manifestly dangerous instruction and later rely entirely on the operator’s direction.

The instruction nevertheless remains central to the identification of duty, control and causation.

How gross negligence interacts with knock-for-knock indemnities

Under a conventional knock-for-knock arrangement, each contracting group accepts responsibility for defined categories of loss, commonly injury to its personnel and damage to its property, regardless of fault.

The commercial purpose is to reduce disputes about causation, align risk with insurance and create predictable exposure across multiple contracting groups.

An exception may provide:

Each Party shall indemnify the other against loss to its own Group, regardless of cause, except to the extent caused by the Gross Negligence or Wilful Misconduct of the indemnified Party.

This wording raises several questions:

• Does the exception apply to every employee and subcontractor?
• Is the entire indemnity lost or only the portion caused by the exceptional conduct?
• Is gross negligence by a nominated subcontractor attributed to the contractor?
• Does concurrent operator fault preserve part of the indemnity?
• Does the exception affect only the indemnity or also the liability cap?
• What happens if negligence is proved but gross negligence is not?

The final question is addressed directly by Malaysian authority.

In CIMB Bank Bhd v Maybank Trustees Bhd and other appeals, the indemnity applied “save and except for” the trustee’s gross negligence, wilful default, wilful breach or fraudulent actions. The High Court found that the trustee had failed to exercise the required care but did not make a finding of gross negligence or the other exceptional conduct specified in the clause. The Federal Court held that the High Court had erred in denying the indemnity.

The principle is commercially important:

Where an indemnity is lost only for gross negligence or specified wilful conduct, a finding of ordinary negligence is insufficient. The contractually required heightened finding must be made and supported by evidence.

What if the indemnity is silent on gross negligence?

The converse question is more difficult. If an indemnity contains no gross-negligence or wilful-misconduct carve-out, can a grossly negligent party still rely on it?

Potentially, yes. Malaysian law does not appear to establish a general rule that every indemnity is automatically subject to an implied gross-negligence exception. The issue is principally one of proper construction.

The question is whether the indemnity, read objectively and in the context of the whole contract, extends to the indemnified party’s own gross negligence.

A broad category-based indemnity may support coverage where it:

• applies “regardless of cause”;
• expressly includes the indemnitee’s negligence;
• includes sole, joint and concurrent negligence;
• forms part of a reciprocal knock-for-knock allocation;
• is supported by the parties’ insurance arrangements; and
• preserves meaningful rights and remedies elsewhere.

Silence is nevertheless not conclusive. Indemnities and exemption clauses are construed strictly, particularly where they purport to transfer responsibility for the beneficiary’s own wrongdoing. As the conduct becomes more serious and deliberate, clearer language is likely to be required.

The position may be summarised as follows:

• Ordinary negligence may be covered by sufficiently broad indemnity language.
• Sole negligence should preferably be addressed expressly because it changes the causation allocation.
• Gross negligence may potentially be covered, but general wording leaves material uncertainty.
• Wilful misconduct or wilful default is less likely to be covered without clear and unmistakable wording.
• A party’s own fraud stands on a materially different footing and ordinarily cannot be protected by general contractual language.

Exclusion clauses, fundamental breach and contractual construction

In CIMB Bank Bhd v Maybank Trustees Bhd and other appeals, the Federal Court considered authorities concerning exemption clauses and breaches going to the root of the contract. The Court accepted the modern position that there is no automatic rule invalidating an exclusion clause whenever the breach is fundamental. Whether the clause applies remains a question of construction.

The seriousness of the breach remains relevant to determining what the parties objectively intended. It does not replace construction with an automatic rule.

The court will examine:

• the natural meaning of the words;
• the clause within the contract as a whole;
• whether the wording expressly addresses the indemnitee’s own fault;
• the commercial purpose of the allocation;
• the nature of the parties and their bargaining position;
• whether the proposed interpretation defeats the contract’s main object; and
• whether another provision expressly addresses gross negligence or deliberate conduct.

Clear language between sophisticated commercial parties carries substantial weight. A court should not rewrite the contract merely because one allocation later appears onerous.

Fraud remains a separate category

The Federal Court treated fraud differently from negligence. In CIMB Bank Bhd v Maybank Trustees Bhd and other appeals, the issuer had fraudulently misappropriated funds and remained the recipient of the benefit. Despite the trustee’s negligence, the Federal Court ordered the issuer to provide a full indemnity. It would have been unjust to allow the issuer to retain part of its ill-gotten gains.

This reasoning does not mean that a gross-negligence exception is generally ineffective. It demonstrates that an indemnity dispute cannot be decided by examining the indemnitee’s negligence alone. The conduct of the indemnifier, the contractual wording and the nature of the remedy remain relevant.

A party should not expect general language to protect it from its own fraud or permit it to retain the proceeds of fraudulent conduct.

Section 29 of the Contracts Act 1950

Sections 77 and 78 of the Contracts Act 1950 address contracts of indemnity and the indemnity-holder’s rights. Section 29 separately renders void, to the relevant extent, an agreement that absolutely restricts a party from enforcing its contractual rights through ordinary legal proceedings.

In CIMB Bank Bhd v Anthony Lawrence Bourke & Anor [2019] 2 MLJ 1, the Federal Court held that the particular clause before it effectively negated all forms of damages available to the borrowers and absolutely restricted them from enforcing their rights. The Court also relied on the borrowers’ lack of meaningful bargaining power under a standard banking agreement.

The Federal Court expressly distinguished an absolute restriction from a limitation or partial restriction. Mere limitations do not, without more, engage section 29.

A negotiated oil and gas liability cap or category-based indemnity between sophisticated parties does not automatically offend section 29. The risk arises where the cumulative operation of the indemnity, exclusions and exclusive-remedy provisions leaves the innocent party with no meaningful remedy.

Illustrative contractual wording

A coordinated set of definitions could provide:

“Gross Negligence” means an act or omission involving a culpable, serious and manifest departure from the standard of care reasonably required in the circumstances, demonstrating an extreme lack of care for an obvious and material risk, but not requiring an intention to cause the resulting loss.

“Wilful Misconduct” means an intentional act or omission by a member of Senior Supervisory Personnel, carried out with knowledge that the conduct is wrongful and that the resulting loss is probable, or with reckless disregard as to whether that loss will probably result.

“Sole Negligence” means negligence of a Party that is the sole effective cause of the relevant loss, without any causative fault, breach or negligence of the other Party or a third party for whom that other Party is contractually responsible.

A provision dealing with compelled resources could state:

A Party shall not be regarded as having committed Gross Negligence or Wilful Misconduct solely by reason of an act or omission of a subcontractor or person whom the other Party expressly required it to appoint or retain.

The appointing Party shall remain responsible for its own failure to exercise the supervision, coordination, induction and control reasonably available to it.

Where the appointing Party notifies the other Party of reasonable concerns regarding the competence, performance or suitability of the nominated person, and the other Party nevertheless directs that person’s continued engagement, the appointing Party shall be liable only to the extent that its independent act or omission caused or contributed to the loss.

Qualification under a licensing category, SWEC or approved vendor list shall not by itself constitute a warranty by either Party of the person’s performance.

These provisions are illustrative. They must be reconciled with the applicable group definitions, knock-for-knock indemnities, insurance programme, liability cap and governing-law provisions.

Practical effect for operators

An operator should ensure that the exception protects genuinely serious failures without turning every contractual breach into uncapped liability.

The operator should identify:

• which indemnities, exclusions and caps are affected;
• whether gross negligence by any employee is sufficient;
• whether the relevant conduct must be that of senior personnel;
• whether systemic management failure can satisfy the threshold;
• how operator-nominated subcontractors are treated;
• whether the contractor retains reasonable rejection and replacement rights;
• whether the operator must disclose adverse vendor information; and
• whether the exception applies entirely or only to the extent the conduct caused the loss.

If the operator exercises direct control over selection, instructions or replacement, the contract should address the legal consequences rather than relying on a broad attribution provision.

Practical effect for contractors

A contractor should ensure that a serious outcome alone cannot remove the negotiated liability framework.

The contractor should examine:

• whether gross negligence is defined at a level materially above ordinary negligence;
• whether wilful misconduct requires actual knowledge or conscious disregard;
• whose conduct and state of mind are attributed to the contractor;
• whether operator-nominated resources fall within the contractor group;
• whether the contractor has meaningful rejection and replacement rights;
• whether liability becomes wholly uncapped or only proportionately uncapped;
• whether concurrent operator fault is addressed; and
• whether the resulting exposure is insurable.

Contract administration is equally important. Written objections, qualifications, competence records, operator directions, alarm histories and stop-work decisions may ultimately determine whether gross negligence is proved.

Drafting takeaways

1. Define the threshold. Gross negligence should be clearly distinguished from ordinary negligence and wilful misconduct.
2. Identify the precise consequence. State whether the exception removes an indemnity, a liability cap, an excluded-loss provision or all three.
3. Do not rely on silence. State expressly whether an indemnity includes or excludes gross negligence, wilful misconduct and sole or concurrent negligence.
4. Identify whose conduct counts. Specify whether attribution extends to employees, subcontractors, senior personnel and operator-nominated resources.
5. Separate qualification from nomination. SWEC eligibility, an approved vendor list and operator nomination involve different levels of contractor choice.
6. Address operator instructions. Specify the effect of an operator direction given after the contractor raises a substantiated safety or competence concern.
7. Use precise causation language. “Caused by”, “arising out of”, “to the extent caused by” and “caused solely by” can produce materially different outcomes.
8. Provide reasonable rejection rights. A contractor should be able to object to a nominated resource on documented technical, integrity or HSE grounds.
9. Preserve meaningful remedies. The cumulative operation of indemnities, exclusions and caps should not eliminate every substantive remedy.
10. Align the contract with insurance. The parties should establish whether liabilities arising from gross negligence or wilful misconduct are insured, excluded or subject to sub-limits.

Conclusion

Under Malaysian law, ordinary negligence, gross negligence, wilful misconduct and sole negligence perform distinct functions. Gross negligence requires more than ordinary carelessness and may involve culpable default, neglect of a manifest precaution or reckless disregard of material consequences. Wilful misconduct introduces a distinct element of deliberate conduct and knowledge. Sole negligence is concerned with exclusive causation.

An indemnity does not automatically fail merely because the protected party was negligent. Where the contract expressly removes protection only for gross negligence or specified wilful conduct, ordinary negligence is insufficient. Conversely, if the indemnity is silent, gross negligence is not necessarily covered or excluded. The answer depends on proper construction of the indemnity within the complete contractual framework. Protection for wilful misconduct requires clearer language, while a party’s own fraud stands on a different legal footing.

For Malaysian oil and gas contracts, the principal drafting risk is uncertainty at the precise point where the financial exposure is greatest. The parties should address the degree of fault, whose conduct is attributable, how nominated resources are treated, whether concurrent causes matter and exactly which contractual protections are lost. Labels alone cannot provide a reliable allocation of risk.