Florida HB 837 and CPTED Compliance: What Multifamily Property Owners Need to Know

Florida House Bill 837, signed into law in March 2023, made one of the most significant changes to multifamily property liability in the state's history. Buried within a broad tort reform package is a provision that directly affects every apartment, townhouse, and condominium complex in Florida with five or more units: a compliance-based safe harbor against third-party crime liability — contingent on a documented CPTED assessment.

If you own or operate Florida multifamily property, this isn't optional. The January 1, 2025 initial compliance deadline has passed. If you haven't completed your CPTED assessment, you are not only exposed to liability — you've already missed the window to claim the law's presumption protections in the event of a crime on your property.

This guide covers exactly what HB 837 requires, who can perform a qualifying assessment, what the physical compliance standards are, and what ongoing obligations look like.

What is Florida HB 837?

Florida HB 837 is a comprehensive 2023 tort reform bill, and Section 768.0706 of the Florida Statutes is the provision within it that creates a rebuttable presumption against liability for multifamily property owners who implement a defined set of security measures and maintain a current CPTED assessment.

In plain terms: if a crime occurs on your property and you are in substantial compliance with HB 837, the plaintiff bears the burden of proving your negligence — rather than you bearing the burden of proving your innocence. This is a significant legal shield.

Who Does HB 837 Apply To?

HB 837 applies to any multifamily residential property with five or more dwelling units on a single parcel, defined as:

• A residential building or group of residential buildings
• Including apartments, townhouses, or condominiums
• Consisting of at least five dwelling units on a particular parcel

If you own a duplex or quadplex, you fall outside the statute. Five units or more on a single parcel is the threshold. Mixed-use buildings with residential components should consult legal counsel to confirm applicability.

Physical Security Requirements

To qualify for the liability presumption, your property must substantially implement the following physical measures. "Substantially implement" means you don't need 100% perfection — but material gaps will undermine your protection.

• Security camera system capturing views of all entry and exit points, with footage retained for at least 30 days
• Parking lot illumination at a minimum average intensity of 1.8 foot-candles per square foot at 18 inches above the surface, from dusk to dawn or photocell-controlled
• Common area lighting — walkways, laundry rooms, porches, and communal areas illuminated from dusk to dawn or photocell-controlled
• 1-inch deadbolt locks on each dwelling unit door
• Locking devices on all windows, exterior sliding doors, and doors not used for community access
• Pool fence with locked gate requiring key or fob access
• Peephole or door viewer on each dwelling unit door that does not have a window or does not have a window next to the door

The CPTED Assessment Requirement

Under F.S. 768.0706(2)(b), a qualifying CPTED assessment must be no more than 3 years old, completed and documented by an eligible assessor. Specifically, the owner or principal operator of a qualifying multifamily property must have a CPTED assessment that is:

• No more than 3 years old at all times
• Completed and documented — verbal assessments do not qualify
• Performed by a law enforcement agency OR a Florida Crime Prevention Through Environmental Design Practitioner (FCP) designated by the Florida Crime Prevention Training Institute of the Department of Legal Affairs

The statute also requires the owner to remain in substantial compliance with the assessment's recommendations. Completing an assessment and then ignoring its findings creates a documented liability — arguably worse than not completing one at all.

Who Can Perform a Qualifying Assessment?

Only two categories of assessors produce a qualifying assessment under the statute:

1. A law enforcement agency — typically a local police department offering free or low-cost assessments as a community service. Availability varies significantly by jurisdiction, and many departments have limited capacity.
2. A Florida Crime Prevention Through Environmental Design Practitioner (FCP) — a credentialed practitioner designated by the Florida Crime Prevention Training Institute (FCPTI) under the Department of Legal Affairs.

It's important to note that a generic security consultant, even a highly qualified one, does not produce a qualifying HB 837 assessment unless they hold the FCP designation. Verify credentials before commissioning work.

The Case for a Pre-Assessment Review

Several practitioners, including CIS World Services, recommend a two-step approach: conduct an informal pre-assessment before commissioning the formal documented assessment. The reason is important.

If you request a formal assessment on a property with unaddressed deficiencies — inadequate lighting, broken door hardware, gaps in camera coverage — the documented findings create a paper trail of known deficiencies. If a crime occurs before you remediate those findings, that documentation can work against you.

A pre-assessment walk-through allows you to identify and correct issues before the formal assessment creates a legal record.

Employee Training Requirements

The statute includes a training component that is often overlooked:

• By January 1, 2025, all current employees of qualifying properties must have received proper crime deterrence and safety training
• Employees hired after January 1, 2025 must receive this training within 60 days of hire
• Training must be reviewed at least every 3 years and updated as necessary
• Training must cover the security principles, devices, measures, and standards set forth in the statute

Your CPTED practitioner can review or develop your training curriculum. Having the same practitioner who conducted your assessment review your training creates a documented chain of compliance.

Ongoing Compliance: The 3-Year Cycle

HB 837 compliance is not a one-time event. The statute creates a recurring obligation:

• Your CPTED assessment must be renewed every 3 years
• Employee training must be reviewed every 3 years
• You must remain in substantial compliance with assessment recommendations at all times — not just at the time of assessment

This means that if you remediate the issues identified in your assessment and then let conditions deteriorate — lighting burns out, cameras fail, locks are not replaced — you are no longer in substantial compliance even if your assessment paperwork is current.

What a CPTED Assessment Actually Evaluates

CPTED — Crime Prevention Through Environmental Design — is a methodology that examines how the physical design of an environment influences the likelihood of criminal activity. A qualifying HB 837 CPTED assessment evaluates your property across four core principles:

• Natural surveillance — Can occupants, staff, and passersby observe the property? Are sightlines obstructed by landscaping, structures, or poor lighting?
• Natural access control — Does the physical environment guide legitimate users through defined entry points while creating barriers for unauthorized access?
• Territorial reinforcement — Do physical features signal ownership and occupancy? Does the environment communicate that the space is maintained and monitored?
• Maintenance — Is the environment maintained in a way that signals active management? Broken windows theory applies here — deferred maintenance signals reduced oversight.

Note that HB 837 does not require a full four-principle CPTED assessment — the statute specifies certain physical requirements (lighting, cameras, locks) as the compliance baseline. A qualified practitioner will assess against the statutory requirements and the broader CPTED framework.

Beyond the Statutory Minimum: How VYKEN Satisfies and Exceeds the CPTED Assessment Requirement

A qualifying CPTED assessment, as defined by the statute, is highly effective at identifying physical and environmental risk factors. However, the statutory CPTED assessment alone does not evaluate asset criticality, operational vulnerabilities, or the prioritized impact of specific vulnerabilities on your organization's exposure.

For property owners who want to go beyond HB 837 baseline compliance and understand the full threat picture — particularly for higher-value properties, mixed-use developments, or properties with complex operational profiles — VYKEN Property Vulnerability Intelligence™, powered by the VYKEN Asset Protection Matrix™ (VAPM™), provides a materially more complete intelligence picture while satisfying the statutory CPTED assessment requirement itself.

VAPM™ — Vyken’s proprietary framework integrating recognized methodologies including CPTED and CARVER alongside proprietary AI-native analytics — evaluates each vulnerability against six dimensions: Criticality, Accessibility, Recoverability, Vulnerability, Effect, and Recognizability. The result is an asset-level risk score that allows you to prioritize remediation by actual impact, not just visible deficiency.

HB 837 compliance requires a CPTED assessment. A VYKEN Property Vulnerability Intelligence™ assessment satisfies that legal requirement and exceeds it — delivering the statutory CPTED assessment property owners need, generated through VAPM™, alongside the asset-level scoring intelligent risk management warrants.

Common Compliance Mistakes

• Using an unqualified assessor — a consultant without the FCP designation does not produce a qualifying assessment under the statute
• Completing the assessment but not the remediation — documented findings you haven't addressed create liability, not protection
• Letting the assessment lapse — the 3-year clock runs from the date of the assessment, not from the date of your last compliance review
• Skipping employee training — this component is legally required and frequently overlooked by property owners focused only on the physical and assessment requirements
• No documentation trail — if you can't produce documentation of compliance in litigation, the presumption won't hold regardless of what you've actually implemented

Next Steps for Florida Multifamily Owners

If your property is not yet compliant, the priority sequence is:

1. Conduct an internal pre-assessment — walk the property against the statutory checklist before engaging a formal assessor. Identify and remediate obvious gaps: lighting, locks, cameras, peepholes.
2. Engage a qualified FCP practitioner — verify credentials through the Florida Crime Prevention Training Institute before commissioning work.
3. Complete the formal documented assessment — retain a copy and ensure it identifies the assessment date, the assessor's credentials, and the property address.
4. Remediate assessment findings — document remediation with dated records, invoices, and photographs.
5. Complete employee training — document participation with sign-in records and training materials.
6. Set a calendar reminder for year 2.5 — begin the reassessment process well before the 3-year deadline to avoid a lapse.

Frequently Asked Questions