When an Elevator Moves with Its Doors Open: What That Failure Means and Who May Be Responsible

What 'Unintended Car Movement' Means — and Why the Gap Is the Danger

Unintended car movement is the term elevator safety codes and the industry use for an elevator car that moves up, moves down or shifts level while its hoistway doors or car doors are open or not fully closed and locked. People often shorten it to UCM. The hoistway doors are the doors at each floor's landing. The car doors are the inner doors that travel with the car.

The danger is the gap. When the car moves away from the landing, an opening forms between the car floor and the landing floor. A person standing in that opening can fall, be thrown off balance, or be caught between the moving car and the hoistway structure, the walls and framing of the shaft.

Two related events are different failures. A door that closes on a person is its own mechanism, about the door rather than the car. Misleveling is when a car stops with its floor above or below the landing floor, leaving a step up or a step down that a person can trip on. Misleveling and unintended car movement can overlap, but a car that stops out of level is not the same as a car that travels while the doors stand open. A related failure, the elevator sudden drop, involves a car falling or lurching without warning.

This is not a minor malfunction. The gap between car and landing is the direct mechanism behind some of the most severe elevator injuries.

The Safety Systems That Should Have Kept the Car Still

The main protection is the door interlock. A door interlock is an electromechanical device at each landing. It mechanically locks the hoistway door, and it signals the elevator's control circuit that the door is closed and locked. A separate circuit element, the car door contact, confirms that the inner car door is closed.

These signals feed what is called door-open protection. Under door-open protection, the car should not respond to a travel command if any door contact in the circuit is open. When every interlock and contact reports closed and locked, the car may move. When any one of them does not, it should stay put.

These requirements come from ASME A17.1, the Safety Code for Elevators and Escalators. It is the model safety standard that most states adopt in whole or in part, and it requires door interlocks and door-open protection. ASME A17.1 is a voluntary consensus standard. It becomes legally binding only when a state or local jurisdiction adopts it.

For someone who was hurt, this frames what went wrong. When these systems work, the car cannot move with a door open. When they fail or are bypassed, the protection disappears. Whether a specific elevator was required to meet a particular edition of ASME A17.1 depends on when it was installed and what the jurisdiction adopted, a question about installation dates and local adoption that can come up in a conversation with an attorney.

How a Car Can Move with Its Doors Open — and Why the Cause Points to Who Had the Duty

Several kinds of failure can let a car travel while a door is open. They are described here in general terms. None of them is assumed in any particular accident.

Interlock hardware can fail. A worn or damaged locking pawl, roller or cam may no longer reliably lock the door or close the circuit, so the lock and the signal stop matching what the door is actually doing.

Door contacts can be bypassed or short-circuited. A wiring fault, or a deliberate defeat of the safety circuit, can trick the control system into reading the doors as closed when they are not.

The control system can malfunction. A fault in the elevator's logic controller can issue a travel command despite an open-door signal.

Maintenance can introduce the problem. Improper adjustment, replacement with parts that do not conform to the design, or failure to restore safety circuits after service work can each leave the protection weakened or switched off.

Age and wear can play a role. Interlock components that have passed their service life without replacement may not perform as designed.

For someone who was hurt, the category of failure matters because it often points toward who had the duty to prevent it: a worn part or skipped replacement can point toward the building owner or maintenance contractor, while a defect in the interlock or controller can point toward the manufacturer. Figuring out which failure occurred takes inspection of the maintenance records, the inspection certificates and the physical components, and those records and parts can change after an incident. Which kind of failure is suspected, and whether the parts have been preserved, is a question worth raising with an attorney.

Where It Happened Matters: Buildings and Equipment Involved

Unintended car movement is a failure mode in any building with an elevator: commercial office buildings, hotels, hospitals, airports, shopping malls, apartment buildings and parking structures.

The type of equipment shapes how the failure can look. Traction elevators are cable-driven and are the most common kind in mid-rise and high-rise buildings. Hydraulic elevators are fluid-driven, and they have a failure mode of their own. A valve or cylinder leak can cause slow, unintended downward movement, called drift, while the doors are open at a landing. A person may notice the floor sinking only as they step out.

The control technology matters too. Older elevators often run on relay-logic controls, which are banks of electrical switches. Newer units use microprocessor controls. Older relay-logic controls are more susceptible to certain interlock failures, but neither kind is immune, and the ways each can fail differ.

If you were hurt in a hotel lobby or an apartment hallway, the building itself is part of the story. A hotel, a hospital, an apartment complex and an office tower may each arrange ownership, management and service contracts differently, and that arrangement shapes who may have had a duty of care. Remembering how the car moved, whether it sank slowly or jumped, and what kind of building it was in can help an attorney understand which equipment and which parties are involved.

The Injuries That Can Follow When the Car Moves with Doors Open

The injuries follow the physics of the gap. When the car moves away from the landing while someone is stepping in or out, the person can fall into the hoistway. When the car moves upward while someone is partly in the doorway, the result can be a shearing or crushing injury. When the car lurches without warning, people already inside can fall within the car. In the most severe cases, a person is caught between the car and the hoistway structure, and those injuries can be fatal.

The range is wide. It runs from fractures and soft-tissue injuries to traumatic brain injury, spinal injury, amputation and death. Where a person was standing, and which way and how far the car moved, often shapes how badly they were hurt.

For families, the severity of an injury connects to the categories of damages the law may allow. Those categories can include medical expenses, lost income, and pain and suffering, and in a death case, wrongful-death damages. What any specific person may recover depends entirely on the facts, and damages rules differ from state to state. Readers interested in how often elevator injuries reach emergency rooms can find the government figures on the site's elevator accident statistics page.

The Records You May Never Have Seen — and Why They Matter

What happened usually gets answered through records and parts, not memory alone. The categories that tend to matter include:

• The elevator's maintenance and inspection records, which show who serviced it, when, and what was found or corrected.
• The elevator's inspection certificate and any violations noted by the inspecting authority, which is a state or local body.
• The physical components: the interlock hardware, the door contacts and the control board.
• Surveillance video from the building.
• Incident reports filed with the building owner or the elevator company.
• The injured person's medical records.
• Witness accounts.

Inspection and maintenance records are not the same thing as findings of fault. A service log showing a repair, or an inspection showing a violation, is a record of what was done or noted. It is not, by itself, a finding that anyone was negligent or that a particular failure caused an injury.

Much of this evidence is not in the injured person's hands. Maintenance records are held by the building owner and the maintenance contractor, and records held by others may require formal legal process to obtain. Evidence can also change: maintenance records are sometimes incomplete, and physical components may be repaired or replaced after an incident.

If you were hurt, the records that usually matter on your side include your medical records, any photos of the scene, and the names of people who saw what happened. People who were hurt often find it useful to gather what they have access to, while the records held by the building and its contractors take a different path.

Who May Be Responsible — and What the Facts Decide

No single answer covers every case. Several kinds of parties may have had a duty, and each is tied to a different legal theory.

The building owner or property manager may be responsible under premises liability, the area of law that covers a property owner's duty to keep the property reasonably safe. For an elevator, that means a duty to maintain it in a reasonably safe condition. In most states, a premises liability claim requires showing a duty, a breach of that duty, causation, and damages. Whether each element is met depends on the facts.

The elevator maintenance contractor may have had a duty under its service contract to perform maintenance and inspection competently.

The elevator manufacturer or a component manufacturer may be involved under product liability, the law that covers injuries caused by defective products. The question there is whether a design defect or manufacturing defect in the interlock or control system caused the failure. Many states allow a strict-liability theory, which focuses on whether a defect existed rather than on proof of negligence, but the rules vary.

A prior repair or installation contractor may be involved if improper work created the condition.

Some states treat elevator operators as common carriers. A common carrier is a business that transports people and is held to a heightened standard of care. Whether that classification applies, and what effect it has, differ by state.

All of these theories are governed by state law, and the rules differ across the United States, as do limitation periods and fault rules. An accident does not by itself prove a defect, and an injury does not by itself prove anyone's fault. The answer usually turns on the maintenance records, the inspection history and the physical evidence. Sorting out which parties had which duties is a central part of what a conversation can help clarify. If that is where you are, you may want to consider a case evaluation with our attorney. For the broader picture of elevator and escalator claims, see the site's elevator accident lawyer page.