Overseas remote working is the hidden compliance trap SMEs are sleepwalking into

Remote work has a nasty little cousin: staff working remotely from another country (even “just a few weeks”) can trigger tax, social security, immigration/right-to-work, employment law, and corporate tax exposure. This is not an HR-only issue. It’s HR + finance + payroll + legal, all at once. 

And the kicker? Many businesses are tacitly agreeing to this informally because it seems harmless, until the destination country treats it as anything but harmless. 

What’s changed, and why this is escalating in 2026

1) Social security is not “UK payroll so we’re fine”

If an employee works abroad, social security contributions may be due in the country where the work is physically carried out, unless an agreement/certificate applies. HMRC guidance exists for employees working abroad and for certificates that keep UK National Insurance applying in certain circumstances (for example, the CA3822 process for parts of Europe). 

In practice, it’s not just “get a form”. It’s get the right certificate for the right country, for the right duration, with the right supporting evidence. 

2) Corporate tax risk: “Permanent Establishment” is the phrase your FD will hate

Remote work can create questions about whether the company has a taxable presence overseas (a “permanent establishment”), depending on facts like permanence, what the person is doing, and whether the overseas location is effectively being used for the business. OECD guidance has been evolving specifically because remote work has made this murky, and major firms are flagging this as a real employer risk in 2025–2026 updates. 

3) Immigration and right-to-work is not “only a UK problem”

UK right-to-work checks prevent illegal working in the UK. But if you let someone work from another country, you can step into local immigration/work permission rules there, depending on nationality, visa status, and what “work” means in that jurisdiction. Many “digital nomad” assumptions do not match real rules. 

4) Employment law and employee protections can shift under your feet

Even if the contract is UK-based, working in another country can pull in local mandatory rights (holiday rules, dismissal protections, working time, data privacy, etc.), particularly if the arrangement becomes habitual or long-running. This is frequently flagged in global mobility guidance because the risk grows with time. 

5) Data protection and confidentiality risks get quietly worse

If someone is working overseas on client data or sensitive information, you’ve got extra angles: data transfers, security, device control, and local legal access risks (depending on the destination). Many employer guides now treat this as part of the overseas remote working approval decision. 

The “this is how it goes wrong” scenarios we keep seeing

• Someone asks: “Can I work from Spain for a month?” and a manager says yes in a WhatsApp message.
• Payroll carries on as normal, no one checks social security.
• The person stays longer, or repeats it.
• The host country takes the view that local social security contributions should have been paid, or that a permit was needed, or that the company has created a taxable presence risk.
• Everyone panics, because fixing it late is always more expensive than doing it properly upfront. 

Questions to be answered

1. Do you have a written rule on overseas remote working, or is it currently “ask your manager and hope”?
2. If someone works from abroad for 2–4 weeks, do you know whether UK NIC still applies, and what evidence you’d need? 
3. Who signs off overseas remote working in your business: HR, finance, payroll… or the person who feels awkward saying no?
4. Would you spot a permanent establishment risk, or would you only learn that phrase after a nasty email from an adviser? 
5. If an employee is overseas, have you checked whether they’re even allowed to work there without a visa/work authorisation? 
6. If a client asked where their data is being accessed from, could you answer confidently and evidence your controls? 

Sources (URLs)

Remote working law entering new phase: https://www.hrdconnect.com/2026/02/24/remote-working-law-2026-new-phase/  

GOV.UK: Paying employees working abroad: https://www.gov.uk/guidance/paying-employees-working-abroad 

GOV.UK/HMRC: Apply for certificate confirming UK National Insurance when working temporarily abroad (CA3822): https://www.gov.uk/guidance/tell-hmrc-about-employees-going-to-work-in-the-european-economic-area-ca3822  

GOV.UK: Right to work checks employer guide: https://www.gov.uk/government/publications/right-to-work-checks-employers-guide  

LITRG explainer: Working remotely for a UK employer while overseas: https://www.litrg.org.uk/international/double-taxation/working-remotely-uk-employer-while-overseas   

OECD PE/remote work updates (examples):

EY alert: https://www.ey.com/en_ch/technical/tax-alerts/oecd-2025-update-new-rules-on-permanent-establishment-for-remote-work   

KPMG note: https://kpmg.com/se/en/insights/newsletters/taxnews/2025/oecd-new-guidance-on-permanent-establishment-and-remote-work.html  

Dentons alert: https://www.dentons.com/en/insights/alerts/2026/january/30/does-your-remote-employees-home-office-create-a-permanent-establishment  

Deloitte note: https://taxscape.deloitte.com/article/oecd-alert—remote-working-permanent-establishments-and-other-updates-to-the-oecd-model-tax-convention.aspx  

Practical employer guidance (example): RSM UK overseas remote working: https://www.rsmuk.com/insights/employment-matters/global-mobility/should-you-allow-your-employees-to-work-remotely-overseas