Overseas Remote Work: Hidden Tax and Governance Risks
Context and Challenge
Employers increasingly face requests from employees to work remotely from overseas. The main challenge with treating these as simple extensions of home working is that once an employee works from another country, the employer may need to consider local tax withholding, UK PAYE, social security coordination, immigration status, employment law, data security, permanent establishment risk and governance approval. Common symptoms include informal line-manager approvals with no central record, no day-count tracking, no payroll review and no evidence that the relevant functions assessed the arrangement before it began.
Who Should Read This
HR directors, tax directors, finance directors, payroll managers, legal counsel, compliance officers, company secretaries, global mobility specialists, data protection officers, senior executives, founders and professional advisers dealing with overseas remote working requests.
Core Finding and Summary
Employers can permit overseas remote working, but should not treat it as ordinary home working. A short period abroad may be low risk, but repeated, prolonged or poorly documented overseas working can create tax, payroll, social security, immigration, employment law, permanent establishment, data security and governance exposure. Assess early, document the position and implement controls.
In practice: Treat any overseas working arrangement as potentially creating cross-border obligations unless a documented assessment confirms otherwise.
Main risk: Unmanaged cross-border working arrangements creating cumulative payroll, tax, social security and corporate tax exposure without evidence of approval or control.
Technical reference: HMRC guidance on employees working abroad confirms that PAYE and NIC treatment depends on where the employee works and for how long.
Decision point
Is the employee working overseas, for how long, in what role, with what authority, and have the tax, payroll, social security, immigration, employment law, corporate tax, data security and governance implications been assessed and documented?
The Issue
What triggers the issue?
An employee works from another country — whether by formal request, informal arrangement or uncontrolled pattern.
Why does it matter?
Non-compliance can create employer payroll liabilities, personal tax exposure, social security misalignment, immigration breaches, permanent establishment risk, data security failures, governance gaps and reputational damage.
What decision is needed?
Determine whether the arrangement requires cross-border assessment, apply controls, document the basis for the position taken and implement monitoring.
Technical Analysis
1.Tax and payroll position
An overseas remote worker is an employee who performs duties from a country other than the employer's primary jurisdiction, whether for days, weeks or months. When an employee works from another country, the host country may treat the employment income as locally sourced and expect the employer to withhold tax. The UK employer may need to continue operating UK PAYE, register for payroll in the host country, or both — depending on the country, the duration and the nature of the duties.
HMRC's published guidance confirms that PAYE and NIC treatment for employees working abroad depends on where the employee works and how long they are expected to be working there. Short periods may fall within existing domestic exemptions or treaty thresholds, but repeated or prolonged overseas working can change the compliance position materially. Employers should not assume that a short trip is automatically exempt without checking the specific country's rules.
The employee's personal tax residence may also be affected. Days spent overseas can count toward local tax residence thresholds in many jurisdictions, potentially creating personal filing obligations, local tax liabilities and treaty relief claims. Treaty relief may be available, but eligibility depends on the specific facts, the treaty provisions, and whether conditions such as employer residence, duration limits and local cost-bearing are met. Treaty relief does not remove the obligation to assess and document the position. Treaty agreements are not in place with all countries.
The employer should not assume that maintaining UK payroll alone is sufficient. The host country's domestic tax rules may impose withholding, registration or reporting obligations on the employer regardless of where the payroll is processed. The cost of non-compliance includes back taxes, penalties, interest, and the reputational risk of being identified as a non-compliant employer in another jurisdiction.
2.Social security
Social security coordination is the system of rules that determines which country's social security legislation applies when an employee works across borders. It is one of the most commonly overlooked consequences of overseas remote working. The default position under most domestic laws is that social security contributions are due in the country where the work is physically performed. Without specific coordination arrangements, an employee working from another country may fall into that country's social security system — potentially creating dual liability if UK National Insurance contributions also continue.
Within the EU, EEA and Switzerland, Regulation (EC) 883/2004 provides coordination rules that determine which country's social security legislation applies. An A1 certificate may confirm continuing UK National Insurance coverage if the employee is temporarily posted and certain conditions are met, including the expectation that the overseas working period is temporary and that the employee was subject to UK legislation immediately before the assignment. HMRC guidance notes that an employee working abroad may need a certificate confirming continuing UK National Insurance coverage, depending on the country and duration.
Outside the EU, bilateral social security agreements may apply. The UK has agreements with a limited number of countries, and coverage varies significantly by agreement. Where no agreement exists, the employee may fall into the host country's social security system while remaining liable for UK NIC — creating dual contributions with no mechanism for relief.
Employers should assess the social security position before approving any overseas working arrangement. Where an A1 certificate, Certificate of Coverage or equivalent is available, it should be obtained before the employee begins working overseas. Duration limits under the relevant regulation or agreement should be tracked and escalation procedures should be in place before limits are reached.
3.Immigration and right to work
A right-to-work requirement is the legal obligation for an individual to hold permission to perform work within a country's territory. An employee working remotely from another country may need permission to work there, even if they are employed by a UK entity, paid through UK payroll and performing duties for UK clients. Many countries do not distinguish between local employment and remote work performed from within their territory. The fact that the employee is "only" working remotely for a foreign employer does not automatically exempt them from local immigration requirements.
The employee may need a work permit, visa or specific remote-worker authorisation depending on the country, their nationality and the nature of their duties. Assumptions about EU freedom of movement should be checked against post-Brexit rules — UK nationals working from EU countries are now subject to third-country national rules in most member states, with varying thresholds and requirements.
Digital nomad visas and remote-worker programmes exist in some jurisdictions. These can provide a legal framework for overseas remote work, but they come with specific conditions around duration, tax registration, health insurance and reporting. They should not be treated as blanket permissions, and the employer should understand the conditions attached before relying on them.
Immigration breaches carry serious consequences including fines for the employer, deportation risk for the employee, criminal liability in some jurisdictions and reputational damage. The employer has a duty to ensure that any overseas working arrangement is compatible with the employee's immigration status in the host country. This applies regardless of whether the arrangement was formally approved or informally tolerated.
4.Corporate tax and permanent establishment
A permanent establishment is a fixed place of business, or a dependent agent with authority to conclude contracts, through which a foreign enterprise carries on business in another jurisdiction. Senior or revenue-generating employees working from overseas can create permanent establishment risk for the employer. If an employee working remotely from overseas has authority to conclude contracts, performs core business functions, or operates from a location that could be characterised as a fixed place of business, the employer may trigger a corporate tax presence in the host country.
Recent OECD commentary has focused specifically on remote work and permanent establishment risk. While the OECD took the position during the pandemic that temporary home-working forced by government restrictions should not create a PE, it has not extended this treatment to voluntary, ongoing overseas remote working arrangements. Employers should not rely on pandemic-era guidance to cover elective working from anywhere (WFA) programmes.
The risk is highest where the employee is senior, client-facing, authorised to negotiate or conclude contracts, or performs functions that are core to the employer's revenue generation. The risk is lower but not absent where the employee performs internal support functions, has no client-facing role and no contractual authority. The assessment must be fact-specific and should consider the cumulative effect of multiple employees working from the same overseas jurisdiction.
Employers should assess PE risk as part of any overseas remote working approval. Where the role involves contractual authority, client-facing activity or revenue-generating functions, specialist advice on the PE position should be obtained before the arrangement begins.
5.Governance, data security and practical controls
A governance framework for overseas remote working is a documented approval and monitoring process that ensures cross-border working arrangements are assessed by the relevant functions before they begin. The governance risk in overseas remote working is often the least visible and the most damaging. Informal approvals — where a line manager says yes without involving HR, tax, payroll, legal or IT — create arrangements that no function has assessed and no system tracks. The risk is not one employee answering emails from another country for a week. The big risk is a pattern of informal approvals with no central record, no day-count controls, no payroll review, no social security analysis and no evidence that the arrangement was approved by the right functions.
Data security is a specific concern for employers in regulated sectors. Government, financial services, legal, defence, health and other regulated data may not be safe to access from all locations. Employers should assess whether the employee's role involves access to data that cannot be processed or accessed from the overseas location under applicable data protection, regulatory or contractual requirements.
A proper governance framework requires: a central approval process involving the relevant functions; a documented assessment of the cross-border implications before the arrangement begins; day-count tracking with alerts at relevant thresholds; duration limits with escalation procedures; periodic review of ongoing arrangements; and clear criteria for distinguishing low-risk flexibility from arrangements requiring specialist review.
The safest employers are not those that ban all overseas remote work. They are those that distinguish low-risk flexibility from arrangements that need tax, payroll, immigration, legal or governance review — and have a framework that makes the distinction consistently and transparently. A work-from-anywhere policy should not only be written as an HR perk. It should also be written as a cross-border risk control for both employer and employee or director.
Case Scenario
UK Employee Working Remotely From Spain
Situation: A UK employer approves a request from an employee to work remotely from Spain for six weeks following a family bereavement. The employee remains on UK payroll and continues their normal duties, including accessing client data and attending virtual meetings. The arrangement is approved by the line manager with no input from HR, tax, payroll, legal or IT.
Issue: Whether the arrangement creates Spanish income tax, payroll, social security or employment law obligations for the employer, and whether the employee has the right to work in Spain as a UK national post-Brexit.
Analysis: Spain may treat the employment income as locally sourced during the period of work. Social security coordination may require an A1 certificate to confirm continuing UK NIC coverage. The employee's right to work in Spain as a UK national should be verified — post-Brexit, UK nationals working from EU countries are subject to third-country national rules. The employer has no documented assessment, no A1 certificate, no day-count tracking and no evidence of cross-functional approval.
Outcome: The arrangement may be technically manageable with proper documentation, an A1 certificate and immigration clearance, but the absence of assessment and governance trail creates avoidable compliance and audit risk.
Lesson: Compassionate flexibility is legitimate and valuable, but it still requires a cross-border assessment. The approval process should be designed so that even exceptional circumstances are documented and the relevant functions are consulted before the employee begins working overseas.
Fenton International's Advisory Position
Technical position?
Overseas remote working can create income tax, payroll, social security, immigration, employment law, corporate tax, data security and governance obligations depending on the country, duration, role and facts.
Professional judgement required?
Yes — the interaction of multiple jurisdictions, treaties, social security agreements, immigration rules and employment law provisions requires advisory judgement, not mechanical application.
Main risks:
Tax withholding
PAYE/NIC
social security misalignment
immigration breach
permanent establishment
data security failure
governance gap
reputational damage.
Evidence needed:
travel records
working patterns
approval records
role description
authority levels
payroll arrangements
A1/certificate status
immigration status
data access profile.
Recommended controls:
Central approval process
cross-functional assessment
day-count tracking
duration limits
A1/certificate application
periodic review
escalation criteria
policy framework.
Professional Judgement & Advisory Application
Professional judgement is required where the interaction of tax, social security, immigration and employment law obligations across jurisdictions creates outcomes that cannot be resolved by applying any single set of rules mechanically. The position depends on facts that are often incomplete or evolving — duration, role, authority, working pattern, treaty provisions and local enforcement practice. HMRC's published guidance does not address every scenario, and the interaction between domestic rules, treaty provisions, social security coordination and immigration requirements requires integration across disciplines.
Fenton International's judgement and recommendation: assess the cross-border implications before any overseas remote working arrangement begins, document the basis for the position taken across all relevant disciplines, and implement a governance framework that distinguishes low-risk flexibility from arrangements requiring specialist review. The issue is not whether overseas remote working is good or bad. The issue is whether the employer knows what it has approved.
Frequently Asked Questions
Can employees work abroad for a few weeks without creating tax issues?
It depends on the country, duration, role and specific facts. A short period may fall within domestic exemptions or treaty thresholds where applicable, but employers should not assume this without checking. Some countries have low thresholds for triggering local tax obligations or employer registration requirements. The safe approach is to assess the position before approving the arrangement, not after the employee has already begun working overseas.
Does UK PAYE still apply when an employee works overseas?
UK PAYE obligations may continue, change or require additional steps depending on the facts. HMRC guidance confirms that PAYE and NIC treatment depends on where the employee works and for how long. The employer may need to continue UK PAYE while also considering host-country obligations. Maintaining UK payroll alone does not guarantee compliance in the host country. Tax treaties do not cover payroll obligations.
Can overseas remote work create a permanent establishment?
Yes. If an employee working overseas has authority to conclude contracts, performs core revenue-generating functions, or operates from a location characterised as a fixed place of business, the employer may create a corporate tax presence in the host country. The OECD has not extended pandemic-era PE relief to voluntary, ongoing remote working arrangements.
Should employers approve requests case by case or through policy?
Both. A policy framework sets the baseline — what is permitted, what requires assessment, what is prohibited. Individual cases should be assessed against that framework because the compliance position depends on country-specific facts. Case-by-case approval without a policy creates inconsistency and governance gaps. Policy without case-by-case assessment misses the facts that determine the actual position.
How Fenton International Can Help?
Fenton International helps employers, executives and advisers manage the cross-border tax, payroll, social security, immigration and governance consequences of overseas remote working.
Cross-border payroll review
Tax and treaty analysis
Social security and A1 certificate assessment
Overseas remote working policy design
Governance and compliance framework
Discuss this issue: Contact Fenton International for a cross-border employee or director tax and compliance review.
Author
Mark Abbs, CEO, Fenton International
Fellow of the Association of Taxation Technicians (FATT)
Enrolled Agent of the IRS (EA)
Global Mobility Specialist – Talent Management (GMS-T)
Accredited Expert Witness (MAE)
32+ years' experience in international tax, cross-border employment tax and global mobility
Advises CFOs, HRDs, and Chairs on cross-border tax governance
Head of Advisory at Global Tax Network
Former Tax Partner, Head of International and Senior Leadership Team at Blick Rothenberg and Senior Tax Adviser in the Big 4.
Key terms: overseas remote working, work from anywhere, WFA, cross-border employment tax, PAYE, NIC, social security, A1 certificate, permanent establishment, immigration compliance, governance framework, global mobility, digital nomad visa.
Scope note: This Insight covers the general cross-border risks and governance requirements for overseas remote working by employees of UK-based employers. It does not cover permanent overseas transfers, locally hired overseas employees, self-employed contractors working from overseas, or jurisdiction-specific compliance procedures for individual countries.
Jurisdiction: UK / Multi | Last reviewed: June 2026 | Next review due: December 2026 | Insight type: Technical Guide
© 2026 Fenton International. All rights reserved.
This article is general information and not legal or tax advice. Professional advice should be taken for specific circumstances.
