Duty of care for business travellers is an employer’s legal and moral obligation to take reasonable steps to protect employees from foreseeable harm while they travel for work. This obligation exists in most jurisdictions and covers risks ranging from medical emergencies and physical security threats to natural disasters and political instability. The questions below unpack exactly what that means in practice, from legal requirements and risk coverage to programme design and who within an organisation carries responsibility.
What are employers legally obligated to do for travelling employees?
Employers are legally required to identify foreseeable risks to travelling employees, take reasonable steps to mitigate those risks, and provide support when something goes wrong. In the UK, this obligation is rooted in the Health and Safety at Work Act 1974, which applies regardless of whether work is performed domestically or internationally. Similar frameworks exist across the EU, US, and Australia, making this a near-universal corporate obligation.
In practical terms, the legal baseline typically requires employers to:
- Conduct risk assessments before sending employees to destinations with known hazards
- Share relevant risk information with travellers before departure
- Maintain a mechanism for locating employees during travel
- Have a documented process for responding to incidents abroad
- Provide access to emergency assistance, including medical and security support
Organisations that align their programmes with ISO 31030, the international standard for travel risk management guidance, demonstrate a structured, auditable approach to meeting these obligations. ISO 31030 does not create new legal requirements, but it provides a recognised framework for showing that reasonable care has been taken. In the event of a legal claim following an incident abroad, that documentation can be significant.
The standard of “reasonable steps” is not fixed. It scales with the level of risk. Sending an employee to a low-risk destination for a short trip carries different obligations than deploying someone to an active conflict zone or a region experiencing political instability. The higher the risk, the more robust the employer’s preparation and support must be.
What risks does duty of care cover for business travellers?
Duty of care for business travellers covers any foreseeable risk that could cause harm during work-related travel. This includes medical emergencies, security threats, natural disasters, civil unrest, road traffic incidents, and mental health crises. The scope is broad because the range of environments business travellers enter is broad, from stable capital cities to remote or conflict-affected regions.
The most commonly encountered risks in corporate travel programmes fall into three broad categories:
Medical risks
Medical emergencies abroad are among the most operationally complex situations an employer can face. A serious illness, surgical emergency, or accident in a country with limited healthcare infrastructure requires immediate coordination, securing appropriate treatment, managing costs, and planning a safe return home. Without a coordinated response structure in place, these situations fragment quickly, leaving employees without clear support and employers without visibility.
Security and physical safety risks
Security risks span a wide spectrum: petty crime and opportunistic theft at the lower end, through to kidnap, armed attack, and evacuation scenarios at the higher end. Political instability can escalate rapidly, as seen across the Middle East and in Ukraine in recent years. Duty of care requires employers to monitor these environments continuously and have credible response options available, not just a phone number on a policy document.
Operational and environmental risks
Natural disasters, infrastructure failures, civil unrest, and border closures all create situations where travellers may be stranded, unable to communicate, or unable to access standard services. These risks are often underestimated in pre-travel planning because they feel less predictable, but they are foreseeable in the sense that employers can identify high-risk regions and prepare accordingly.
How does duty of care differ from travel insurance?
Duty of care is a legal and moral obligation to actively protect employees during travel. Travel insurance is a financial product that reimburses costs after something has gone wrong. The two are complementary but not interchangeable, and confusing them is one of the most common gaps in corporate travel risk programmes.
Travel insurance typically covers medical expenses, trip cancellation, lost luggage, and emergency repatriation costs. It operates on a claims basis: the employee or employer submits documentation after the fact and receives reimbursement. It does not provide real-time assistance, security advice, or operational coordination during an active crisis.
Duty of care, by contrast, requires the employer to act, before, during, and after travel. That means assessing risks before a trip departs, tracking employees while they are in the field, responding operationally when an incident occurs, and providing follow-up support on return. Insurance can fund parts of that response, but it cannot replace the organisational infrastructure needed to deliver it.
A practical example illustrates the gap clearly. If an employee requires emergency surgery abroad, travel insurance may cover the hospital bill. But someone still needs to identify the right facility, coordinate admission, manage communication with the family, confirm when the patient is fit to travel, and arrange a medically appropriate return journey. That coordination is a duty of care function, not an insurance function. Organisations that rely solely on insurance to satisfy their duty of care obligations leave a significant operational gap in their programmes.
What does a duty of care travel risk programme actually include?
A duty of care travel risk programme is a structured system for protecting employees throughout the travel lifecycle, from pre-trip planning through to safe return. An effective programme combines policy, technology, intelligence, and operational response capability into a single, coordinated framework.
The core components of a functioning travel risk management programme include:
- Pre-travel risk briefings: Destination-specific intelligence covering security conditions, medical infrastructure, entry requirements, and local hazards, delivered to travellers before departure
- Travel approval processes: Structured sign-off procedures for higher-risk destinations, ensuring that travel is sanctioned at the appropriate level and that risk mitigations are in place before departure
- Traveller tracking: Real-time visibility of employee locations during travel, enabling organisations to locate personnel quickly when an incident occurs
- 24/7 monitoring and alert capability: Continuous monitoring of global events with the ability to push travel risk alerts directly to affected travellers
- Emergency response access: Immediate access to medical assistance, security response, and evacuation support, not just a helpline, but an operational capability that can act
- Post-travel support: Mechanisms for debriefing travellers following significant incidents and providing access to mental health or medical follow-up where needed
The quality of each component matters as much as its presence. A travel risk management service that provides tracking without response capability, or pre-trip briefings without live monitoring, leaves organisations exposed when conditions change mid-trip. Programmes built on integrated technology and operational depth deliver meaningfully better outcomes than those assembled from disconnected tools and providers.
Who is responsible for duty of care within an organisation?
Duty of care responsibility sits with the employer as a legal entity, but operationally it is shared across multiple functions. In most organisations, accountability is distributed between HR or People Operations, travel management, legal and compliance, and security or risk teams, with senior leadership ultimately accountable for the organisation’s overall approach.
In practice, the day-to-day management of a travel risk programme typically falls to one of the following roles:
- Travel Risk Manager: A dedicated specialist responsible for programme design, vendor management, policy maintenance, and incident response coordination
- Global Mobility Director: Often responsible for duty of care where employee populations include frequent international assignees or expatriates
- HR or People Operations Lead: Frequently the primary duty of care owner in organisations without a dedicated travel risk function, particularly at mid-market companies
- Corporate Security or Risk Function: Takes the lead in organisations with significant exposure to high-risk environments or security-sensitive operations
The challenge for many organisations in 2026 is that responsibility is often fragmented. Travel booking sits with one team, insurance with another, and emergency response with a third, with no single owner coordinating the full picture. This fragmentation creates gaps that only become visible when an incident occurs. Organisations with the most effective programmes tend to have a named owner, a clear escalation path, and a single point of contact with their external assistance provider.
When does duty of care apply to contractors and remote workers travelling abroad?
Duty of care can extend to contractors and remote workers travelling abroad for work purposes, even when they are not directly employed. The key test is whether the travel is being undertaken on behalf of the organisation and whether the organisation has a degree of control over the work being performed. Where both factors are present, courts and regulators in many jurisdictions have found that duty of care obligations apply.
For contractors specifically, the question of duty of care often depends on the nature of the engagement. A long-term contractor embedded in a company’s operations, travelling to client sites on the company’s behalf, is likely to fall within the scope of the organisation’s duty of care. A short-term freelancer engaged for a single deliverable with no travel requirement presents a different picture.
Remote workers add a further layer of complexity. Where an organisation employs or contracts workers in other countries, or permits employees to work remotely from international locations, it needs to consider whether its duty of care framework extends to those individuals. The answer is increasingly yes, particularly where the organisation has encouraged or approved the international working arrangement.
The practical implication is that organisations should not design their travel risk programmes solely around directly employed staff. Contractor and remote worker populations should be mapped, assessed for travel exposure, and included in tracking and emergency response frameworks where appropriate. Failing to do so creates legal exposure and, more importantly, leaves individuals without support at the moment they most need it.
How NGS helps organisations meet their duty of care obligations
Northcott Global Solutions provides end-to-end travel risk management designed to help organisations meet their duty of care obligations before, during, and after travel. The service is built around operational depth rather than policy documentation alone, giving organisations the capability to act when it matters most.
NGS supports duty of care programmes through:
- 24/7 itinerary monitoring and traveller tracking via the Aurora platform, providing real-time visibility of employee locations across more than 190 countries
- Pre-travel risk briefings calibrated to destination risk level, covering security, medical, and travel-related hazards
- Mass emergency communication through SIREN, enabling rapid alerts to affected travellers during fast-moving incidents
- Immediate medical and security response, with an average urban response time of 40 minutes or less, compared to an industry standard of 3 to 7 days
- Medical and political evacuation, crisis management, and executive protection for high-risk environments
- ISO 31030-aligned programme design, supporting organisations in building auditable, defensible travel risk frameworks
Whether your organisation is building a travel risk programme from the ground up or strengthening an existing one, NGS provides the operational capability to back it up. Contact the NGS team to discuss how a tailored travel risk management solution can support your duty of care obligations.
Related Articles
- What happens during a political evacuation from a hostile country?
- Can travel risk management reduce incident rates for business travellers?
- How do you monitor travellers in real time during a crisis?
- How do geopolitical events affect corporate travel risk assessments?
- How do you communicate safely when operating in high-risk areas?
