Remote work from another Southeast Asian nation may appear straightforward, but it can expose companies to immigration, tax, data-security and employment-law risks, according to David Smail, partner and head of employment at DLA Piper in Singapore.
Employees now often ask to extend a family trip, spend time in their home country, or work temporarily from a holiday spot while staying on the same payroll and using the same corporate systems.
A typical request might read, “Can I work from Bangkok for a few weeks?” Or: Can I spend two months in Malaysia while visiting family? The fact that an employee remains employed by and paid through their home-country entity does not mean the arrangement is legally neutral.
Physical presence in another jurisdiction can trigger local immigration rules, personal and corporate tax obligations, the possibility of creating a taxable presence for the employer, local employment protections, social-security duties, data-protection statutes and even workplace health-and-safety responsibilities.
Immigration and tax pitfalls
Employers often start with tax concerns, which is understandable because an extended stay abroad raises questions about where the individual should pay tax, whether payroll withholding is required, and what new reporting duties might arise.
David Smail says immigration is frequently the first issue that needs attention.
In many countries, carrying out work activities while physically present in the jurisdiction may require an appropriate work visa, even if the employee is only there temporarily and continues to work for a foreign employer.
The analysis depends on the destination country, the type of visa held, the nature of the employee’s work and the local interpretation of what constitutes employment or business activity.
Tax exposure also extends beyond the employee’s personal position. Companies must consider whether the employee’s activities could create corporate tax exposure or a permanent establishment—a taxable business presence—in the destination country.
The risk tends to increase where the employee has managerial authority, signs contracts, generates revenue or regularly interacts with customers.
There is rarely a safe “number of days.” A purely duration-based approach can be misleading, says David Smail.
Duration matters, particularly when an overseas arrangement becomes lengthy, recurring or routine, but the employee’s role can be just as important, sometimes more so.
For immigration purposes, some countries may take a strict approach even where the stay is short. For tax and permanent-establishment purposes, authorities may focus on the substance of the employee’s activities.
Employers should assess the full context of each request: where the employee will be working, whether the arrangement is a one-off or likely to recur, the employee’s seniority and level of authority, interaction with customers, ability to negotiate or sign contracts, and access to sensitive data.
Data protection challenges
Data protection and confidentiality may be among the most overlooked risks when an employee accesses systems from another country.
Different jurisdictions may have different data-protection laws, cybersecurity requirements, or restrictions on the transfer and storage of certain information.
Practical controls include requiring company-approved devices, secure encrypted connections, approved virtual private networks, multi-factor authentication, systems with appropriate access controls, and clear procedures for reporting lost devices or suspected breaches.
Employees should understand what they can and cannot do while working abroad, such as whether they may use public Wi-Fi, print documents, work in public spaces or access particular categories of data, and who to contact if an incident occurs.
Countries differ not only in written laws but also in how those laws are administered and enforced; immigration requirements, local employment protections, tax rules, social-security obligations and data-protection frameworks can all differ markedly.
Leave a Reply