Before hiring or engaging a remote worker in a foreign jurisdiction (or a different US state), employers must comply with five simultaneous legal obligations in the worker's jurisdiction: (1) local employment law, (2) payroll tax withholding, (3) social security contributions, (4) workplace health and safety standards, and (5) data privacy regulations. The worker's physical location -- not the employer's headquarters -- determines which laws apply. Failure to address any one of these creates exposure to back taxes, penalties, forced employment reclassification, and potential criminal liability. When an employer lacks a legal entity in the worker's jurisdiction, it must either establish one, register as a non-resident employer, or use an Employer of Record (EOR) to legally employ that worker. [src1, src2]
The OECD's November 2025 Model Tax Convention update introduced a two-part test for permanent establishment: a 50% working-time safe harbor (employees spending less than 50% of annual hours in a foreign treaty country generally do not create PE) and a commercial reason test (arrangements above 50% are assessed on whether the foreign presence serves a genuine business purpose beyond employee convenience). [src3] In the EU, the Framework Agreement on cross-border telework (effective July 2023) allows employees working 25-49% of time in their country of residence to remain affiliated with the employer's home-country social security system; at 50% or above, mandatory affiliation shifts to the residence country. Since July 2024, retrospective A1 certificate applications are limited to 3 months prior -- earlier uncovered periods create serious risk for unexpected social security liability. [src4] Setting up a foreign legal entity typically costs $20,000-$80,000+ per country and takes 3-6 months, making EOR services the standard compliance path for companies with fewer than 10 employees in a single foreign jurisdiction. [src5] Misclassification penalties in the US include back taxes plus interest, up to $25,000 per violation in California; the UK imposes unlimited fines and up to two years imprisonment for willful misclassification under IR35. [src7, src8]
International employment law is fragmented because employment, tax, and social security systems evolved nationally. When a company hires across borders, it intersects multiple sovereign regulatory systems simultaneously -- each asserting jurisdiction based on different criteria (place of incorporation, place of work, nationality, residence, source of income). The OECD's 2025 PE guidance, the EU's posted workers framework, and US multi-state nexus rules each attempt to draw bright lines, but gaps and overlaps persist. The fundamental risk is that an employer unknowingly triggers obligations in a foreign jurisdiction, creating retroactive tax, employment, and social security liabilities that compound over time. Even a single day of work in a foreign location can trigger complex tax filings for the individual and withholding obligations for the company. [src1, src2, src3]
START -- Employer wants to hire a remote worker in a different jurisdiction
|-- Is the worker in a different country?
| |-- YES
| | |-- Does the employer have a legal entity in the worker's country?
| | | |-- YES --> Register for payroll, withhold taxes, comply with local labor law
| | | +-- NO --> Continue below
| | |-- How many workers in that country?
| | | |-- Fewer than 10 --> Use an Employer of Record (EOR)
| | | +-- 10 or more --> Consider establishing a local entity ($20K-$80K+, 3-6 months)
| | |-- Assess permanent establishment risk (OECD two-part test)
| | | |-- Worker <50% of time in foreign country --> PE safe harbor likely applies
| | | +-- Worker >=50% of time --> Is there a commercial reason?
| | | |-- YES (client-facing, sales, local market) --> PE risk HIGH
| | | +-- NO (employee convenience only) --> PE risk LOWER but not zero
| | |-- Determine social security obligations
| | | |-- EU/EEA? --> A1 certificate if <50% in residence country
| | | |-- US bilateral? --> Apply totalization agreement (30 countries)
| | | +-- No treaty --> Dual contribution risk; budget accordingly
| | +-- Verify worker classification under LOCAL law (not home-country standards)
| +-- NO (same country, different state/province)
| |-- US multi-state?
| | |-- YES --> Check state nexus rules, register, withhold state taxes
| | |-- Does the state apply the convenience doctrine? (NY, CT, PA, NE, DE)
| | | |-- YES --> Worker may be taxed in employer's state AND work state
| | | +-- NO --> Tax based on physical presence
| | +-- Register for state unemployment insurance
| +-- Other country (e.g., EU member state, Canada province)
| +-- Check subnational rules for that country
+-- Is the worker an employee or contractor?
|-- Employee --> Full payroll, benefits, labor law compliance required
|-- Contractor --> Verify classification under local law; misclassification penalties apply
+-- Unsure --> Default to employee treatment; seek local legal adviceEmployers often believe that once a worker obtains a digital nomad visa, all tax and employment obligations are handled. In reality, a digital nomad visa only grants immigration permission. The worker may still owe income tax in both countries, and the employer may create a permanent establishment. No established case law exists to clarify the full scope of employer obligations under these programs. [src1, src2]
Separately assess tax residency triggers, PE risk, and social security obligations in BOTH the home and host country before approving any remote work arrangement abroad.
A US company hires a worker in Brazil as a "1099 contractor" based on US classification criteria. Under Brazilian law (CLT), the same arrangement may constitute an employment relationship, triggering mandatory benefits (13th salary, FGTS contributions, 30-day paid vacation) and back-pay liability. [src2, src8]
Engage local counsel or a compliant EOR to assess worker classification under the specific laws of the country where work is performed. The IRS three-factor test does not apply outside the US.
Employers assume that because the worker is remote and the employer has no office in the country, no social security contributions are owed. Social security obligations are triggered by the location of work performance, not the existence of a physical office. Failure to obtain A1 certificates or check totalization agreements creates unexpected liability during audits. [src4]
In the EU, obtain A1 certificates before cross-border work begins (retroactive applications limited to 3 months since July 2024). For US workers abroad, check whether a totalization agreement applies. For countries without agreements, budget for dual contributions. [src4]
Employers insert US choice-of-law clauses assuming US terms (at-will termination, limited notice) will apply abroad. Local mandatory protections override these clauses in virtually every non-US jurisdiction. Most countries require 30-90+ days notice plus severance. [src2]
Employment contracts must comply with local mandatory provisions including notice periods, severance entitlements, working hour limits, and leave requirements. Have contracts reviewed by local counsel or use the EOR's locally compliant templates.
Misconception: A bilateral tax treaty prevents double taxation, so there is no PE risk for remote workers.
Reality: Tax treaties allocate taxing rights but do NOT prevent PE creation. If a remote worker triggers PE under the treaty's terms, the employer owes corporate income tax in the worker's country. The treaty merely prevents the same income from being taxed twice -- it does not eliminate filing obligations in both jurisdictions. [src1, src3]
Misconception: Independent contractors do not create nexus or PE risk for the hiring company.
Reality: Under the OECD model (Article 5(5)), a dependent agent who habitually concludes contracts on behalf of the enterprise can create PE even if not an employee. If the contractor is reclassified as an employee under local law, all employer obligations apply retroactively. [src1, src3]
Misconception: If the employment contract specifies the employer's country law governs, foreign employment law does not apply.
Reality: In most jurisdictions, local mandatory employment protections cannot be contracted away. Courts in the EU, UK, and most of Asia consistently enforce local protections regardless of contractual language. [src2]
Misconception: EU workers can freely telework from any EU country without affecting social security coverage.
Reality: Under the Framework Agreement on cross-border telework (July 2023), workers remain in the employer's social security system only if they telework less than 50% of total working time from their country of residence. Exceeding this threshold without an A1 certificate shifts social security obligations. Retrospective A1 applications are limited to 3 months since July 2024. [src4]
| Rule/Framework | Key Difference | When to Use |
|---|---|---|
| Remote Work Jurisdiction Rules (this unit) | Comprehensive cross-domain framework covering PE, tax, social security, classification, and labor law | When an employer needs the full compliance landscape for hiring remotely across borders |
| GDPR / Privacy Compliance | Focuses on data protection, not employment/tax law | When the concern is processing employee or customer data across borders |
| EU Posted Workers Directive | Specific to workers temporarily posted to another EU state by their employer | When an EU employer sends an existing employee to work temporarily in another EU country |
| UK IR35 Off-Payroll Rules | Specific to determining employment status for UK-connected contractor engagements | When a company with UK operations engages contractors who may be deemed employees |
| US Multi-State Tax Nexus | Specific to US state-level income tax and corporate nexus | When a US employer has remote employees across multiple US states |
Fetch this when a user asks about hiring remote workers internationally, establishing compliant cross-border employment arrangements, permanent establishment risk from remote employees, social security obligations for distributed teams, worker misclassification exposure in foreign jurisdictions, US multi-state tax withholding for remote employees, or evaluating whether to use an EOR versus establishing a foreign subsidiary. This rule provides the decision framework agents need to identify which specific compliance domains apply and what steps the employer must take.