Remote Work Jurisdiction Rules: Employment Law for International Hiring

Summary

When an employer engages a remote worker across a border (or a US state line), the worker's physical work location -- not the employer's headquarters -- determines which employment, payroll-tax, social-security, health-and-safety, and data-privacy laws apply, and all five obligations apply simultaneously. Where the employer has no local entity, it must register as a non-resident employer, establish an entity ($20K-$80K+, 3-6 months), or use an Employer of Record (EOR; ~$300-700/month per worker). The OECD's November 2025 Model Tax Convention update sets a 50% working-time safe harbor plus a "commercial reason" test for permanent-establishment risk; the Commentary is explicit that employee preference, talent retention, and office-cost savings do NOT qualify as commercial reasons. In the EU, the cross-border telework Framework Agreement (now 23 signatories after Estonia joined 1 February 2026; Latvia and Lithuania remain outside) lets workers stay in the employer's social-security system below 50% telework in their residence country, via an A1 certificate applied for before work begins. Misclassification carries the steepest penalties -- and the US DOL's February 2026 proposed rule (comment period closed 28 April 2026) would rescind the 2024 standard, so US classification is itself in flux. [src1, src2, src3, src4]

Rule

Before hiring or engaging a remote worker in a foreign jurisdiction (or a different US state), employers must comply with five simultaneous legal obligations in the worker's jurisdiction: (1) local employment law, (2) payroll tax withholding, (3) social security contributions, (4) workplace health and safety standards, and (5) data privacy regulations. The worker's physical location -- not the employer's headquarters -- determines which laws apply. Failure to address any one of these creates exposure to back taxes, penalties, forced employment reclassification, and potential criminal liability. When an employer lacks a legal entity in the worker's jurisdiction, it must either establish one, register as a non-resident employer, or use an Employer of Record (EOR) to legally employ that worker. [src1, src2]

Evidence

The OECD's November 2025 Model Tax Convention update introduced a two-part test for permanent establishment: a 50% working-time safe harbor (employees spending less than 50% of annual hours in a foreign treaty country generally do not create PE) and a commercial reason test (arrangements above 50% are assessed on whether the foreign presence serves a genuine business purpose beyond employee convenience). [src3] In the EU, the Framework Agreement on cross-border telework (effective July 2023) allows employees working 25-49% of time in their country of residence to remain affiliated with the employer's home-country social security system; at 50% or above, mandatory affiliation shifts to the residence country. Since July 2024, retrospective A1 certificate applications are limited to 3 months prior -- earlier uncovered periods create serious risk for unexpected social security liability. [src4] Setting up a foreign legal entity typically costs $20,000-$80,000+ per country and takes 3-6 months, making EOR services the standard compliance path for companies with fewer than 10 employees in a single foreign jurisdiction. [src5] Misclassification penalties in the US include back taxes plus interest, up to $25,000 per violation in California; the UK imposes unlimited fines and up to two years imprisonment for willful misclassification under IR35. [src7, src8]

Key Properties

• OECD PE safe harbor: Remote work below 50% of total working time over 12 months in a foreign jurisdiction generally avoids permanent establishment risk under the 2025 framework [src3]
• OECD commercial reason test: Above the 50% threshold, PE risk depends on whether the foreign presence serves a genuine business purpose (client relationships, local market access) vs. employee convenience [src3]
• EU social security threshold: <50% of work in residence country allows home-country affiliation; 50%+ triggers mandatory host-country affiliation. The Framework Agreement reaches 23 signatory states after Estonia joined on 1 February 2026; Latvia and Lithuania remain outside, so the old 25% default still governs telework into those two Baltic states [src4]
• A1 certificate retroactivity: Since July 2024, retrospective A1 certificate applications are limited to 3 months prior; earlier periods create uncovered liability [src4]
• US totalization agreements: 30 bilateral agreements prevent dual social security taxation; all other countries carry dual contribution risk [src4]
• Entity setup cost: $20,000-$80,000+ per country, 3-6 months timeline; EOR eliminates this requirement [src5]
• UK IR35 scope: Off-payroll working rules apply to medium and large end-users; the small-company exemption thresholds rose on 6 April 2026 to turnover >£15M, balance sheet >£7.5M, or >50 employees (up from £10.2M / £5.1M). Because the size test looks to the prior financial year, the change bites in practice from April 2027, moving some end-users out of IR35 scope [src7, src9]
• US classification rule in flux: The 2024 DOL six-factor "totality" independent-contractor rule remains in force, but a February 2026 DOL proposed rule (NPRM published 27 Feb 2026; comment period closed 28 April 2026) would rescind it and restore a control-weighted economic-reality test -- not yet finalized [src8, src10]
• Misclassification risk: US (back taxes + penalties), UK (unlimited fines, 2 years imprisonment), Australia (up to AUD 93,900 per incident) [src7, src8]

Conditions

• Applies when: An employer hires or engages any worker (employee or contractor) who will perform work from a different jurisdiction than the employer's registered entity -- whether cross-border internationally or across US state lines
• Does NOT apply when: Both employer and worker are in the same jurisdiction with no cross-border element; worker is a truly independent contractor providing services to multiple clients on their own terms and tools (though classification must be verified); employer already has a legal entity in the worker's country (standard local compliance applies)
• Confidence degrades when: Bilateral tax treaties between specific country pairs override OECD model provisions; local legislation changes faster than international guidance; pending EU ESSPASS rollout (digitizing A1 certificates, in final pilot phases) may alter social security procedures; countries have not yet adopted the OECD 2025 commentary into bilateral treaties; US contractor classification is mid-rulemaking (Feb 2026 DOL proposed rule not yet final); EU Framework Agreement membership is still expanding (Estonia joined Feb 2026; Latvia and Lithuania not yet signatories)

Constraints

• OECD 2025 Model Tax Convention guidance is non-binding commentary on treaty interpretation; actual tax treatment depends on bilateral treaties between specific country pairs. European tax authorities increasingly follow OECD positions but are not bound by them. The Commentary is explicit that employee preference, talent retention, and office-cost savings do NOT count as the "commercial reason" that keeps a >50% arrangement out of PE -- do not treat the safe harbor as a blanket exemption. [src3]
• US worker classification is mid-rulemaking: the 2024 DOL six-factor rule still governs FLSA classification, but the February 2026 proposed rule (comment closed 28 April 2026) would replace it with a control-weighted test. Until a final rule issues, classify conservatively and re-check before relying on either standard. [src8, src10]
• Employment law in most jurisdictions cannot be overridden by contractual choice-of-law clauses -- local mandatory protections (notice periods, severance, working hour limits, leave entitlements) apply regardless. At-will employment does not exist outside the US. [src2]
• EU Posted Workers Directive and Framework Agreement on telework apply only within EU/EEA member states plus Switzerland; the UK is not a signatory to the telework Framework Agreement [src4]
• US state-level rules differ dramatically: some states (NY, CT, PA, NE, DE) apply a convenience-of-the-employer doctrine; others use physical presence or de minimis day thresholds; seven states have no income tax [src5]
• Digital nomad visas (available in 70+ countries) solve immigration requirements but typically do NOT resolve income tax or social security obligations [src2]
• Works council engagement may be required in countries with co-determination rights (Germany, Netherlands, France) before implementing remote work arrangements [src5]

Rationale

International employment law is fragmented because employment, tax, and social security systems evolved nationally. When a company hires across borders, it intersects multiple sovereign regulatory systems simultaneously -- each asserting jurisdiction based on different criteria (place of incorporation, place of work, nationality, residence, source of income). The OECD's 2025 PE guidance, the EU's posted workers framework, and US multi-state nexus rules each attempt to draw bright lines, but gaps and overlaps persist. The fundamental risk is that an employer unknowingly triggers obligations in a foreign jurisdiction, creating retroactive tax, employment, and social security liabilities that compound over time. Even a single day of work in a foreign location can trigger complex tax filings for the individual and withholding obligations for the company. [src1, src2, src3]

Framework Selection Decision Tree

START -- Employer wants to hire a remote worker in a different jurisdiction
|-- Is the worker in a different country?
|   |-- YES
|   |   |-- Does the employer have a legal entity in the worker's country?
|   |   |   |-- YES --> Register for payroll, withhold taxes, comply with local labor law
|   |   |   +-- NO --> Continue below
|   |   |-- How many workers in that country?
|   |   |   |-- Fewer than 10 --> Use an Employer of Record (EOR)
|   |   |   +-- 10 or more --> Consider establishing a local entity ($20K-$80K+, 3-6 months)
|   |   |-- Assess permanent establishment risk (OECD two-part test)
|   |   |   |-- Worker <50% of time in foreign country --> PE safe harbor likely applies
|   |   |   +-- Worker >=50% of time --> Is there a commercial reason?
|   |   |       |-- YES (client-facing, sales, local market) --> PE risk HIGH
|   |   |       +-- NO (employee convenience only) --> PE risk LOWER but not zero
|   |   |-- Determine social security obligations
|   |   |   |-- EU/EEA? --> A1 certificate if <50% in residence country
|   |   |   |-- US bilateral? --> Apply totalization agreement (30 countries)
|   |   |   +-- No treaty --> Dual contribution risk; budget accordingly
|   |   +-- Verify worker classification under LOCAL law (not home-country standards)
|   +-- NO (same country, different state/province)
|       |-- US multi-state?
|       |   |-- YES --> Check state nexus rules, register, withhold state taxes
|       |   |-- Does the state apply the convenience doctrine? (NY, CT, PA, NE, DE)
|       |   |   |-- YES --> Worker may be taxed in employer's state AND work state
|       |   |   +-- NO --> Tax based on physical presence
|       |   +-- Register for state unemployment insurance
|       +-- Other country (e.g., EU member state, Canada province)
|           +-- Check subnational rules for that country
+-- Is the worker an employee or contractor?
    |-- Employee --> Full payroll, benefits, labor law compliance required
    |-- Contractor --> Verify classification under local law; misclassification penalties apply
    +-- Unsure --> Default to employee treatment; seek local legal advice

Application Checklist

Step 1: Determine jurisdictional exposure

• Inputs needed: Employer's country/state of incorporation, worker's physical work location(s), expected duration, percentage of time in each location
• Output: List of jurisdictions where employer may have obligations, with five compliance streams identified per jurisdiction (employment law, payroll tax, social security, health and safety, data privacy)
• Constraint: A single day of work in a foreign location can trigger tax filing obligations. If worker will be in a foreign country >50% of working time over 12 months, flag permanent establishment risk immediately. [src1, src3]

Step 2: Assess worker classification

• Inputs needed: Nature of engagement (exclusive vs. multiple clients, who provides tools, who sets schedule, degree of control, integration into business)
• Output: Employee or independent contractor determination under each relevant jurisdiction's law
• Constraint: Classification must be assessed under EACH jurisdiction's local law independently; a worker may be a contractor in one country and an employee in another. The IRS three-factor test does not apply outside the US. When in doubt, treat as employee. [src2, src8]

Step 3: Establish compliant employment structure

• Inputs needed: Classification result, employer's existing entities, number of workers in target country, budget for entity establishment vs. EOR
• Output: Either (a) registration with local tax/labor authorities via existing entity, (b) EOR engagement, (c) non-resident employer registration, or (d) local entity establishment
• Constraint: EOR is not available in all countries; some jurisdictions require a local entity for certain activities. Verify EOR provider holds required licenses. Entity setup costs $20,000-$80,000+ and takes 3-6 months. [src5]

Step 4: Configure payroll, tax, and social security

• Inputs needed: Employment structure from Step 3, applicable tax treaties, social security agreements (A1 certificate for EU, Totalization Agreement for US bilateral)
• Output: Payroll system configured for correct withholding, social security contributions enrolled, benefits compliant with local minimums
• Constraint: For EU cross-border telework, apply for A1 certificate BEFORE work begins -- retroactive applications limited to 3 months since July 2024. For US multi-state, register and withhold in EVERY state where employee works, even in states without de minimis thresholds. [src4, src5]

Step 5: Monitor and reassess ongoing compliance

• Inputs needed: Worker's actual work location data (geofencing apps integrated with payroll recommended), changes in local legislation, treaty updates
• Output: Quarterly compliance review, updated registrations as needed
• Constraint: Escalate to local employment counsel if: worker's location changes, local law changes, duration exceeds originally planned period, enforcement action is received, or worker's role shifts to client-facing/sales activities that increase PE risk. [src1, src3]

Decision Logic

If a worker will spend less than 50% of working time in a foreign treaty country over any 12-month period

Permanent-establishment risk is generally low under the OECD 2025 safe harbor, but you still owe local payroll, social security, and labor-law compliance from day one -- the safe harbor only addresses corporate-tax PE, not the other four obligation streams. [src1, src3]

If a worker exceeds 50% foreign working time and the only reason is employee convenience, talent retention, or office-cost savings

Do NOT rely on the commercial-reason exception; the OECD Commentary expressly excludes those motives. Assume elevated PE risk and obtain a tax opinion for that specific treaty pair. [src3]

If the worker teleworks into an EU/EEA state that has signed the cross-border telework Framework Agreement (23 states as of Feb 2026)

Apply for an A1 certificate BEFORE work begins to keep them in the employer's social-security system up to 49.99% residence-country telework; retroactive applications are limited to 3 months since July 2024. [src4]

If the worker teleworks into Latvia or Lithuania (or another non-signatory)

The Framework Agreement does not apply; the default 25% telework limit governs before social-security affiliation shifts to the residence country. Budget for the lower threshold and check the standard A1 rules. [src4]

If you have fewer than ~10 workers in a single foreign country and no local entity

Use an Employer of Record rather than incorporating; entity setup runs $20K-$80K+ over 3-6 months, while an EOR adds ~$300-700/month per worker and carries local compliance for you. [src5]

If you are a UK end-user near the small-company line engaging contractors

Re-test your size against the higher 6 April 2026 IR35 thresholds (turnover >£15M, balance sheet >£7.5M, >50 employees), but remember the prior-year reference means the change only bites in practice from April 2027 -- until then assess status as before. [src7, src9]

If you are classifying a US worker as an independent contractor

Apply the 2024 DOL six-factor economic-reality rule (still in force), but document the control and profit/loss factors carefully and re-check before go-live: the Feb 2026 DOL proposal would shift weight back toward control and is not yet final. [src8, src10]

If the user actually needs only classification guidance or only corporate-tax PE analysis

Route to the correct unit: Contractor vs Employee Global for status, or Permanent Establishment for the tax-only PE limb. [src1, src2]

Anti-Patterns

Wrong: Assuming a digital nomad visa solves all compliance issues

Employers often believe that once a worker obtains a digital nomad visa, all tax and employment obligations are handled. In reality, a digital nomad visa only grants immigration permission. The worker may still owe income tax in both countries, and the employer may create a permanent establishment. No established case law exists to clarify the full scope of employer obligations under these programs. [src1, src2]

Correct: Treat digital nomad visa as immigration clearance only

Separately assess tax residency triggers, PE risk, and social security obligations in BOTH the home and host country before approving any remote work arrangement abroad.

Wrong: Applying home-country classification standards globally

A US company hires a worker in Brazil as a "1099 contractor" based on US classification criteria. Under Brazilian law (CLT), the same arrangement may constitute an employment relationship, triggering mandatory benefits (13th salary, FGTS contributions, 30-day paid vacation) and back-pay liability. [src2, src8]

Correct: Classify under local law in every jurisdiction

Engage local counsel or a compliant EOR to assess worker classification under the specific laws of the country where work is performed. The IRS three-factor test does not apply outside the US.

Wrong: Ignoring social security obligations because "it's just remote work"

Employers assume that because the worker is remote and the employer has no office in the country, no social security contributions are owed. Social security obligations are triggered by the location of work performance, not the existence of a physical office. Failure to obtain A1 certificates or check totalization agreements creates unexpected liability during audits. [src4]

Correct: Obtain proper social security certificates and register proactively

In the EU, obtain A1 certificates before cross-border work begins (retroactive applications limited to 3 months since July 2024). For US workers abroad, check whether a totalization agreement applies. For countries without agreements, budget for dual contributions. [src4]

Wrong: Using a US employment contract to override foreign employment law

Employers insert US choice-of-law clauses assuming US terms (at-will termination, limited notice) will apply abroad. Local mandatory protections override these clauses in virtually every non-US jurisdiction. Most countries require 30-90+ days notice plus severance. [src2]

Correct: Draft locally compliant employment agreements

Employment contracts must comply with local mandatory provisions including notice periods, severance entitlements, working hour limits, and leave requirements. Have contracts reviewed by local counsel or use the EOR's locally compliant templates.

Counter-Arguments

• The OECD's 50% working-time threshold provides relief for short-term or part-time remote arrangements, meaning not every cross-border remote worker creates PE risk. Employers whose workers split time evenly may avoid PE if the arrangement is primarily for employee convenience. [src1, src3]
• EOR services have made compliant international hiring accessible to small companies; however, EOR adds $300-700/month per employee in fees on top of gross salary. [src5]
• Some jurisdictions are actively simplifying rules: 70+ countries now offer digital nomad visas; the EU cross-border telework Framework Agreement keeps adding signatories (23 as of Estonia's Feb 2026 accession); and the EU's ESSPASS project (in final pilot phases) aims to digitize A1 certificates into a smartphone wallet for cross-border workers. [src2, src4]

Common Misconceptions

Misconception: A bilateral tax treaty prevents double taxation, so there is no PE risk for remote workers.
Reality: Tax treaties allocate taxing rights but do NOT prevent PE creation. If a remote worker triggers PE under the treaty's terms, the employer owes corporate income tax in the worker's country. The treaty merely prevents the same income from being taxed twice -- it does not eliminate filing obligations in both jurisdictions. [src1, src3]

Misconception: Independent contractors do not create nexus or PE risk for the hiring company.
Reality: Under the OECD model (Article 5(5)), a dependent agent who habitually concludes contracts on behalf of the enterprise can create PE even if not an employee. If the contractor is reclassified as an employee under local law, all employer obligations apply retroactively. [src1, src3]

Misconception: If the employment contract specifies the employer's country law governs, foreign employment law does not apply.
Reality: In most jurisdictions, local mandatory employment protections cannot be contracted away. Courts in the EU, UK, and most of Asia consistently enforce local protections regardless of contractual language. [src2]

Misconception: EU workers can freely telework from any EU country without affecting social security coverage.
Reality: Under the Framework Agreement on cross-border telework (July 2023), workers remain in the employer's social security system only if they telework less than 50% of total working time from their country of residence. Exceeding this threshold without an A1 certificate shifts social security obligations. Retrospective A1 applications are limited to 3 months since July 2024. [src4]

Comparison with Similar Rules

When This Matters

Fetch this when a user asks about hiring remote workers internationally, establishing compliant cross-border employment arrangements, permanent establishment risk from remote employees, social security obligations for distributed teams, worker misclassification exposure in foreign jurisdictions, US multi-state tax withholding for remote employees, or evaluating whether to use an EOR versus establishing a foreign subsidiary. This rule provides the decision framework agents need to identify which specific compliance domains apply and what steps the employer must take.