Here’s the uncomfortable truth most organizations don’t confront until it’s too late: whenever an employee is travelling for business purpose irrespective which mode of transport their risk involved in it and that risk is not just for employee it is for business also which in volve moral and ethical obligation.
This guide covers what duty of care means in a travel context, why 2026 has raised the stakes, the legal frameworks employers are held to across major jurisdictions, what an effective program actually includes, and the questions HR, travel, and risk teams ask most often.
What Is Duty of Care in Business Travel?
Duty of care is an employer’s legal and ethical obligation to take reasonable, proactive steps to protect employees from foreseeable harm while they travel for work. It covers physical safety, health, security, and increasingly, mental wellbeing — from the moment a business trip begins until the traveller returns.
This is a broader concept than travel insurance. Insurance is a financial product that reimburses costs after something goes wrong — a cancelled trip, a medical bill, lost luggage. Duty of care is the obligation to actively prevent that harm in the first place through risk assessment, traveller visibility, and emergency response capability. Organizations need both, but one doesn’t substitute for the other.
Importantly, duty of care generally applies for the business portion of any trip — including ” leisure ” travel that blends business and leisure — beginning when the business purpose starts and ending when it concludes. Many practitioners recommend extending traveller support across the full trip when a leisure extension was enabled by the business booking, since the boundary isn’t always clean in practice.
Why 2026 Has Raised the Stakes
A few converging forces have pushed duty of care from a compliance checkbox to a board-level priority:
Geopolitical risk is climbing. The World Economic Forum’s Global Risks Report 2026 ranks geoeconomic confrontation as the top global risk, with state-based armed conflict close behind. Tariffs, sanctions, and export controls are being deployed more frequently by major powers, creating material risk for cross-border business travel. Prolonged conflicts continue disrupting energy, food, and transport routes near affected regions.
Mega-events are concentrating risk. The FIFA World Cup 2026, spread across 16 host cities in three countries, is adding unprecedented crowd, transport, and cyber risk for any organization with employees traveling to or through host cities — a useful reminder that duty of care obligations doesn’t pause for major public events; if anything, they intensify.
Regulation keeps tightening. New European frameworks like DORA and NIS2 are raising the compliance bar for operational resilience, which increasingly includes documented duty-of-care reporting for financial and critical-infrastructure sectors.
Litigation is getting more expensive and more personal. Recent case law has sharpened what courts expect — the helicopter case above is now a widely referenced example of how courts assess whether an employer could reasonably have known about and avoided a risk. According to one 2025 industry estimate, non-compliance now exposes organizations to average damages of roughly $1.4 million per serious travel incident, alongside potential criminal liability for executives in cases of gross negligence.
The Legal Foundations (It Varies by Jurisdiction — But Not by Much)
There’s no single global law that governs duty of care in business travel, but the underlying standard is now close to universal across major economies: employers must take reasonably practicable steps to protect employees from foreseeable harm.
- United States: OSHA’s General Duty Clause requires employers to maintain a workplace free of recognized hazards — courts have extended “workplace” to cover business travel. The “course and scope of employment” doctrine treats authorized travel as compensable, and US courts have applied employer liability even to incidents like a car accident during a work-paid trip.
- United Kingdom: The Health and Safety at Work Act 1974 extends employer obligations to employees working away from their normal workplace, including business travellers. The Corporate Manslaughter and Corporate Homicide Act 2007 allow criminal prosecution where a gross breach of duty of care results in death.
- Germany: The Fürsorgepflicht standard under German labour law mandates proactive risk mitigation specifically for foreign work assignments.
- Australia: Work Health and Safety laws require employers to ensure worker safety while “at work,” which courts have interpreted to include business travel.
- European Union broadly: The EU Framework Directive on Safety and Health at Work explicitly includes mobile and traveling workers, requiring destination risk assessments, training, and emergency procedures — with penalties for non-compliance including potential criminal liability for executives in cases of gross negligence.
Because obligations shift by jurisdiction — and travellers often move through several jurisdictions on a single trip — most practitioners recommend building one global baseline policy, then layering jurisdiction-specific adaptations on top rather than trying to create a single universal checklist.
What an Effective Duty of Care Program Actually Includes
A credible program covers three phases of every trip:
Before travel:
- Destination risk assessment, typically benchmarked against government travel advisories (US State Department, UK FCDO, Australian DFAT, etc.)
- Pre-trip security briefings for higher-risk destinations, including security team pre-approval were warranted
- Signed traveller acknowledgment of safety policies and emergency procedures
- Confirmed emergency contacts and medical/security briefing logs
During travel:
- Real-time visibility into traveller locations — widely regarded as the single most critical component, since an organization cannot protect someone, it cannot locate
- All travel booked through a managed corporate platform rather than outside channels, since off-platform bookings create blind spots
- Automated risk alerts tied to a traveller’s actual location, not just a general destination
- 24/7 emergency assistance and clear escalation procedures
After travel:
- Incident review and documentation, even for near-misses
- Pattern analysis across trips to catch recurring risk exposure
- Retention of records — ISO 31030 recommends a three-year minimum, though several national employment-record statutes require longer
According to industry legal-risk surveys, a small set of records tends to be decisive in litigation: a written travel policy, a pre-trip risk assessment, a signed traveller acknowledgment, a real-time itinerary, a medical/security briefing log, and an incident response timeline. The consistent finding is that it isn’t the most polished policy document that holds up under scrutiny — it’s the boring, unglamorous documentation trail proving that a genuine process was followed.
International Standards Worth Knowing
- ISO 31030:2021 — the international benchmark specifically for travel risk management, covering risk assessment, traveller tracking, and response planning
- ISO 45001 — a broader occupational health and safety framework applicable to all work environments, including travel
- UN Guiding Principles on Business and Human Rights — sets a global standard for responsible business conduct relevant to how organizations treat traveling workers, particularly in higher-risk regions
Aligning with these standards doesn’t just reduce legal exposure — it gives a program a defensible structure that can be demonstrated to regulators, insurers, or a court after the fact, rather than reconstructed under pressure.
Common Gaps That Undermine Otherwise Good Programs
- Fragmented or unmanaged booking. When employees book outside official channels to save money or for convenience, the organization loses visibility into where its people actually are — the single most common blind spot.
- Policy without adoption. A well-written travel policy that nobody actually follows offers no real protection and can even work against an employer in litigation, since it shows the organization knew what “reasonable” looked like and didn’t enforce it.
- Treating insurance as sufficient. Insurance mitigates financial loss after an incident; it does nothing to fulfil the proactive obligation to prevent harm in the first place.
- Ignoring mental health. Modern duty of care definitions increasingly includes psychological wellbeing, particularly for frequent travellers — a dimension many older travel policies don’t address at all.
- Assuming low-risk destinations don’t need a program. Obligations apply at all travel risk levels, not just high-risk ones — domestic and “safe” international trips still carry a duty of care obligation, even if the specific controls look lighter.
Frequently Asked Questions
Does duty of care cover contractors and temporary workers, not just full-time employees?
It depends on the relationship and jurisdiction, but in many cases, organizations carry duty of care obligations for anyone traveling on their behalf regardless of employment status. The safer approach is including contractors, temps, and consultants in the same travel risk program and support resources as full-time staff, rather than assuming they fall outside the obligation.
What’s the difference between duty of care and travel insurance?
Duty of care is the employer’s obligation to actively protect travellers through policy, risk assessment, and response capability. Travel insurance is a financial product that reimburses costs — medical bills, cancellations, lost luggage — after something has already gone wrong. Insurance mitigates financial exposure; it doesn’t fulfil the underlying duty to prevent harm.
Can a company outsource its duty of care obligation to a travel management company?
The day-to-day execution can be supported by a travel management partner, but ultimate accountability remains with the employer. A company cannot fully transfer legal responsibility simply by contracting the booking process to a third party.
What should an employee do if they feel unsafe during a business trip?
They should contact company travel support immediately, and in cases of immediate danger, contact local emergency services first before notifying the employer. Establishing this protocol clearly during pre-trip briefings — before travel begins — matters more than having it buried in a policy document nobody reads.
What happens if an employer fails in its duty of care?
Consequences range from civil liability and regulatory fines to, in serious cases, criminal prosecution of the organization or individual executives — particularly under frameworks like the UK’s Corporate Manslaughter Act. Reputational damage often outlasts the direct legal costs, affecting recruitment and client trust well after a case is resolved.
Conclusion
Duty of care in business travel has moved well past a compliance formality — it’s now a board-level responsibility with real legal teeth, sharpened by a more volatile geopolitical environment and a body of case law that increasingly asks a simple, unforgiving question: did the organization know about a foreseeable risk, and did it do anything reasonable to prevent it?
The organizations that treat this well don’t just avoid litigation — they build genuine trust with their traveling employees, who are more willing to take on international assignments when they know their employer has a real, tested plan for their safety rather than a policy document that exists purely for show. In a year where geopolitical risk, major global events, and tightening regulation are all converging at once, a duty of care program built on real visibility, documented risk assessment, and tested response capability isn’t just good governance — it’s the difference between a manageable disruption and a preventable tragedy.