What Is Duty of Care in Corporate Travel?
Duty of care in corporate travel is the legal and ethical obligation employers have to protect employees who travel on business. This includes ensuring traveler safety, providing emergency assistance, monitoring risks at travel destinations, and maintaining communication during crises. As of Q3 2026, duty of care has become a board-level priority for organizations of all sizes, driven by heightened geopolitical instability, tightening regulatory scrutiny across the EU and UK, and the maturation of AI-powered risk intelligence tools that make proactive traveler protection operationally feasible even for mid-market employers.
The concept goes beyond simply booking safe hotels. A modern 2026 duty of care program encompasses real-time traveler tracking, AI-driven predictive risk alerts filtered by itinerary, emergency evacuation planning, medical assistance, and integrated traveler communication across mobile push, SMS, and email channels. Companies that fail to meet their duty of care obligations face legal liability, reputational damage, and — most importantly — potential harm to their employees.
Legal Framework for Duty of Care
Duty of care obligations vary by jurisdiction, but the principle is consistent: employers must take reasonable steps to protect traveling employees from foreseeable harm.
United States
OSHA's General Duty Clause requires employers to provide a workplace free from recognized hazards, and courts have extended this to include business travel. Companies must assess travel risks, provide safety information, and maintain communication with travelers. While no single federal law governs corporate travel duty of care, negligence claims can arise when employers fail to take reasonable precautions — and in 2026, plaintiffs' counsel increasingly cite the availability of affordable traveler-tracking technology as evidence that a failure to deploy it constitutes negligence.
European Union
The EU Framework Directive on Safety and Health at Work (89/391/EEC) explicitly includes mobile and traveling workers. Employers must conduct risk assessments for travel destinations, provide training, and maintain emergency procedures. Penalties for non-compliance can be severe, including criminal liability for executives in cases of gross negligence.
United Kingdom
The Health and Safety at Work Act 1974 extends to employees working away from their normal workplace, including business travelers. The Corporate Manslaughter and Corporate Homicide Act 2007 allows for criminal prosecution of organizations that grossly breach their duty of care, resulting in death.
Australia
Work Health and Safety laws require employers to ensure the health and safety of workers while they are "at work," which courts have interpreted to include business travel.
5 Essential Components of a Duty of Care Program
1. Pre-Trip Risk Assessment
Before employees travel, assess the risks at their destination:
- Political stability and security threats
- Natural disaster risk (earthquakes, hurricanes, flooding)
- Health risks (disease outbreaks, healthcare quality)
- Crime rates and travel advisories
- Infrastructure reliability (transportation, communications)
Use government travel advisories (US State Department, UK FCDO, Australian DFAT) as baselines. For high-risk destinations, require security team pre-approval and provide destination-specific briefings to travelers.
2. Real-Time Traveler Tracking
You cannot protect travelers if you don't know where they are. This is the single most critical component of duty of care:
- All travel must be booked through a corporate travel platform — never allow bookings outside the system
- The platform must provide a real-time dashboard showing traveler locations worldwide
- Location data must update dynamically as travelers move between cities
- Travel managers must be able to run a "who's where" report in under 60 seconds
Platforms like Travel Code provide automatic traveler tracking for every booking made through the system.
3. Emergency Communication
When a crisis occurs, you need to reach your travelers immediately:
- Maintain up-to-date contact information for all travelers (mobile, email, emergency contacts)
- Use a mass notification system that can reach travelers via SMS, email, and push notifications simultaneously
- Provide a 24/7 emergency hotline that travelers can call from anywhere in the world
- Test your communication system quarterly to ensure contact information is current
4. Emergency Response Plan
Have a documented plan for different types of emergencies:
- Medical emergency: Access to medical assistance, hospital referrals, evacuation coordination, and medical insurance
- Natural disaster: Evacuation routes, safe locations, transportation alternatives
- Political unrest: Shelter-in-place guidance, embassy contacts, evacuation triggers
- Terrorist incident: Immediate communication, location verification, evacuation coordination
- Lost/stolen documents: Embassy contact information, replacement passport procedures
5. Travel Insurance
Comprehensive travel insurance is non-negotiable for business travelers. As of 2026, most enterprise policies now bundle cyber-incident coverage (device theft, credential compromise on public networks, ransomware exposure) alongside traditional medical and trip-interruption cover:
- Medical coverage including emergency evacuation and repatriation
- Trip cancellation and interruption coverage
- Lost luggage and personal effects coverage
- Legal assistance in foreign jurisdictions
- Coverage for pre-existing conditions (check policy details)
Technology Solutions for Duty of Care
Modern travel management platforms provide integrated duty of care tools:
Traveler Tracking
Automatic location tracking for all travelers booked through the platform. Real-time dashboards show traveler positions on a global map, with the ability to filter by region, country, or city.
Risk Intelligence Integration
Integration with risk intelligence providers (e.g., Crisis24, International SOS, Riskline, Sherpa, and Healix) to provide real-time alerts about security incidents, natural disasters, health outbreaks, and transportation disruptions at or near traveler locations. In 2026, leading platforms layer AI classification on top of raw provider feeds to suppress non-material alerts and surface only the risks relevant to each traveler's specific itinerary.
Automated Alerts
AI-powered notifications that proactively alert travelers and travel managers about risks at their destination. Travel Code's AI notification system sends alerts for flight delays, visa requirements, and destination-specific risks before and during the trip, with itinerary-aware filtering that suppresses non-material alerts to prevent notification fatigue — a common failure mode of legacy alerting systems.
Check-In Systems
Automated check-in requests sent to travelers in affected areas during a crisis. Travelers confirm their safety with one tap, and the system flags those who don't respond for follow-up.
Duty of Care Best Practices
- Mandate platform booking: Every business trip must go through your travel platform — no exceptions. Travelers who book outside the system are invisible to your duty of care program.
- Regular training: Train travelers on safety procedures, emergency contacts, and platform features before their first trip. Refresher training annually.
- Document everything: Maintain records of risk assessments, training, communications, and emergency responses. Documentation is your defense in a negligence claim.
- Review after incidents: After any safety incident, conduct a review and update procedures based on lessons learned.
- Vendor assessment: Evaluate your travel management platform's duty of care capabilities annually.
Frequently Asked Questions
Is duty of care a legal requirement?
Yes, in most jurisdictions. The specific laws vary — OSHA in the US, EU health and safety directives, UK Health and Safety at Work Act — but the principle is consistent: employers must take reasonable steps to protect traveling employees from foreseeable harm. Failure to do so can result in negligence claims, regulatory fines, and criminal liability in extreme cases.
How do I track employees during business travel?
Use a corporate travel management platform that provides real-time traveler tracking. All travel should be booked through the platform so traveler locations are automatically captured. The platform should provide a dashboard showing where all travelers are at any given time, with the ability to run instant "who's where" reports. Never allow bookings outside the system — travelers who book independently are invisible to your duty of care program.
What should a duty of care policy include?
A comprehensive duty of care policy should cover: pre-trip risk assessment procedures, mandatory booking through the corporate travel platform, emergency contact information, crisis communication protocols, evacuation procedures, travel insurance requirements, high-risk destination approval process, and post-incident review procedures. The policy should be reviewed and updated at least annually, with an interim review triggered by any material geopolitical shift, regulatory change, or safety incident affecting the organization's traveler base.
Who is responsible for duty of care?
Ultimate responsibility lies with the employer (the organization sending employees on business travel). Day-to-day management is typically handled by the travel manager, HR department, or security team, depending on the organization's size. However, employees also have a responsibility to follow safety procedures, use the designated booking platform, and respond to check-in requests during emergencies.
How Duty of Care Has Evolved in 2026
Three structural shifts have reshaped duty of care programs in the past 18 months:
- AI-native risk intelligence: Providers now use LLM-based classification to filter and prioritize alerts against each traveler's specific itinerary, replacing the noisy blanket-alert model that dominated 2020–2024.
- Regulatory convergence: The EU's updated corporate sustainability due diligence framework (CSDDD, phased implementation through 2027) formally extends duty of care obligations into the supply chain, meaning organizations must now consider not just their own employees but also contractors and third-party travelers acting on their behalf.
- Cyber-physical convergence in policy cover: Enterprise travel insurance policies increasingly bundle cyber-incident cover with traditional medical and evacuation cover, reflecting the reality that a stolen laptop on a business trip is now both a physical and a data-security incident.
Organizations reviewing their duty of care programs in 2026 should validate that their travel management platform supports itinerary-filtered alerting, that their insurance policy explicitly names cyber events, and that their booking mandate covers contractors and third-party travelers — not just direct employees.
