Work-from-anywhere programmes — where employees can work from any location for a set period — are a powerful retention and wellbeing tool. But the tax and compliance risks can be significant if the policy is not carefully designed. A single employee working from the wrong country for too long can create a tax liability that costs more than the employee’s annual salary.
Key Takeaways
- The 183-day rule (or whatever applies under the relevant tax treaty) is the critical threshold — exceeding it can create a permanent establishment.
- Data residency and privacy laws (GDPR, Australian Privacy Act, etc.) may restrict where employee data can be accessed from.
- A clear whitelist of approved countries reduces risk significantly.
- Time zone requirements ensure team collaboration is not disrupted.
- The employee typically bears personal tax responsibility, but the employer bears the corporate tax risk.
The Tax Trap Explained
When an employee works from a foreign country, that country may consider the employer to have a permanent establishment (PE) there. Once a PE is established, the employer is liable for corporate tax on profits attributable to that PE.
The threshold varies by treaty, but the common triggers are:
- Fixed place of business — if the employee has a dedicated workspace in that country
- Duration — typically 30-183 days of work in a 12-month period
- Dependent agent — if the employee has authority to conclude contracts on behalf of the employer
The risk is not theoretical. Tax authorities in the EU, Australia, and the US have increased scrutiny of remote working arrangements since the pandemic. An employee who works from a coffee shop for 3 weeks is unlikely to trigger a PE — but an employee who rents an apartment and works from it for 6 months may well do so.
Policy Design: The Whitelist Approach
The safest approach is a whitelist of pre-approved countries for work-from-anywhere arrangements. Factors for the whitelist:
- Double tax treaty with the employer’s home country — ideally one that sets a high threshold for PE
- Digital nomad visa availability — over 50 countries now offer specific digital nomad visas
- Low tax risk — countries that do not aggressively assert PE claims
- Good infrastructure — reliable internet, power, and health services
- Time zone compatibility — within 3 hours of the home office time zone for most roles
Common whitelist countries include: UK, Australia, New Zealand, Canada, Germany, Netherlands, Spain (digital nomad visa), Portugal (D8 visa), Estonia (digital nomad visa), and Croatia (digital nomad visa).
Time Zone and Collaboration Rules
Work-from-anywhere policies need practical rules:
- Core hours overlap — typically 4 hours of overlap with the team’s core hours
- Meeting attendance — mandatory meetings must be attended regardless of local time
- Response time — acceptable response time for non-urgent communications (e.g., within 24 hours)
- Availability window — published working hours in the local time zone
For roles that require real-time collaboration (customer support, project management), the time zone overlap requirement is stricter. For deep-focus roles (engineering, writing), more flexibility is possible.
FAQ
How long can I work from another country without tax problems?
Generally 30-90 days per calendar year, depending on the country. Most tax treaties set the threshold at 183 days, but some countries apply a lower threshold. Your employer’s policy should be more conservative than the legal limit.
Can I work from any country in my company’s work-from-anywhere programme?
Only if it is on the whitelist. Countries not on the list have not been assessed for tax, legal, and security risks. Working from a non-whitelisted country may breach the policy.
Does my employer need to know my exact location?
Yes — your employer needs to know for payroll tax, workers’ compensation, and emergency contact purposes. Some companies require location check-ins or calendar updates.
What about data security when working from another country?
Accessing company data from countries with weak data protection laws may breach GDPR or other privacy regulations. The policy should require VPN use, encrypted devices, and compliance with the employer’s data security standards.
Can I use annual leave during a work-from-anywhere period?
Yes — but it must be clearly separated. Days you are working are work days. Days you are on leave are leave days. Mixing them creates confusion for payroll, tax, and compliance.