While working remotely from another Southeast Asian country might appear straightforward, it potentially exposes employers to risks in immigration, tax, data security, and employment law. David Smail, Partner and Head of Employment at DLA Piper in Singapore, outlines key considerations for businesses before approving such requests.
The Hidden Legal Risks of Cross-Border Remote Work
For many employers, remote and hybrid work are now standard parts of daily operations. Workers can now expect to extend vacations, return to their home countries, or work while on holiday, all while remaining in the same position, on the same payroll, and linked to the same systems.
A request might seem straightforward, like working out of Bangkok for a few weeks or spending two months in Malaysia while visiting relatives. However, just because an individual stays employed by a Singapore company does not mean the situation is legally neutral. Once work is performed while physically in another nation, various local regulations may apply.
These issues are especially critical in Southeast Asia, where legal systems and enforcement methods differ significantly between jurisdictions.
Immigration and Tax Concerns
Employers often prioritize tax first. That is logical, as an extended period abroad can raise questions about where an individual should pay tax, if payroll withholding is needed, and if the employer has new reporting duties. However, Smail notes that immigration is frequently the first concern.
This is a detail employers can easily overlook. The staff member might not be taking on local employment, getting paid locally, or working from a local office. Still, local immigration authorities may consider certain activities done while in the country as work requiring authorization.
The assessment is not always clear-cut. It can depend on the target country, the visa type, the nature of the work, and local interpretations of employment or business activities. Tax risks also go beyond the employee personally. Companies must consider if the employee’s actions could create corporate tax liability or a permanent establishment, a taxable business presence, in the destination country.
Read Also: HR Leaders Chart AI-Driven Workforce Strategy in Malaysia
This is particularly relevant for senior executives, sales staff, business development staff, and employees who can negotiate or finalize agreements. In these scenarios, the problem is not just where the person is sitting, but what they are doing from that location and whether those actions could be linked to the company.
Duration and Role Matter More Than Limits
Companies sometimes search for a universal cutoff, such as 30, 60, or 90 days. But Smail cautions that a purely duration-based approach can be misleading. Duration matters, particularly when an overseas arrangement becomes lengthy, recurring or routine. The longer an employee remains in a country, the more likely it is that tax, social-security and employment-law considerations may arise.
But the employee’s role can be just as important, sometimes more so. “An employee who spends a few weeks answering emails and attending internal meetings may present a very different risk profile from a senior executive, salesperson, or business development professional engaging with customers and making commercial decisions,” Smail adds. For immigration purposes, some countries may take a strict approach even where the stay is short. For tax and permanent-establishment purposes, authorities may focus on the substance of the employee’s activities.
An employee with a material role in generating revenue or concluding contracts could create greater concern than an employee whose work is internal and administrative. Rather than relying on arbitrary thresholds alone, employers should assess the full context of each request: Where will the employee be working? Is the arrangement a one-off or likely to recur? What is the employee’s seniority and level of authority? Will they interact with customers, suppliers or regulators? Can they negotiate, sign or effectively conclude contracts? Will they access sensitive data or regulated systems?
Data protection does not stop at the border. Tax and immigration can dominate discussions about cross-border remote work, but data protection and confidentiality may be among the most overlooked risks. “When an employee accesses systems from another country, employers need to think about more than just whether the internet connection is secure,” Smail says. “Different jurisdictions may have different data protection laws, cybersecurity requirements, or restrictions on the transfer and storage of certain information.”
Regional Complexity Demands Local Expertise
Southeast Asia is not a single legal environment for cross-border remote work. The regulatory system varies significantly across the region. Countries differ not only in written laws, but also in how those laws are administered and enforced.
