A Conversation about Managing Remote Work Location Compliance and Flexibility

[00:00:00] Picture a quiet Tuesday video call. Oh, we all know those. Right. You've got your coffee in hand, you click join, and you know the gallery view pops up on your screen and there is your colleague. Looking exactly the same as always. Exactly. Their background is their usual perfectly tidy home office. You know the exact one I mean. Yeah, with the perfectly placed bookshelf. Yes. The neat little bookshelf over their left shoulder, maybe a framed print on the wall. And that's what I mean.

[00:00:29] Isn't that potted plant that somehow never seems to grow or require water? Because it's probably plastic. Right. Probably. And the lighting is just perfectly balanced. You know, the Wi-Fi connection is rock solid. They're hitting all their deliverables. Everything is on time. They're nodding along to the Q3 projections like everything is normal. Exactly. The illusion is flawless. But beneath that surface there's this whole layer of like calculated espionage going on. It really is espionage, honestly. It is.

[00:00:59] Because what if that crisp virtual background is actually a digital curtain just pulling off this massive, highly coordinated cover-up? What if they are mentally calculating time zone differences so they don't accidentally say good morning when it is literally pitch black outside their window? Which happens more than you'd think. Right. What if that quote unquote home office in suburban Ohio is actually a short-term rented apartment overlooking a bustling street in Lisbon or, you know, a Café en Medellín?

[00:01:28] It sounds like a mild corporate comedy, but I mean, the reality is just staggering. It really is. So welcome to this deep dive. Today we are unpacking an incredibly eye-opening piece of research from the October 2026 Human Capital Leadership Review. Yeah. Authored by Dr. Jonathan H. Westover. Yes. Dr. Westover. And the topic at hand today is the massive hidden economy of undisclosed cross-border remote work.

[00:01:56] The research actually terms this the location compliance gap. Which is a very polite way of saying secret workations. A very polite way. So our mission today is to explore how modern organizations absolutely have to adapt to a world where employees are quite literally secretly working from everywhere. Because they really are. They are. And so whether you are a manager trying to figure out how to keep your team compliant with local laws or, you know, maybe you are the listener who has quietly answered a few emails from a beach in another country while pretending you were in your basement.

[00:02:26] We know you're out there. Oh, we definitely know. This deep dive is going to fundamentally change how you view the where of work. Yeah. To really wrap our heads around the scale of this, we need to look at the staggering disconnect between what executives believe is happening and, well, the actual boots on the ground reality of their employees. The blind spot. Exactly. A massive managerial blind spot. So if we crack open the GP 2026 World at Work report. Which is a huge study, right?

[00:02:53] Huge. They surveyed 7,100 professionals globally. We're talking the U.S., the U.K., Australia, France, Germany, Singapore. Wow. So a really solid global picture. Very solid. And they asked business leaders if they were confident that their distributed workforce is complying with local tax and labor laws. Basically, do you know where your people are? Right. And a full 93 percent of business leaders stated they are confident. They feel totally secure. Ninety three percent. Ninety three percent.

[00:03:21] That's almost universal confidence. Right. But then the survey asked the remote workers themselves about their actual habits. Oh, boy. Let me guess. It wasn't 93 percent. Not even close. Twenty eight percent of those workers admitted to working outside their home country or state for more than 30 consecutive days without ever telling H.R. OK, let's unpack this for a second, because those numbers are just wildly incompatible. They really are.

[00:03:45] Ninety three percent of leaders think the ship is running perfectly, while over a quarter of their workforce is taking month long secret international or out of state trips. Secret being the key word there. Yeah. It's like it's like throwing a massive house party, being incredibly confident that everyone is safely hanging out in the living room, only to find out later that a third of your guests have secretly set up camp in the neighbor's basement. And they're routing an extension cord back to your house to keep the music playing. Yes. Exactly.

[00:04:14] That analogy hits the nail on the head because, you know, you think the guests are in the house because the music is playing and the drinks are disappearing at a normal rate. The work is getting done. Right. And this is just one isolated survey catching an anomaly, is it? No, not at all. The data consistently points in this exact same direction across multiple longitudinal studies. Like look at the SAP Concur research from back in 2023. OK, what did they find?

[00:04:39] They investigated seven different global markets and found 18 percent of employees admitted they had knowingly worked from somewhere else without telling their employer in the previous 12 months. 18 percent. Yeah. And then they asked the leadership to estimate how many of their employees were doing this. The leaders guessed seven percent. So even when they suspect something is up, they're way off.

[00:05:03] Way off. Even when the C-suite suspects a bit of rule bending, they just drastically underestimate the sheer volume of the deception. And the timeline makes it even more intense, right? Oh, definitely. If you ask someone what they did in the last year, you get one number. But if you ask them about their entire career trajectory since remote work became, you know, normalized. The picture gets a lot darker for these HR departments.

[00:05:28] Exactly. In that same SAP Concur study, if you ask employees if they have ever done this over their career, the admission rate jumps to 36 percent. Wow. Over a third. And what do the leaders guess for that one? Only 6 percent. That is just a staggering disconnect. And it gets deeper. We also have the 2024 Canadian poll for Rogers Communications. 66 percent of remote workers admitted they don't always tell their colleagues when they are working from somewhere else.

[00:05:58] Wait, really? Their colleagues? Yeah. They are actively hiding it from their own peers, not just the bosses. That is fascinating. So it's this culture of total secrecy across the board. Right. And this goes all the way back to the early pandemic days, too. There was a Topia survey of employees at large international firms showing 28 percent had worked outside their home state or country. And did they report it? Only a third of them had reported those days to HR.

[00:06:26] Which leaves us with this incredible landscape of active daily deception. Active is right. The research points out that 44 percent of workers actively use virtual backgrounds specifically to hide their true physical location. So that blurred background on Zoom isn't just for hiding a messy bedroom anymore. No, it is an active alibi. An active alibi. I love that phrasing. When we look at who is actually pulling this off, the demographics tell a pretty compelling story about the future of work, right? They do.

[00:06:55] There is a July 2026 career mine survey of about 600 U.S. employees. It found that 20.8 percent had worked remotely from another country without telling their employer. OK, but how does that break down by generation? That's the interesting part. Generation Z is absolutely leading the charge at 36.7 percent. Wow. Over a third of Gen Z. Yeah. Compare that to workers aged 46 to 61, where only 14.1 percent are taking these hidden trips.

[00:07:24] So it's heavily skewed younger. Mm-hmm. What about gender? There's a slight split there, too. Men are a bit more likely to do it at 23.9 percent compared to women at 17.2 percent. So you have this younger workforce coming up that is highly mobile, highly tech literate, and perfectly comfortable maintaining a digital facade. Exactly. They grew up curating digital identities on social media, so curating a geographic identity for their boss is just second nature to them.

[00:07:53] But I have to ask the obvious question here. I mean, how do you miss a quarter of your workforce operating from a different time zone? It seems impossible, right? It does. If I am managing a team and someone is in Tokyo while I am in New York, the latency alone on the call or, like, the bags under their eyes from taking a 3 a.m. meeting, that should be a dead giveaway. Why are executives so deeply in the dark?

[00:08:19] It really comes down to a powerful mix of psychological comfort and, frankly, outdated administrative systems. Okay. Let's start with the psychological part. Sure. From a psychological standpoint, if the work is getting done and the deliverables are arriving on time, there is this immense comfort in out-of-sight, out-of-mind management. Meaning they just don't want to dig too deep. Right. A manager doesn't necessarily want to know that an employee is in Spain because knowing creates an administrative burden.

[00:08:49] Oh, I see. If they know, they have to do something about it. Exactly. If they know, they might have to report it. If they report it to HR, they might have to discipline a high-performing employee. And nobody wants to punish their best worker. Nobody. It is much easier to just look at the spreadsheet, see the numbers are green, and ignore the fact that the employee is wearing a heavy winter sweater in July. Plausible deniability. I didn't ask. They didn't tell. So my hands are clean. That's exactly the mindset.

[00:09:16] Furthermore, the human resources and finance systems these companies rely on, they were largely built for the 2010s. Which feels like a lifetime ago in terms of remote work. It really does. They simply aren't designed to track dynamic geographic movement. The software was built for a world where your home address is your permanent tax domicile. Right. You fill out your W-2 or your local equivalent when you are hired, and that's it.

[00:09:40] Yeah, the system assumes you sit in that house 365 days a year unless you formally submit a change of address form. The corporate infrastructure just lacks the sensors to detect geographical fluidity. Which means we really have to dig into the motivations here. We know the behavior is happening, and we know the systems are failing to catch it. But to actually solve this, we have to understand the forces driving people underground in the first place. Because it's not malicious. No. People aren't packing up their laptops and flying to Lisbon out of malice.

[00:10:09] They aren't trying to destroy their company's tax compliance on purpose. It points to a fundamental mismatch of expectations between the employer and the employee. The primary driver here is the durable, overwhelming appeal of flexibility itself. We have to dispel this myth that remote work was just a pandemic-era emergency measure that's, you know, fading away. It's definitely not fading away. Not at all. The demand hasn't gone away. It has settled into a structural reality of the modern knowledge economy.

[00:10:38] Gallup's tracking data from May 2026 shows 52% of U.S. remote-capable employees are working in hybrid arrangements. And how many are fully remote? 26%. Only a tiny vocal minority actually want to be fully on-site. And the value workers place on this flexibility is astronomical. I think you have a stat on that, right, about the pay cuts? Yes. Yes. That SAP Concur data noted a truly fascinating metric. 59% of employees would literally take a pay cut if it meant they could work from anywhere permanently.

[00:11:08] Let that sink in. In an era of inflation and cost-of-living crises, nearly 60% of people are willing to give up actual salary just to maintain geographic freedom. That is how highly the modern worker values autonomy. And they are looking out into a world that is actively reorienting to support that desire, even if their employers are completely lagging behind. The macro environment is incredibly enabling for this behavior right now. We are seeing a massive global ecosystem popping up just to support the nomadic lifestyle.

[00:11:38] Give me some numbers on that. How big is this ecosystem? Well, MBO Partners estimated that by 2025 there were 18.5 million American digital nomads. 18.5 million. Yeah. And crucially, 11.2 million of them aren't freelancers or independent contractors. They hold traditional full-time W-2 jobs. Wow. So they are traditional employees just taking their job on the road. Exactly.

[00:12:04] And the geopolitical landscape has shifted dramatically to attract this specific class of worker. By early 2026, EY tracked over 48 jurisdictions offering specialized digital nomad or remote work visas. 48? Yeah, that's nearly double the 25 jurisdictions that offered them back in 2022. I want to pause on those visas for a second because I think people sometimes misunderstand what they actually are. How so? Well, a digital nomad visa isn't just a tourist stamp in your passport.

[00:12:34] It's a sovereign nation legally rolling out the red carpet for a knowledge worker. That's a great way to put it. Right. Countries like Portugal, Spain, Croatia, or Barbados are essentially saying, come here, rent an apartment, buy our local coffee, stimulate our economy, and we will give you a specialized legal status to stay for a year. They're actively inviting your employees to come work from their beaches legally. Yes. Regardless of what the corporate handbook back in Chicago or London says.

[00:13:03] So the employees cut between a host country that warmly welcomes them and a home company that forbids the travel. Which creates a huge tension. It does. And here's where we get to the second major driver, which really explains the secrecy. If working from anywhere is so popular and foreign countries are legally welcoming you, why keep it a secret from the boss? Right. Why not just send a transparent email saying, hey team, I'm taking my laptop to Portugal for a month? Well, here's where it gets really interesting. It all comes down to an insidious cultural phenomenon.

[00:13:32] The flexibility stigma and the concept of passive FaceTime. Passive FaceTime. Let's dig into that. So let's look at the research by LSPAC and colleagues. They studied how observers in a workplace form judgments about their peers. Okay. They found that people spontaneously infer dependability, commitment, and dedication just by seeing someone physically at work. This is what we call passive FaceTime. So it has nothing to do with what they are actually doing. Nothing.

[00:14:01] It requires no actual output. You could be sitting at your desk staring blankly at a spreadsheet doing absolutely nothing. But because you are visible to the manager walking down the hallway, your brain is categorized as a dedicated employee. It's a psychological shortcut. Exactly. Physical presence equals productivity in the ancient reptilian part of a manager's brain. Butts in seats is the crudest metric of performance, but it is deeply, deeply ingrained in corporate culture. It is.

[00:14:30] And this creates a profound anxiety for the remote worker. In distributed organizations, research by Hafermaltz reveals something pretty counterintuitive. What's that? Well, you might assume remote workers are afraid of being micromanaged, right? Or surveilled by tracking software. Sure, like keystroke loggers or whatever. Right. But their central fear is actually being forgotten. They fear falling out of the social and professional network of the company. The out of sight, out of mind thing, but flipped against them. Exactly.

[00:14:58] And this fear is entirely justified by the data. The GNP report found that 36% of workers feel that employees based at the headquarters get a distinct edge in visibility, access to leadership, and ultimately promotions. Okay. So put yourself in the shoes of the employee here. You want the flexibility of working from abroad because it vastly improves your quality of life. But you are terrified of the career penalties associated with being labeled the nomad.

[00:15:24] You know that if you ask for permission, you get branded as the person who isn't serious about their career. So what is the logical move? You maintain the illusion of being right at home. Exactly. You blur your background. You work weird hours to perfectly match the home time zone. You complain about the local weather in your home city on Slack. Oh, it's so rainy here in Ohio today. Yes. And you just pretend you are down the street. The secrecy is an act of self-preservation.

[00:15:54] They are hiding the reality so they don't get punished by their flexibility stigma. That makes total sense. Now, I assume not all of these start as some grand mastermind deception, right? No, not at all. Okay. And that brings us to the third driver, which the research refers to as the ideal or the idiosyncratic deal. Ideals. I love this concept because it just feels so grounded in everyday office politics. It really is. The concept was heavily outlined in research by Rousseau.

[00:16:23] These arrangements often start as informal, completely off-the-books agreements between a highly valued employee and a sympathetic accommodating manager. Give me a hypothetical scenario. Okay. Picture this. A top-performing software engineer comes to their manager and says, hey, my partner has a temporary assignment in Mexico for two months. I'd love to go with them. I will be online the whole time. I'll work our normal hours. My output won't drop. A very reasonable request from a top performer. Right.

[00:16:51] And the manager, who is terrified of losing a great engineer in a tight labor market, says, sure, just get your work done. Let's not loop in HR because they'll just say no or bury us in paperwork. We'll just keep it between us. It completely bypasses official oversight. The manager thinks they are doing a good thing by retaining talent, and the employee thinks they literally have permission. Exactly. But let me play devil's advocate here for a minute. I want to push back on this whole premise. Go for it.

[00:17:20] If the work is getting done, and the manager is happy, and the employee is retained, why is this actually a problem? It is the most common defense of the practice. Right. And the data in the source material even points out that geographic flexibility actually boosts productivity. It does. There was that massive natural experiment at the U.S. Patent and Trademark Office. They moved examiners to a work-from-anywhere program, an output increased by 4.4 percent with zero increase in errors.

[00:17:48] Yes, the PTO study is a classic. Or look at the Trip.com study. That showed that allowing hybrid work cut quit rates by a third without harming performance metrics at all. So if I am 4.4 percent more productive typing in a cafe in Madrid than I am sitting in my basement in Ohio, and I'm happier, why on earth should a company care? Why are we policing geography if we are paying for output? It's a very fair question. Yeah.

[00:18:17] But let me dismantle that because it is the exact trap that middle managers fall into. Okay. Dismantle away. From a pure, localized productivity standpoint, work-from-anywhere is highly effective. You are absolutely correct that the employee might be writing better code or drafting better patents in Madrid. So what's the issue? The problem has nothing to do with productivity. The problem is the unseen existential threat this secrecy poses to the broader legal and financial structure of the organization.

[00:18:46] The stuff happening way above the manager's pay grade. Exactly. Productivity might be humming along beautifully, but the corporate entity is sitting on a powder keg of compliance, tax, and security risks. Okay. So we need to transition from the localized productivity to these unseen tripwires. Let's dig into that powder keg because I think a lot of people, both employees and managers, are completely oblivious to the legal machinery operating above their heads. What are the actual organizational fallouts of this secret flexibility?

[00:19:14] We have to start with the corporate tax and legal quagmire, which is an absolute nightmare for finance teams. We need to talk about the OECD model tax convention. Okay. Specifically, the updates made in 2025, the OECD essentially sets the international rules of the road for how countries tax cross-border business. And in 2025, they added specific commentary on when a home office abroad can create what is called a permanent establishment. Okay.

[00:19:42] I need an analogy here because international tax law is dense. Permanent establishment basically means the company is suddenly on the hook for corporate taxes in that foreign country, right? Because they technically have an operating presence there? Yes. Let's use a metaphor to make it clearer. Please do. Imagine you own a fleet of fishing boats based in Boston and you pay all your taxes in Massachusetts. Now, one of your captains decides, without telling you, to sail their boat over to a port in France and drop anchor. Okay. Rogue captain. Right.

[00:20:11] They keep fishing. They keep sending you the catch. Everything seems fine on your end. But the French authorities see that anchor dropped in their waters. Under international law, dropping that anchor means your entire Boston company is now doing business in France. Oh, wow. So the French government shows up and says, we see your boat. We see your anchor. You now owe us corporate taxes on a portion of your global revenue. That is terrifying. In the knowledge economy, the employee's laptop is the fishing boat and their physical presence in the country is the anchor.

[00:20:42] That is a great way to look at it. Under the 2025 OECD guidance, if an employee works from a location abroad for 50 percent or more of their total working time over a 12-month period, it can trigger a permanent establishment. So by secretly working in France for six months, that one mid-level marketing manager just dragged their entire multinational corporation into the French corporate tax system. Exactly.

[00:21:06] So the company suddenly has to hire French tax lawyers, file French corporate returns, and potentially pay a massive penalty for unregistered business activity. All because someone wanted to enjoy the local wine while answering emails. And it's not just the 50 percent threshold either. Even if you stay under that, you plunge into incredibly murky waters depending on regional laws. Look at the European Union, for example. What's their rule? In July 2023, a new framework took effect regarding Social Security and telework.

[00:21:35] It allows employees to telework from their country of residence for at least 25 percent, but less than 50 percent of their time, and remain insured in the employer's country. That sounds pretty reasonable, actually. It does, but there is a massive catch. What's the catch? It only applies if both countries have signed the agreement. And crucially, the employer and employee must apply for it jointly. Wait, jointly, which is completely impossible if the arrangement is a secret. Exactly the point.

[00:22:00] You can't jointly file tax and insurance paperwork with your employer if you are actively hiding your location from them. Secret locations in a third country fall completely outside these protective frameworks. So you just expose the company to massive liabilities. Right. And we shouldn't just focus on international travel either. The domestic risks within the United States are just as perilous. Really? Just crossing state lines? Yes. Several U.S. states operate under what's called convenience of the employer rules.

[00:22:29] This means if a non-resident secretly works remotely for an in-state employer, they might still owe that state's income tax. Break that down for me. How does that impact the employee's actual paycheck? Let's say your company is based in New York, which has a convenience of the employer rule. You decide to secretly move to a cabin in another state that also collects income tax. Because you are choosing to work away from the New York office for your own convenience, New York still claims the right to tax your income.

[00:22:57] Okay, so New York wants its money. But your new physical state also wants their cut of the income you are earning while sitting on their soil. You suddenly face potential double state taxation. Ouch. That is going to hurt come tax season. And a finance team cannot assess a risk they cannot see. They can't apply the right tax withholding. They can't evaluate thresholds. And they can't course correct before a massive multi-million dollar audit hits.

[00:23:23] So the tax liability alone is enough to bankrupt a smaller company or cause a massive headache for a large one. But the research points out another tripwire that is arguably more immediate and honestly terrifying. The cybersecurity threat. Yes. There is a massive cybersecurity threat here, which honestly reads like the plot of a spy thriller. It is one of the most alarming sections of the research. Physical location matters immensely to corporate security teams.

[00:23:50] And to understand why, we have to look at the dramatic actions taken by the U.S. Department of Justice in July 2025. Right, the DOJ cases. Walk us through those. So the DOJ announced the sentencing of an Arizona woman to 102 months in federal prison. Almost nine years in prison. For what? For running what is known as a laptop farm. She was actively helping North Korean IT workers pose as U.S.-based remote employees.

[00:24:16] Okay, we need to pause here and explain the mechanics of a laptop farm because it sounds completely wild. How does a foreign operative even get hired at a U.S. company? Well, the operatives apply for remote jobs at U.S. companies using stolen or synthetic U.S. identities. They nail the remote interviews. Over Zoom or whatever. Right. So the company hires them and ships a corporate secure laptop to the quote-unquote employee's address in Arizona. Okay.

[00:24:44] But the operative is in North Korea or somewhere else overseas. Exactly. So the Arizona woman receives the laptop. She plugs it into a server rack, which is the laptop farm, and connects it to a remote desktop software. The North Korean operatives, sitting overseas, log into the laptop remotely. Oh, wow. The company's IT department looks at the IP address and sees the laptop is firmly sitting in Arizona, so they think everything is perfectly fine. That is incredibly sophisticated.

[00:25:13] And the financial impact was massive, right? Huge. This specific scheme affected 309 U.S. businesses and generated over $17 million in revenue for the North Korean operatives, which, you know, often funnels into their weapons programs. $17 million. That is insane. And this wasn't an isolated incident.

[00:25:36] The DOJ also announced coordinated actions across 16 states against similar schemes that placed workers at over 100 U.S. companies. At one major defense contractor, export-controlled proprietary data was actually accessed. Okay, that is a full-blown national security incident. But I want to connect the dots back to our average listener here. How does a massive North Korean infiltration scheme connect to, like, Dave in accounting secretly working from a beach in Spain? Dave isn't a state-sponsored hacker.

[00:26:05] No, Dave isn't a hacker. But Dave is the noise that allows the hacker to hide. Let me use an analogy. The noise. Imagine your IT security team is a radar operator and their job is to spot incoming enemy missiles. The FBI advises employers to watch for logins from multiple countries or rapid IP address shifts as the primary indicator of compromised credentials or insider threats. Right. If a login jumps from Ohio to Moscow in an hour, that's a red flag.

[00:26:35] Exactly. But if 28% of your workforce is routinely going on secret workations, using VPNs to bounce their IP addresses all over the globe to mask their location, it covers the radar screen in flocks of birds. The system's just screaming with false positives all day long. A workforce that routinely lies about its physical location makes it mathematically impossible for IT to spot genuine anomalous logins. If everyone is hiding, the actual bad actors blend right in.

[00:27:04] That makes so much sense. The security teams are chasing Dave in accounting's VPN traffic from Lisbon, while the actual operative slides through undetected. You'd degrade the entire security posture of the organization when location data becomes untrustworthy. The employees unknowingly providing cover for genuine cyber threats. Unknowingly, yes, but the impact is the same. But the employee isn't safe in this scenario either. All right.

[00:27:30] The research dives into the dark side of this secrecy for the individual because the employee assumes they are just getting away with a fun perk, but they are actually stripping themselves of major protections. This is something people rarely think about until it's too late. Like, what happens if there's a natural disaster, say a sudden earthquake or a medical emergency, while you are secretly working in a foreign country? This raises a critical question about the employer's duty of care.

[00:27:56] Modern global employers have extensive travel risk management programs. Right. When you travel on official business, they track your location, they provide emergency support, they have contracts for medical evacuation, and they carry robust corporate travel insurance. Because you are on the clock for them. Exactly. But consider the scenario. You are officially at home in Ohio on the HR spreadsheet, but you are secretly working from a rental in Costa Rica when a hurricane hits. You fall completely outside the safety net. Entirely.

[00:28:27] The organization doesn't even know you are in the path of the storm, so they cannot deploy resources to help you. And if you are injured, you suddenly discover that the corporate insurance you assumed would cover a medical emergency is voided. Because you breached your employment terms by traveling without authorization. Right. Secrecy shifts the risk entirely onto the individual in ways they almost never anticipate until disaster strikes. And if there is no disaster, but you are simply discovered by HR, the consequences can be brutal too. Absolutely brutal.

[00:28:56] Let's talk about the real world fallout. Because Dr. Westover's research highlights actual legal precedents here. We now have tribunal cases showing exactly how messy this gets when the secret inevitably comes out. The research outlines three pivotal cases that demonstrate how fraught this is for both the employee and the employer. First, look at the Bureau of Meteorology in Australia. Okay, what happened there? A research scientist accessed the agency's systems from Texas without approval after his official leave had ended.

[00:29:26] He was dismissed for the breach, and the Fair Work Commission upheld the dismissal. So in that case, it is cut and dry. You lie about your location, you access systems internationally without clearance, you get fired, and the courts support the employer. Right. Right. But it is rarely that simple. The employers who think they can just indiscriminately fire anyone caught doing this are in for a rude awakening. Tell me about the second case. Let's look at the XE Currency Trader case in Sydney from October 2026.

[00:29:53] The company traced an employee's laptop IP address to Singapore, which breached their strict policy requiring approval for overseas work. They immediately sacked him. Seems like an open and shut case. Well, the Fair Work Commission reviewed the case and agreed that there was a valid reason for dismissal. But there is a butt coming. A massive butt. Ah. They ruled the dismissal was procedurally unfair because of how the company handled the termination. Oh. They rushed it.

[00:30:20] They didn't offer proper avenues for the employee to respond. And the tribunal ultimately penalized the employer. Wow. So even when you catch them dead to rights, if you bungle the paperwork or the process, you lose. Exactly. And then there's the Food Hub case in the UK, which seems like a complete disaster for the employer. A complete disaster. Walk us through it. An employment tribunal found that the food delivery platform Food Hub unfairly dismissed a sales manager who was accused of secretly working from Egypt.

[00:30:50] Was the manager actually in Egypt? Well, the tribunal didn't just look at the location data. They looked at the chaotic, disorganized way the employer handled the allegations and the internal investigation. The result? They awarded the manager over 61,000 pounds for unfair dismissal. 61,000 pounds. Yep. Because the employer bungled it. So the takeaway here is incredibly precarious for leadership. The secrecy absolutely justifies disciplinary action by the employer.

[00:31:20] The employees in the wrong. But if an employer panics, acts like a vigilante, and skips proper due process because they are angry about the deception, they are still going to pay heavily in court. Crackdowns simply do not work. Aggressive surveillance and zero-tolerance firings just drive people deeper underground or, like we just saw, lead to bungled investigations and massive legal payouts.

[00:31:42] And on the flip side, indifference is legally and financially dangerous because of the tax and security risks we discussed. You're stuck between a rock and a hard place. So we have established the sheer scale of the problem and the immense risks on all sides. How do we actually fix it? Thankfully, Dr. Westover's research provides an evidence-based roadmap. It's a way to move organizations from this dangerous, hidden flexibility to safe, sanctioned flexibility.

[00:32:11] And it outlines a five-part playbook for modern companies, right? Yes, a five-step playbook. Let's dig into these solutions. The foundation of all of this has to be step one, writing a clear, unambiguous, work-from-anywhere policy. Because if blanket bans clearly fail, you need real parameters. A formalized policy is the absolute bedrock. If rules don't exist or if they are vague, employees will just improvise based on their own risk tolerance. Which we know is high. Exactly.

[00:32:39] The global trend is moving toward formalization, though. In the UK, mid-sized businesses with a documented policy on international remote working rose from 59% in 2023 to 77% in 2025. Okay, so they are putting it in writing. What makes a good policy? The best policies define exactly how many days are allowed. They provide lists of approved and embargoed countries. And most importantly, they explain the rationale behind the rules.

[00:33:06] The research gives some great examples of companies doing this right, like Revolut, the financial app. Right. Revolut allows their employees 60 days of work-from-anywhere in a rolling 12-month period. And Airbnb famously pivoted to allow 90 days per location. Yes. The big four accounting firms in Australia have set very clear parameters, too. PwC and Deloitte offer up to eight weeks overseas, and EY allows up to three months, subject to tax and role assessments.

[00:33:34] The crucial insight from those examples is tying the time limits to actual legal thresholds. Remember the OECD 50% rule we talked about? Or the EU 25% rule? Yes. That connection is so important. If HR just publishes a memo saying, you get 30 days of travel because management said so, employees will view it as an arbitrary rule and they will push the boundary. They'll negotiate it in their heads.

[00:33:58] Exactly. But if you explain the mechanism, if you say, you get 60 days because on day 61 you trigger a corporate tax liability that could cost the company millions, employees respect the rule. They understand why it exists. Treating employees like adults and explaining the legal machinery breeds compliance. Transparency is the best enforcement tool. But, you know, a policy only works if people actually use the system. Very true.

[00:34:22] Which brings us to step two. If I want to work from Toronto for a week and I have to fill out a 10-page form, get a background check, and wait three weeks for five different vice presidents to sign off on it, I'm just not going to do it. I will pack my laptop, cross the border, and take my chances. Exactly. Process friction encourages secrecy. And that is why the next phase is establishing simple approval and risk triage. Okay, how does that work in practice?

[00:34:50] You need a short pre-travel request, and routine cases must be screened automatically without human bottlenecks. The gold standard highlighted in the research is GitLab. I was reading about how GitLab handles this, and I was shocked to see they make their entire employee handbook public on the internet. Anyone can read it. It's all out there. And they basically automate the approval for low-risk travel. That seems like a massive leap of faith, no?

[00:35:15] It looks like a leap of faith, but it is actually a highly engineered risk management system. They have a clear 183-day cap per calendar year outside your primary location. Okay. They require manager approval, but they use automated screening software for low-risk cases. They clearly outline which countries are completely embargoed for security or trade reasons. So the system just flags the problem areas. Exactly.

[00:35:43] And they only rapidly escalate requests to human tax or legal specialists if they involve complex variables. The vast majority of requests, like your example of a week in Toronto, should sail through the system automatically in minutes. Do not design your daily operational process around the 1% edge cases. Exactly. That's the golden rule here. That makes total sense. You clear out the benign requests so the security team can focus on the real threats.

[00:36:08] But even with a slick approval system, you still have to deal with the cultural baggage, which is step three, building a disclosure-friendly culture. This is maybe the hardest step. The research brings in Amy Edmondson's foundational work on psychological safety here. How does that apply to remote work? Well, if we go back to our earlier numbers, if leaders estimate 7% are hiding but 18% actually are, just buying better surveillance software won't bridge that gap. Trust is the missing variable. Right.

[00:36:39] If the corporate culture relies on the flexibility stigma, where asking for a work-from-anywhere arrangement marks you as uncommitted and damages your promotion prospects, nobody will ever disclose their location, no matter how easy the web form is to fill out. Precisely. So the research suggests a radical intervention, launching a one-time, non-punitive disclosure window. I love this idea. It's exactly like an amnesty program at a public library. An amnesty program? Yeah.

[00:37:08] Every few years, a library will say, look, bring all the overdue books back. We waive the massive fines. We wipe the slate clean. We just need to reset the inventory system so we know where our books actually are. That is a perfect comparison. It is. Companies need to say, tell us where you are physically sitting right now. You won't be fired. You won't be demoted. We just need to fix the tax paperwork and secure the network. It is a brilliant way to reset the psychological contract. And we have empirical evidence that it works, right? We do.

[00:37:37] Spotify is the prime example here. They launched a massive work-from-anywhere program, allowing their 6,500 employees to choose where to work within countries where Spotify operated. And what happened? The results were astounding. Did the sky fall? By the second quarter of 2022, their attrition rate had dropped 15% compared to pre-pandemic levels. Did everyone just immediately move to a beach? That is the most fascinating part. Only about 6% of the employees actually took advantage of it and relocated.

[00:38:07] Only 6%. Yeah. But because the flexibility was officially sanctioned and heavily communicated as a positive benefit rather than stigmatized, employees had no reason to hide. Even the people who stayed in their home offices felt more respected and trusted by the organization. Which makes the security side of the equation much easier to swallow. If you give people the freedom to move, you still have an absolute obligation to protect the corporate network. That's step four. Yes. Proportionate security controls.

[00:38:36] The FBI gives very clear guidance on monitoring IP addresses and verifying identity to prevent those laptop farm scenarios we talked about. But how do you monitor without being creepy? That's the challenge. If an IT department implements Orwellian covert surveillance, turning on webcams silently, logging every keystroke, it violently backfires. Research consistently shows that monitoring that feels secretive or punitive actively damages employee performance and mental health.

[00:39:06] You have to use transparent location checks. Exactly. You tell employees up front during onboarding exactly why location data is being monitored. You say, we check IP addresses to prevent state-sponsored hackers from infiltrating our servers, not to see if you are doing laundry at 2 p.m. Frame it as a shared defense. Right. When you frame the surveillance as a shared defense against external threats, rather than a paranoid manager spying on them, employees accept it as a reasonable condition of flexibility.

[00:39:34] That is a profoundly different conversation. It treats the employee as a partner in security rather than a suspect. Now, moving to the logistical side of things with step five. Companies need to build the infrastructure to actually be able to say yes to these travel requests more often. Because if you have a beautiful work from anywhere policy, but you deny 90% of the requests because your company doesn't have a registered tax entity in the destination country, the policy is effectively a ban.

[00:40:03] It's just a ban with extra steps. Exactly. The GP report found that forward-thinking executives, about 55% of them, are utilizing Employers of Record or EORs to solve this. Let's do a quick explainer on Employers of Record. How does an EOR magically solve the tax problem? Let's go back to our employee who wants to work from France. Your company in Chicago doesn't have a French branch, so they can't legally put the employee on a French payroll.

[00:40:31] An employer of record is a massive global company that does have a legal entity in France. Okay. So the EOR is already set up there. Right. So the EOR essentially hires your employee on paper in France. They handle the local French payroll taxes, the local labor law compliance, and the local benefits. But the employee continues to do their daily work for your Chicago company. So they still work for me, but the EOR handles the French paperwork. Exactly.

[00:40:59] Your Chicago company just pays the EOR a monthly fee for the service. It allows you to legally employ someone in a country where you have zero corporate footprint. It is outsourced compliance. That is a massive tool for global mobility. But there is an equity issue here that the research highlights. This flexibility cannot just be a VIP perk, right? It is a critical failure point.

[00:41:23] If the CEO can work from a ski lodge in Aspen for a month, but a mid-level data analyst gets fired for answering emails from Toronto, you destroy morale. Totally destroys it. Inequitable access fuels resentment and directly drives those excluded employees to create their own secret workarounds. The rules have to apply to everyone. The research points to the STAR intervention, which is a framework designed to increase employee control over their own schedules, and Dropbox's virtual first model as prime examples.

[00:41:52] These models institutionalize flexibility across the entire board, basing the permissions on the actual requirements of the role rather than the seniority of the title or managerial favoritism. So implementing these policies, utilizing EORs, and creating a transparent culture, these are all great interventions to pull people out of the shadows today. But how do organizations fundamentally rewire their DNA for a borderless future? Because this trend is only accelerating.

[00:42:21] It definitely is. And the final section of the research deals with building long-term location capability. What does that look like structurally? It requires a structural shift in how companies manage data. It starts with location intelligence and governance. Historically, HR knew your home address, IT knew your IP address, and finance knew your tax bracket. And those databases never spoke to each other. Siloed information. Exactly.

[00:42:48] Organizations need privacy-conscious data integration across HR, tax, legal, and security. You have to assign a cross-functional owner so this doesn't fall between the cracks. But there's a risk there too, right? Overcollecting? Huge risk. You must thread the needle and avoid overcollecting data. Collect only what is legally and securely necessary. Building a toxic surveillance culture to solve a compliance issue will kill the psychological contract you are desperately trying to rebuild.

[00:43:17] And who is actually managing this on the front lines? It's not the chief human resources officer sitting in a corner office. It's the frontline managers. And there is a shocking statistic in this research that we sort of glossed over earlier. Which one? Only 34% of employees say their manager always knows where they are working. Barely a third. The frontline manager is the absolute crux of this entire issue.

[00:43:43] So many of these subterranean situations persist simply because a manager has chosen to look the other way to avoid conflict. Because it's an awkward conversation. It is. Managers must be actively trained to have location conversations. They need to be taught how to ask about location during their regular one-on-ones. And they have to do it not as a cop running an interrogation, but as a resource planner.

[00:44:06] Like, hey, where are you planning to be next quarter so we can map out our coverage, make sure our team is aligned across time zones, and ensure we aren't exposing the company to tax liabilities. Exactly. It has to become a mundane, standard business question, like asking about the budget. When you normalize the conversation, you remove the stigma. Which ties perfectly into the ultimate evolution here. Location-aware work design. We have to fundamentally design roles in operational systems where physical geography genuinely matters less.

[00:44:36] Yes. How do you practically do that, though? By shifting organizational rewards. You have to evaluate, judge, and promote people based exclusively on their measurable outcomes rather than their physical presence in an office chair. Judging the work, not the chair. Right. You move to asynchronous work patterns where possible. You manage by objectives and key results, or OKRs. If you ensure that remote employees are evaluated purely on the value they create, that insidious passive FaceTime bias dies. The fear of being forgotten disappears.

[00:45:06] And when the fear disappears, the need to hide their location disappears with it. OK. Let's bring this massive topic together. The core problem this research exposes isn't that employees are greedy or that they just want to travel the world on the company dime. It's that organizations have forced a totally rational desire for flexibility into a culture of secrecy. They've backed them into a corner. Right.

[00:45:28] And the legal frameworks, the international tax liabilities, the terrifying cybersecurity threats of laptop farms, the duty of care in a crisis. They are just far too precarious to leave to chance or, you know, don't ask, don't tell handshake agreements with middle managers. The mandate for leadership is clear. You have to make the honest path the easy path.

[00:45:48] By designing work from anywhere policies that are rooted in the reality of how modern people actually want to live, instead of clinging to wishful thinking about the 2019 office environment, you eliminate the massive existential risks of the hidden workforce. So for you, the listener, I want you to reflect on your own organization's culture. Look around at your next Zoom meeting. Are your corporate policies actually matching reality? Or are they just driving your best, most innovative talent underground?

[00:46:17] And as we look to the horizon, this research raises a profound philosophical question to leave you with. What's that? As international legal frameworks adapt, and as those digital nomad visas continue to expand globally, the very definition of the workplace is becoming entirely untethered from physical geography. In the near future, will the ultimate measure of a healthy, trusting corporate culture simply be the absence of virtual backgrounds? Oh, wow.

[00:46:45] The absence of virtual backgrounds. Think about the psychology of that daily video call. If an employee feels they must digitally blur their physical reality just to feel safe and respected at work, what else are they hiding from the organization? That is a chilling and perfect thought to end on. If you have to fake your background, what else are you faking? Thank you for joining us as we unpack this incredible research on the location compliance gap. We will see you on the next Deep Dive.