Understanding the Importance of Remote Working Legislation
Remote working is now a standard feature of UK employment rather than an exceptional arrangement, and the legal framework governing it has developed substantially in recent years. Employers must navigate a set of overlapping obligations that cover the right to request flexible working, health and safety duties that extend to home environments, contractual obligations when the place of work changes, data protection requirements in distributed environments, and the tax and insurance implications of a dispersed workforce. Understanding these obligations in full is not simply a compliance exercise; it directly affects how HR policies are designed, how employment contracts are drafted, and how managers handle requests and disputes. This guide covers each of those areas in sequence, drawing on the current legal position following the changes that took effect in April 2024.
A Practical Guide to Remote Working Legislation
The legal landscape around remote working has evolved considerably since the initial shift to home-based work. The flexible working regime has been updated to significantly expand employees’ rights. Health and safety duties that have always applied to home workers are receiving closer attention as remote working becomes a long-term arrangement rather than a temporary measure. Data protection regulators have made clear that GDPR obligations do not diminish when employees work outside a managed office environment. And the increasingly common practice of working from abroad has created a complex new category of risk that many employers have not yet adequately addressed.
Each of these areas carries real consequences for employers who lack the right policies and practices, and together they define what it means to manage a remote or hybrid workforce lawfully.
The Statutory Right to Request Flexible Working
The most significant recent change to the UK flexible working regime came into effect in April 2024 under the Employment Relations (Flexible Working) Act 2023. This legislation expands employee rights in four material ways.
The waiting period before a flexible working request can be made has been removed entirely. Employees now have the right to make a statutory request from their first day of employment. There is no longer any qualifying service requirement.
Employees may now make two statutory requests in any twelve-month period, up from the previous limit of one.
Before rejecting a flexible working request, employers must consult with the employee to explore alternatives. A rejection without prior consultation does not comply with the updated ACAS Code of Practice on flexible working.
The decision-making period has been reduced from three months to two months from the date the request is received.
The legal basis for these requests remains section 80F of the Employment Rights Act 1996. Employees can request changes to their hours, work times, or place of work.
Employers retain the right to refuse a request, but the refusal must be grounded in one of the eight statutory business reasons: the burden of additional costs, a detrimental effect on meeting customer demand, an inability to reorganise work among existing staff, an inability to recruit additional staff, a detrimental impact on quality, a detrimental impact on performance, insufficient work during the proposed periods, or planned structural changes to the business. A refusal that cannot be tied to one of these reasons is likely to be considered unreasonable if challenged at a tribunal.
Where a request is refused, documenting the specific business reason and demonstrating that alternatives were genuinely considered is important for both transparency and any subsequent legal scrutiny.
Contractual Implications of Home and Hybrid Working
The employment contract must accurately reflect the agreed place of work, and the distinction between hybrid and fully remote arrangements carries practical legal consequences.
In a hybrid arrangement, the employer’s premises remain the contractual place of work, with the employee spending an agreed proportion of their time working remotely. Travel between home and the office is not ordinarily reimbursable as a business expense, because the office remains the primary workplace.
In a fully remote arrangement, the employee’s home or an alternative remote location is the contractual place of work. If such an employee is required to travel to the employer’s premises for meetings or other purposes, that travel is generally treated as a business expense for which the employee may be reimbursed.
When an employee transitions from an office-based role to a home-based one, the change of contractual workplace must be documented in writing. The updated contract or written variation should specify the new designated place of work, the working hours, core availability expectations, and the position on occasional in-person attendance. Failing to update the contract leaves the employer without a clear, documented basis for managing the arrangement and creates ambiguity about what is agreed.
For some roles, a change from office-based to fully remote work may also affect whether certain contractual terms, such as those relating to the employee’s obligations regarding confidentiality of conversations or handling of physical documents, need revision.
Health and Safety Obligations for Home Workers
The Health and Safety at Work etc. The 1974 Act applies to all employees regardless of where they work. Employers have a legal duty of care toward staff working from home in the same way as they do toward those working in a managed office environment. This is not a theoretical obligation; it extends to practical requirements that many employers have not fully addressed.
The most specific requirement for employees who regularly use display screen equipment, meaning those who use computers, tablets, or similar devices as a significant part of their daily work, arises under the Health and Safety (Display Screen Equipment) Regulations 1992. Employers must carry out a DSE assessment for every such employee, wherever they are working. For home-based workers, this cannot be done by physical inspection, but it can be managed through a self-assessment process in which the employee completes a structured checklist covering their workspace, chair, screen position, lighting, and working posture.
Where the self-assessment reveals deficiencies, the employer is responsible for addressing them. If a specific piece of equipment, such as an ergonomic chair or a monitor stand, is necessary to enable the employee to work safely, the employer’s duty of care generally extends to providing or funding it, particularly where the employee has a condition that makes the adjustment necessary under the Equality Act as well as the health and safety regulations.
There is no blanket legal obligation to equip every home office with the same furniture as a managed office, but employers who ignore DSE assessment requirements, or who receive reports of discomfort from employees and take no action, are exposing themselves to personal injury claims.
Under the Equality Act 2010, employees with physical or neurodivergent conditions may require specific adjustments to work safely and effectively from home. These reasonable adjustments must be considered with the same seriousness as those required for office-based working. Software adaptations, specialist hardware, flexibility in working hours to accommodate medical appointments, or support for cognitive conditions are all potential forms of reasonable adjustment in a remote-working context. Failure to make them where they are reasonable and necessary constitutes disability discrimination.
HMRC Tax Relief for Home Workers
Working from home shifts certain household costs, such as heating, electricity, and broadband, from the employer’s premises to the employee’s personal finances. HMRC recognises this through a tax relief provision.
Employees who are required to work from home may claim relief on a flat rate of £6 per week without providing receipts. Alternatively, employers may pay this amount directly to the employee tax-free. Higher amounts can be claimed or paid when the employee can demonstrate actual additional costs that exceed the flat rate, though this requires supporting evidence.
The eligibility conditions are important. HMRC’s current position is that the relief applies to employees who are required to work from home, meaning it is a condition of their role rather than a personal choice. Where an employee works from home under a hybrid arrangement purely because they prefer to, or where the employer has a workplace available and the employee is not required to use it, the relief is generally not available. This is a change from the more permissive position that applied during the pandemic period.
Employers who wish to provide the flat rate payment as a tax-free benefit should ensure their approach is consistent and documented, and should not assume that arrangements that were HMRC-compliant in prior years automatically remain so.
Insurance
Employers’ liability insurance is a legal requirement under the Employers’ Liability (Compulsory Insurance) Act 1969. It must cover all employees, including those working from home. Employers should confirm with their insurer that the policy extends to home workers and that claims arising from injuries sustained in the course of home-based work are within scope.
Employees working from home on a permanent or long-term basis should be advised to check their own home contents or buildings insurance, as many domestic policies exclude or limit coverage where the insured property is being used for business purposes. Employees who store expensive company equipment at home may also need to declare it to their insurer. While the obligation to check rests with the employee, it is good practice for employers to include this guidance in their remote working policy.
Data Protection and Employee Privacy
Remote working environments present specific data protection challenges that are not present, or are managed differently, in a controlled office setting.
Employees working from home may use domestic broadband connections that lack enterprise-grade security. They may work in shared spaces where screens are visible to household members. They may be more susceptible to phishing attempts or social engineering attacks because they lack the informal IT support and oversight available in an office. And the use of personal devices for work purposes, whether formally sanctioned or otherwise, introduces additional risks.
Maintaining GDPR compliance in a remote workforce requires clear, enforced policies. The use of company-approved VPNs for accessing internal systems is a standard requirement. When employees use personal devices, either this should be prohibited for processing sensitive data, or mobile device management software should be installed to enable remote wipe, enforce encryption, and limit which applications can access company data.
Multi-factor authentication across all company platforms significantly reduces the risk of unauthorised access. Physical security guidance, such as locking screens when stepping away from the workstation and refraining from conducting sensitive conversations in shared spaces, is often overlooked yet practically important.
Employee monitoring is a specific and sensitive area. Some employers have adopted software that tracks keystrokes, captures screenshots, or monitors activity on company devices. UK GDPR and the Data Protection Act 2018 require that any monitoring be proportionate, transparent, and justified by a legitimate purpose. Employees must be informed about what is being monitored, the purpose of the monitoring, and how the data will be used. A Data Protection Impact Assessment is required where monitoring is likely to pose a high risk to the rights of the people being monitored, as covert or intrusive monitoring typically does.
Monitoring that is excessive, opaque, or lacks a clear and proportionate justification risks enforcement action by the Information Commissioner’s Office and serious damage to employee trust.
Working from Abroad
The practice of employees working from overseas locations, whether temporarily during an extended trip or on a more sustained basis, raises a distinct and often underappreciated set of legal and tax risks.
The most significant corporate risk is the potential creation of a permanent establishment. If an employee is performing sustained business activity in a foreign country, particularly if that activity involves concluding contracts or representing the employer commercially, the tax authorities of that country may treat the employer as having a taxable presence there. This can result in liability for corporate taxes in a jurisdiction where the employer has no physical office and may not have considered itself to be operating.
The employee’s own tax residency position may also be affected. Extended work in a foreign country can trigger personal tax obligations in that country, depending on the number of days spent there and the tax treaty position between the UK and the relevant jurisdiction.
Local employment law is another complication. Depending on the country and the duration of the stay, the employee may accrue employment rights under local law, including local minimum wage protections, different notice and termination provisions, or mandatory benefits that differ from their UK terms. These rights may apply in addition to, or in some cases instead of, the employee’s UK contractual terms.
Immigration status is a separate but related issue. Most countries require workers to hold an appropriate visa or work permit. A standard tourist visa does not authorise the holder to perform employment activities in most jurisdictions, regardless of who employs them or where their employer is based.
Data protection transfers are a further consideration. Where personal data is processed in a country outside the UK or the European Economic Area, specific legal safeguards are required under UK GDPR unless the destination country has been assessed as providing an adequate level of protection.
Given the complexity and range of risks involved, employers should establish a clear policy governing work abroad. A common and practical approach is to permit international working for a defined maximum period, commonly expressed as a number of days per rolling year, within approved time zones, subject to advance approval from both the line manager and HR, and subject to verification that the arrangement does not trigger tax residency in the destination country. The specific limits will depend on the countries involved and should be informed by legal advice.
Building a Coherent Remote Working Framework
The individual legal obligations governing remote working are each manageable in isolation, but they interact with one another and with the broader HR and employment framework in ways that require an integrated approach.
A remote working policy that addresses eligibility, equipment provision and reimbursement, data security requirements, communication and availability expectations, and the conditions under which working abroad may be approved provides the foundation. Employment contracts must accurately reflect the place of work and be updated when it changes. Health and safety assessments must be conducted and their outcomes acted upon. Insurance and tax positions must be verified and kept current.
The organisations that manage this well are those that treat remote working as a permanent feature of their employment model, requiring active governance, rather than as an informal arrangement that was adequate during the pandemic and has simply continued by default.
IRIS Software Group
Award winning software and solutions for the businesses of the future
Discover why more than 100,000 customers across 135 countries trust IRIS Software Group to manage core business operations