RemoteStaffingWiki
Compliance & Legal14 min read

Remote Hiring Compliance 2026: EOR, Contractor & Entity

How to employ or engage people in other countries without creating liability: contractor, employer of record or your own entity, how to choose, and the classification, data-protection, permanent-establishment, equity and wage rules that apply whichever you pick.

Published May 2026 · Last reviewed November 2026 · RSW Editorial

Why this matters more in 2026

Hiring across borders has never been easier operationally and has rarely carried more compliance weight. The US Department of Labor has changed its position on contractor status twice since 2024; the EU's platform work directive has a 2 December 2026 transposition deadline and is arriving in national law unevenly; Australia wrote a new definition of employment into its Fair Work Act; India brought four consolidated labour codes into force; and tax authorities share more information than they used to. The days of hiring full-time "contractors" abroad and hoping nobody notices are ending. This guide sets out the three ways to employ or engage someone in another country, how to choose between them, and the compliance layers that apply whichever you pick.

Updated (4 November 2026). Transposition is uneven. The deadline is 2 December 2026, and the European Commission has reportedly ruled out any postponement (Remote Work Europe, 27 May 2026). As of 27 October 2026, a commercial transposition tracker shows no member state with a law in force that fully transposes the directive. Slovakia's parliament passed its law on 23 September 2026 and the President signed it on 14 October 2026; it takes effect on 2 December 2026. In Italy a rider presumption has applied since May 2026, and the decree transposing the directive in full awaits final adoption by the Council of Ministers. Czechia's bill had its first reading on 16 October 2026 with a proposed effective date of 1 January 2027, after the deadline. The tracker lists Germany as not yet transposed and France, the Netherlands and Sweden as bills in progress. Employers should check their member state's status before relying on the presumption for any hire (commercial transposition tracker, status as of 27 October 2026).

The three models

1. Direct contractor

The worker is self-employed and invoices you under a services agreement. Lowest cost and fastest to start, and the right structure for genuinely independent, project-based work. The risk is misclassification: if the person works full-time, exclusively, on your tools and schedule, most countries will treat them as an employee whatever the contract says. See independent contractor for how to run a compliant engagement.

2. Employer of record

A third party employs the worker in their country under a local contract, runs payroll, contributions and benefits, and handles termination under local law, while you direct the work. It costs a per-employee fee on top of salary and contributions, and the EOR rather than your company is the legal employer. It is the normal route for a first hire in a country where you have no entity. See employer of record and EOR vs contractor.

3. Your own entity

You incorporate locally and employ people directly. Maximum control and the lowest per-head cost at scale, with the full burden of incorporation, registrations, local payroll, accounting and ongoing filings. It pays off once you have enough people in a country for the fixed costs to spread, and that threshold is specific to the country and your plans rather than a universal number.

Choosing between them

  1. Is the work genuinely project-based, time-limited and under the worker's own control? If yes, a contractor agreement can be appropriate, with a documented classification review.
  2. Is the role ongoing, full-time and directed by you? If yes, it is employment. Do not use a contractor agreement.
  3. Do you have an entity in the worker's country? If no, use an employer of record (or a staffing partner that employs the person). If yes, employ directly.
  4. Do you expect enough headcount there for an entity to pay off? If yes, start the incorporation process while the EOR carries the first hires.

Worker classification by jurisdiction

Tests differ in wording but weigh the same signals: control, integration, exclusivity, who supplies the tools, how payment works and how long the arrangement lasts. The details and primary sources are in contractor vs employee; the headlines:

  • United States. The IRS common-law test for tax; the Department of Labor's economic-reality test for wage law, currently in transition after a February 2026 proposal to replace the 2024 rule; state ABC tests such as California's, with civil penalties of $5,000 to $25,000 per violation for wilful misclassification.
  • United Kingdom. Off-payroll working rules: medium and large clients decide status for contractors working through intermediaries and carry the tax risk.
  • European Union. Directive 2024/2831: member states must transpose it by 2 December 2026 and apply a rebuttable presumption of employment for platform work; transposition is uneven, so check each state’s status. Ordinary engagements follow national tests, which in Germany, France, Spain and the Netherlands lean towards employment where there is control or dependence.
  • Australia. A statutory definition of employment since 26 August 2024 and penalties for sham contracting.
  • India. Four labour codes in force since 21 November 2025, including social-security provisions that define gig and platform work; classification turns on control and integration, and consultants who work like employees can trigger provident fund and insurance exposure.
  • Brazil. Article 3 of the CLT defines employment by personal service, habitual work, subordination and wages, and labour courts apply it actively.
  • Philippines and Colombia. A four-fold test with control of the means of work as the key factor; subordination as the key test. Both favour employment where the facts are ambiguous.

What misclassification costs

Back tax and social contributions with interest, back wages and benefits, statutory penalties, and secondary claims on termination. In the United States the IRS assesses an employer's liability for unintentional cases at reduced rates under section 3509, and the Voluntary Classification Settlement Program lets eligible employers correct prospectively for 10 percent of one year's employment tax at those rates. The full picture is in misclassification.

Data protection

  • EU: GDPR. Applies to personal data of people in the EU wherever it is processed. Transfers outside the EU need a recognised mechanism such as standard contractual clauses, vendors processing personal data need a data-processing agreement, breaches must be notified within 72 hours, and administrative fines can reach €20 million or 4 percent of worldwide annual turnover, whichever is higher.
  • EU–US transfers. The General Court upheld the Commission's adequacy decision for the EU–US Data Privacy Framework on 3 September 2025. An appeal (Case C-703/25 P, filed 31 October 2025) was pending before the Court of Justice when WilmerHale reported on it in December 2025; the framework remains in place while the appeal is decided (WilmerHale; Digital Policy Alert).
  • India: DPDP Act 2023. A consent-based framework administered by MeitY, with rules and enforcement phased in; penalties can reach ₹250 crore per instance for certain breaches.
  • California: CCPA/CPRA. Applies to businesses over set thresholds that handle California residents' data; the Attorney General can seek civil penalties per violation, higher where intentional, and service-provider contract terms matter for vendors.
  • Others. Brazil's LGPD, Canada's PIPEDA, South Africa's POPIA and similar laws impose consent, security and breach-notification duties. Any provider that will hold employee or customer data needs a data-processing agreement and a transfer mechanism appropriate to both countries.

A written agreement on how a provider handles personal data on your behalf is defined in our glossary entry on data processing agreements. Employers who hire people in the European Union can read our glossary entry on GDPR for remote hiring.

Permanent establishment

A remote worker can give your company a taxable presence in their country. Under the OECD model treaty's article 5 and most bilateral treaties, the questions are whether there is a fixed place of business at your disposal, whether the person habitually concludes contracts on your behalf, and whether a services provision applies. There is no universal day-count that makes you safe and no automatic exemption from using an employer of record, although an EOR removes the employment relationship itself. Limit contract-signing authority, document the business reasons for the arrangement, and take tax advice for client-facing roles.

When pay for a posted employee also runs at home, see our glossary entry on shadow payroll. If a candidate asks to work from abroad, read our guide to digital nomad visas and what employers must know.

Setting up your own subsidiary in the worker’s country instead is defined in our glossary entry on a local entity.

Equity for international workers

Option and share grants to employees abroad are taxed under each country's rules, at grant, vesting or exercise, sometimes with social contributions and reporting duties. EOR employees can usually receive grants from the parent, but the tax treatment follows the worker's country. Take advice in both jurisdictions before granting, and consider cash-settled alternatives where the local treatment is punitive.

Wages, hours and leave

Minimum wages, overtime rules, working-week limits, paid leave, public holidays and mandatory extra payments differ by country and change often. Thirteenth-month pay, for example, is mandatory in the Philippines, Brazil, Mexico, Colombia and Argentina. Colombia is reducing its statutory week to 42 hours in stages under Law 2101 of 2021. Use the official source for the country, year and worker category rather than a generic table, and let the employer of record or local payroll provider carry the detail.

United Kingdom: Employment Rights Act 2025 and 2026 rates

The Employment Rights Act 2025 is being brought into force in stages. The GOV.UK implementation timeline, updated on 22 October 2026, lists these commencements:

  • 6 April 2026: day-one paternity leave and unpaid parental leave, and Statutory Sick Pay without the Lower Earnings Limit and waiting period.
  • 7 April 2026: the Fair Work Agency was established.
  • 1 October 2026: the time limit for an Employment Tribunal claim rose from 3 to 6 months (9 November 2026 for breach of employment contract claims in Scotland).
  • 30 October 2026: employers must take "all reasonable steps" to prevent sexual harassment of their employees and must not permit third-party harassment of them.
  • 1 January 2027: the unfair dismissal qualifying period reduces to 6 months for dismissals from that date, and compensatory awards are uncapped.

Rates for 2026 to 2027: the National Living Wage for workers aged 21 and over is £12.71 an hour from 1 April 2026. Employer National Insurance is 15% above the secondary threshold of £5,000 a year, and the Employment Allowance is £10,500 for 2026 to 2027 (GOV.UK rates and thresholds for employers; Employment Allowance).

Employers hiring in the EU should also read our explainer on EU pay transparency rules.

Industry layers

  • Financial services: outsourcing rules from the relevant regulator, payment-card security standards, and audit requirements for controls that vendors operate.
  • Healthcare: in the US a business associate agreement under HIPAA for anyone handling protected health information, plus local patient-data laws.
  • Government and defence: export controls and clearance requirements that can rule out offshore work entirely.

A practical checklist

  • Classify every engagement against the local test before signing, and record the analysis.
  • Employ, rather than contract, anyone doing an ongoing full-time directed role.
  • Keep contractor independence real and documented where contractors are used.
  • Put a data-processing agreement and a transfer mechanism in every vendor contract that touches personal data.
  • Limit contract-signing authority for workers abroad and get permanent-establishment advice for client-facing roles.
  • Take tax advice in both countries before granting equity.
  • Keep a compliance log: what was decided, when, on whose advice.
  • Re-check annually; several of the rules above changed in the past two years.

Sources

References checked on 4 November 2026. This page is general information, not legal or tax advice for a specific engagement.

Frequently Asked Questions

What is an employer of record?
A third party that legally employs a worker in their country on your behalf, running payroll, contributions, benefits and compliance while you direct the work. It lets you employ people in countries where you have no entity, at a per-employee fee, with the EOR rather than your company as the legal employer.
Can I just use contractor agreements for international workers?
Only for genuinely independent, project-based work. If the person works full-time, exclusively, on your tools and schedule, most countries will treat the relationship as employment regardless of the contract, with back taxes, wages, penalties and sometimes personal liability. For ongoing roles use an employer of record or your own entity.
How much does an EOR cost?
A per-employee fee each month, sometimes a percentage of salary, on top of gross pay and employer contributions, with deposits, foreign-exchange margins and termination costs as possible extras. Fees vary by provider, country and headcount and change often, so obtain current quotes and compare them against setting up your own entity rather than against a published average.
What are the main worker classification tests by country?
The US uses the IRS common-law test for tax, a Department of Labor economic-reality test for wage law that is being revised in 2026, and state ABC tests such as California's. The UK applies the off-payroll working rules. The EU applies national tests plus a presumption of employment for platform work once each member state transposes the platform work directive (deadline 2 December 2026). Australia has a statutory definition of employment since August 2024. India's labour codes, Brazil's CLT article 3, the Philippines' four-fold test and Colombia's subordination test all centre on control and integration.
What are the main cross-border data privacy laws that affect remote staffing?
The EU's GDPR (fines up to €20 million or 4 percent of worldwide turnover, transfer mechanisms and data-processing agreements required), India's DPDP Act 2023 (penalties up to ₹250 crore), California's CCPA/CPRA (civil penalties per violation), and comparable laws in Brazil, Canada and South Africa. Any provider holding employee or customer data needs a data-processing agreement and a lawful transfer mechanism.
What is permanent establishment risk for remote workers?
The risk that a worker's activities give your company a taxable presence in their country under domestic law and the applicable treaty, typically through a fixed place of business at your disposal or a person who habitually concludes contracts for you. There is no universal safe day-count and no automatic exemption from using an EOR. Limit signing authority and take tax advice for client-facing roles.
When should I use an EOR versus a contractor?
Use an EOR when the role is ongoing, full-time and directed by you, when the worker is integrated into your team and systems, when the work creates intellectual property you must own cleanly, or when the country presumes employment. Use a contractor when the work is genuinely project-based with an end date and the person controls their methods, serves other clients and runs a real business.
How do I build a compliance framework for remote hiring?
Classify each engagement against the local test and record it; employ anyone in an ongoing directed role; keep contractor independence real and documented; put data-processing agreements and transfer mechanisms in vendor contracts; manage permanent-establishment and equity questions with tax advice; keep a log of decisions and advice; and re-check annually because the rules keep changing.

Related Resources