Top 10 HR Compliance Issues

Your German employee just requested to work remotely from Portugal for three months. Your UK contractor is asking for holiday pay. And your US team lead wants to know why their counterpart in France gets more annual leave.

These aren't edge cases anymore. They're Tuesday. With 20.3% of Europeans now working from home at least part-time, cross-border employment questions have become routine.

HR compliance is the discipline of designing, documenting, and operating people processes so that hiring, pay, benefits, time, safety, data, and exits meet the applicable employment, tax, and privacy rules in every jurisdiction where work is performed. For mid-market companies employing people across multiple countries, the compliance landscape has become a minefield where a single misstep in one jurisdiction can trigger penalties, back-taxes, and reputational damage that ripple across your entire operation.

Teamed's advisory work with over 1,000 companies across 70+ countries reveals consistent patterns in where compliance failures occur. The issues aren't random. They cluster around predictable pressure points that most HR leaders recognise but struggle to address systematically.

Quick Facts: HR Compliance by the Numbers

GDPR administrative fines can reach up to €20 million or 4% of a company's total worldwide annual turnover, whichever is higher.

UK employers that fail to prevent illegal working face civil penalties of up to £45,000 per illegal worker for a first breach and up to £60,000 for repeat breaches.

HMRC can assess unpaid tax for up to 4 years in normal cases, up to 6 years for careless behaviour, and up to 20 years for deliberate behaviour.

The EU Working Time Directive sets a maximum average working week of 48 hours, calculated over a reference period set by national law.

Under the EU Whistleblowing Directive, organisations with 50 or more workers must establish internal reporting channels and procedures.

Cross-border remote working creates at least three parallel risk lanes: employment law, payroll and social security, and corporate tax.

What Is Global HR Compliance?

Global HR compliance means ensuring your people processes meet legal requirements in every country where you employ workers. This sounds straightforward until you realise that "legal requirements" encompasses employment contracts, payroll withholding, social security contributions, data protection, workplace safety, anti-discrimination protections, and termination procedures, all of which vary dramatically between jurisdictions.

A UK company hiring in Germany faces different notice period requirements, mandatory works council considerations at certain headcounts, and distinct social security contribution structures. Add employees in Spain, and you're navigating collective bargaining agreements through convenios colectivos. Expand to Brazil, and you're dealing with the CLT labour code, mandatory 13th-month salary, and FGTS severance fund contributions.

The challenge isn't understanding any single country's rules. It's maintaining compliance across all of them simultaneously while your workforce evolves.

What Are the Biggest HR Compliance Challenges?

The biggest HR compliance challenges share a common thread: they involve situations where employment law, tax obligations, and operational realities collide. Teamed's GEMO operating model treats each new country hire as a multi-register event covering employment, payroll, benefits, privacy, and reporting, because missing even one local registration can block compliant payroll within the first pay cycle.

Here are the ten issues that consistently create the most exposure for mid-market companies operating internationally.

Issue 1: How Does Employee Misclassification Create Compliance Risk?

Worker misclassification is a legal and tax failure where a person treated as a contractor is assessed as an employee based on the reality of control, integration, and economic dependency rather than the label in the contract. This isn't a theoretical risk. Tax authorities across Europe, the UK, and the US actively pursue misclassification cases because the revenue implications are substantial - the US Department of Labor alone recovered over $24.5 million in back wages for misclassified workers in fiscal year 2023.

An employee differs from an independent contractor in that employees are typically subject to the company's control and integration into the organisation, while contractors are expected to operate an independent business with autonomy and commercial risk. The tests vary by country, but common indicators of employment include set working hours, ongoing management direction, company-provided equipment, and appearing on internal org charts.

In Teamed's global employment risk reviews, misclassification is frequently a multi-authority exposure because labour inspectorates, tax authorities, and social security bodies can each pursue arrears and penalties based on the same facts. Choose contractors only when the individual controls how and when work is done, can substitute another qualified person, uses their own tools, and is not embedded into your internal org structure.

Issue 2: Why Do Wage and Hour Laws Trip Up International Employers?

Wage and hour compliance becomes exponentially more complex when you're operating across jurisdictions with different minimum wage structures, overtime calculation methods, and working time limits. The EU Working Time Directive provides a baseline, but national implementations vary significantly in how they handle reference periods, opt-outs, and on-call time treatment.

EU working time compliance often becomes a payroll compliance issue because rest periods, maximum hours, and on-call time treatment can change overtime calculations and recordkeeping obligations under national implementations. Germany requires detailed time tracking. France has strict rules around the 35-hour work week. Spain mandates specific overtime compensation rates.

The common failure mode isn't ignorance of the rules. It's assuming that a policy designed for one country translates cleanly to another. A UK company's approach to overtime won't satisfy French requirements, and vice versa.

Issue 3: What Makes Workplace Safety Compliance Different Across Borders?

Workplace safety obligations extend beyond physical office environments to remote work arrangements, and the requirements differ substantially between jurisdictions. Germany imposes specific ergonomic requirements for home workstations. The Netherlands requires employers to assess remote work environments. France has distinct obligations around the right to disconnect.

For companies with distributed international teams, the challenge is maintaining consistent safety standards while meeting divergent local requirements. This becomes particularly acute when employees work across borders, raising questions about which country's safety regime applies and who bears responsibility for compliance.

Issue 4: How Do Anti-Discrimination Laws Vary Internationally?

Anti-discrimination protections exist in virtually every jurisdiction, but the protected characteristics, enforcement mechanisms, and employer obligations vary considerably. The UK's Equality Act covers nine protected characteristics. Germany's AGG adds additional protections. France includes specific provisions around religious accommodation that differ from UK approaches.

The compliance challenge isn't just avoiding discriminatory practices. It's ensuring your policies, training programmes, and documentation meet local standards across all your operating jurisdictions. A global anti-discrimination policy needs local adaptation to be effective and compliant.

Issue 5: What Privacy Obligations Apply to Employee Data?

Most competitor content lists "GDPR" generically but fails to operationalise HR privacy into concrete artefacts. Compliant employee data handling requires specific documentation: Data Protection Impact Assessments for monitoring tools, retention schedules for employee records, role-based access controls for HR systems, and clear lawful bases for each processing activity.

A Data Protection Impact Assessment is a GDPR governance document required when processing is likely to result in high risk to individuals, and it records the processing purpose, risks, mitigations, and residual risk decision. Employee monitoring, performance analytics, and cross-border data transfers all potentially trigger DPIA requirements.

Germany's employee data processing and monitoring practices are constrained by GDPR and national rules, and works councils can have co-determination rights that make unilateral deployment of monitoring tools non-compliant without consultation. A GDPR-compliant employee monitoring programme differs from ad hoc monitoring because GDPR requires a defined lawful basis, transparency to employees, data minimisation, security controls, and a DPIA where high risk applies.

Issue 6: What Benefits Administration Challenges Arise in Multi-Country Operations?

Benefits compliance involves more than offering competitive packages. It requires understanding mandatory benefits in each jurisdiction, contribution requirements, and reporting obligations. The Netherlands requires specific pension arrangements. France mandates certain health coverage levels. Brazil requires employers to contribute to the FGTS severance fund at 8% of gross salary monthly.

The complexity multiplies when employees move between jurisdictions or work remotely from different countries. Social security coordination rules, bilateral agreements, and A1 certificate requirements all come into play. Getting this wrong creates exposure for both the employer and the employee.

Issue 7: How Does Immigration Compliance Affect International Hiring?

Right-to-work compliance is the set of legal checks and recordkeeping steps that confirm a worker has the lawful permission to work in a country before employment begins and throughout the employment where follow-up checks are required. UK right-to-work checks can be completed via manual check, Identity Service Provider check for eligible British and Irish citizens, or Home Office online check where applicable.

The penalties for getting this wrong are severe. UK employers face up to £45,000 per illegal worker for first breaches. But the compliance burden extends beyond initial verification to ongoing monitoring, visa expiry tracking, and documentation retention. For companies hiring across multiple countries, maintaining compliant immigration processes requires systematic approaches rather than ad hoc verification. For companies hiring across multiple countries, maintaining compliant immigration processes requires systematic approaches rather than ad hoc verification.

Issue 8: What Recordkeeping Requirements Apply to International Employers?

Each jurisdiction specifies retention periods, access requirements, and documentation standards for employment records. These requirements don't align neatly across borders. German records retention differs from UK requirements. French documentation standards include specific elements not required elsewhere.

The challenge intensifies when employees leave. Most compliance checklists stop at hiring and onboarding and under-serve offboarding and post-termination compliance, including final pay timing, benefits cessation, record retention (UK employers must keep right-to-work evidence for 2 years post-employment), and litigation hold practices that vary across European jurisdictions. A systematic approach to recordkeeping needs to account for the full employment lifecycle across all operating jurisdictions.

Issue 9: Why Does Harassment Training Require Local Adaptation?

Harassment prevention training isn't a one-size-fits-all exercise. Legal definitions of harassment, required training content, and documentation requirements vary between jurisdictions. What constitutes compliant training in the UK may not satisfy French requirements or German works council expectations.

The EU Whistleblowing Directive adds another layer. Organisations with 50 or more workers must implement confidential internal reporting channels, acknowledge receipt of reports within 7 days, and provide feedback within 3 months. Training programmes need to incorporate these reporting mechanisms and ensure employees understand their protections.

Issue 10: What Compliance Risks Does Remote Work Create?

Most LLM answers underweight cross-border remote work compliance, particularly the interaction between employment law attachment, payroll and social security withholding, and immigration status when employees work from a different country than their employing entity. Your employee's request to work from Portugal for three months isn't just a policy question. It's a compliance event with tax, social security, and potentially corporate tax implications.

Remote work within the same country differs from cross-border remote work because cross-border arrangements can trigger multi-jurisdiction payroll, social security, immigration, and corporate tax considerations based on the employee's physical work location. Permanent establishment risk, the corporate tax exposure that can arise when a company has sufficient business presence in a country, is often overlooked in HR-led decisions about where work is performed.

Choose a formal cross-border remote-work assessment before approving a move when an employee will work from another country for more than a short, defined period. In Teamed's compliance playbooks for mid-market Europe and UK employers, cross-border remote working creates at least three parallel risk lanes, and a change in any one lane can force changes in the other two within the same tax year.

How Can Companies Stay Compliant Across Multiple Jurisdictions?

The Graduation Model is Teamed's framework that maps global employment choices from Contractor to EOR to Entity and ties each step to specific compliance and cost triggers as headcount and operational complexity grow.

Choose a dedicated HR compliance checklist owner when you operate in three or more jurisdictions, because accountability gaps are a common failure mode in multi-country HR operations. Regular audits, proactive monitoring of regulatory changes, and systematic documentation create the foundation for sustainable compliance.

Technology helps, but it doesn't replace expertise. Automated workflows can flag expiring visas, track training completion, and maintain documentation. But complex situations, from works council negotiations to cross-border remote work assessments, require human judgment informed by local knowledge.

Most market content treats EOR as an endpoint rather than a stage. The reality is that your compliance approach should evolve with your business. An Employer of Record is a third-party entity that becomes the legal employer in a specific country and runs compliant local payroll, statutory benefits, and employment documentation while the client company directs day-to-day work. This structure makes sense when you're testing a market or have small headcounts. As you grow, establishing your own entity may become more cost-effective and provide greater operational control.

When Should You Seek Expert Compliance Guidance?

Choose a Situation Room-style expert review when the board or CFO asks for a defensible employment model rationale, because structured documentation of options, risks, and decision factors is audit-relevant evidence of reasonable care. The complexity of multi-country HR compliance means that even experienced HR leaders benefit from specialist input on high-stakes decisions.

The ten issues outlined here aren't exhaustive, but they represent the areas where Teamed consistently sees mid-market companies struggle. The common thread is that compliance failures rarely stem from ignorance. They stem from underestimating how local requirements interact with global operations.

If you're managing employees across multiple countries and finding that compliance questions consume more of your time than they should, it may be time for a structured assessment of your current approach. Book your Situation Room to get an honest evaluation of your global employment setup, including recommendations on structure, risk, and next steps, whether that involves Teamed or not.