We notice UK businesses and education providers encountering a duty of care landscape that’s shifting fast https://mcmillancooper.com/. New legislation, the growth of hybrid work travel — the obligations on employers, schools and universities continue piling up. This guide leverages our conferences and events to offer you practical, no‑nonsense insights on handling travel risk and safeguarding obligations with confidence.
The legal backbone of duty of care in Britain is the Health and Safety at Work etc. Act 1974 and the Corporate Manslaughter and Corporate Homicide Act 2007. Together, they oblige organisations to take every reasonably practicable step to safeguard employees, pupils and anyone else affected by their activities. For travel, the scope of “workplace” now reaches to overseas hotels, client sites and even short‑term home‑working abroad.
Since the pandemic, the border of responsibility has expanded much wider. The Foreign, Commonwealth & Development Office (FCDO) revises travel advice frequently, and courts are devoting closer attention to whether businesses reacted on that intelligence. A corporate traveller stranded by political unrest or a school trip hit in a natural disaster is no longer written off as an unforeseeable event.
Regulators are now zooming in on pre‑travel risk assessments and real‑time monitoring. If you can’t present a systematic approach, you risk unlimited fines and reputational harm. At our events, we continue stressing the transition from reactive insurance claims to proactive prevention and documented decision‑making.
Ordinary business travel insurance typically overlooks what duty of care truly requires. A basic policy could cover lost bags and medical bills, but skip crucial services like security evacuation, kidnap and ransom response, or independent legal representation overseas. We encourage organisations to match their insurance cover directly against their travel risk register and fill gaps with specialist assistance riders.
The legal side transcends HR policy. If a traveller suffers harm following a management instruction that ignored an FCDO “advise against all travel” warning, they may have grounds for a civil claim. Employers also risk regulatory action under health and safety law. Insurance functions as a frontline defence only if it’s designed with those exposure points in mind.
Evacuation cover needs to include transport to a centre of medical excellence, not just the nearest hospital. Ensure that the policy includes non‑medical security evacuation triggered by civil unrest or natural disaster, and that the assistance provider utilises its own in‑house teams — not subcontracted third parties of unverified capability.
When a traveller is arrested, implicated in wrongdoing or trapped in a serious road accident abroad, fast legal advice is non‑negotiable. The best assistance packages provide unlimited phone time with English‑speaking lawyers who understand the local courts. We regard this a hard requirement for any serious travel risk framework.
We organize our business events as more than lectures. They’re live labs where corporate security directors, HR leads, university safeguarding officers and risk consultants debate the grey areas of duty of care. A focused travel risk conference places peer‑tested solutions in your hands — stuff no whitepaper can match.
The structured networking often sparks informal benchmarking between companies of a similar size. Delegates share honest stories about picking tracking platform vendors, dealing with mental health crises overseas, and hammering out insurer negotiations. That kind of practical back‑and‑forth quickens how quickly proven processes spread across whole sectors.
We shape the agenda to deliberately question assumptions. Lately, our forums have explored the legal fallout of letting employees bolt personal leave onto business trips, the ethics of sending staff to countries with poor LGBTQ+ rights records, and the growing clash between sustainability targets and duty of care demands. These are the conversations that influence next‑generation policy.
Adopting the global standard for travel risk management, ISO 31030:2021, offers UK organisations a solid framework. It’s not about ticking boxes; it’s a continuous improvement cycle shaped to your organisation’s size and risk exposure. The strongest frameworks we see depend on leadership buy‑in, a written travel risk policy and strong operational controls.
A proper risk assessment looks way beyond a generic country‑risk rating. It should correspond to the specific traveller profile, itinerary, accommodation, health needs, and the nature of the work or study. We recommend mapping threats by likelihood and impact — medical risks, crime, transport safety, natural hazards, political stability. This granular analysis should be refreshed within 24 hours of departure.
You require a written travel risk policy signed off by senior leadership. It should outline low‑, medium‑ and high‑risk destinations, set approval levels for travel, and make it a rule to use approved booking channels. Communication has to flow both ways: travellers need to know how to get help and should be informed on local emergency numbers. These are the core pillars we suggest:
No amount of prevention wipes out every incident. When an emergency occurs, how quickly and clearly you respond decides if things remain contained or escalate into chaos. We’re seeing UK organisations ditch those thick, unreadable binders and switch to concise, action-oriented playbooks focused on specific incident types.
A well‑designed plan spells out who does what: a crisis management leader, a communications officer managing media and family contact, and a logistics manager collaborating directly with the assistance partner. Run tabletop exercises every quarter — they highlight gaps related to time zones, language differences, and decision-making that look fine on paper but break under pressure.
The five phases we train organisations to internalise can be outlined as follows:
Colleges, colleges and universities bear a increased safeguarding duty when students are on the move. The Department for Education’s statutory guidance, Keeping Children Safe in Education, is valid abroad just as it does at home. We continually reminding providers that the risk register for a foreign trip must cover supervision ratios, vetting of host families, emergency medical consent forms and 24‑hour pastoral support.
Higher education has the extra headache of independent travel built into year‑abroad programmes or field research. The legal test moves from in loco parentis to a more refined duty of care, but universities still have to offer solid pre‑departure training, destination‑specific security briefings and clear reporting routes for sexual violence or mental health incidents.
One under‑explored area we flag is the risk of informal trips — organised by student societies or sports clubs but wearing the university’s badge. Without a policy that demands central risk committee approval, institutions can end up legally exposed when an unsanctioned adventure holiday turns sour. We push for a single travel registry that records every trip linked to the institution.
Technology has transformed the way UK organisations meet their duty of care. GPS‑enabled mobile apps and AI‑driven risk intelligence platforms can now track travellers, push security alerts and initiate automatic escalations in seconds. But selecting the right tool means conducting a hard look at data privacy and traveller consent under UK GDPR.
We instruct buyers to ignore flashy dashboards. What you need are two‑way messaging that works on low bandwidth, automated geofence alerts tied to FCDO advisories, medical facility mapping and a smooth handover to an accredited security assistance provider. Link it to your travel management company’s booking data to prevent blind spots from employees booking outside approved channels.
The UK Information Commissioner’s Office requires a lawful basis for processing location data. We recommend a clear fair processing notice that clarifies when tracking starts and when it stops. Plenty of organisations now use a “track only during work hours or high‑risk travel” model — it protects private time and still meets the core safety obligation.
Don’t hold onto location data forever. We advise tying retention to the journey’s risk window and any post‑incident review — usually 30 to 90 days. Access should be locked down to a designated security or safeguarding team, and privacy impact assessments should be part of the annual audit cycle.
Duty of care and ESG goals are now integrated. UK organisations are embedding carbon budgets into travel approval without sacrificing safety corners. The real question is how to reconcile a limit on long‑haul flights with the need to assist a colleague stuck in a region with lousy medical infrastructure.
Ethical travel also means looking at how a business chooses local partners. A hotel that’s safe but uses exploitative labour creates reputational and legal risks under the Modern Slavery Act 2015. At our conferences, we’ve dedicated whole tracks to auditing supply chains through a duty of care lens — understanding that a traveller’s physical safety and an organisation’s ethical footprint are tightly linked.
Climate disruption is now a core risk. Wildfires, floods and extreme heat are changing whether destinations stay viable in real time. We promote adding climate resilience criteria to pre‑travel assessments — including mapping alternative evacuation routes that stay open during the increasingly frequent weather emergencies.
The Health and Safety at Work etc. Act 1974 and the Corporate Manslaughter and Corporate Homicide Act2007 are the basis. They oblige organisations to take reasonably practicable steps to safeguard employees and anyone else affected by their activities — including when people are employed or study overseas.
We’d say a full recorded review at least once a year, with interim triggers like a major change in operations, a high‑severity incident or a shift in the FCDO threat picture for key destinations. A lot of organisations connect the review to their insurance renewal cycle so they capture updated cover terms.
The duty is more constrained but it’s not zero. Universities have to provide solid pre‑departure safety training, destination‑specific briefings and a clear emergency support channel. Courts will examine whether the institution acted as a sensibly cautious body in preparing the student — even without supervising the day‑to‑day activity abroad.
Commence with a simple written policy, an FCDO‑aligned pre‑trip risk checklist, a dependable24‑hour medical and security assistance subscription and a rule that all travel is booked through a single channel. Even a light‑touch structure shows you’re taking the reasonable steps expected under UK law, and it defends your business’s reputation.
Conferences assemble practitioners who trade stories about what went wrong, compare suppliers and discuss emerging legal viewpoints that never appear in public guidance. The curated peer chat and structured workshops accelerate learning, cut out trial‑and‑error loops and often provide direct cost savings through smarter insurance and tech buying.