Guide to Business Travel Duty of Care

Duty of care is no longer a policy statement reviewed once a year. In 2026, it is an operating discipline connecting policy, traveler data, risk intelligence, communication and 24/7 response. Weather, public health events, geopolitical shifts and transportation disruptions can overlap quickly. Travel managers need a tested framework to identify exposure, make decisions, reach travelers and activate support. 

For mature programs, the priority is not adding more alerts. It is strengthening governance, data quality and response execution so the right stakeholders can act quickly with clear accountability. 

What should travel managers prioritize? 

Start with the intersections between travel risk and program design. Supplier consolidation, online adoption, policy exceptions, meetings travel and traveler-data privacy all affect an organization’s ability to locate and assist people. Duty of care should therefore be evaluated when making sourcing, policy and technology decisions—not added after implementation. 

Travel leaders should also pressure-test whether their response model can scale across simultaneous events. Define severity tiers, decision authority, response-time expectations and the point at which an incident transfers to corporate security or crisis management. Then use program data to identify recurring exposure by market, supplier, route and traveler segment. This moves duty of care from reactive incident support to informed risk reduction. 

What duty of care means for a corporate travel program 

Duty of care means taking reasonable, documented steps to help protect employees throughout business travel. A sound program identifies foreseeable risks, maintains reliable itinerary visibility, equips travelers with relevant guidance and defines how the organization will respond when conditions change. 

The legal framework is broader than any single travel rule. OSHA’s General Duty Clause establishes a broad employer obligation related to recognized serious hazards, while ISO 31030 offers a structured approach to travel risk management. For travel leaders, the practical mandate is governance: align travel with HR, security, legal, privacy and business continuity; define decision rights; and document how risk is assessed, escalated and addressed. 

This article offers general operational guidance, not legal advice. Organizations should work with legal counsel, HR, security and risk leaders to define responsibilities for their workforce, destinations and industry. 

The four pillars of an effective duty of care program 

  1. Govern. Define risk thresholds, decision rights, traveler responsibilities and escalation paths. Align the travel policy with HR, security, legal and business-continuity protocols. 
  2. See. Maintain complete, current itinerary and contact data across air, hotel, ground, guest and meeting travel. Address out-of-channel bookings and profile gaps before they become operational blind spots. 
  3. Communicate. Establish event triggers, approval paths, channel strategy and acknowledgment requirements. Messages should be concise, actionable and two-way. 
  4. Respond and improve. Connect monitoring to experienced 24/7 support, escalation and travel recovery. After an event or drill, assess response rates, data gaps, timing and handoffs, then close the findings. 

Real-world scenario: A traveler is in a disruption zone 

When severe weather closes an airport and nearby inventory tightens, a prepared program follows an established sequence: validate the event; identify and prioritize affected travelers; issue actionable guidance; confirm status through two-way outreach; engage agents for alternatives; escalate unreachable travelers; and maintain stakeholder visibility through resolution. 

Technology supports this process, but the operating model determines whether it works. A map without complete booking data, an alert without an owner or after-hours support without account context can all create false confidence. 

How Fox World Travel puts duty of care into practice 

Fox approaches duty of care as a coordinated partnership, not a stand-alone product. Our teams combine traveler tracking, risk intelligence, pre-trip advisories, real-time alerts, two-way traveler communications, disruption support and 24/7/365 monitoring through Global Watch™. Based on the client’s protocol, Fox can communicate with affected travelers, coordinate stakeholder outreach and support rebooking, alternate routing, cancellations and lodging. Related resource: https://www.foxworldtravel.com/business-travel/traveler-experience/communication/ 

Each program is configured around the client’s policy, risk model and operating structure. A dedicated Client Solutions Manager connects the right Fox resources, clarifies escalation expectations and helps translate technology into a repeatable response process. The goal is not another dashboard; it is faster, more confident action. 

“All in all, implementing a Duty of Care drill with Fox was a success. We are especially pleased with the high response rate, the overall results and our confidence in using and understanding our Duty of Care tools.”
— Julie Van Oss, Corporate Travel/Company Fleet Manager, Schreiber Foods 

The drill tested the communication workflow, measured response behavior and surfaced traveler-profile gaps. A controlled live exercise provides evidence that people, data, technology and escalation paths work together—and creates a focused improvement plan. 

Duty of care technology: What to ask your TMC 

Evaluate risk tools as part of the broader corporate travel technology environment, including data feeds, communication workflows, access controls and service integration. Related Fox resource: https://www.foxworldtravel.com/business-travel/technology/. Five areas deserve close scrutiny: 

  • Data integrity: How frequently does itinerary data refresh, and how are out-of-channel bookings, hotel stays, guest travel and meetings captured? 
  • Risk matching: Can the platform distinguish travelers who are in, en route to or scheduled to enter an affected area? 
  • Response capability: Do alerts support acknowledgment and help requests, and can after-hours teams access policy, profile and reservation context? 
  • Integration and governance: Can the solution connect securely with existing risk partners while supporting role-based access and privacy requirements? 
  • Testing and reporting: Can the TMC run drills and report on delivery, response, data quality, escalation and resolution? 

A practical 2026 duty of care checklist 

  • Confirm executive sponsorship, cross-functional ownership and decision rights. 
  • Review risk thresholds, approval rules and escalation contacts. 
  • Audit booking-channel coverage, traveler profiles and emergency contact data. 
  • Verify after-hours access to policy, profile and itinerary information. 
  • Run a live communication drill and a scenario-based exercise. 
  • Track time to identify, contact and resolve; close lessons learned with your TMC. 

Frequently asked questions

Is duty of care solely the travel manager’s responsibility?

No. Travel should own program governance and TMC performance, with defined decision rights across leadership, HR, security, legal, privacy and business continuity.

Does traveler tracking mean GPS monitoring?

Not necessarily. Many platforms use booked itinerary data to estimate current and planned location. Organizations should define what data is collected, how it is used and who can access it.

What is the biggest duty of care blind spot?

Incomplete data. Out-of-channel bookings, missing hotel details and outdated profiles can prevent the organization from identifying or reaching affected travelers.

How often should we run a drill?

Annual testing is a practical baseline. Test again after a material policy, technology, vendor or workforce change, and rotate scenarios to exercise different response paths.

What should we measure?

Measure managed-booking coverage, profile completeness, time to identify affected travelers, delivery and response rates, escalation time, resolution time and closure of post-event findings. 

The standard to aim for 

A mature duty of care program is visible, repeatable and tested. Travelers know where to turn, stakeholders understand their decision rights, and the travel team has the data and partner support to lead a coordinated response. Explore how Fox connects these capabilities to program strategy, traveler experience and measurable performance: https://www.foxworldtravel.com/business-travel/ 

Ready to evaluate whether your TMC can support your duty of care requirements? Use Fox World Travel’s free Travel Manager’s Guide to Corporate Travel RFPs to assess service, technology, implementation, reporting and program fit.

Wanda-Baumgartner

Wanda Baumgartner, GTP

Global Client Solutions Manager