Duty of Care in 2026: A Practical Checklist for Corporate Travel Managers
Risk profiles shifted again this year. Here's the operational checklist Balboa walks new clients through in the first 30 days.
Duty of care used to be a policy document. In 2026 it's an operating discipline — measured by how quickly you can locate, communicate with, and rebook every traveler when a region changes status.
Start with traveler tracking. If your itineraries live across personal email inboxes and three booking tools, you don't have tracking — you have an org chart and hope. A managed program consolidates every booking into one live view, with location, contact, and next-leg detail.
Layer in pre-trip risk briefings tied to destination and seniority. A first-time traveler heading to a new region needs a different briefing than a senior leader who flies the same route monthly. Generic 'travel advisories' get archived unread; targeted briefings get acted on. The cost of building this once and automating delivery is trivial compared to the cost of one preventable incident.
Build an escalation tree with named owners, not a generic shared inbox. Every region should have a primary, a backup, and a clear handoff to security or legal when the situation requires it. The same names should be in your booking system, your HR system, and your incident playbook — pulled from a single source of truth so nothing drifts when someone changes roles.
Staff the 24/7 desk like you mean it. The difference between rebooking a stranded traveler in 10 minutes versus 4 hours is whether the after-hours agent has full ticketing authority on your account, can see your custom policy, and has the supplier relationships to find a seat when commercial inventory shows zero. Outsourced overflow desks rarely have any of the three.
Then test it. The first incident shouldn't be the first drill. Run a tabletop exercise once a quarter: pick a region, simulate a status change, and measure how long it takes to locate, contact, confirm safety, and rebook every traveler in-country. The gaps that surface in a drill are cheap to fix. The same gaps surfacing in a real incident are not.
Document everything. Regulators, insurers, and increasingly your own board want to see evidence that duty of care is operating, not just written down. A managed program produces this evidence automatically — incident logs, response times, traveler acknowledgments, post-incident reviews — without adding work to the travel team. That paper trail is what turns duty of care from a liability into a defensible program.
