Immediate Vault Immediate Access

Travel Risk Management for LGBTQ+ Employees

LGBTQ+ travelers can face unique challenges when traveling abroad—many countries do not legally recognize same-sex marriage and more than 70 countries consider consensual LGBTQ+ relationships a crime. If an employee travels on business to a country where their sexual orientation or expression of gender identity is criminalized, an extra layer of complexity is added to duty of care responsibilities. Corporate risk managers need to consider how to best protect employees in a way that doesn’t make them feel singled out, working with them to stay safe and respect local laws without compromising their own values. 

This process begins by providing up-to-date guidance on laws and cultural variations as part of an organization’s duty of care. Attitudes towards the LGBTQ+ community vary considerably around the world, and employers therefore need to shape their duty of care policies around a wide range of considerations, both legal and cultural.

Understand the Law

Risk managers need to ensure they have relevant and up-to-date information at hand to fully understand the traveler’s destination. There are nuances within each country’s legislation, and acceptance can vary dramatically even within different regions of the same country, also evolving over time. Employees need to be informed of the laws to which they will be subject at their destination before they travel. Duty of care procedures should incorporate pre-travel advice and awareness, educating employees on what to expect when on business travel as well as how to respond and whom to contact in an emergency.

Legislation may impact an employee’s behavior in a given destination and travel managers can provide advice on best practices. In the United Arab Emirates for example, transgender, gay and gender nonconforming people have been arrested for violating a law against men “disguised” as women. To the extent possible, it is best for travelers in these countries to remain in resort areas and for same-sex couples to refrain from holding hands, hugging or kissing in public.

Understand the Culture

In addition to local laws, social norms are another factor to consider for deciding whether a destination is safe. While many countries officially recognize homosexuality and allow gender confirmation measures, some communities within these “safe” countries still harbor prejudice against the LGBTQ+ community. In such environments, LGBTQ+ travelers who engage in open displays of affection with each other or appear gender nonconforming may be at risk of harassment and assault, and may also feel intimidated when reporting the incident to local police. There may be few or no local venues that provide a safe space for members of the LGBTQ+ community and the risk of hate crimes and police raids at such establishments cannot be ruled out. Travelers are advised to maintain a low profile in countries that lack full protection for the LGBTQ+ community and exercise caution about where and with whom to discuss related topics in public spaces.

Social media can also put travelers at risk. For example, while dating apps can help people connect with local members of the LGBTQ+ community when traveling or relocating for work, employees should be advised to exercise caution if they plan to use these in communities that are not LGBTQ-friendly. In Russia, where prejudice is widespread and a law against “gay propaganda” has been in effect since 2013, far-right activists and gang members have used dating apps to lure gay men to assault and extort them. Prior to travel, risk managers should advise employees to review privacy settings on social media platforms and reconsider the use of dating applications while abroad.

With some countries still refusing to accept—let alone recognize—the LGBTQ+ community, LGBTQ+ employees often feel compelled to take additional precautions that others would not have to even consider. However, corporate risk managers can help employees to stay safe while on business travel by being aware of the local laws and social norms of the destination before departure.

For other guidance on how to support LGBTQ+ employees and advance diversity, equity and inclusion programs, check out these additional pieces from Risk Management Magazine and the Risk Management Monitor:
Beyond Pride: Building Strong Diversity and Inclusion Programs
The LGBT Travel Risk Dilemma
The Benefits of Diversity & Inclusion Initiatives
Engaging Employees in Their Own Duty of Care
Developing a Strategy for Transgender Workers
The Case for Effective DE&I Training

New York City’s New Biometric Information Law Governs Collection and Use of Consumer Health Data

For risk professionals, the COVID-19 pandemic has increased the importance of ensuring customer and employee safety measures are incorporated into operations, processes and future strategies. As many businesses reopen from pandemic shutdowns or return from remote work arrangements, some enterprises are now exploring both the effectiveness and the risks associated with conducting health screenings that collect biometric information and other personal health data.

This month, New York City released the Biometric Information Law, a new measure that goes into effect on July 9 and imposes disclosure requirements on businesses that collect consumer biometric information.

online pharmacy ciprodex with best prices today in the USA

It also sets parameters on what they can do with that information, most importantly, prohibiting the exchange of biometric information for anything of value.

As detailed in recent client notice from the law firm Reed Smith, highlights from the law include:

  • The measure requires a business that “collects, retains, converts, stores or shares biometric identifier information of customers” to place a “clear and conspicuous sign” near all consumer entrances that, in plain language, discloses the collection, retention or sharing of biometric information.
  • It stipulates that it is unlawful to “sell, lease, trade, share in exchange for anything of value or otherwise profit from the transaction of biometric identifier information.”
  • It establishes “an ‘aggrieved’ consumer’s private right of action,” meaning that “[a]ny person who is aggrieved by a violation by this chapter is entitled to commence an action to enforce its protections.”

There are key exclusions, however, as “governmental agencies, employers, or agents” are expressly excluded from compliance with any provision.

New York is not the only state to enact a law attempting to govern how organizations can use biometric information. Arkansas, California, Illinois, Texas and Washington have also set guidelines for businesses.

online pharmacy tenormin with best prices today in the USA

Indeed, the recent Risk Management Magazine article “Preparing for Biometric Litigation from COVID-19” addresses the imminent and critical questions businesses must answer when collecting and handling such data.

Sensitivities surrounding the confidentiality of biometric and other health information are not new in certain industries, such as healthcare. Further, even before COVID-19, risk professionals were already grappling with the risks associated with new biometric technologies and the data collected, especially with regard to facial recognition, wearables and even the rise in popularity of telehealth.

Now, with every organization on high alert about infectious diseases and how quickly they can interrupt business, health and safety have become top priorities for every risk professional in every sector.

online pharmacy xtandi with best prices today in the USA

As risk professionals look to new technology for help with these concerns, monitoring the emerging regulation and security risks around health and biometric technology will become increasingly critical in balancing benefit and risk to their organizations.
Online Pharmacy https://galenapharm.com/ no prescription
Data security will continue to remain a significant threat, but New York’s Biometric Information Law should serve as a reminder that what the organization does with that data can also have a lasting impact on the enterprise’s reputation and consumer trust.

For more information to help risk professionals manage new health technology and data, check out these articles from Risk Management Magazine:

COVID-19 Vaccines: Should You Mandate, Motivate or Educate Employees?

For the past year, employers have grappled with unprecedented workplace safety and human resources challenges, forced to address safety measures that were unfamiliar for many industries. Employees have become accustomed to daily health screening and masks, and human resources has added COVID safety training and enforcement to its job duties. As vaccines are becoming more prevalent, employers have to now decide whether they should vaccinate their workforces. Making this decision can seem daunting and the applicable employment laws can seem overwhelming. However, there are some baseline considerations that may help.

As a threshold matter, employers are obligated under the OSHA General Duty Clause to provide a safe working environment to their employees. At the direction of President Joe Biden, OSHA released new comprehensive guidance regarding COVID workplace safety, including a 16-point list of essential components of a workplace safety program. OSHA recommended that employers make the vaccine available to eligible employees at no cost, and made clear that employers must continue to enforce COVID safety protocols regardless of an employee’s vaccination status “because at this time, there is not evidence that COVID-19 vaccines prevent transmission of the virus from person-to-person.”

Employers now must determine whether they will mandate, motivate, or educate employees to receive the vaccine. They will first have to determine whether the vaccine will provide a safer working environment. While it seems clear that the vaccine will minimize or eliminate the vaccinated individual’s COVID symptoms, it remains unclear whether a vaccinated worker may spread the virus to others. Therefore, a vaccinated workforce may still be a contagious one.   

Businesses that serve in-person customers may benefit from mandating the vaccine. A local restaurant or retailer may be able to advertise that its staff is vaccinated encouraging patrons to return. While a mandatory vaccine program may be complex, the benefit of returning customers may outweigh the pain of a program. Conversely, in an organization where most employees have remained remote and business has continued at normal levels, the complexity of a mandatory program may not be worth it. In the latter scenario, it may be better to implement a voluntary program, which is easier to administer and has less compliance complexity. Employers will have to weigh the return on investment for each approach.

Employers will also have to determine their appetite for risk. Many initially lean toward a mandatory vaccine approach in an effort to protect employees from becoming seriously ill. However, even mandatory programs pose liability risks for employers. Essentially, there are two schools of thought regarding mandatory vaccine programs:

  1. A vaccinated workforce is essential to safety. A vaccinated workforce will reduce community spread and bring the workforce closer to herd immunity. The fewer employees that become symptomatic or sick, the sooner we may reduce COVID-19’s spread. Likewise, it would be negligent, or a violation of the employer’s General Duty obligations, to not mandate eligible employees to receive the vaccine.
  2. The vaccine is too new to mandate. On the other hand, some believe that it would be negligent, or a violation of an employer’s General Duty to require employees to receive the vaccine, noting that the vaccine is merely under emergency authorization. Consequently, mandating that eligible employees receive the vaccine would create employer liability for any possible harm the vaccine could cause to employees.  

It is also important to note that mandatory programs will likely trigger workers compensation coverage for any medical services and/or lost time associated with employee reactions to the vaccine. Workers compensation coverage is not always a bad thing. Employers should remember that the workers compensation exclusive remedy provision protects employers from negligence and tort claims (but not gross negligence). 

Employers should also consider the practical and operational complexities associated with a vaccination program. Employers who implement a mandatory program must be prepared to enforce the rules. They may be faced with difficult decisions regarding candidates and eligible employees who refuse to receive the vaccine (without any legal protections). Can the employer continue to recruit and retain talent under a mandatory program?

Regardless of where an employer lands on the vaccine program spectrum, they must take their employee complaints and concerns seriously. Likewise, employers must not take adverse action against a complaining employee. Employee OSHA whistleblower cases have reached unprecedented numbers. As of February 5, there have been 4,738 COVID OSHA whistleblower complaints filed in the previous 12-months. Before 2020 (and COVID-19), the largest number of complaints received by OSHA in a 12-month period was 3,355 in 2016.

The good news, if there is any, is that employers that provide safe working environments, are open to employee concerns, and communicate with workers are already taking positive and proactive steps to avoiding liability and litigation. The following best practices may be helpful: 

  • Review your COVID safety program to ensure it comports with OSHA’s 16-point COVID prevention program guidance, and continue to review and update as guidance and regulations change.
  • Provide managers and employees regular safety training, and provide managers with training to enforce safety programs, hold employees accountable, and document all safety incidents and violations.
  • Stay up to date with regulations. OSHA has updated emergency temporary standards, and local and state laws continue to change rapidly.
  • Update anti-retaliation policies to include COVID safety protocols. Also consider a whistleblower hotline and ensure that managers are trained and understand how to take seriously and address employee concerns and complaints.
  • Be sure your workforce has the most current information regarding COVID-19, its symptoms and transmission, and the vaccine. Also be sure to provide all communication in multiple languages for a multilingual workforce.

Ultimately, COVID workplace safety is at the core of any employer’s operations. Whether an employer mandates, motivates or educates its employees to receive the vaccine, they must continue to evolve and enforce their COVID safety protocols.

8 Steps to Create Strong Disaster Management Plans

A core responsibility of any risk professional is planning for any possible disasters your business might face. These could be man-made, such as a data breach or accidents involving machinery, or natural, like a tornado or flood.

Disasters and crises affect different organizations in different ways—one company might consider something a catastrophe, while another may not even notice a change in its workflow. It is important to look at your own business operations and evaluate what you would consider a crisis. Generally, business crises fall into one of three categories:

  1. A danger to the physical safety of employees or customers
  2. Loss of income or means of making income
  3. Events or people negatively affecting your business reputation

In many cases, the crisis may fall into more than one of these categories. An accident in the workplace that is hazardous to employees can impact the company’s income because the factory has to shut down. This can also negatively affect the company’s reputation if it turns out that the company did not provide a safe working environment.

With even the best risk management programs, no organization can avoid all disasters completely. Risk mitigation often comes down to crafting the best plans possible for the moment disaster inevitably strikes. These eight steps can help risk professionals develop strong crisis and disaster response plans:

1. Define The Types of Crises You Could Face: There is not a one-size-fits-all approach to a crisis management plan. Working out what is likely to affect your business specifically can relate to your geography—areas that get hit by severe storms or earthquakes must include those potential disasters, and what knock-on effects they may cause. For example, storms may cause flooding, loss of power, or blocked roads that make it difficult to reach your premises. The type of crisis can also be specific to your industry. Employees in a manufacturing facility are likely at greater risk in a physical disaster than those working in a tax consultancy, for example. Security should also be a consideration. Is your business likely to get robbed of cash or equipment? Do you have high-profile proprietary information that makes you more likely to be the victims of cybercrime?

2. Triggering the Plan: Including levels of urgency in your plan will help people responding to the crisis pinpoint how significant the event is, and how much of the plan must be put into action. A step-by-step approach for specific scenarios can be helpful and cover dealing with man-made and natural disasters in different ways. The risk for each will be unique to the situation and knowing when and how to trigger a response is key. The plan should include how and when to escalate the response should the crisis worsen, as well as how to identify when the crisis has passed. It can be helpful to use red, yellow and green system to indicate severity and urgency, and this classification approach is easy to adapt to any scenario.

3. The Base of Operations Location: Accidents or natural disasters may cause your usual place of business to close temporarily or permanently. In your plan, designate a backup command center in an alternate location for dealing with the crisis until you can get back to work. This location can be your company’s operations hub, a point for gathering after a crisis, or where you know your sensitive and important data backs up. If a natural disaster has made travel dangerous or roads impossible to navigate, you will also need a virtual base of operations—some possibilities include message boards, chat apps or email. With so many employees working remotely because of COVID-19, this may be easier to implement now.

4. The Chain of Command: Ensuring a clear chain of command so that there is no arguing or confusion when people and the business are at risk. Wherever possible, appoint a back-up for each person in charge so if someone cannot perform their duty, it falls to the next in line.

5. Internal and External Communication: When a crisis compromises an office or business, communication can become tricky. Have a clear set of rules for how you get information to and from your employees, what information you must and must not share with those outside of the company, and how to achieve that. This part of your crisis management plan can save lives and stop rumors from spreading.

6. Necessary Resources: Though this will depend on the nature of the business, consider first aid and safety equipment if you are likely to have injuries or get cut off because of poor weather. Also, think about alternate communication methods if mobile phone towers go down or the electricity gets cut, as well as access to your sensitive data, such as employee contracts and supplier agreements.Include all necessary resources you would need to operate and highlight any alternate replacements. For example, if a storm knocks out your power, you may have a generator.

7. Training: It is no good putting a crisis management plan together and not giving the relevant people the training they need to execute it. For example, the people you name as first aid providers or unit leaders need to know what is expected of them and undergo the necessary training. If you have safety equipment on your premises, like fire extinguishers or emergency release valves for machinery, you need to educate all stakeholders how these work.

8. Testing the Plan: Finally, test that your plan actually works. Review it with staff and conduct safety drills regularly—every two months at least. Look for any weak points or flaws in the plan before an actual crisis.While it may not be possible to anticipate everything a disaster brings, you can set up several response plans and test each one individually. These plans can tie in with your standard safety drills, or stand alone, depending on the nature of the event anticipated.

A crisis management plan is integral to every business, no matter its size, scope, or sector. By preparing for various potential disasters, you can take action when needed without putting your organization, employees, or yourself at unnecessary risk.