GDPR and Duty of Care

[JHTravel]

We are rolling out a global Concur platform including Expense and Travel.  We currently have sites in NORAM and APAC.  The new site is a global site that will support EU as well.  How are people managing Duty of Care for travelers under some of the recent judgements around GDPR?  We are having a tough time getting our German Workers' Council and even our legal teams around the issue to ensure we can assist our travelers.  We even had to move our platform to the EU data center even though we are a US based company.

[S_Collins]

Hello;

We are part of a global company who'se headquarters is in Germany, but the US headquarters was leading the way with automated travel and expense solutions.  The US side has had Concur Travel and Expense in place since 2011, but the rest of the company worldwide went through their implementation in 2018. The US had to transition into the global platform in 2020 and retire our own US data center site because of the GDPR regulations.  We now have 22 countries on Travel and Expense and another 4 on Expense only and we are looking to expand. One of the requirements we had to put in place for Duty of Care fulfillment was an emergency provider for all travelers worldwide. We implemented ISOS which in conjunction with the EMEA data server resolved the issues we were having with the German Workers Council.  Hopefully your Concur representative can help you with this. I'm thinking there are other solutions, but this was the best presented to us at the time, so that's what we went with.  I would love to stay in touch and hear what you end up going with, it's definitely an interesting topic for us as well.

Kind Regards;

Stephanie

Global Travel Manager

[JHTravel]

Thank you Stephanie,

We took a similar approach.  Our new global site is on the EMEA data center, and our TMC will also store all reporting in EMEA and anonymize all reporting being sent to our global leaders in the US.  We also have existing sites in NA and APAC currently.  We are migrating all users to the new site on the EMEA data center.   We have looked into ISOS for duty of care as well.  We are working with our IT security teams as well as our legal teams to determine the best solution for the broader duty of care topics. Our IT teams currently use Everbridge, but this is not integrated with our Concur platforms for duty of care.  I would be interested to know if you are using ISOS just for duty of care related to travel or if you are using it more broadly.

[S_Collins]

We utilize ISOS for the main purpose of Duty of Care.  We recently renegotiated our contract with them and downsized our services because their increase in price was astronomical to keep the same services. If you do end up going with ISOS, I HIGHLY recommend that you discuss future renewal potential before signing.  We looked at Everbridge, but we needed the integration with Concur. Best of luck.

[JHTravel]

Thank you so much for the information.