Grey fleet risk assessment: UK compliance checklist for employers

Nearly 85% of UK employees use their own cars for work-related travel. Known as a "grey fleet," these personal vehicles account for around 40% of all vehicles on UK roads, yet many organisations are unaware of the hidden risks they pose.

Under UK law, employers have the same duty of care for grey fleet vehicles as they do for company-owned cars. That means assessing driver fitness, vehicle roadworthiness, and journey risk on a regular basis. Ignoring this can expose your organisation to prosecution, civil claims, and reputational damage.

This article explains what UK law requires, what a grey fleet risk assessment should cover, and how to manage ongoing compliance. You can also download a ready-to-use checklist below.

👉 Go to the risk assessment checklist

Employers have a legal duty of care with grey fleets

Employers are legally responsible for grey fleet vehicles under UK law, even though they don't own them. More than 60% of UK employers do not perform vehicle checks on grey fleet vehicles, but this does not reduce their liability.

The key legislation covering grey fleet risk is:

The Health and Safety Executive (HSE) makes clear that driving for work is a workplace activity. That means the same risk management principles that apply inside your premises apply on the road.

Don't let the legislation feel overwhelming. A structured risk assessment process, run consistently, is all it takes to meet your obligations and protect your people.

Mileage tracking made easy

Trusted by millions of drivers

Automate your mileage log Automate your mileage log

Claim your deductions

Reclaim your time

Automatic mileage tracking and HMRC-compliant reporting.

Get started for free Get started for free

Grey fleet risk assessment: what to check

A grey fleet risk assessment covers three core areas: driver risk, vehicle risk, and journey risk. You should carry out a full assessment at least once a year, and more frequently for high-mileage drivers or older vehicles.

Driver risk assessment

• Driver risk covers fitness, licensing, and behaviour. Check that each grey fleet driver:
• Holds a valid driving licence for the relevant vehicle category
• Is medically fit to drive
• Complies with road traffic laws (speed limits, seatbelt use, no hand-held devices)
• Is not fatigued or overworked before a business journey

Vehicle risk assessment

• Vehicle risk covers roadworthiness, insurance, and maintenance. Verify that each vehicle:
• Has a valid MOT certificate and paid road tax
• Is regularly serviced and safe to drive
• Is covered by insurance that includes business use — standard social, domestic, and commuting (SDC) cover is not sufficient for work trips

Journey risk assessment

Journey risk covers the specific conditions of each trip. Before employees make work-related journeys, consider:

• The length of the journey and time of day
• External conditions such as weather, roadworks, or unfamiliar routes
• Whether the employee is fit to make the trip and whether it is genuinely necessary

Administrative responsibilities

If your organisation has more than five employees, HSE regulations require a written health and safety policy that covers driving, plus documented evidence of all risk assessments.

If you reimburse employees for business miles, you are also responsible for compliance with HMRC's Approved Mileage Allowance Payments (AMAPs) rules, including accurate recordkeeping and reporting of any excess payments. Read more about grey fleet compliance with HMRC rules.

Download a step-by-step risk assessment checklist

Use our grey fleet risk assessment checklist to work through driver, vehicle, and journey checks in a consistent, documented way. It covers all the areas required to meet your health and safety and duty-of-care obligations under UK law.

Get the checklist as an editable Google Doc or PDF below.

Grey fleet responsibilities for employees

Employees who drive their own vehicles for work also carry legal responsibilities. Shared responsibility does not reduce employer liability, but it is important that drivers understand what is expected of them.

Each grey fleet driver is responsible for ensuring:

• They hold a valid driving licence appropriate for the vehicle category
• They are medically fit to drive and do not drive when too tired or unwell
• Their vehicle insurance includes business use cover
• Their vehicle has a valid MOT certificate and is taxed
• Their vehicle is roadworthy and regularly serviced

Employees also have a duty to disclose any changes to their licence status or vehicle condition, and to report any incidents that occur during business driving.

Consequences of inadequate risk assessment

Grey fleet risk assessments might feel like extra admin, but it’s important to do them regularly and keep good records. Poor or infrequent assessments can lead to several problems.

How to manage grey fleet risk effectively

You should manage employee-owned vehicles just as carefully as you do company cars. This means doing thorough vehicle and driver checks, automating processes where possible, and properly documenting grey fleet mileage reimbursements.

Establish clear policies

Your grey fleet policy should establish compliance requirements for both drivers and vehicles, specify the frequency of checks, and outline the consequences for non-compliance.

For drivers

Collect copies of your employees’ licences and review their vehicle insurance policies to ensure they include business use. Require proof of MOT and paid road tax, and evidence that your employees service their vehicles regularly.

For vehicles

Consider setting minimum vehicle standards, such as age, Euro NCAP rating, and CO2 emissions. Ensure vehicles have working safety features, such as seatbelts, airbags, and fire extinguishers.

Carry out risk assessments regularly

Annual or random checks aren’t enough to keep your operations safe and legal. Easily ensure grey fleet compliance by setting up regular risk assessments to keep checking licences, insurance, and vehicle condition. 

Automate risk assessment processes

Use digital tools to make admin easier. Automating risk assessments helps you collect data faster, spot risks sooner, and keep better records. This will also help you prepare for audits.

Improve mileage reimbursement management

Use company-wide mileage tracking software to record and reimburse actual miles driven, rather than of relying on employee estimates.

With an automatic tracker for companies like Driversnote Teams, employees will accurately track grey fleet mileage, and you’ll have accurate logs in one place, reducing errors and paperwork.

Organise training programs

Offer regular driving safety training for your employees and keep them informed about any updates to your grey fleet policy.

Grey fleet risk assessment is about more than ticking boxes. It’s about safeguarding your team, complying with the law, and protecting your organisation from avoidable risk.

By implementing a robust risk assessment strategy and using the right tools, you’ll create a safer, more efficient, and more compliant grey fleet.

FAQ