A grey fleet vehicle is owned by the employee but driven for work. Your duty of care still applies. Here is what HSE expects, what catches employers out, and a practical control routine for any business.
Key Takeaways
- A grey fleet vehicle is privately owned by the employee but used for work travel. The Health and Safety at Work Act 1974 puts the same duty on you as if you owned the vehicle.
- The minimum control set is a valid driving licence, business-use insurance, a current MOT, and a documented vehicle condition check, refreshed at least once a year.
- Reimbursing miles at the HMRC AMAP rates (45p / 25p) does not transfer the duty of care. It is a tax framework, not a safety framework.
- Health and safety fines for organisations are unlimited under the Sentencing Council guideline, with breaches of duty in scope for fines into the millions for serious cases.
- Most grey fleet incidents are administrative gaps, not driving error. A simple yearly licence check and an insurance certificate ask close most of them.
If your staff ever drive their own car or van for work, you have a grey fleet. It is the most overlooked compliance risk in UK fleet management because it does not look like a fleet. There is no signwriting, no central key cabinet, no vehicle file. The cars sit on driveways, the insurance documents live in glove boxes, and the only paperwork most employers see is the mileage claim.
That gap is the risk. The Health and Safety at Work Act 1974 does not care who owns the vehicle. If the journey is work, your duty of care is the same as if the vehicle was on a lease list signed by the finance director. This guide covers what UK law expects, where employers go wrong, and the smallest control routine that actually works.
If you employ field engineers, sales reps, care workers, social workers, project managers, or any role with regular client visits, this is the risk that probably has the least paperwork in the building.
What is a grey fleet vehicle?
A grey fleet vehicle is one owned (or leased privately) by an employee and used by that employee for business travel. It includes the obvious cases (a sales manager driving to client sites in their own car), the half-obvious ones (a community nurse driving between patients in a car the employer reimburses at 45p a mile), and the easy-to-miss ones (an admin colleague who drives to the bank twice a month, a maintenance worker collecting parts on the way to the depot).
The journey is the test, not the vehicle. The commute from home to a fixed workplace is generally not work travel. Anything else done for the employer's purposes during work time is.
What duty of care does the employer have?
The Health and Safety at Work etc. Act 1974, section 2, requires every employer to ensure, so far as is reasonably practicable, the health, safety and welfare at work of all employees. The Health and Safety Executive (HSE) is explicit that this duty applies to employees driving for work, regardless of who owns the vehicle.
The HSE guide for employers, INDG382, sets out the core obligations:
A risk assessment for work-related driving. Documented, reviewed, and shared with the people doing the driving. The assessment should cover journey planning, fatigue, weather, vehicle condition, and the driver's licence and health.
Verification that the vehicle is fit for the journey. For grey fleet that means a current MOT, valid road tax, and a sensible service history. The HSE wording is that employers should check the vehicle "is in a safe condition".
Verification that the driver is fit and entitled to drive. A current driving licence with the right entitlement, no recent disqualifications, no health condition that should have been declared to DVLA, and not under the influence.
Verification that the insurance covers the work. Class 1 business use as the absolute minimum for occasional work driving. A driver doing daily client visits in their own car will usually need a higher class. A Class 1A or Class 2 policy is not exotic for grey fleet, it is appropriate.
The Corporate Manslaughter and Corporate Homicide Act 2007 sits behind the 1974 Act. If a grey fleet driver kills somebody on a work journey and the investigation finds the employer's safety arrangements were a substantial element in the failing, the prosecution is for corporate manslaughter, not a road traffic offence.
Why reimbursing miles does not protect you
A common misunderstanding among small employers is that paying mileage at HMRC's Approved Mileage Allowance Payments (AMAP) rates, 45p for the first 10,000 business miles a year and 25p thereafter for cars and vans, somehow shifts the safety duty to the employee.
It does not. AMAP is a tax framework. It is HMRC saying "this is the per-mile rate at which the employee can be reimbursed without triggering income tax." It is silent on safety. An employer who pays AMAP and asks no further questions about licences, insurance, or MOT has discharged their tax obligation and ignored their HSE one.
The same logic applies to formal "essential car user" schemes, lump-sum monthly allowances, and one-off mileage claims. If the journey was for work, the duty applies.
For the rules on reimbursing miles correctly, see HMRC Mileage Allowance: AMAP Rates, Rules and How to Claim (UK 2026).
The minimum control set
A grey fleet control set does not need to be elaborate. It needs to be documented, run on a schedule, and reviewable. The smallest version that actually closes the risk has five parts.
1. An annual driving licence check. You can check a person's licence with their permission via gov.uk's "check someone's driving licence information" service. For larger employers, the DVLA Access Driver Data (ADD) service provides bulk lookups for 60p per record. Either route gives you the licence categories, points, and any disqualifications. Yearly is the floor. For drivers with points, every 6 months is more sensible.
2. A copy of the insurance certificate, on file, every renewal. The certificate must show Class 1 business use minimum, the policyholder name matching the driver, and a current period of cover. A "we'll get round to it" approach is the most common gap. A 5-minute email at every employee's policy anniversary closes it.
3. A current MOT. Verifiable free at gov.uk/check-mot-status using the registration. For cars and small vans the MOT becomes due 3 years after first registration and annually thereafter. A pre-MOT reminder lands 30 days before, which is when you should re-check.
4. A vehicle condition declaration. A short form completed by the employee at least once a year covering tyres, lights, wipers, mirrors, brakes, and any warning lights. Not a roadside test. A reasonable "I checked, this is the state" record. If the employee reports a defect, the work cannot be on that vehicle until it is fixed.
5. A driver agreement. A short document the employee signs that says: I will keep my licence, insurance and MOT current; I will tell the employer within 7 days of any new points or change of vehicle; I will not drive for work if I have a medical condition that affects driving. The signature and date is what gives the employer something to reference if anything ever goes wrong.
This is the floor, not the ceiling. Larger fleets layer on annual eye tests, online driver assessment courses, and mileage caps to keep the risk profile sensible. But the five points above close the bulk of the legal exposure for most UK businesses.
Where employers actually fail
Looking at HSE prosecutions and Crown Court fines for road-related work incidents, the failure pattern is administrative, not catastrophic.
The licence was never checked. The employee turned out to have been disqualified 8 months earlier and never told anyone.
The insurance was the wrong class. The employee had social, domestic and pleasure cover and was driving 30 client visits a week.
The MOT had lapsed. The employer had no system to catch it, the renewal letter went to the employee's home, the certificate expired.
The vehicle was visibly defective. A bald tyre or a cracked windscreen the employee knew about and the employer never saw.
No risk assessment for driving. Other workplace risks were assessed; the driving was not, despite the workforce spending more hours on the road than at desks.
The fines under section 33 of the 1974 Act are unlimited in the Crown Court, and the Sentencing Council guideline takes turnover and culpability into account when setting the figure. Breaches of sections 2 and 3 can attract fines up to £10 million for very large companies. For small businesses the figures are smaller in absolute terms but routinely exceed £100,000 for a serious incident, and a director can be personally prosecuted under section 37 if the breach was committed with their consent or connivance.
A practical 12-month routine
For a small business with a handful of grey fleet drivers, the controls fit on one page and run on three calendar reminders.
Monthly: check the gov.uk MOT and tax service for any vehicle whose certificate expires that month. 30 seconds per vehicle.
Quarterly: review any reported defects, mileage anomalies, or incidents. Update the risk register if something changed.
Annually: run the licence check, ask for the insurance certificate, ask for the vehicle condition declaration, refresh the driver agreement. One email and three replies per driver.
For larger fleets, this is where a fleet management tool earns its place. Autodue tracks the MOT, road tax, insurance renewal date, and walkaround check for every vehicle, including grey fleet, in a single timeline. See Fleet Compliance for Small Businesses: A Complete UK Guide for how that connects to the wider compliance picture.
What to write in your fleet policy
If your fleet policy does not already cover grey fleet, the section needs to answer five questions in plain language: who counts as a grey fleet driver, what cover their vehicle must hold, what evidence the business will collect and how often, what happens if a check fails or evidence is missing, and where the records live. Most policies underwrite the first two and skip the rest. A policy that names the schedule and the consequences is the policy that actually changes behaviour.
For a template that includes the grey fleet section, see How to Create a Fleet Policy Document (Free Template, UK 2026).
The bottom line
Grey fleet is the highest-risk part of fleet management because it is the part that does not look like fleet management. The duty of care under the 1974 Act applies in full. The control set that closes most of the risk is a yearly licence check, a current insurance certificate on file, a verified MOT, a vehicle condition declaration, and a signed driver agreement. None of those tasks costs much. None of them takes long. The cost of running them beats the cost of not running them by orders of magnitude when something goes wrong.
Track every driver, vehicle, MOT, tax and insurance renewal in one timeline with Autodue, free for your first van. Autodue fleet management | Autodue insurance tracking | Apple App Store | Google Play
Sources: Health and Safety at Work etc. Act 1974, section 2 (legislation.gov.uk) · HSE: Driving and riding safely for work, employer overview · HSE: The law on driving and riding for work · Sentencing Council: Health and safety offences definitive guideline · DVLA: Check someone's driving licence information (gov.uk) · HMRC: Travel mileage and fuel allowances (gov.uk)