Grey fleet duty of care: what UK employers must know.

7 min read · 24 April 2026. Grey fleet is the part of UK fleet compliance most employers understand least and worry about most. The misconception is that an employee's personal car is the employee's responsibility. UK law is unambiguous: it is not. This guide covers what grey fleet actually is, the legal basis for the duty of care, the four checks every employer must run, the insurance gap that catches most SMEs, and how to manage all of it without the spreadsheet that, after an incident, never holds up.

What is grey fleet?

Grey fleet is any vehicle used for business travel that is not owned or leased by the employer. In practice it means an employee's own car, used for an occasional client visit, a journey to a conference, or any business mileage claimed against HMRC mileage rates. Most UK SMEs operate a grey fleet of some size — often without ever calling it that — because reimbursing a member of staff 45p per mile is administratively easier than running a small pool of company vehicles.

The term is also used more broadly to cover any "non-fleet" vehicle being driven on business: a director's personal lease car, a hire car booked for a single trip, even a courtesy car loaned during a service. If the vehicle is being driven for the employer, it falls inside the grey fleet definition for legal purposes.

The legal basis: HSE Driving at Work and the 1974 Act

The legal foundation is the Health and Safety at Work Act 1974, which places a general duty on every employer to ensure the health, safety and welfare of employees so far as is reasonably practicable. The Act makes no distinction between a company-owned vehicle and an employee's personal car when that vehicle is being driven on the employer's business.

Sitting alongside the primary legislation is HSE guidance INDG382 ("Driving at Work: Managing Work-Related Road Safety"), the document regulators, insurers and tribunals benchmark against. INDG382 is explicit that the duty extends to grey fleet — "the duty applies whether the vehicle is yours or theirs" — and lists the basic checks an employer must be able to evidence: licence entitlement, vehicle roadworthiness, insurance covering business use, and driver fitness.

The Corporate Manslaughter and Corporate Homicide Act 2007 raises the stakes further. Where senior management failure is judged to have caused a death involving an employee driving on business, the organisation can be prosecuted with no upper limit on the fine, regardless of whether the vehicle was company-owned or grey.

The four checks every grey fleet employer must run

The reasonable standard, distilled, is four checks, evidenced and dated, on every grey fleet driver and every grey fleet vehicle:

Driver licence: verified against the DVLA record, not a paper photocard. Categories must match the vehicle being driven. Endorsements and points captured in real time.

Vehicle MOT and tax: verified against the DVSA MOT history API and the DVLA vehicle enquiry service. A current MOT and current vehicle excise duty are strict liability requirements; the employer carries the same exposure as the driver where the journey is on business.

Insurance covering business use: the schedule of insurance, with business use explicitly listed. This is where most grey fleets fail. Renewal date tracked.

Roadworthiness and fitness to drive: a defined process — even if it is a short pre-journey self-check — that the vehicle is in roadworthy condition and the driver is fit to drive at the time of the journey.

None of these checks is hard in isolation. The difficulty is doing all four, on every grey fleet driver, on a regular cadence, with a dated and timestamped audit trail that survives contact with an HSE inspector or an insurer's loss adjuster.

The insurance gap: business use on a personal policy

The single most common grey fleet failure in UK SMEs is the insurance gap. Most retail motor insurance policies cover "social, domestic and pleasure" use by default. Business use — driving to a client meeting, a conference, anywhere outside the regular commute — is an additional class of use that has to be specified at the point of quoting and is shown on the schedule of insurance.

If a grey fleet driver has an incident on a journey that falls outside the use class on their policy, the insurer is entitled to refuse the claim. The exposure then falls back on the employer — directly, in most cases, because the duty of care obligation made the journey the employer's responsibility regardless of who owns the vehicle. The employee may also face a personal financial loss they were never warned about.

The fix is procedural: collect every grey fleet driver's schedule of insurance at the point of onboarding, verify business use is on it, record the renewal date, and run an automated reminder before each renewal. Most SMEs do not do this; it is the single highest-leverage fix in the whole grey fleet picture.

Corporate manslaughter risk

Corporate manslaughter prosecutions following grey fleet incidents are not common, but they are not theoretical. Where an employee has been killed or has killed someone while driving their own vehicle on business, and the employer has not been able to evidence basic duty-of-care controls, the case has been prosecuted under the 2007 Act.

The pattern that gets prosecuted is rarely a single failure. It is the slow drift away from a process — annual self-declaration becoming biennial, then "we'll get round to it next quarter" — until something goes wrong and the documentary record cannot be reconstructed. The defence that records were not kept has not held up in UK courts; the absence of an evidence trail is itself treated as a failure of duty of care.

Manual vs automated grey fleet management

Most UK grey fleets up to about 50 vehicles are managed from a folder of scanned documents and an annual email asking each driver to confirm their licence number, insurance and MOT are current. After an incident, that arrangement does not survive contact with a regulator. There is no timestamp on a self-declaration. There is no live verification against DVLA or the MOT history API. There is no automated reminder when the insurance lapses.

An automated grey fleet workflow handles the same job as continuous, evidenced, source-verified records. The driver gives consent once at onboarding; the system runs DVLA-backed licence checks on a risk-based schedule, queries the MOT history API for every vehicle, tracks insurance renewals against an uploaded schedule, and surfaces any change as an exception the manager responds to. The work is no longer "remember to check"; it is "respond to anything that has moved." That is the same workflow companies use for their company-owned fleet — and there is no good reason for grey fleet to run on different rails.

The whole picture is part of fleet compliance software for UK operators, which closes the same gap on grey fleet that fleet compliance software closes on company-owned fleets — same DVLA integration, same MOT API, same evidence trail. For the data layer behind the operational signals, see our fleet intelligence platform.

The bottom line

Grey fleet duty of care is the most underdone area of UK fleet compliance, the most expensive when it goes wrong, and the easiest to fix. The legal duty is identical to the duty on a company fleet. The practical answer is identical: continuous, dated, source-verified checks on licence, MOT, insurance and roadworthiness, evidenced by an audit trail that an inspector can read.

If your grey fleet drivers signed a self-declaration last year and you have not heard from them since, you are running an annual control on a daily risk.

Frequently asked questions

What is grey fleet?

Grey fleet is the term used in UK fleet management for any vehicle used for business travel that is not owned or leased by the employer. In practice that means an employee's own car driven on a client visit, to a conference, or for any journey reimbursed at HMRC mileage rates. Most UK SMEs run a grey fleet of some size, often without realising it carries the same legal weight as a company-owned fleet.

Is an employer responsible for grey fleet vehicles?

Yes. The Health and Safety at Work Act 1974 makes no distinction between a company-owned vehicle and an employee's personal car when that vehicle is being driven on the employer's business. The same duty of care applies — verifying licence, MOT, insurance covering business use, and roadworthiness — and the same exposure follows if an incident reveals the checks were not done.

What insurance does a grey fleet driver need?

A grey fleet driver needs motor insurance that explicitly covers business use, not just social, domestic and pleasure. Most retail policies do not include business use by default. The employer should verify the schedule of insurance for every grey fleet driver, record a copy, and check the renewal date — because a lapse on the personal policy is a lapse on the employer's duty of care.

How do I manage grey fleet duty of care?

The reasonable standard expected by HSE guidance and fleet insurers is a continuous, evidenced process: DVLA-backed driver licence checking on a risk-based schedule, verified MOT and tax status from the DVSA's MOT history API, recorded insurance schedules with renewal-date tracking, and an audit trail of every check, alert and resolution. Most UK grey fleets up to about 50 vehicles still run this from a once-a-year self-declaration form and a folder of scanned documents — which is not a defensible record after an incident.