For many organisations, grey fleet forms a significant but often under-managed part of their overall fleet operations. Employees using their own vehicles for work can offer cost savings and flexibility to meet seasonal demand, but it also introduces a range of risks that are frequently underestimated.

The vehicle may not belong to the organisation, but the risk does. Without clear oversight, businesses can expose themselves to legal liability, safety concerns, financial loss, and reputational damage.

Understanding these risks is the first step towards managing them effectively.

Grey fleet risks organisations need to be aware of

Grey fleet risk is not a single issue but a combination of interconnected exposures that can affect different parts of the organisation. Broadly, these risks fall into four categories: 

• Legal
• Safety
• Financial
• Reputational

What are the legal risks of operating a grey fleet?

Under the Health and Safety at Work etc. Act 1974, employers have a statutory duty to ensure, so far as is reasonably practicable, the health, safety, and welfare of employees while at work. Legally, “at work” includes any travel for business purposes, regardless of who owns the vehicle.

Failing to manage your grey fleet creates several specific legal exposures:

• Criminal prosecution for ‘Causing or Permitting’:

Under the Road Traffic Act 1988, an employer can be prosecuted if they “cause or permit” an employee to drive a vehicle that is uninsured, lacks a valid MOT, or if the driver does not hold a valid license. This is a strict liability issue; simply not knowing the driver was uninsured is often not a valid legal defense if you failed to perform due diligence.

• The Corporate Manslaughter and Corporate Homicide Act 2007:

In the event of a fatal road collision involving a grey fleet driver, your organisation can be prosecuted if the incident resulted from a gross breach of a relevant duty of care. If a court finds that senior management failed to implement adequate systems for checking vehicle roadworthiness or driver eligibility, the organisation faces unlimited fines and significant reputational damage.

• Breach of management regulations:

The Management of Health and Safety at Work Regulations 1999 require you to carry out a suitable and sufficient assessment of risks. If your risk assessments stop at the warehouse door and ignore the 20 employees driving their own cars, you are in breach of these regulations.

• The insurance gap:

A common and dangerous misconception is that personal motor insurance covers work travel. Most standard policies only cover social, domestic, and pleasure (SD&P) or commuting. Driving for business without a specific business use endorsement renders the insurance void. If an accident occurs, the driver is technically uninsured, and the organisation may be held civilly and criminally liable for any resulting damages.

What are the safety risks of running a grey fleet?

Organisations typically have limited oversight of vehicle condition within their grey fleet. Unlike company vehicles, which are maintained according to defined schedules, privately owned vehicles may vary widely in terms of maintenance, age, and overall roadworthiness. 

While MOT certification provides a baseline, it does not guarantee ongoing safety between tests.

Driver-related risks are also harder to manage. Without structured processes in place, it can be difficult to monitor licence validity, endorsements, or changes in driver status. In addition, organisations may have little insight into driver behaviour, skill, fatigue, or fitness to drive.

While you may have a trained driver assessor to evaluate your primary fleet, grey fleets may not get the same level of care and attention, significantly increasing the potential for incidents on the road.

What are the financial risks of running a grey fleet?

In the event of a road incident involving a member of your grey fleet while working, organisations may face direct costs such as legal fees, compensation claims, and increased insurance premiums. Even where liability is not fully established, the administrative burden and associated costs can be significant.

There are also indirect financial impacts to consider. Operational disruption, lost productivity, and time spent managing incidents can all affect business performance. In some cases, organisations may also face regulatory fines or enforcement action.

What is the reputational risk of running a grey fleet?

A serious incident involving a grey fleet vehicle can quickly become a public issue, particularly if it highlights failures in oversight or compliance. This can damage brand trust, especially for organisations that operate in regulated sectors or have a strong public profile.

There are also growing ESG considerations. Stakeholders increasingly expect organisations to demonstrate responsible practices, including how they manage employee safety and environmental impact. Grey fleet vehicles, which may be older and less efficient, can present challenges in this area.

Finally, there is the impact on stakeholder confidence. Clients, partners, and insurers may view poor grey fleet management as a sign of broader governance weaknesses, potentially affecting business relationships and opportunities.

Grey fleet legal requirements – your duties explained

Grey fleet compliance requires a clear understanding of the underlying legal requirements. At a minimum, organisations should ensure that drivers hold a valid driving licence and are legally permitted to drive. Note that licence status can change, and regular verification is essential.

Insurance is another critical area. Employers must ensure that employees using their own vehicles for work have appropriate cover for business use. Relying on self-declaration alone can create risk if not properly validated.

Organisations should also have processes in place to confirm that grey fleet vehicles are roadworthy and properly maintained.

All of this sits within broader health and safety obligations. Employers are expected to assess and manage risks associated with work-related driving, regardless of vehicle ownership. This includes having appropriate policies, procedures, and monitoring in place.

Grey fleet policy tips

• Explicit driver requirements:

Clearly state that drivers must hold a valid UK driving licence for the category of vehicle being driven. It should also mandate that they notify the organisation immediately of any new motoring convictions, fixed penalties, or health conditions that might affect their fitness to drive.

• The “Business Use” mandate:

The policy must explicitly state that personal insurance must include “Class 1 Business Use” (or higher) and that commuting cover alone is insufficient for work-related travel.

• Minimum vehicle standards:

Define what a “safe” car looks like for your business. This might include a maximum vehicle age (e.g., no older than 7 or 10 years), a minimum Euro NCAP safety rating, or specific emission standards to align with your ESG goals.

• Documentation and frequency:

Don’t just ask for documents; define the cadence. Best practice is to verify licences, MOTs, and insurance certificates annually at a minimum, or more frequently for high-mileage drivers or those with existing points.

• Roadworthiness declaration:

Include a requirement for drivers to perform (and ideally log) basic weekly checks, such as tyre pressure, tread depth, and fluid levels. Relying solely on a once-a-year MOT is a common legal pitfall.

• Incident reporting:

Establish a no-blame reporting culture where employees feel comfortable reporting minor scrapes or near misses. This data is vital for identifying high-risk patterns before a serious accident occurs.

A policy alone, however, is not enough; it must be actively implemented and monitored.

Do I need a grey fleet audit?

Effective grey fleet risk management starts with regular, structured checks. You should be carrying out a minimum of one grey fleet check each year. This ensures that employees using their own vehicles for work are doing so legally, safely, and in line with organisational requirements.

An annual grey fleet check provides essential visibility over key risk factors. It allows organisations to confirm that drivers hold a valid licence, have appropriate business insurance in place, and are operating vehicles that meet legal standards such as MOT and road tax requirements. 

It also helps identify higher-risk drivers, highlight training needs, and detect changes such as new licence endorsements.

At Cardinus, we can carry out your grey fleet checks for you, removing the burden of managing the risk of grey fleets while enabling their benefits. Learn more and enquire about our grey fleet checking service.

Where a more comprehensive review of organisation-wide risk exposure and management is required, we also deliver corporate fleet audits. These audits are carried out on-site, examining the effectiveness of policies, processes, and governance to help organisations understand whether their overall approach to fleet risk management is robust, consistent, and aligned with legal obligations.