A driving for work policy is the document that operationalises an employer's health and safety duties for any worker who drives as part of their job — whether in a company vehicle or their own. UK law treats driving as a work activity governed by the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999, running in parallel with the driver's individual duties under the Road Traffic Act 1988. Both frameworks apply at the same time. The policy needs to cover nine areas: scope and definitions, legal framework, driver requirements, vehicle requirements, journey planning, mobile devices and distraction, training and competence, incident reporting, and monitoring and review. Grey fleet — employees driving their own vehicles for work — is the area most policies miss, and it carries the same employer duties as company-owned fleet. Following the Corporate Manslaughter and Corporate Homicide Act 2007, organisations have been successfully prosecuted for work-related road deaths where management failures were judged gross.
Around a third of all road deaths and serious injuries in Great Britain involve someone who was driving for work. The figure has been broadly stable for two decades. What's changed is the regulatory environment around it: HSE has been progressively clearer that driving is a work activity, the Corporate Manslaughter Act 2007 has been used in fatigue-related work-driving deaths, and grey fleet — employees driving their own vehicles on company business — has come into focus as the area where most policies fail.
This guide explains how UK law treats driving for work, the nine-section structure of a policy that meets the duties, the grey fleet question that catches most employers out, and what the enforcement environment now looks like.
The thing most policies handle badly is the dual-track nature of UK road law. When an employee drives for work, they sit in two legal regimes simultaneously, and the employer needs to meet duties under both.
| Legislation | What it requires |
|---|---|
| Health and Safety at Work etc. Act 1974 | Section 2 general duty to ensure, so far as is reasonably practicable, the health, safety and welfare at work of all employees. HSE has confirmed that this duty applies to driving as a work activity. |
| Management of Health and Safety at Work Regulations 1999 | Regulation 3 requires risk assessment of all work activities, including driving. The assessment must be specific, recorded, and acted upon. |
| Road Traffic Act 1988 | Driver-facing duties — licence, insurance, fitness to drive, vehicle condition, conduct on the road. Personal liability sits with the driver but employer policy is judged against whether it supports compliance. |
| Corporate Manslaughter and Corporate Homicide Act 2007 | Where a person dies as a result of a gross breach of relevant duty by management, the organisation can be prosecuted. Successfully used in fatigue-related work-driving deaths. |
HSE guidance INDG382 (Driving and riding safely for work) is the practical reference document. It is not law, but a competent court will treat departure from it as something an employer must be able to justify.
The duties under HSWA and MHSWR run alongside the driver's Road Traffic Act duties. They don't substitute. A clean licence and roadworthy vehicle satisfy the Road Traffic Act; they do nothing for HSWA. The employer needs to discharge the work-activity duties separately — which means risk assessment, policy, journey planning, training, monitoring, the lot.
"Grey fleet" means an employee using their own private vehicle on company business: a sales rep going to a client, a community nurse driving between visits, a manager travelling between sites, a self-employed engineer using their own van.
The duty does not change because the vehicle is privately owned. The employer's HSWA duty still applies. The MHSWR risk assessment still applies. The Corporate Manslaughter Act still applies if a fatigue-related crash kills someone and management failures contributed. What changes is the visibility — the employer cannot inspect the vehicle, cannot verify maintenance, and often cannot confirm the licence is current or the insurance covers business use.
Most under-cooked policies cover company-owned fleet thoroughly and treat grey fleet as an HR issue or expense-claim formality. That position is indefensible. A working policy needs to extend to grey fleet:
The administrative cost is small. The audit gap if you don't run it is substantial — particularly if a grey fleet driver is involved in a serious incident and the policy didn't address them.
A working policy covers nine areas, in roughly this order. Smaller employers can compress sections; larger ones may need to expand into appendices. The nine-section structure is the framework that maps cleanly onto HSE guidance and stands up to enforcement scrutiny.
Who the policy applies to. Define "driving for work" explicitly — commuting is normally excluded, but commuting that includes a work errand is not. Define employee, contractor, agency worker, grey fleet driver. Define occasional driver versus regular driver if your scheme treats them differently. Make explicit whether the policy covers cycling, motorcycling, and electric scooters used for work, where applicable.
Statement of the dual-track legal position. Reference HSWA 1974, MHSWR 1999, Road Traffic Act 1988, and the Corporate Manslaughter Act 2007. This section is short but it grounds the rest of the policy — everything that follows is the means of meeting these duties, not optional good practice.
What you require of any driver before they drive for work. Typically:
Standards for vehicles used. For company-owned fleet: maintenance schedule, daily walk-round checks, defect reporting, tyre and fluid checks. For grey fleet: MOT, service history, basic roadworthiness expectations, and how you verify these. Specify whether the policy covers vehicle suitability (e.g. a small hatchback on motorway-heavy long routes may not be suitable even if road-legal).
The single biggest cause of work-related road deaths is fatigue. The Working Time Regulations 1998 do not directly govern most occupational driving (HGVs and PCVs are covered by separate drivers' hours rules), but the HSWA duty to manage fatigue still applies. The policy should set:
The "without penalty" point is the test. A policy that allows fatigue stops in theory but pressures drivers to push on in practice fails the duty. Manager training has to back this up.
Hand-held mobile use while driving has been illegal in the UK since 2003 and the law was tightened substantially in March 2022 — touching the device for almost any purpose is now an offence. Hands-free is legal but increasingly recognised as a substantial impairment. A working policy:
Manager culture is the variable that makes or breaks this section. If the implicit expectation is that drivers answer calls in motion, the written policy is theatre.
What training drivers receive, when, and how it's refreshed. Typical structure:
What gets reported and to whom. Bumps, scrapes, near-misses, conviction or fixed-penalty notice, vehicle defects, and any road traffic collision regardless of fault. Reporting routes need to be quick and blame-free for minor events; that's how you get the early warnings that prevent the major ones. RIDDOR-reportable injuries from work-related driving need separate flagging into the wider H&S incident process.
Annual review of policy, incident data, conviction data, mileage, and fleet/grey fleet exposure. Review triggers in addition to annual: serious incident, change in legal framework, change in fleet composition, audit finding. Named accountability for review — usually the H&S manager or fleet manager, signed off at director level.
The principal compliance gap in modern UK driving for work is grey fleet, because employers cannot easily inspect the vehicle, cannot verify the maintenance, and often have no record of the licence or insurance. The policy needs a working answer to each of these.
Licence: the DVLA share-code system gives an employer a 21-day window to verify a licence including endorsements. Annual checks are the minimum standard most well-run schemes use; high-mileage or high-risk drivers may be checked twice a year.
Insurance: private motor insurance commonly covers "social, domestic and pleasure" plus commuting, but excludes business use unless specifically added. An employee driving to a client meeting on a standard SD&P policy is uninsured, the employer has no cover from the employee's policy, and any claim against the driver is potentially uninsured. The policy needs to require business-use cover and capture evidence of it — usually a copy of the certificate or a written confirmation from the insurer.
MOT and roadworthiness: the MOT is a minimum legal standard, not a fleet maintenance standard. Employers running well-managed schemes ask for evidence of recent service in addition to MOT, and require a self-declaration of roadworthiness covering tyres, lights, fluids, and any known faults.
Mileage reimbursement and tax: grey fleet is closely tied to expenses and tax (HMRC AMAP rates, mileage-claim rules), and the policy should align with the expenses framework. Both pieces need to point to the same underlying assumptions about business mileage.
For employers with significant grey fleet, the question of whether to provide pool cars or company vehicles instead is worth asking periodically. Beyond a certain mileage threshold, providing a managed vehicle is often cheaper than the combined cost of mileage reimbursement, the administrative overhead of compliance checks, and the residual liability exposure.
Enforcement of work-driving duties takes three forms. Each can apply to the same incident.
Standard police process. Speeding, careless driving, mobile phone offence, drink/drug driving. Personal liability sits with the driver. Where the offence reflects a wider organisational failure (fatigue, vehicle defect, employer pressure), it can also feed into HSE or coronial proceedings.
HSE is increasingly active on work-related road risk. Inspections can be triggered by RIDDOR-reported injuries from work driving, by complaint, or as part of broader workplace inspection. Improvement Notices and Prohibition Notices are both available. Significant fines have been imposed where risk assessment for driving was absent or grossly inadequate.
The most serious tier. Used where a person dies, where the death resulted from the way the organisation's activities were managed, and where the management failure was a gross breach of relevant duty. Successfully used in fatigue-related work-driving deaths — cases where drivers had been worked beyond reasonable limits and fell asleep at the wheel, killing themselves or other road users. Convictions carry unlimited fines and significant publicity orders.
The defence that "it was the driver's fault" rarely holds where management failures contributed. UK case law has been consistent: where the employer set the schedule, didn't run a proper risk assessment, or had no effective fatigue management, the organisation carries responsibility alongside the driver.
Yes. The HSWA general duty and the MHSWR risk assessment duty apply to any work activity, including driving in a privately owned vehicle on company business. The duty does not change because the vehicle is privately owned.
No. A driver's clean licence and roadworthy vehicle satisfy Road Traffic Act duties on the driver. The employer's HSWA duty runs alongside and has to be discharged separately — through risk assessment, policy, journey planning, training, and monitoring.
Yes. The Corporate Manslaughter and Corporate Homicide Act 2007 has been successfully used in fatigue-related work-driving deaths where management failures were judged gross.
The driver (licence, fitness, experience, training), the vehicle (suitability, condition, maintenance), the journey (distance, timing, route, road type, weather), and the work demands (fatigue, time pressure, mobile device expectations). The assessment is recorded and reviewed at least annually.
Hands-free use is legal but is increasingly recognised as a substantial impairment. A well-written policy restricts hands-free use to genuine need rather than treating driving time as available for routine business calls.
Annually as a minimum. Sooner if there has been a serious incident, a change in the legal framework, or a substantial change in fleet composition or work patterns.
If your organisation has occupational drivers and either no policy or one that hasn't been refreshed in years, the highest-leverage starting points are:
For the broader workplace H&S management training that covers occupational driving alongside the wider hazard set, our IOSH Managing Safely course is widely used at line manager level. The NEBOSH National General Certificate covers work-related road risk in greater depth at H&S manager level. Call us on +44 (0) 3300 569534 for tailored advice on the right training for your team.
For related guidance, see our Lone Worker Policy and Risk Assessment guide — field-based driving and lone working overlap substantially — and our 5 Steps to Risk Assessment, which sets out the assessment methodology that underpins driving for work compliance.
