How to Complete a Fleet Safety Risk Assessment

---

If your organisation uses vehicles for work, you have a legal duty to assess and control the risk. The Management of Health and Safety at Work Regulations 1999 require employers to carry out a suitable and sufficient risk assessment covering any activity that could harm their employees or others. Driving at work consistently accounts for the largest category of work-related fatalities in the UK, yet fleet risk assessments are one of the most inconsistently applied compliance requirements in commercial transport. This guide sets out what a fleet safety risk assessment must cover, how to structure it, and what documentation a court or regulator would expect to find.

The Legal Basis for Fleet Risk Assessment

The duty to assess work-related road risk sits primarily with the employer, not the driver. The Management of Health and Safety at Work Regulations 1999, Regulation 3, requires every employer to make a suitable and sufficient assessment of risks to employees and others arising from the employer’s undertaking. For any business that uses vehicles in the course of its work — including employees driving their own vehicles on company business — this duty covers vehicle use.

Supporting legislation includes the Health and Safety at Work Act 1974, which imposes a general duty of care to take all reasonably practicable steps to ensure employee safety, and the Corporate Manslaughter and Corporate Homicide Act 2007, which can apply where a death occurs as a result of a gross breach of a duty of care by an organisation. Fleet risk assessment documentation is a key element of demonstrating that the duty of care was being managed — not just in principle, but in practice.

For organisations with five or more employees, the significant findings of the risk assessment must be recorded in writing. This includes the hazards identified, the controls implemented, and who carries responsibility for maintaining those controls.

The Three Core Assessment Areas

Fleet safety research and HSE guidance consistently identify three areas that a fleet risk assessment must cover: the driver, the vehicle, and the journey. A risk assessment that addresses only one or two of these areas is not suitable and sufficient.

Driver Assessment

The driver is the primary variable in fleet safety risk. Driver assessment should cover:

• Licence validity and entitlement — does the driver hold a valid licence for the category of vehicle they drive? An HGV driver must hold a Category C or C+E licence with a valid CPC card. A driver operating on an expired or incorrect licence creates an uninsured driving risk in addition to the safety risk.
• Medical fitness — HGV and PSV drivers have a statutory obligation to notify the DVLA of any condition that may affect their driving. Operators should have a process for periodically confirming that drivers have met their notification obligations. A driver who develops a medical condition but continues to drive without declaring it creates a liability that falls partly on the operator if they had no verification process in place.
• Driving history — licence endorsements, penalty points, and any previous collision history. A driver with multiple speeding convictions and a fault accident on record is a documented risk profile that the operator needs to address, not ignore. Telematics systems provide an ongoing behaviour record to supplement the static licence check.
• Training and competency — for HGV and specialist vehicle drivers, does the driver have the training relevant to the work they are doing? Load securing, hazardous goods handling, and urban cycling awareness training are examples of competency that go beyond the basic licence requirement.
• Fatigue and hours compliance — for HGV operators, tachograph compliance is a regulatory requirement. For mixed fleets, the risk assessment should address how drivers’ hours are monitored across all vehicle types.

Vehicle Assessment

Every vehicle used for work should be covered by the fleet risk assessment. The assessment should address:

• Fitness for purpose — is the vehicle type appropriate for the loads it carries, the routes it covers, and the environments it operates in? An LCV rated to 3.5 tonnes being consistently loaded to capacity on rough terrain is a different risk profile to the same vehicle on urban deliveries. The risk assessment should document the intended use and verify the vehicle matches it.
• Inspection and maintenance regime — pre-use checks (daily walkaround), scheduled maintenance, and annual inspection must all be operating correctly and documented. A vehicle that has not had a walkaround check recorded in three months has a gap in its maintenance evidence trail that insurers and investigators will note.
• Safety equipment — for vehicles above 3.5 tonnes, the FORS requirements, CLOCS requirements, or contractual requirements may specify camera systems, proximity sensors, and audible warning devices. The risk assessment should confirm what safety equipment is required and that it is fitted and operational.
• Load security — loads that shift, fall, or create instability are a documented cause of fleet incidents. The risk assessment should cover load restraint requirements and confirm that the correct equipment (load bars, strapping, nets) is available and used.

Journey Assessment

The journey risk assessment evaluates the conditions under which the vehicle operates. This is the area most frequently overlooked, and the one that most directly determines the driver’s actual risk exposure:

• Routes and road types — urban deliveries with regular pedestrian and cyclist interaction carry different risks to motorway bulk haulage. High-risk routes (school pick-up times, congested urban areas, level crossings, narrow country roads) should be identified and reviewed with drivers.
• Timing and shift patterns — early morning and late night driving carry elevated fatigue risk. Deliveries during school run times in residential areas carry elevated pedestrian risk. The journey assessment should address when, not just where.
• Seasonality and weather — winter driving conditions, high winds affecting high-sided vehicles, and summer visibility issues are predictable risks that should appear in the assessment with corresponding controls.
• Load and cargo risk — the nature of the load affects the risk profile. Hazardous goods, refrigerated loads, and abnormal indivisible loads all carry specific requirements that the journey assessment should confirm are met.

Conducting the Assessment

A fleet safety risk assessment should not be completed in isolation by a fleet manager reviewing a spreadsheet. The HSE guidance is explicit that drivers, supervisors, contractors, and visiting drivers should be consulted — because they have practical knowledge of the hazards that documentation alone will not surface.

A structured approach:

1. Identify hazards — use the three-area framework (driver, vehicle, journey) and review incident data, near-miss reports, telematics alerts, and driver feedback to identify what has gone wrong or could go wrong.
2. Identify who is at risk — employees driving at work, passengers, pedestrians, cyclists, other road users. For vehicles operating in urban areas, the list of people at risk extends well beyond the driver.
3. Evaluate the risk — assess likelihood and severity for each identified hazard. A combination that produces a high-severity outcome (collision causing serious injury) even at low frequency warrants strong controls.
4. Implement controls — matched to the risk level. For high-risk hazards, the hierarchy of controls applies: eliminate the hazard where possible (e.g. route change to avoid a known hazard); engineer controls (sensor systems, camera systems, load restraint equipment); administrative controls (training, driver briefings, route instructions); PPE and signage as a last layer.
5. Document and review — record significant findings and control measures. Set a review date. The assessment is not a static document; it must be updated when new vehicles, routes, or working patterns are introduced.

Technology as Part of the Assessment Evidence Base

Fleet camera systems and telematics do not replace the risk assessment process — they feed into it. Near-miss event data captured by MDVR systems shows the fleet manager incidents that would previously have gone unreported. Telematics data reveals speeding, harsh braking, and corner speed patterns that indicate specific driver risk profiles. This data is the difference between a risk assessment based on guesswork and one based on evidence.

Fleet managers who install camera systems and then fail to review the event data are missing the primary safety benefit. The footage and the alerts are not just claims evidence — they are a continuous risk assessment tool. A driver who generates repeated nearside proximity alerts is a documented training need. A route that produces a disproportionate number of harsh braking events is a route risk that the journey assessment should address.

Frequently Asked Questions

How often should a fleet risk assessment be reviewed?

Whenever something changes that could affect the risk profile — new vehicles, new routes, new drivers, new loads, or a significant incident. At minimum, the assessment should be reviewed annually and the review date recorded. An assessment dated from five years ago that has not been updated since a fleet doubled in size is not suitable and sufficient.

Does a fleet risk assessment need to be a formal document?

For organisations with five or more employees, the significant findings must be recorded in writing. This does not require a long formal document — a structured record of hazards identified, controls implemented, and review dates is sufficient. What it cannot be is a verbal arrangement with no paper trail.

Who is responsible for the fleet risk assessment?

Ultimately the employer, not the driver or fleet manager as individuals. The employer has the duty of care under the 1999 Regulations. In practice, the assessment is typically conducted and maintained by a fleet manager or transport manager, with input from drivers. But if a serious incident occurs and no assessment exists, the liability falls on the organisation.

Can camera and telematics systems replace driver risk assessments?

No — they support them. A camera system records what happened. A telematics system records what the vehicle was doing. Neither assesses whether the driver is medically fit, licenced for the vehicle, trained for the loads they carry, or aware of the risks on their routes. The risk assessment is the framework; technology provides the ongoing monitoring data that feeds into it.

What should happen after a fleet incident in terms of risk assessment?

The incident should trigger a review of the relevant part of the risk assessment. If a nearside collision occurred, the vehicle safety equipment, the route assessment, and the driver assessment should all be reviewed and updated to reflect whether existing controls were adequate. If camera footage shows that the incident was caused by a factor not previously identified in the assessment, that hazard should be added and controls implemented. An incident that does not trigger an assessment review is a missed learning opportunity and a liability gap.

---

Free download: Fleet Safety Risk Assessment Checklist

A three-area checklist (driver, vehicle, journey) for completing a suitable and sufficient fleet safety risk assessment under the Management of Health & Safety at Work Regulations 1999.

---

Related guides: What Evidence You Need for Insurance Claims · Camera System Requirements for UK HGV Operators