Docketory
All articles
consumer-dutyfcafinancial-servicesinsurancemotor

Your insurer authorised repairs without your permission. Now what?

9 June 2026Docketory

Your car was in an accident. You called your insurer. From that phone call onward, things happened, quickly. An engineer attended. A figure was quoted. A garage was booked. The car came back fixed.

What you may not realise is that several decisions were made in that sequence that legally required your consent and didn't get it. The insurer was within its rights to act, until the moment it wasn't. Spotting that moment is the entire ball game.

This article walks through three things: where the legal line sits between insurer discretion and required consent, how to tell whether your claim crossed it, and the regulatory levers that put the burden of proof back on the insurer.

The pattern, in one paragraph

Within hours of reporting a claim, the file is moved. The insurer's claims handler passes it, sometimes seamlessly, sometimes through a third-party "accident management" company, to a repair network. An engineer's report is generated, often without the consumer seeing it. A repair is authorised. If the damage is borderline, the vehicle may be classified as beyond economic repair (a write-off), then re-classified as repairable, then sent to a non-approved garage. Safety-critical work (suspension, steering, advanced driver-assistance system or ADAS calibration) is done. The car comes back. The consumer signs nothing. When they later request the file, it returns with redactions that cite no legal exemption.

If even half of that matches your claim, the rest of this is for you.

What the insurer can do without asking

Insurers run on contracts of utmost good faith, and the policy itself grants the insurer significant authority. After a notified claim, the insurer is generally entitled to:

  • Appoint an engineer to inspect the vehicle
  • Decide whether the loss is economically repairable or a total loss
  • Settle a third party's claim against you (in liability cases) without your agreement
  • Choose a repairer from its approved network and authorise the work

These are standard policy terms, and they are not, in themselves, unlawful.

What the insurer needs your consent for

The picture changes in four specific situations. These are where most consumer complaints succeed.

1. Handover to a non-approved repairer. If the insurer routes your claim to a garage that is not on its own approved network, and the policy does not expressly permit this, your informed agreement is required. "Informed" is doing real work here: you must be told it is non-approved, and what that means for the warranty and quality controls.

2. Use of an accident management company you did not instruct. Many insurers and brokers pass non-fault claims to accident management firms (which charge inflated daily rates for hire vehicles and recover them from the at-fault insurer). If you didn't instruct that company, the relationship is being created on your behalf, and you can refuse it. Read about this in the Financial Conduct Authority's findings on credit hire and accident management.

3. Re-classification after a beyond-economic-repair finding. If your vehicle was originally classified as a write-off and then quietly re-classified as repairable to keep it on the road and reduce the insurer's payout, that change of position should be documented and disclosed. A silent reversal is a flag.

4. Safety-critical repairs. Repairs to suspension, steering, brakes, airbags, and ADAS calibration are not cosmetic. Manufacturer-specification repair, calibration documentation, and parts provenance matter. You are entitled to know who did the work and to what standard.

Can my insurer authorise repairs to my car without my consent?

Short answer: in routine cases, yes. The policy permits it. The longer answer is more useful, because the Financial Conduct Authority's Consumer Duty, in force since 2023, requires firms to deliver good outcomes for retail customers. That includes ensuring customers receive the support they need to make informed decisions about their products and the services attached to them.

A claims process that routes the consumer through a non-approved repair network, books safety-critical work without disclosing the route, and resists subject access requests after the fact does not deliver a good outcome under the Consumer Duty. That is the lever, and it is enforceable through complaints to the insurer and onward to the Financial Ombudsman Service and, on systemic conduct points, to the FCA itself.

The Insurance Conduct of Business Sourcebook (ICOBS) layers further obligations on top, particularly around claims handling that is fair, prompt, and transparent.

What you can do today

1. Get the entire claim file by SAR

Your starting move is a subject access request under the UK GDPR. Send one to the insurer covering: the claim file, engineer's reports, internal notes, communications with any accident management company, repair authorisations, invoices, and any data exchanged with third-party repairers.

The insurer has one calendar month to respond. Redactions are permitted only where a specific statutory exemption applies, and the insurer should tell you which exemption is being claimed. Redactions without a cited exemption are a breach and a complaint point in their own right.

2. Build the chronology

On a single page, set out:

  • Date and time of the loss
  • When you first contacted the insurer
  • What you were told about repair routing
  • Whether you signed anything authorising a specific garage
  • Whether an accident management company was introduced (by whom, when, and whether you actively agreed)
  • Whether a beyond-economic-repair classification was made and later reversed

Most insurer complaints fail because the chronology is muddled. A clean one-page timeline puts you ahead of 90% of complainants.

3. Send a formal complaint citing the right rules

To the insurer's complaints address, not the claims line. Reference:

  • The specific decisions you did not consent to
  • ICOBS 8.1 (claims handling)
  • The FCA Consumer Duty (PRIN 2A) and the four outcomes (products and services, price and value, consumer understanding, consumer support)
  • The SAR breach if redactions were made without exemption
  • The remedy you want: a clean repair by an approved repairer (or write-off settlement at fair market value), refund of any inflated charges, a corrected claims record, and compensation for distress

The insurer has eight weeks to issue a final response.

4. Escalate to the FOS, and frame the points carefully

If the insurer rejects or delays, the FOS is your free escalation. The FOS decides on a "fair and reasonable" basis. That is a different test from a strict policy-wording analysis, and it favours you when the insurer's process was opaque.

Be aware: the FOS investigator's preliminary view is not the final answer. If it sidesteps the strongest points (unauthorised repair, SAR breach, Consumer Duty), you can request that the case be passed to an ombudsman for a final, binding decision. Do not accept a preliminary view that ignores your central complaint.

5. Use the regulatory routes for systemic issues

For SAR breaches, complain to the Information Commissioner's Office. For pattern-of-conduct issues (non-approved repair routing, undisclosed handovers), flag to the FCA via its whistleblowing and consumer reporting routes. Neither will recover your money directly. Both create the audit trail that pushes the insurer to settle.

What usually happens next

The insurer's first response is almost always a defence of the policy wording. They will tell you the policy permits routing to a chosen repairer, the engineer was qualified, and the work meets standards. That is the surface answer to a deeper complaint, and the FOS knows the difference.

The point that wins these complaints is rarely "the policy didn't allow it." It is "the process didn't meet the Consumer Duty obligation to give the consumer the information needed to make an informed choice." Frame it that way and the FOS analysis changes.

Realistic timeline: 8 weeks at the insurer, then 6 to 12 months at the FOS. Expect a preliminary view that needs pushing back on. Final ombudsman decisions on Consumer Duty points are still developing as a body of cases, and your complaint contributes to the precedent.

When to escalate further

  • If the repairs done without consent were safety-critical, request manufacturer specification documentation and ADAS calibration records. If the insurer cannot produce them, this is a separate complaint point with regulatory implications.
  • If the SAR redactions were without exemption, the ICO should issue at minimum a reprimand. Multiple ICO complaints against the same firm aggregate.
  • If you discover that an accident management company was paid an inflated rate that affected your claim record or future premiums, this is potentially actionable beyond the FOS. Take advice.

The bottom line

Insurers can do a great deal without asking, but not everything. Routing through accident management firms without your instruction, work done at non-approved garages without disclosure, redacted SAR responses without legal basis: these are points the regulators will engage with when framed correctly. The Consumer Duty is the lever. Use it.

Frequently asked questions

The repairs were done well. Does it matter that I wasn't asked? Yes. Quality of outcome doesn't cure a process defect. The Consumer Duty is about the customer's ability to make informed decisions, not about whether the panel beater did a tidy job.

Can I refuse the accident management hire car after the fact? You can refuse to engage further at any point, but charges already incurred can be harder to undo. Read what you signed (or were emailed) immediately and complain in writing if you didn't actively agree.

The FOS investigator dismissed my complaint. Is that final? No. An investigator's view is not the same as a final ombudsman decision. You have a deadline (usually given in the letter) to ask for the case to be passed to an ombudsman for a binding decision. Take it.

Docketory publishes general information based on real disputes. Identifying details are changed and patterns from multiple cases may be combined. This is not legal advice. For advice on your specific situation, contact a solicitor or Citizens Advice.

Related on Docketory:

Need help with this?

Tell us about your situation. We will confirm whether we can help, which service applies, and the cost: no obligation to proceed.

Related articles