Drug Testing for Employers: Rules and Options
Updated 15 min read

Four federal rules, four different questions
- Who it reaches
- CDL drivers and other safety-sensitive transportation jobs
- What it says about testing
- Testing is required, done one way, by 49 CFR Part 40
- Source
- 49 CFR 382.301; Part 40
- Who it reaches
- Federal contractors and federal grant recipients
- What it says about testing
- A written policy and awareness program; no test required
- Source
- 41 U.S.C. 8102, 8103
- Who it reaches
- Employers with 15 or more employees
- What it says about testing
- A test for illegal drugs is not a medical exam
- Source
- 42 U.S.C. 12114(d)
- Who it reaches
- Any employer whose results come through a screening firm
- What it says about testing
- The result is a consumer report
- Source
- FTC staff letter, June 9, 1998
No federal law requires every private employer to drug test. One federal program requires testing for certain jobs (the Department of Transportation's, for drivers and other safety-sensitive transportation work). One requires a drug-free workplace policy from federal contractors and grantees but says nothing about testing. One, the ADA, decides how a test fits around disability law. And the FCRA steps in when a screening firm, rather than the lab, hands you the result. Everything else (whether you may test at all, when, for what, and what you may do with a positive cannabis result) is mostly state law.
So the first question for a small employer is which of your jobs, if any, fall under DOT. Those run on a fixed federal program you cannot vary. Every other job runs on your own written policy, shaped by your state's testing statute. Keep the two programs apart: DOT says its tests “must be completely separate from non-DOT tests in all respects”. If you also check driving records, the MVR guide covers the DOT driver file that sits beside the testing program.
DOT testing: when federal rules require it
The Department of Transportation's testing rules reach safety-sensitive transportation jobs, each through its own agency rule, and every test runs by the same procedures in 49 CFR Part 40. For most small employers the one that matters is the trucking rule: Part 382 applies to every employer of a person who drives a commercial motor vehicle and needs a commercial driver's license. An owner-operator who employs only themselves still has to sit in a random pool of two or more drivers.
| Industry | Testing rule |
|---|---|
| Trucking and bus: drivers who need a CDL | 49 CFR Part 382 |
| Aviation | 14 CFR Part 120 |
| Railroads | 49 CFR Part 219 |
| Public transit | 49 CFR Part 655 |
| Pipelines | 49 CFR Part 199 |
| Maritime | 46 CFR Part 16 |
| How every DOT test is done | 49 CFR Part 40 |
A DOT drug test checks five drug classes: marijuana, cocaine, amphetamines, opioids and PCP. The lab may not test a DOT specimen for anything else. Part 40 now provides for urine and oral fluid specimens, an initial screen and a confirmation test at the lab, and review by a medical review officer (MRO), a physician who checks for a legitimate medical explanation before the employer is told the result.
| Test | When, under Part 382 | Section |
|---|---|---|
| Pre-employment | Verified negative from the MRO before the first safety-sensitive work | 382.301 |
| Random | Unannounced; at least 50% of driver positions a year for drugs, 10% for alcohol (unchanged for 2026) | 382.305 |
| Post-accident | Fatal crash, or a citation plus injury or tow-away; drug test within 32 hours | 382.303 |
| Reasonable suspicion | Trained supervisor's specific, contemporaneous observations, written within 24 hours | 382.307 |
| Return-to-duty | After a violation, before safety-sensitive work resumes | 382.309; Part 40, subpart O |
| Follow-up | Unannounced tests after the return to duty | 382.311; Part 40, subpart O |
After a qualifying crash, test each surviving driver for drugs as soon as practicable. If the drug test has not happened within 32 hours, stop trying and write down why. Alcohol runs on a shorter clock: a record if it is not done within two hours, and no test after eight.
49 CFR 382.303(b), (d)(2)
Two more pieces come with the program. Before a driver's first safety-sensitive shift you run a full query of FMCSA's Drug and Alcohol Clearinghouse with the driver's consent, then query every driver at least once a year. And each driver gets your written materials on the rules before testing starts, including who answers their questions, what counts as a refusal and what happens after a violation. Supervisors who make reasonable-suspicion calls need at least 60 minutes of training on alcohol and another 60 on drugs.
DOT tests come first and stay separate from any company test. Do not use the DOT custody and control form for your own non-DOT tests, not even with the DOT wording crossed out, and do not run a DOT test on someone DOT does not cover.
49 CFR 40.13(a), (b), (g)
What to do
- List the jobs that need a CDL or fall under another DOT agency's rule; only those go in the DOT program.
- Sign up with a consortium or third-party administrator if you are too small to run a random pool yourself.
- Hand every covered driver the written materials, and train each supervisor before they make a reasonable-suspicion call.
- Run the full Clearinghouse query before the first shift and keep a verified negative result on file.
Federal contractors and grantees: the Drug-Free Workplace Act
If you hold a federal grant, or a federal contract above the simplified acquisition threshold (contracts for commercial products and services are carved out), the Drug-Free Workplace Act sets seven conditions. Read them closely and notice what is missing: none of them is a drug test.
- 01
Publish a statement
Drug manufacture, distribution, possession or use at work is prohibited, and what happens if someone breaks the rule
- 02
Run an awareness program
The dangers, your policy, available counseling and assistance, and the penalties
- 03
Hand out the statement
To every employee working on the contract or grant
- 04
Make two terms a condition
Abide by the statement, and report a workplace drug conviction within 5 days
- 05
Tell the agency
Within 10 days of learning of an employee's conviction
- 06
Act on a conviction
Discipline up to termination, or a rehabilitation program, within 30 days
- 07
Keep at it
A good-faith effort to maintain a drug-free workplace
41 U.S.C. 8102(a)(1)(A)–(G), 8103(a)(1), 8104
Employee to employer: a workplace drug conviction within 5 days. Employer to the contracting or granting agency: within 10 days of notice. Personnel action or a rehabilitation requirement: within 30 days.
41 U.S.C. 8102(a)(1)(D)–(E), 8104
A contractor may still choose to test under its own policy. That is a company program like any other, and your state's testing law governs it; the Act gives it no cover. New York's labor department, citing a U.S. Department of Labor notice, puts it plainly: neither the Act nor the rules under it authorize drug testing of employees.

The ADA: a drug test is not a medical exam
“For purposes of this subchapter, a test to determine the illegal use of drugs shall not be considered a medical examination.”
42 U.S.C. § 12114(d)(1)
That one sentence is why employers covered by the ADA (15 or more employees) may test applicants for illegal drugs before an offer, where state law allows it, while the ADA bars medical exams until after a conditional offer. The next sentence keeps the ADA neutral: it does not “encourage, prohibit, or authorize” drug testing. And an employee or applicant “currently engaging in the illegal use of drugs” is not protected when you act on that use.
The protection runs the other way for people in or through recovery. Someone who has completed or is in a supervised rehabilitation program and no longer uses, or who is wrongly regarded as using, keeps the ADA's protection; you may still test them to make sure they have stopped.
The EEOC treats blood, urine and breath analyses for alcohol as medical examinations. For an applicant, that puts an alcohol test after the conditional offer, given to all entering employees, with the result kept in a separate confidential medical file (42 U.S.C. 12112(d)(3)). DOT alcohol tests follow DOT's own rules.
What to do
- Test for illegal drugs, not for alcohol, before an offer, and only where your state allows pre-offer testing.
- Keep results private, and keep any medical information that comes with them in a separate confidential file.
- Do not reject someone for past use or completed treatment; act on current illegal use.
When a drug test result is a consumer report
Whether the FCRA applies to a drug test depends on the route the result takes to your desk. FTC staff answered the question in a 1998 opinion letter, and their 2011 staff report repeats the core of it.
| How the result reaches you | Under the FCRA | Why |
|---|---|---|
| The lab sends the result straight to you | Not a consumer report | The lab reports its own testing of the sample |
| A go-between only arranges the test, ships samples and passes results on | Probably not a consumer report | FTC staff: mechanical services only |
| A go-between shapes what you receive, or resells results | Consumer report | It is assembling or evaluating information |
| A screening firm delivers the result, for example with the background check | Consumer report | “Clearly”, in FTC staff's word |
“When a drug lab provides the results directly to the employer, the test is not a ‘consumer report’ under the FCRA. When an intermediary does so, a detailed factual analysis is needed to determine the answer. When a CRA provides the test results, it is clearly making a ‘consumer report’ to the employer.”
If you order the drug screen through the same screening firm that runs your background checks, the result arrives as a consumer report, and the FCRA steps apply to it exactly as they do to a criminal search: the stand-alone disclosure and written permission before the test is ordered, then the pre-adverse notice with a copy of the report and the Summary of Rights before you withdraw an offer over the result, then the final notice. Our guide to what a consumer reporting agency is explains why the route matters.
Federal law sets no fixed waiting period between the pre-adverse notice and the final notice. FTC staff say a reasonable period must pass, and a 1997 FTC staff letter called five business days reasonable, which is why many employers wait at least five business days. The adverse action timeline lays out the dates.
What to do
- Find out how your results travel: lab direct, a collection go-between, or your screening firm.
- If a screening firm delivers them, fold the drug screen into the same disclosure and permission as the background check, using the disclosure form builder.
- Send both notices before and after a decision based on the result. The adverse action notice guide has both letters.
State cannabis rules: seven states, read one at a time
Cannabis is where state law and drug testing collide most often. Federal DOT rules still test for marijuana metabolites, and state protections give way to them. For every other job, several states, including the seven below, limit what you may do with off-duty use or a positive cannabis result, and some limit the test itself. The seven below were read from each state's own statute, labor agency or cannabis regulator on October 23, 2026.
California
- Protects
- Off-the-job, off-site cannabis use, and a test showing only non-psychoactive cannabis metabolites. Employers may not ask applicants about past cannabis use.
- Testing
- Employers may still require all applicants to take a drug test; a valid test showing psychoactive THC, or other screened substances, may be acted on.
- Exceptions
- Employers with four or fewer employees; jobs needing a federal background investigation or security clearance; current employees in the building and construction trades; testing other laws require.
Gov. Code § 12954; CRD FAQ, January 2024
Connecticut
- Protects
- Off-duty cannabis use, unless the employer has a written no-cannabis policy given to staff in advance; use before hire may not count against an applicant unless a federal contract or funding requires it. A test positive only for the THC metabolite may not be the sole reason to refuse or penalize.
- Testing
- Testing stays allowed. A metabolite-only positive may be acted on under a written random-testing policy, or for an applicant with a conditional offer, when the policy says such a result may lead to adverse action; also on reasonable suspicion of use at work or specific, articulable symptoms of impairment.
- Exceptions
- Exempted employers and positions, among them EMTs, police and corrections jobs, driving jobs with required testing (CDL, 49 CFR 40), jobs needing an OSHA construction-safety course or a national security clearance, federally funded jobs, care of children, patients or vulnerable people, and jobs the employer finds could affect health or safety.
Conn. Gen. Stat. §§ 21a-422o to 21a-422q (from July 1, 2022)
Minnesota
- Protects
- Applicants may not be required to take a cannabis test as a condition of employment, or refused solely because a test shows cannabis, unless state or federal law requires it.
- Testing
- Any drug testing needs a written policy; applicants are tested only after a job offer, with the same test for everyone offered that job; random tests only for safety-sensitive jobs.
- Exceptions
- Safety-sensitive jobs, peace officers, firefighters; face-to-face care of children, vulnerable adults or patients; jobs needing a CDL or a vehicle license with required testing; jobs funded by a federal grant; jobs where law requires cannabis testing.
Minn. Stat. § 181.951, subd. 1, 2, 4, 8, 9
Montana
- Protects
- Legal use of a lawful product, which the statute defines to include marijuana, off the employer's premises during nonworking hours: no refusal to hire and no worse pay, promotion or terms because of it.
- Testing
- The section does not regulate testing. An employer does not violate it when it acts in the belief that an established substance abuse or alcohol program or policy, a professional contract or a collective bargaining agreement permits the action.
- Exceptions
- Use that affects the ability to do the job or the safety of other employees; a conflict with a bona fide occupational qualification; personal professional service contracts that limit use; nonprofits whose purpose is to discourage use of the product.
Mont. Code Ann. § 39-2-313 (MCA 2025)
New Jersey
- Protects
- No adverse action solely because a test shows cannabinoid metabolites from lawful adult use; the state regulator says a metabolite-only result is not enough on its own.
- Testing
- Employers may keep a drug-free workplace and test on reasonable suspicion of use while working, on observable signs of impairment, in a random program, or after a work accident. A positive test plus documented signs of impairment during work hours may support action.
- Exceptions
- Employers under a federal contract may align their rules with federal law where the state rule has a provable adverse impact; federally mandated testing protocols continue.
N.J.S.A. 24:6I-52; NJ-CRC guidance, September 9, 2022
New York
- Protects
- Legal cannabis use outside work hours, off the premises and without the employer's equipment or property.
- Testing
- The state labor department says an employer may not test for cannabis unless an exception in § 201-d(4-a) or another law permits it, and that a cannabis test does not show impairment.
- Exceptions
- Action required by state or federal law; action whose absence would breach federal law or cost a federal contract or funding; an employee who shows specific articulable symptoms of impairment at work.
Labor Law § 201-d; NY DOL P420 (10/21)
Washington
- Protects
- In initial hiring only: off-the-job cannabis use, and a pre-employment test finding non-psychoactive cannabis metabolites.
- Testing
- Tests that do not screen for those metabolites are allowed; a wider panel may include cannabis if the cannabis result is not given to the employer. Post-accident and suspicion testing are outside the rule.
- Exceptions
- Jobs needing a federal background investigation or security clearance; law enforcement, fire, first responders, 911 dispatch, emergency medical services, corrections; airline and aerospace; safety-sensitive jobs the employer named before the application.
RCW 49.44.240, effective January 1, 2024
It is not every state. It covers only the seven states read on October 23, 2026, and each of them has more rules than the cannabis lines above. The District of Columbia passed a cannabis employment law in 2022, but the D.C. Code we read marks its protections “Not Funded,” so it is not carded here. Read your own state's drug-testing statute before you write a policy, and in California pair it with the Fair Chance Act steps, which the state's cannabis guidance points to for background checks.
Test types and panels: a DOT program next to your own
Outside DOT, you design the test. Inside DOT, the design is fixed. Setting the two side by side shows where your choices are and where they are not.
| Point | DOT program | Your company program |
|---|---|---|
| Who must be tested | Safety-sensitive DOT jobs only | The jobs your written policy names |
| Drugs on the panel | Five classes: marijuana, cocaine, amphetamines, opioids, PCP | Your choice, within state law |
| Specimen | Urine or oral fluid | Your choice and your lab's; some states regulate it |
| Screen and confirm | Initial lab test, then a confirmation test | Set by your policy; some states require a certified lab |
| Medical review | MRO, a licensed physician, verifies every positive | Ask your lab or screening firm whether an MRO reviews results |
| Paperwork | DOT custody and control form | Never the DOT form |
A “panel” is the list of drug classes the lab looks for, and labs sell panels of different sizes. A wider panel catches more, and it also returns more results you have to handle with care: prescription drugs that show up legally, and in some states cannabis results you may not act on. Choose the panel for the job, write it into the policy, and give the same test to everyone in the role.
On-site instant cups give a fast screen, but a screen is not a confirmed result. Under DOT, only a lab confirmation verified by the MRO counts, and the MRO must give the employee the chance to show a legitimate medical explanation, such as a valid prescription, before verifying a positive. Copying that step into a company program is good practice: it is the step that stops you from withdrawing an offer over a lawful prescription.
The MRO “must verify a confirmed positive test result” for the listed drugs “unless the employee presents a legitimate medical explanation”, and must offer the employee the chance to present one “in all cases”.
49 CFR 40.137(a)–(b)
Building your testing policy
Whatever you test for, write it down first. Minnesota will not let an employer test at all without a written policy, and DOT requires written materials for every covered driver. Even where no statute asks for one, a written policy is what lets you show that every applicant for a job got the same test at the same point in hiring, which helps you answer a discrimination claim. California's civil rights agency gives the example directly: requiring only applicants of one race or ethnicity to take a drug test violates its law.
What the policy should say
- Which jobs are tested, and which of them are DOT jobs run under Part 40.
- When: after a conditional offer is the safer point, and the required one in some states (Minnesota requires the offer first).
- What: the panel and specimen, and how a positive is confirmed and reviewed by an MRO.
- Cannabis: what you will and will not act on in each state where you hire.
- Who receives results, where they are kept, and that medical information stays in a separate confidential file.
- How the FCRA notices run when a screening firm delivers the result.
If your drivers also need a driving record check, the MVR guide covers the record at hire and the yearly review. To compare screening firms by the industries they serve, including those that offer drug testing alongside background checks, see employment screening services by industry, or start from the PBSA-accredited screeners directory.
Quick reference
- DOT drug panel
- 5 drug classes49 CFR 40.82
- DOT pre-employment
- Verified negative first49 CFR 382.301(a)
- FMCSA random minimums, 2026
- 50% drugs, 10% alcohol49 CFR 382.305(b)
- DOT post-accident drug test
- Within 32 hours49 CFR 382.303(d)(2)
- Supervisor training
- 60 + 60 minutes49 CFR 382.603
- Drug-Free Workplace Act
- Policy, no test required41 U.S.C. 8102(a)(1)
- Conviction reported to the agency
- Within 10 days41 U.S.C. 8102(a)(1)(E)
- Illegal-drug test under the ADA
- Not a medical exam42 U.S.C. 12114(d)(1)
- Result from a screening firm
- Consumer reportFTC staff letter, 1998
Questions employers ask
Are employers required to drug test?
Most are not. Federal rules require testing for DOT safety-sensitive jobs such as CDL drivers. The Drug-Free Workplace Act requires federal contractors and grantees to keep a drug-free workplace policy, not to test. Everyone else tests by choice, under state law.
Can an employer drug test before a job offer?
Federal law allows a test for illegal drugs before an offer, because the ADA does not treat it as a medical exam. Some states do not: Minnesota allows applicant testing only after a job offer. Alcohol tests count as medical exams and wait for the offer.
What does a DOT drug test check for?
Five drug classes: marijuana, cocaine, amphetamines, opioids and PCP. The lab may not test a DOT specimen for anything else.
Can I refuse to hire someone who tests positive for marijuana?
It depends on the job and the state. For DOT jobs, a verified positive takes the person off safety-sensitive work. For other jobs, states such as California, Connecticut, Minnesota, Montana, New Jersey, New York and Washington limit hiring decisions based on cannabis use or certain cannabis test results, with exceptions. Check your state before you act.
Does the FCRA apply to drug tests?
When a screening firm delivers the result, yes: FTC staff call it a consumer report, so you need the disclosure and permission first and the two adverse action notices before and after a decision. A result sent straight from the lab is not a consumer report.
Does a federal contractor have to drug test employees?
Not under the Drug-Free Workplace Act. Its seven conditions are a policy statement, an awareness program, notices and follow-up on convictions. A contract or a DOT rule can add testing for specific jobs.