Written drug and alcohol testing program: OSHA requirements explained

Last updated 2026-07-11

Does OSHA actually require a written drug and alcohol testing program?

Not directly, and not for most employers. There is no 29 CFR standard that says 'every employer shall maintain a written drug testing program.' What OSHA has instead is the General Duty Clause, Section 5(a)(1) of the OSH Act of 1970, which requires a workplace 'free from recognized hazards that are causing or are likely to cause death or serious physical harm to employees.' ^[1] Working under the influence is a recognized hazard in nearly every physical job, so OSHA can and does cite employers under that clause when impairment feeds a serious incident.

The obligation is real. The regulation number just isn't what you'd expect.

The picture changes hard if the Department of Transportation covers your business. DOT's drug and alcohol testing rules at 49 CFR Part 40 apply to operators of commercial motor vehicles, rail workers, aviation employees, pipeline workers, transit operators, and maritime workers in covered roles. ^[2] Those employers face explicit, detailed written-program requirements with zero ambiguity. Run a trucking company with CDL drivers and you're in a different regulatory universe than a restaurant owner.

For everyone else, the written program is still the smart move, legally and practically. OSHA's guidance on post-incident testing (issued in 2016 and folded into the preamble of the electronic recordkeeping rule) said plainly that blanket post-incident testing can be used to punish workers who report injuries. ^[3] A written program that spells out exactly when testing happens, and why, gives you something to stand on if a citation or lawsuit ever lands on your desk.

What does OSHA's General Duty Clause mean for drug testing policy?

The General Duty Clause is the catch-all OSHA reaches for when no specific standard covers a recognized hazard. To cite under it, OSHA has to show four things: the employer failed to keep the workplace free of a hazard, the hazard was recognized, it was causing or likely to cause death or serious harm, and a feasible fix existed. ^[1]

Substance impairment clears all four bars in most physical industries. Construction, manufacturing, warehousing, transportation, oil and gas: any setting where workers run machinery, work at heights, or handle hazardous materials gives OSHA firm footing. A written, consistently enforced drug and alcohol policy is one of the clearest 'feasible means of correction' you can point to.

One nuance carries real weight. OSHA's 2016 rule on electronic injury recordkeeping (29 CFR 1904.35) directly addressed post-incident testing. The rule bars retaliation against workers who report injuries, and the preamble stated that blanket post-incident testing, meaning testing every injured worker automatically with no link to whether impairment could have caused the incident, may discourage reporting and could count as retaliation. ^[3] Your program needs to tie post-incident testing to a reasonable belief that drug or alcohol use contributed. That drafting detail is the whole ballgame.

If your employees do any federally regulated safety-sensitive work, even occasionally, talk to a labor attorney before you finalize the policy. OSHA's anti-retaliation rules and DOT's mandatory testing requirements can collide, and the overlap gets messy fast.

Which employers are required to have a formal written drug testing program?

Here's who faces a mandatory written program versus who faces strong reasons to have one anyway.

Employer type	Governing rule	Written program required?
DOT-regulated motor carriers (CDL drivers)	49 CFR Part 382	Yes, explicitly
FAA-regulated aviation workers (safety-sensitive roles)	14 CFR Part 120	Yes
FRA-regulated railroad workers	49 CFR Part 219	Yes
FTA-regulated transit workers	49 CFR Part 655	Yes
PHMSA-regulated pipeline operators	49 CFR Part 199	Yes
Federal contractors and grantees	Drug-Free Workplace Act of 1988	Yes (written policy; testing not always required)
Nuclear industry workers	NRC 10 CFR Part 26	Yes
All other employers (general industry)	OSH Act General Duty Clause	No explicit requirement, but strongly advisable

Small business owners miss the Drug-Free Workplace Act of 1988 all the time. ^[4] Hold a federal contract worth $100,000 or more, or take any federal grant, and you're legally required to have a written drug-free workplace policy and to notify employees of it. The Act does not require testing. It does require the written policy, employee notification, and an ongoing good-faith effort to keep the workplace drug-free.

State law stacks on another layer. Florida, Texas, Ohio, and others run voluntary drug-free workplace programs that trade a discount on workers' comp premiums for meeting specific testing and policy standards. ^[5] Each has its own written-program requirements, and they're worth a look, because the premium savings often beat the compliance cost.

What must a written drug and alcohol testing program actually include?

Writing this for DOT, a federal contract, a state comp program, or plain General Duty Clause protection, your program has to answer the same set of questions. Answer all of them and the policy holds up under scrutiny.

Scope and purpose. Who does the policy cover? All employees? Contractors? Visitors operating equipment? What's the stated goal: safety, regulatory compliance, both? Write this section like a court will read it, because someday one might.

Substances covered. List them. The federally mandated DOT panel tests for marijuana, cocaine, amphetamines, opiates (heroin included), and phencyclidine (PCP). ^[2] Your policy can add alcohol, synthetic cannabinoids, or prescription drugs used outside a valid prescription. If you include prescription drugs, build a clear process for employees to confidentially disclose medication that could affect job performance, or you've created a discrimination liability.

Types of testing and when each applies. Most written programs cover pre-employment testing, reasonable suspicion testing (based on specific, documented observations by a trained supervisor), post-incident testing (tied to a reasonable belief that impairment contributed), return-to-duty testing after a violation, and random testing for safety-sensitive roles. Random testing deters better than anything else on the list. DOT's Office of Drug and Alcohol Policy and Compliance publishes minimum random rates every year, currently 50% of covered drivers for drugs and 10% for alcohol. ^[2]

Collection, testing methods, and lab standards. Name the specimen type (urine is most common; oral fluid became an approved DOT alternative in 2023 ^[2]). State the cutoff concentrations you'll use or reference the DOT/HHS standards. Require HHS-certified laboratories, which is the federal standard. Spell out your Medical Review Officer (MRO) process: every positive result on a DOT-covered test goes through an MRO before any employment action.

Consequences. Be specific. What happens on a first positive? Suspension, termination, referral to an Employee Assistance Program (EAP)? What's the return-to-duty process? Vague language like 'appropriate disciplinary action' invites inconsistency, and inconsistency invites discrimination claims.

Employee notification and acknowledgment. Communicate the policy to employees before it takes effect. Most programs require a signed acknowledgment form kept in the employee's file. That's the paper that matters when you terminate someone and they claim they never knew the rule.

Supervisor training. Reasonable suspicion testing only works if supervisors can recognize and document signs of impairment. DOT requires supervisors of CDL drivers to complete 60 minutes of alcohol awareness training and 60 minutes of controlled substances training before they can make a reasonable suspicion referral. ^[2] Even if DOT doesn't cover you, building similar training into your program protects you from arbitrary-enforcement claims.

Confidentiality. Test results are medical information. Store them separately from personnel files and disclose only on a need-to-know basis or as the law requires. This matters under the ADA and state medical privacy laws.

Want a fast starting point? SafetyFolio's safety program generator produces a customized written drug and alcohol policy in about 15 minutes, keyed to your industry and state.

Does OSHA's post-incident drug testing rule prohibit testing after accidents?

This is the most misread corner of drug testing compliance right now, and it snags employers in OSHA inspections. OSHA does not prohibit post-incident testing. It prohibits using testing, or the threat of it, to discourage injury reporting.

The specific worry OSHA raised in the 2016 preamble to 29 CFR 1904.35 was that automatically testing every injured worker, no matter whether impairment could plausibly have played a part, may chill reporting because workers dread the test more than they dread an unreported injury. ^[3]

The practical standard OSHA describes in enforcement guidance: test when there's a reasonable possibility that drug or alcohol use contributed to the reported injury or illness. A worker who slips on a wet floor and sprains an ankle doesn't necessarily trip that standard. A forklift operator who hits a rack and injures a coworker almost certainly does.

Say this in your written program. Something like: 'Post-incident testing will be conducted when there is a reasonable basis to believe that drug or alcohol use by the employee may have contributed to the incident.' Then train supervisors on what that means and how to document their reasoning before ordering a test.

Document the reasoning in a written incident investigation before the test, not after. Documentation that looks reverse-engineered to justify a decision already made won't hold up. The incident report you complete after any recordable event is the natural place to capture it.

How does marijuana legalization affect your OSHA drug testing program?

This one is genuinely tangled and nobody has a clean answer yet. Here's the honest state of things as of mid-2025.

Marijuana is still a Schedule I controlled substance under federal law, so federal contractors, DOT-covered employers, and federally regulated industries have to keep testing for it and treating positives as violations. ^[2] A CDL driver who tests positive for marijuana metabolites can't drive until they finish the return-to-duty process, whatever state they work in.

For employers outside federal mandates, state law increasingly restricts how you can respond to a positive marijuana test. As of 2025, more than 20 states bar employment discrimination based solely on off-duty marijuana use or a positive test result for workers with a valid medical marijuana card. ^[5] Some of these laws (California, New Jersey, New York, and others) protect recreational users too. Fire an employee in one of those states solely for a marijuana positive, with no evidence of impairment at work, and you can be looking at a discrimination claim.

Address this head-on in your program. You can narrow marijuana testing to roles where impairment creates a genuine safety hazard (document that reasoning), pair impairment-based observation standards with testing instead of leaning on a test result alone, or drop marijuana from your non-safety-sensitive panel in states with strong protections. Talk to an employment attorney licensed in your state first, because the landscape shifts by jurisdiction.

One thing hasn't changed: you still have the right, and under the General Duty Clause arguably the obligation, to pull a visibly impaired worker off a safety-sensitive task, whatever substance caused the impairment.

What are the DOT drug and alcohol testing requirements for trucking and transportation?

Operate commercial motor vehicles that require a CDL and the Federal Motor Carrier Safety Administration (FMCSA) plus DOT's 49 CFR Part 382 run your drug and alcohol program. This is the most detailed mandatory testing framework most small businesses will ever meet. ^[2]

FMCSA-regulated employers have to maintain a written policy and hand it to each driver. Required pieces: pre-employment testing (no driver runs a CMV before passing), random testing at the rates DOT sets each year (50% for drugs, 10% for alcohol currently), reasonable suspicion testing, post-accident testing after any fatal accident and after accidents that hit specific damage or injury thresholds, return-to-duty testing after a violation, and follow-up testing for at least six tests in the first 12 months after return to duty.

Drivers who violate the program come off safety-sensitive functions immediately and go to a Substance Abuse Professional (SAP). The SAP evaluates the driver, recommends education or treatment, and clears them for return-to-duty testing. ^[2] This isn't optional and it isn't a gray area.

Small carriers without the volume to run a compliant random program alone have to join a consortium or third-party administrator (C/TPA) that pools multiple employers' drivers into one random selection pool. Single-driver owner-operators must use a C/TPA. The C/TPA handles the random selection and tells the employer when a driver is picked.

FMCSA runs the Drug and Alcohol Clearinghouse, a federal database of driver drug and alcohol violations. ^[7] Employers must query it for every new CDL hire and once a year for all current CDL drivers. Hard requirement, real penalties for skipping it.

What recordkeeping does a drug and alcohol testing program require?

Records are where programs fall apart during inspections. Here's what to keep and for how long.

DOT-regulated programs get precise retention periods under 49 CFR Part 382 and Part 40. ^[2] Positive results and refusals to test: five years. Negative and cancelled results: one year. Random testing program records: one year. Reasonable suspicion documentation: two years. Return-to-duty and follow-up testing records: five years. SAP evaluations and referrals: five years.

Non-DOT employers get no single federal retention rule, but employment attorneys generally recommend keeping test results and policy acknowledgments for the length of employment plus four years, which covers the statute of limitations on most employment discrimination claims.

Every drug test record is a medical record under the Americans with Disabilities Act and has to sit in a file separate from the general personnel file. ^[8] Only people with a legitimate need to know get access: supervisors making duty assignments, HR managing a violation, legal counsel handling a dispute.

Chain-of-custody documentation, from the collection site through the certified lab, stays with the test result. Break the chain of custody or fail to document it and a positive result can't support any adverse action. A qualified testing vendor handles this for you, but verify it anyway.

For the wider picture, OSHA's general recordkeeping rules under 29 CFR Part 1904 give useful context. An incident report documenting the circumstances that triggered a post-incident test is part of your overall compliance record.

How do you implement reasonable suspicion testing fairly and legally?

Reasonable suspicion testing is the type most likely to draw a discrimination or wrongful-termination claim when handled badly, and the type most likely to catch real impairment when handled well.

The legal standard is not 'I had a gut feeling.' Reasonable suspicion rests on specific, contemporaneous, articulable observations of the employee's appearance, behavior, speech, or body odors. ^[2] Supervisors need training to spot these signs and, more to the point, to write them down in real time before ordering the test.

DOT requires the supervisor who makes the call for a CDL driver to have finished the 60/60 training (60 minutes on alcohol, 60 on controlled substances). ^[2] Even outside DOT, that standard is a smart benchmark. If a supervisor can't say what they saw and how it connected to trained signs of impairment, the referral is legally weak.

Document the observations in writing before the employee leaves for the collection site. Note the time, the location, the specific behaviors (slurred speech, glassy eyes, unsteady gait, smell of alcohol, erratic performance on a task), and the names of any witnesses. Have two supervisors observe if you can. One is enough legally, but two blunts the 'it's just personal bias' argument.

Send an employee for a reasonable suspicion test and pull them off safety-sensitive duties until the result comes back. Don't leave a possibly impaired person running equipment while paperwork moves. That's the exact scenario the General Duty Clause exists for.

OSHA training on recognizing workplace hazards, impairment included, gives your supervisors the vocabulary to document observations the same way every time.

What penalties can employers face for not having a compliant drug testing program?

The penalty picture shifts with the regulatory framework that applies to you.

For DOT-regulated carriers, FMCSA civil penalties for drug and alcohol testing violations start at $16,000 per violation and reach $87,312 per violation for the worst failures. ^[9] Running a CDL driver who hasn't been pre-employment tested, or who's in violation status and hasn't been removed from duty, can bring an out-of-service order that shuts down operations. Clearinghouse violations run on their own penalty track.

For federal contractors under the Drug-Free Workplace Act, penalties include contract suspension, termination for default, and debarment from future federal contracting for up to five years on a first violation. ^[4]

For general industry under the OSH Act, the main exposure is a General Duty Clause citation when an impairment-related serious injury or fatality happens and the employer had no policy or an unenforceable one. Willful General Duty Clause violations carry penalties up to $161,323 per violation (2024, adjusted annually for inflation). ^[10] Serious violations run up to $16,131 per violation. And the workers' comp and civil liability from an impairment-related fatality can dwarf any regulatory fine.

Nobody has good aggregate data on how often OSHA cites General Duty Clause violations tied specifically to substance impairment, partly because those citations usually ride along with broader accident investigations. The liability is real even when the citation rate is hard to pin down.

How do you write a drug and alcohol policy that survives OSHA scrutiny and ADA review?

The ADA question ambushes employers who don't think about it until they're already in trouble. Here's the core tension: the ADA protects qualified individuals with disabilities, and addiction to alcohol or drugs can count as a disability. ^[8] But the ADA also lets employers prohibit illegal drug and alcohol use in the workplace, require that employees not be under the influence at work, and hold employees who use illegal drugs or are alcoholics to the same performance and conduct standards as everyone else.

What the ADA does not allow: firing someone solely because they're in recovery, or because they disclosed a past substance use history during pre-employment, or because they asked for a reasonable accommodation for a substance use disorder under treatment. Current illegal drug use (use recent enough to be ongoing rather than remote history) isn't protected, but the line between 'current' and 'past' is a legal judgment call.

For your written policy, the practical protections come down to four moves. Base every adverse action on conduct and test results, not on status as an addict or alcoholic. Keep a clear, consistently applied written consequence structure so you're not running different rules for different employees. Include an Employee Assistance Program (EAP) referral option in your return-to-duty process, which shows good faith and gives a documented pathway. Train HR and supervisors on what they can and can't ask during return-to-duty.

One written document, signed by the employee, reviewed by counsel, applied the same way every time, is your best protection. The written program is more than compliance theater. It's the artifact that proves you had a policy, communicated it, and followed it.

Building this from scratch? SafetyFolio's program generator produces a customizable written drug and alcohol policy that covers these elements and flags state-specific considerations.

How does a drug and alcohol program fit into a broader workplace safety program?

A drug and alcohol program doesn't live alone. It's one piece of a broader safety approach, and it works best wired into your other written programs and training requirements.

The tie to hazard communication is direct: some employees work around chemicals that turn dangerous fast under impairment. Your policy should name those specific hazards and the consequences of impaired operation in safety-sensitive settings.

For workplaces with forklift certification requirements, connecting forklift operation to your drug and alcohol policy is both logical and useful. Powered industrial truck operators sit in one of the job categories with the highest serious-injury rates, and OSHA's 29 CFR 1910.178 requires operators be evaluated for fitness to operate. ^[11] Impairment goes straight to that fitness question.

Lockout tagout programs under 29 CFR 1910.147 also depend on workers following precise procedures with full focus. An impaired worker doing lockout tagout is a recognized hazard with predictable results.

Build your drug and alcohol program as a named part of your overall Injury and Illness Prevention Program (IIPP) or safety management system, not a standalone HR document, and you signal to OSHA that it belongs to a real safety culture instead of a liability shield. That distinction matters during inspections.

To understand the wider compliance landscape, what OSHA stands for and the general structure of OSHA regulations show where drug and alcohol programs sit inside the enforcement framework.

Frequently asked questions

Is a written drug testing policy required by OSHA for small businesses?

OSHA has no specific regulation mandating a written drug testing policy for general-industry small businesses. But the General Duty Clause (Section 5(a)(1) of the OSH Act) requires employers to address recognized hazards, workplace impairment included. If your employees hold CDLs, work on federal contracts over $100,000, or do other regulated safety-sensitive work, explicit written-program requirements apply. For everyone else, having one is strongly advisable.

What substances must a DOT drug test screen for?

DOT drug testing under 49 CFR Part 40 requires a five-panel test covering marijuana (THC metabolites), cocaine, amphetamines (including methamphetamine and MDMA), opiates (including heroin, morphine, and codeine), and phencyclidine (PCP). Alcohol testing is separate and uses breath or saliva, with a 0.04 blood alcohol concentration (BAC) as the DOT violation threshold and 0.02 as the threshold for temporary removal from duty.

Can an employer still test for marijuana in a state where it's legal?

Yes, with caveats. DOT-regulated employers must keep testing for marijuana regardless of state law. For non-DOT employers, more than 20 states now limit how you can respond to a positive marijuana test, especially for off-duty or medical use. Your ability to terminate based solely on a positive varies a lot by state. Have an employment attorney review your policy against your state's current statutes before finalizing it.

How long must drug test records be kept?

For DOT-regulated employers, positive results and refusals must be kept five years; negative results one year; random program records one year. For non-DOT employers, no single federal rule sets a retention period, but most employment attorneys recommend keeping test results and policy acknowledgments for the length of employment plus four years. All drug test records must be kept separately from personnel files as confidential medical information under the ADA.

Does OSHA prohibit post-accident drug testing?

No. OSHA prohibits using post-incident testing to discourage injury reporting, not testing itself. Under 29 CFR 1904.35, testing must tie to a reasonable belief that impairment contributed to the incident. Blanket policies that automatically test every injured worker, whether or not impairment could have played a role, may count as retaliation against injury reporters and draw a citation. Your policy should state the specific standard for when post-incident testing applies.

What training must supervisors complete to conduct reasonable suspicion drug testing?

For DOT-regulated programs, supervisors must complete 60 minutes of training on alcohol misuse and 60 minutes on controlled substances before making a reasonable suspicion referral. That's a hard DOT requirement under 49 CFR Part 382. For non-DOT employers, no federal rule sets the exact hours, but using the same 60/60 standard is a defensible benchmark. Document all supervisor training dates and content in case a testing decision gets challenged.

What is the FMCSA Drug and Alcohol Clearinghouse and who must use it?

The FMCSA Drug and Alcohol Clearinghouse is a federal database that records CDL driver drug and alcohol violations. All FMCSA-regulated employers must query it before hiring any CDL driver and must run annual queries for all current CDL drivers. Employers must also report their own drivers' violations to the Clearinghouse. Failing to query or report violates 49 CFR Part 382 and carries civil penalties.

Does the Americans with Disabilities Act limit how employers can handle drug test results?

Yes. The ADA protects individuals in recovery from substance use disorders and prohibits discrimination based on disability status. Employers may act on current illegal drug use or being under the influence at work, but may not fire someone solely for a history of addiction or for receiving treatment. Your policy should base all consequences on conduct and verified test results, not on disclosed medical history.

What is the Drug-Free Workplace Act and does it require drug testing?

The Drug-Free Workplace Act of 1988 applies to federal contractors with contracts of $100,000 or more and all federal grantees. It requires a written drug-free workplace policy, notification of employees about the policy, and ongoing good-faith compliance. It does not require drug testing. Penalties for noncompliance include contract suspension, termination for default, and debarment from future federal contracts for up to five years.

Can a single-truck owner-operator comply with DOT drug testing requirements?

Yes, but you can't run a compliant random testing program alone. Single-driver owner-operators subject to FMCSA rules must join a consortium or third-party administrator (C/TPA) that pools drivers from multiple employers. The C/TPA manages random selection, notifies you when you're picked, and keeps program records. You also must enroll in the FMCSA Drug and Alcohol Clearinghouse and query it before hiring any additional drivers.

What are the penalties for DOT drug testing violations?

FMCSA civil penalties for drug and alcohol testing violations range from $16,000 per violation to $87,312 per violation for the worst failures, such as operating a driver who hasn't passed pre-employment testing or letting a driver in violation status stay on duty. Serious violations can trigger out-of-service orders that halt operations entirely. These amounts are adjusted periodically by federal rulemaking.

Do state workers' compensation programs require drug testing policies?

Some states run voluntary drug-free workplace programs that give workers' compensation premium discounts, typically 5% to 10%, in exchange for meeting specific policy and testing standards. Florida, Texas, Ohio, and Alabama are common examples. These programs carry their own written-policy requirements. Participation is voluntary, but the premium savings often exceed the compliance cost, so they're worth checking for businesses in participating states.

Is oral fluid testing now acceptable for federally mandated drug tests?

Yes, as of 2023. DOT updated 49 CFR Part 40 to allow oral fluid (saliva) specimen collection as an alternative to urine for federally mandated testing. It matters because oral fluid is harder to adulterate and can be observed more easily. HHS-certified laboratories must analyze the specimens, and the same five-panel screen applies. Employers and employees can't choose between specimen types; the employer (or C/TPA) decides.

Sources

1. OSHA, OSH Act of 1970, Section 5 (General Duty Clause): OSH Act Section 5(a)(1) requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm
2. DOT ODAPC, 49 CFR Part 40 and Part 382 drug and alcohol testing rules: DOT drug testing requires a five-panel screen; random testing rates for CDL drivers are 50% for drugs and 10% for alcohol annually; oral fluid is now an approved specimen type; supervisors of CDL drivers must complete 60/60 training
3. OSHA, 29 CFR 1904.35 electronic recordkeeping rule and preamble on post-incident drug testing: OSHA's rule and preamble state that blanket post-incident drug testing policies may discourage injury reporting and could constitute retaliation; testing must be tied to a reasonable possibility that drug use contributed to the incident
4. U.S. Department of Labor, Drug-Free Workplace Act of 1988 overview: Drug-Free Workplace Act requires federal contractors with contracts of $100,000 or more and all federal grantees to maintain a written drug-free workplace policy; testing is not required but a written policy and employee notification are
5. National Conference of State Legislatures, State marijuana laws affecting employment: More than 20 states have laws limiting employer action based solely on off-duty marijuana use or a positive test result; state workers' compensation drug-free workplace programs offer premium discounts in participating states
6. FMCSA, Drug and Alcohol Clearinghouse: FMCSA-regulated employers must query the Drug and Alcohol Clearinghouse before hiring CDL drivers and must run annual queries for all current CDL drivers; violations must be reported to the Clearinghouse
7. EEOC, ADA and drug testing guidance: The ADA permits employers to prohibit illegal drug use at work and to act on current use, but prohibits discrimination based on addiction history or recovery status; drug test records are medical records and must be kept separately from personnel files
8. FMCSA, Civil penalties for drug and alcohol testing violations: FMCSA civil penalties for drug and alcohol testing violations range from $16,000 per violation to $87,312 per violation for the most serious failures
9. OSHA, Penalty adjustments table for 2024: Willful OSHA violations carry penalties up to $161,323 per violation; serious violations up to $16,131 per violation as of 2024, adjusted annually for inflation
10. OSHA, 29 CFR 1910.178 powered industrial trucks (forklifts) standard: OSHA's powered industrial truck standard requires operators be evaluated for fitness to operate; impairment directly affects operator fitness and is a recognized hazard