Yes — most private-sector employers can generally drug test, and in some industries (transportation, aviation, federal contractors with sensitive positions) federal rules actually require it. But drug testing in employment is a state-law-driven area: state law adds substantial restrictions in many cases, including procedural rules, testing methods, and — increasingly — protections for marijuana use outside of work in legalization states. The trend over the last decade has generally been toward restricting employer use of drug tests, particularly for marijuana, where state legalization has created complex compliance questions. The specifics depend on your situation, and these rules and figures continue to change.
What's the federal baseline?
The federal baseline is permissive: for most private employers, federal law generally permits pre-employment, random, post-accident and reasonable-suspicion drug testing, with no specific federal procedural requirements layered on top. Two groups sit outside that default. Safety-sensitive positions regulated by the Department of Transportation — commercial drivers, pilots, transit workers, pipeline operators and similar roles — are generally required to be tested under DOT and Federal Motor Carrier Safety Administration procedures. Federal contractors above a contract threshold generally have to maintain a drug-free workplace policy under the Drug-Free Workplace Act, which does not itself require testing but is commonly read to support it. The ADA adds one wrinkle: the EEOC treats a test for current illegal drug use as generally not a prohibited medical examination, while testing for prescription medication or post-rehabilitation status may implicate ADA protections.
- Most private employers: pre-employment, random, post-accident and reasonable-suspicion testing generally permitted, with no federal procedural requirements on top.
- DOT-regulated employees: testing generally required for safety-sensitive positions, under specific Federal Motor Carrier Safety Administration and U.S. Department of Transportation procedures.
- Federal contractors: the federal Drug-Free Workplace Act generally requires a drug-free workplace policy above a contract threshold — not testing as such, though it is commonly read to support testing programs.
- ADA implications: testing for legal prescription drugs or post-rehabilitation may implicate ADA protections for individuals in recovery. How this plays out depends on your situation.
How does this vary by state?
State law is where most of the actual restrictions on drug testing come from, and it varies along several lines at once. Many states generally require a written testing policy given to employees in advance. Most generally require a confirmation test before a positive result can trigger adverse action, and many require a Medical Review Officer to review positives, particularly to account for prescription medication. Some states generally limit random testing to safety-sensitive positions. The fastest-moving area is marijuana: many legalization states now generally prohibit adverse action based on off-duty use, though the protection takes different shapes — California's rule addresses tests that measure non-psychoactive cannabis metabolites, Washington's addresses pre-employment testing for those metabolites, New York's law is generally read to protect off-duty use, and several other states offer varying levels of protection. Most of those statutes generally carve out safety-sensitive positions, federal contractors and federally regulated industries, so the carve-out often decides the question. Your state may differ, and these rules continue to change.
State drug testing laws vary across several dimensions, and your state may differ from the patterns below:
- Notice and policy requirements: Many states generally require employers to have a written drug testing policy provided to employees in advance.
- Confirmation testing: Most states generally require a confirmation test (GC/MS or similar) before any positive result triggers adverse action.
- MRO review: Many states generally require a Medical Review Officer to review positive results, particularly to evaluate prescription medications.
- Random testing limits: Some states generally restrict random testing to safety-sensitive positions.
- Marijuana-specific protections: Many legalization states now generally prohibit adverse action based on off-duty marijuana use:
- California: AB 2188 (operative 2024) generally prohibits adverse action based on off-duty cannabis use detected by tests measuring non-psychoactive metabolites.
- New York: The Marijuana Regulation and Taxation Act is generally read to protect off-duty cannabis use.
- Washington: SB 5123 (enacted 2023, operative 2024) generally prohibits pre-employment testing for non-psychoactive cannabis metabolites for most positions.
- Nevada, New Jersey, Illinois, Connecticut, Montana, Minnesota, and others: Varying levels of off-duty marijuana protection.
- Safety-sensitive carve-outs: Most marijuana protection statutes generally carve out safety-sensitive positions, federal contractors, and federally regulated industries.
How do you evaluate your situation?
Working out where you stand generally comes down to four things: your state's rules, whether your position counts as safety-sensitive, what happened during the test itself, and what you do if a result comes back positive. The state statute sets the frame — whether each type of testing is permitted, what notice is required, which methods and confirmation procedures apply, and what marijuana-specific protections exist. The safety-sensitive question is the carve-out that decides most marijuana cases, and its definition varies by state. The testing process is worth recording as it happens, because facility, date, method and consent forms are hard to reconstruct later. And after a positive result, the specific laboratory documentation and the Medical Review Officer interview — a step employers sometimes skip — are the things people generally ask for first, along with raising any statutory marijuana protection promptly.
1. Understanding your jurisdiction's rules
A common first step is to pull your state's drug testing statute (if any) and look at:
- Whether pre-employment, random, post-accident, and reasonable-suspicion testing are generally permitted
- What notice and policy requirements apply
- What testing methods are required (urinalysis, oral fluid, hair, etc.)
- What confirmation procedures apply
- What marijuana-specific protections apply
2. Identifying whether your position is "safety-sensitive"
This is the critical carve-out in most marijuana-protection statutes. Definitions vary by state, but they typically include:
- Positions requiring federal regulation (DOT, FAA, etc.)
- Positions involving operation of heavy machinery or vehicles
- Positions with direct responsibility for the safety of others
- Positions handling controlled substances or hazardous materials
Where a position is not safety-sensitive, marijuana protections are generally more likely to apply — though the specific definition that controls depends on your state.
3. Documenting the testing process
When asked to take a drug test, many people:
- Get a copy of the employer's drug testing policy
- Note the testing facility, date, time, and method
- Keep a copy of the consent form and any disclosures
- Disclose any prescription medications (in writing, with documentation)
- Retain any test results and MRO communications
4. Responding to positive results
After notice of a positive test, a common set of steps people take is to:
- Request the specific test result and the laboratory documentation
- Request the MRO interview (a step employers sometimes skip)
- Disclose any prescription medications that may explain the result
- For marijuana in protection states, raise the statutory protection promptly
What should you say?
Four points in a drug testing process are where things tend to go wrong, and people have a sentence ready for each: before consenting, when a prescription might explain a result, when a marijuana result lands in a state with off-duty protections, and when a result looks wrong. None of them commits you to refusing a test, to admitting anything, or to filing a complaint — each one asks for a document or a procedural step that the process generally already includes. The first asks for the written policy, the second puts a prescription on the record before testing rather than after, the third names the state statute, and the fourth asks for the laboratory paperwork and chain of custody. The bracketed parts are where your own state and medication go. Versions some people adapt:
To request the drug testing policy in advance:
"I'd like to request a copy of the company's written drug testing policy before consenting to any testing. Specifically, I'd like to understand the testing methods used, the substances tested, the confirmation procedures, and the consequences of various results."
To disclose prescription medications:
"I want to disclose, before any testing, that I am currently taking [medication] under prescription from [physician] for [condition]. I have documentation. I am providing this proactively to ensure proper MRO review of any results."
Responding to a positive marijuana result in a protection state:
"Under [state statute, e.g., California AB 2188 / NY Marijuana Regulation and Taxation Act], adverse employment action based on off-duty cannabis use is prohibited. My position is not safety-sensitive under the statutory definition. I am asking that the test result not be used as a basis for adverse action."
Disputing a positive result:
"I have reviewed the test result and want to dispute the finding. I am requesting: (a) the specific laboratory documentation, (b) the MRO review and any interview opportunity, (c) the chain of custody documentation, and (d) the opportunity to provide a confirmation sample for independent retesting at my expense."
What should you keep on file?
The file that helps most is the one that reconstructs the test after the fact, because these disputes usually turn on procedure rather than chemistry. That generally starts with the employer's written drug testing policy and whatever disclosure or authorization you signed, then the practical details of the test itself: the facility, the date and time, the method used, and the chain of custody. Results belong in it too — both the initial and any confirmation test — along with the Medical Review Officer review and any communication about it, and prescription documentation where a medication is relevant. Two more items decide many marijuana cases: the job description, and whether the role meets the state's definition of safety-sensitive. Alongside those, people note which state-specific protections apply where they work, since that is what a later reader will want to know first.
Many people find it helps to hold on to:
- The employer's drug testing policy
- Any disclosure or authorization signed
- The testing facility, date, time, method, and chain of custody
- The test results (initial and confirmation, if applicable)
- The MRO review and any communications
- Prescription medication documentation, if relevant
- The job description and whether it qualifies as "safety-sensitive"
- Any state-specific protections that apply
When should you escalate?
Escalation generally depends on which rule appears to have been broken. State-statute problems — missing notice, no confirmation test, no Medical Review Officer review — are usually raised with the state department of labor. Where the testing may implicate the ADA, such as discrimination against someone in recovery, people generally go to the EEOC instead. Marijuana protection violations usually go to an employment attorney, since many of those statutes generally provide a private right of action with damages and attorney's fees. Testing under DOT rules is raised with the relevant federal agency. The marijuana statutes are relatively new and the case law is still developing, so outcomes vary and these rules continue to change. Many people find that documenting the precise duties of the position, and whether those duties meet the state's safety-sensitive definition, is among the more useful things they can do before pushing back on an adverse action.
If you believe an employer violated drug testing rules, common avenues people use include:
- Filing a complaint with your state department of labor for state-statute violations.
- Filing with the EEOC where the testing may implicate the ADA (post-rehabilitation discrimination) or other anti-discrimination protections.
- Consulting an employment attorney for marijuana protection violations — many states generally provide a private right of action with damages and attorney's fees.
- For DOT-regulated testing, raising complaints with the relevant federal agency.
The marijuana protection statutes are relatively new and the case law is still developing, so outcomes can vary and these rules continue to change. Many people find that documenting the precise position duties (and whether they meet the "safety-sensitive" definition) is one of the most useful things they can do if they want to push back on adverse action.
Official sources
- U.S. Equal Employment Opportunity Commission — Enforcement Guidance on Disability-Related Inquiries and Medical Examinations of Employees under the ADA (covers when drug testing is and is not a medical examination)
- California Legislature — AB 2188 (2022): Discrimination in employment: use of cannabis (off-duty cannabis-use protections, operative 2024)