2018 Memo Changed OSHA Drug Testing Policy for U.S. Employers
Yes, OSHA permits workplace drug testing when it’s used to promote safety, not to penalize injury reporting. The agency’s October 11, 2018 memorandum clarified that most testing programs, including post-incident testing, are fine under 29 C.F.R. §1904.35(b)(1)(iv) as long as they’re applied consistently. You still need to follow HHS/SAMHSA Mandatory Guidelines and check any state or DOT rules that apply to your workforce.
TL;DR:
- Employers must ensure drug testing policies are applied consistently across all employees involved in an incident to avoid retaliation claims.
- OSHA permits post-incident testing for safety causes but bans testing designed to discourage injury reporting or selective testing of only reporting employees.
- All federally regulated tests require HHS-certified labs, chain-of-custody procedures, and review by a Medical Review Officer to ensure compliance.
- State and industry-specific laws may restrict testing triggers and scope, requiring employers to tailor policies for each jurisdiction.
- A legally sound policy emphasizes safety, clear triggers, operator training, documentation, and the use of certified labs to withstand scrutiny.
Table of Contents
- OSHA Drug Testing Policy: A Quick Checklist for HR
- What OSHA’s 2018 Memorandum Actually Allows
- Building a Policy That Holds Up Under Scrutiny
- The Federal Standards Behind Every Compliant Test
- Where State Law and Industry Rules Change the Picture
- Running Defensible Post-Incident Testing, Step by Step
- Testing Is One Tool, Not the Whole Safety Program
- Get Your Testing Program Built on a Certified Lab Foundation
- Sources
- FAQ
OSHA Drug Testing Policy: A Quick Checklist for HR
Before you touch anything else in your handbook, confirm these five things. Each one shows up in an OSHA complaint or an EEOC charge if it’s missing.
- Put your policy in writing and state its purpose plainly: safety, not punishment.
- Define clear testing triggers such as random, post-incident, and reasonable suspicion to provide guidance to managers.
- Apply the policy the same way to every employee in a similar role or situation.
- Use certified laboratories and a Medical Review Officer (MRO) as required for federally regulated specimens.
- Confirm that chain-of-custody procedures and appropriate documentation are in place for regulated tests.
- Identify applicable state and Department of Transportation (DOT) rules for each workforce segment before defining testing triggers in policy.
A drug testing policies checklist built around these five points will catch most of the gaps that trip up first-time compliance efforts.
What OSHA’s 2018 Memorandum Actually Allows
For years, employers worried that OSHA’s injury-reporting rule made post-incident drug testing legally risky. The 2018 memo put that fear to rest for most cases. It dropped the earlier requirement that employers show an “objectively reasonable basis” before testing someone after an incident, a standard that had made HR departments nervous about every post-injury test they ran.
OSHA now says most workplace drug testing is fine, and it names specific examples:
- Random testing programs that apply evenly across a workforce.
- Testing conducted under a state workers’ compensation law.
- Testing required by federal programs like DOT.
- Testing used to evaluate the root cause of a workplace incident.
The compliance line that matters most: OSHA doesn’t ban post-incident testing. It bans testing designed to discourage employees from reporting injuries in the first place.
That distinction shapes everything else in your policy. If you only test the employee who reported the injury, and skip everyone else whose actions might have contributed, you’re inviting a retaliation claim. The safer approach: identify every employee whose conduct could plausibly have played a role in the incident, and test all of them the same way. Document why each person was included. Consistency and paper trails are what separate a defensible policy from a lawsuit waiting to happen.
Building a Policy That Holds Up Under Scrutiny
A compliant policy isn’t just a paragraph in your employee handbook. It needs structure, and each piece serves a specific legal purpose.
- State the purpose up front. Say plainly that testing exists to protect workplace safety, not to discipline injury reports. Define which roles count as safety-sensitive or testing-designated positions.
- Spell out every testing trigger. Cover applicant screening, random testing, reasonable-suspicion testing, post-incident testing, and return-to-duty or follow-up testing after a violation. Vague triggers are where inconsistent enforcement creeps in.
- Build in operational safeguards. Use trained collectors, maintain chain of custody, send specimens to HHS-certified labs, and route results through an MRO before anyone sees them. Confidentiality and recordkeeping rules apply throughout, something covered in more detail in this guide to HIPAA compliance in drug testing.
- Train supervisors and offer EAP access. Reasonable-suspicion testing lives or dies on supervisor judgment. Untrained managers make inconsistent calls that look discriminatory in hindsight. Pairing testing with an employee assistance program also signals the policy is about safety and support, not punishment.
Pro Tip: Write your reasonable-suspicion documentation form before you need it. Supervisors under pressure after an incident rarely write clear, defensible observations from memory alone.
The Federal Standards Behind Every Compliant Test
Every employer running a federally regulated testing program answers to the same technical rulebook: HHS/SAMHSA’s Mandatory Guidelines for Federal Workplace Drug Testing Programs. These guidelines set the scientific and procedural standards labs and collectors must follow, and they cover both urine and oral fluid specimens.
A few specifics matter for HR teams building or auditing a program:
- Only HHS-certified laboratories may process federally regulated specimens.
- Split-specimen procedures give employees a way to contest a positive result on a separate sample.
- The Federal Custody and Control Form documents every hand-off from collection to lab to MRO, and it’s required for federally regulated tests.
- HHS moves toward publishing authorized testing panels annually, so the substances on your panel can shift year to year.
If your program touches any federal requirement, even indirectly through a DOT-covered role, these standards aren’t optional guidance. They’re the baseline your lab and collection process must meet.
Where State Law and Industry Rules Change the Picture
OSHA’s memo sets a federal floor, not a ceiling. Several states restrict when and how employers can test, particularly around marijuana laws that have shifted rapidly over the past several years. What’s permissible in one state can trigger a claim in another, even for the identical testing trigger.
DOT-regulated employers face a separate track entirely. If an employee holds a safety-sensitive DOT position, whether driving a commercial vehicle or working in aviation, DOT testing procedures govern that role regardless of what your general policy says.
- Build a jurisdictional map showing which states and federal programs apply to each job classification.
- Apply the strictest rule that touches any given employee group.
- Review state law annually. Marijuana and drug-testing statutes change often enough that last year’s policy language can lag behind.
Pro Tip: Don’t assume a single company-wide policy works across state lines. A multistate employer often needs state-specific addenda rather than one blanket document.
Healthcare and other safety-sensitive industries carry their own added scrutiny, something worth reviewing in this breakdown of healthcare worker drug testing considerations.
Running Defensible Post-Incident Testing, Step by Step
When an incident happens, the sequence you follow matters as much as the test result itself. Four steps keep the process defensible.
- Secure the scene and document facts first. Write down what happened, who was involved, and what conditions existed, before anyone orders a test.
- Identify everyone whose conduct could have contributed. Test that full group consistently, not just the employee who got hurt or reported the injury.
- Follow proper collection procedures. Use trained collectors, the Federal CCF for federally regulated specimens, and an HHS-certified lab. Preserve chain of custody at every step.
- Route results through an MRO and document the outcome. Notify the employee, loop in legal or union representatives where applicable, and offer EAP referral regardless of the result.
A post-accident testing walkthrough built around this sequence gives your safety team a repeatable process instead of a scramble every time something happens.
Testing Is One Tool, Not the Whole Safety Program
Drug testing works best as one layer in a broader safety culture, not a substitute for training, engineering controls, or an accessible EAP. Employers who lean on testing alone often end up eroding the exact reporting culture OSHA’s rule was written to protect. Consistency and documentation do more legal heavy lifting than the test itself. A well-run lab partnership, paired with clear written policy, keeps a program both defensible and humane.
— Alan
Get Your Testing Program Built on a Certified Lab Foundation
A written policy only holds up if the testing behind it does too. Certified laboratories that meet SAMHSA, ISO, CLIA, and CAP standards ensure the chain-of-custody and MRO review steps your policy promises actually happen the way you’ve documented them.
Beyond lab testing, support is available for chain-of-custody documentation and test kits built for workplace screening, whether you’re standing up a random testing program or need fast turnaround after an incident. If you’re ready to line up a certified lab partner for your compliance program, request a quote through the lab testing services page and get your specimen collection process set up correctly from the start.
FAQ
Does OSHA Require Employers to Drug Test?
No. OSHA doesn’t mandate drug testing; it only restricts testing that’s used to punish or discourage injury reporting, as clarified in its 2018 memorandum.
Is Post-Accident Drug Testing Still Legal Under OSHA?
Yes. Post-incident testing is permissible as long as it’s applied to all employees whose conduct could have contributed and isn’t used selectively against whoever reported the injury.
What Lab Standards Apply to Federal Drug Tests?
Federally regulated specimens must go through HHS-certified labs following the Mandatory Guidelines, with MRO review and chain-of-custody documentation via the Federal CCF.
Can State Law Override an OSHA-Compliant Testing Policy?
State law can restrict timing, scope, or permissible triggers for testing, so employers need to check each state where they operate rather than relying on one national policy.
Where Can Employers Find Certified Drug Testing Labs?
Countrywidetesting partners with laboratories meeting SAMHSA, ISO, CLIA, and CAP standards, and its lab testing services page is a starting point for employers building a compliant program.