Random testing works only when the process is designed before the first selection is made. Employers need a clear scope, a documented policy, an eligible testing pool, a defensible selection method, and a reliable process for notification, collection, results, and records.
Contact Patriot Safety and Services LLC for drug and alcohol testing support.
To understand how to implement a random drug testing program, begin by separating DOT-regulated employees from non-DOT employees. Then assign program responsibility, define the pool, and document how selections and collections will be handled. DOT rules and employer-designed policies are not interchangeable, so the details matter from the start.
The strongest programs are practical enough for supervisors to follow and organized enough for a DER, or Designated Employer Representative, to coordinate consistently. Start by defining who belongs in the program and what requirements apply to them.
How Employers Can Implement a Random Drug Testing Program Step by Step
Start by defining which workers and regulations your program covers, then document the process before making a selection. DOT and non-DOT testing require separate pools, separate policy language, and clear ownership of each decision.
Scope is the first implementation decision because the rules depend on the employee's role and the authority governing the test. For a transportation employer, identify which employees perform DOT-regulated, safety-sensitive functions and which workers are covered only by company policy. A non-CDL driver may not be included in a DOT random testing pool. If that employee is tested under a company policy, the test must remain a non-DOT test and be administered through the non-DOT process.
Keep the pools completely separate. Federal guidance allows an employer to conduct testing beyond what DOT requires, but non-DOT covered employees must be placed in a pool separate from the DOT-covered testing pool. This separation should be visible in the roster, selection settings, notifications, collection paperwork, and records. Your written DOT drug testing requirements should not be blended with a broader workplace policy.
Put the operating rules in writing
A usable policy identifies covered workers, the testing authority, the substances or panels being used, random-selection procedures, notification expectations, collection instructions, result handling, and record responsibilities. For non-DOT testing, define the company's own eligibility and testing rules without presenting them as DOT requirements. For DOT-covered workers, use the applicable agency requirements as the foundation and avoid adding informal procedures that could conflict with them.
The policy should also explain who employees contact with questions and what happens after a selection. Keep the language practical: who receives the notice, where the employee reports, how promptly the employee must arrive, and how an absence or operational conflict is documented. If alcohol testing is part of a DOT process, direct the driver to test only while performing safety-sensitive functions, just before those functions, or just after they end.
Assign a Designated Employer Representative
Name a Designated Employer Representative, or DER, before the first random selection. The DER receives and manages drug and alcohol test results, coordinates the program, and serves as the employer's operational point of contact. Give the DER authority to maintain the covered-worker roster, coordinate notifications, communicate with the testing administrator and medical review officer, document exceptions, and escalate issues according to the policy.
The first two concrete actions are straightforward: create two verified rosters. One for DOT-covered workers and one for non-DOT workers, then have the DER approve a written policy against those rosters. This gives the administrator a defined scope and creates an auditable starting point for the selection and collection steps that follow.
Build the Testing Pool and Set the Annual Testing Plan
Answer: Define who belongs in each pool, keep DOT and non-DOT employees separate, set the applicable annual rate, and maintain the roster as staffing changes throughout the year.
Start with a current eligibility roster. For a DOT program, identify employees who perform federally defined safety-sensitive functions under the applicable agency rules. Do not place non-CDL drivers in an FMCSA DOT random testing pool. If your company also conducts testing under its own policy, create a separate non-DOT pool and label those tests accurately. FMCSA states that an employer may conduct additional testing, but non-DOT testing must remain completely separate from the DOT-covered pool. See the agency guidance on random testing requirements when confirming who is covered.
Assign one person to own the roster and the plan. Usually, that is the Designated Employer Representative, or DER. The DER should document each employee's coverage, job status, work location, and pool assignment. Keep a change log for new hires, transfers into or out of safety-sensitive work, extended leave, and separations. A worker should not remain eligible simply because the person appeared on last month's list. And a new eligible worker should not be overlooked because the roster has not been refreshed.
Next, identify the governing rate before scheduling selections. For FMCSA-regulated employees, the sourced FMCSA guidance lists minimum annual random testing rates of 25% for controlled substances and 10% for alcohol. Those figures apply to that FMCSA program. They should not be presented as a universal rate for every DOT mode, agency, or non-DOT employer policy. Confirm the requirements for the agency and workforce covered by your program, then record the selected rate and the period it governs.
Plan selections across the full collection year rather than treating one large selection as sufficient. The goal is an unannounced process that gives eligible employees a fair opportunity for selection while allowing the DER to complete collections promptly. Track selections, completed collections, cancellations, and missed tests by pool. Keep the collection date tied to the correct reporting year: FMCSA explains that a random test counts toward the year in which the specimen was collected. Not the date the Medical Review Officer verifies it.
For a deeper operational walkthrough, review implementing a compliant random pool. Use that resource to strengthen roster controls without losing the employer-side distinction between defining coverage, planning the year, and maintaining accurate records.
How Does Random Selection Stay Scientifically Valid?
Answer: A random selection process is scientifically valid when every eligible employee has a defined, equal opportunity to be selected. The timing cannot be predicted, and each selection is recorded in a secure audit trail. Written rules should also explain whether selected employees remain in the pool, how often selections occur, and who controls the process.
Random selection is not simply choosing a name from a list. Before the first draw, the employer should establish the eligible testing pool, confirm that the list is current, and document the selection method. New hires, transfers, leaves of absence, and employees who leave the company can change the pool. So the person responsible for administration should update those records under a consistent procedure.
Equal opportunity and defined replacement rules
Each eligible employee should have a comparable chance of selection during each selection event. The policy or program design should state whether a selected employee is returned to the pool after selection, or whether the employee is removed until a later cycle. It should also address what happens when a selected person is unavailable, on approved leave, or no longer eligible. These rules should be established in advance rather than changed to influence an individual result.
For DOT programs, selection and annual testing requirements must follow the applicable agency rules. For example, FMCSA's published minimum annual rates are 25% for controlled substances and 10% for alcohol. A test counts in the year the specimen was collected, not the date an MRO verifies it. Employers should therefore track collection dates and completed selections, not rely only on final result dates. FMCSA guidance is the controlling source for those requirements.
Unpredictable timing and controlled administration
Employees should not be able to anticipate when a selection will occur. Selection events can be scheduled at intervals that fit the employer's operations, but the exact timing and names selected should remain controlled until notification. A designated employer representative, or DER, can coordinate the notification and collection process while limiting access to sensitive information.
Selection software or a qualified third-party administrator can help apply the documented rules consistently. The tool itself does not make a program compliant by default. The employer should understand how the pool is loaded, how selections are logged, how replacements are handled, and whether authorized users can alter records after a draw.
Keep the selection date, pool version, individuals selected, replacement decisions, notifications, and collection status in a secure record. An audit trail should show what happened and when, without exposing results or employee information more broadly than necessary. This combination of equal opportunity, unannounced timing, defined rules, and retained records gives the program a process that can be reviewed and explained.
Choose a TPA, Consortium, or In-House Administrator
Answer: Choose the model that gives your employer clear ownership of the program, consistent random selection, secure results handling, and records you can explain during an audit. In-house administration may fit a centralized employer with dedicated compliance staff. A third-party administrator (TPA) or consortium can provide structure when employees work across locations or the employer does not have the time and systems to manage each step internally.
The administrator does not replace the employer's responsibility to define the applicable policy, identify covered employees, appoint a Designated Employer Representative (DER), and make timely decisions. The DER receives and manages results and coordinates the program. For DOT-covered workforces, the process also needs to account for required selection rates, collection procedures, split specimens, and medical review officer oversight. Review your DOT compliance solutions before choosing a provider if your workforce includes regulated employees.
| Model | Employer responsibilities | Potential fit | Questions to ask |
|---|---|---|---|
| In-house | Maintain the pool, run documented selections, notify employees, coordinate collections, manage results, and retain records. | Organizations with trained staff, stable processes, and enough internal capacity to manage the program consistently. | Who serves as DER? How are selections documented? Who covers absences, multiple locations, and audits? |
| TPA | Set policy and retain oversight while the administrator supports selections, ordering, collection coordination, results routing, and reporting. | Employers that want operational support but prefer a dedicated program structure and defined account responsibilities. | How are pool changes recorded? How are results secured? What audit trail, MRO integration, and escalation process are provided? |
| Consortium | Confirm eligibility, policy, and DER authority while participating in a managed pool or coordinated service arrangement. | Small, distributed, or multi-location employers that need outside administration and may not have enough employees or staff for a fully internal process. | How are employers and employees kept distinct? Who owns notifications, missed tests, results, and required records? |
Ask for a written description of responsibilities before enrollment. Confirm how the provider handles employee additions and removals, random-selection records, collection-site access, non-DOT policy differences, verified results, and missed or delayed tests. The strongest arrangement makes control points visible: the employer knows who can authorize action. The DER knows where results go, and each selection can be traced from the pool through collection and recordkeeping.
Notify Employees and Complete the Collection Correctly
Answer: A compliant collection depends on controlled notification, prompt reporting, verified identity, complete chain-of-custody documentation, and qualified review of the result. The DER should coordinate each step and document any exception rather than relying on informal explanations.
- Notify the selected employee confidentially. The Designated Employer Representative (DER) should notify the employee directly and privately. The notification should provide clear reporting instructions without disclosing selection information to coworkers or creating unnecessary advance notice. Record when and how the notification occurred.
- Direct the employee to report promptly. Give the employee the collection site's address, operating instructions, and any identification requirements. The employee should report as directed and should not substitute another person or independently choose a different testing process. If the employee cannot report as instructed, document the stated reason and escalate it under the applicable DOT or employer policy.
- Verify identity at the collection site. The collector must confirm that the person presenting for testing is the selected employee. The collector also confirms the test type and follows the applicable collection procedure. For a DOT test, do not combine DOT and non-DOT pool administration or represent a non-DOT test as a DOT test. Federal guidance requires those pools to remain completely separate: FMCSA random-testing guidance.
- Complete the custody documentation. The collector records the collection details on the applicable custody-and-control form, secures the specimen, and documents each transfer. The DER should ensure the record is complete, legible, and traceable from collection through laboratory and medical review. Missing signatures, times, identifiers, or transfer details should be treated as exceptions for prompt resolution.
- Apply DOT alcohol timing rules. When the selection includes DOT alcohol testing, the test must occur only while the driver is performing safety-sensitive functions. Just before those functions, or just after the driver has stopped performing them. This timing rule comes directly from FMCSA guidance and should be considered when coordinating the employee's reporting instructions.
- Protect the split specimen process. DOT drug collections use split specimens, so the collection process must preserve the second portion for the applicable confirmation or retest process. The collector and laboratory should maintain the required seals and documentation. Do not treat a preliminary result as a final employment decision.
- Route results through the MRO. A Medical Review Officer (MRO) reviews drug-test results and handles the medical verification process. The DER receives the verified result, manages any required follow-up, and limits disclosure to authorized parties. A test is counted for the year in which its specimen was collected, not the year in which the MRO verifies it, according to FMCSA: random-testing requirements.
- Document exceptions and close the record. Record missed reporting, collection-site problems, rejected specimens, corrected forms, or other deviations with the facts, dates, people involved, and disposition. Keep the result and supporting records secure, then reconcile the completed collection against the random-selection record so no selection is silently lost.
Maintain Records, Review Results, and Improve the Program
Answer: A random testing program stays defensible when the employer can show who was in the pool. How selections were made, when employees were notified, where collections occurred, and how results were reviewed and reconciled.
Assign the Designated Employer Representative (DER) responsibility for maintaining the program record set. Depending on the program, that record set may include the current testing-pool roster. Selection dates, notification attempts, collection documentation, chain-of-custody records, split-specimen information, MRO communications, and final status reports. Keep records organized by employee and testing event, while limiting access to people who need the information for their assigned compliance duties.
Reconcile selections, collections, and results
At the end of each selection cycle, compare the selection report with the collection log and the result report. Every selected employee should have a documented outcome, such as a completed collection, a documented inability to test, or a recorded missed-test determination under the applicable policy. Investigate discrepancies promptly. For example, a person may appear selected but have no collection record, or a collection may be present without a matching selection record. Do not silently delete or overwrite exceptions. Preserve the original record and document the correction, decision, and reviewer.
Results should flow through the appropriate review process. In a DOT program, the MRO reviews laboratory findings and verifies results, while the DER receives and manages the result and coordinates the employer response. Split-specimen requests and related communications should remain part of the controlled record. Use secure electronic ordering and results systems when available, but verify that access controls, audit trails, and exportable reports support an inspection or internal review.
Track the testing year and missed tests
Monitor the annual plan throughout the year rather than waiting for year-end. For FMCSA-regulated employees, the minimum annual random rates listed by FMCSA are 25% for controlled substances and 10% for alcohol. A test counts toward the year in which the specimen was collected, not the year in which the MRO verifies it. See the FMCSA random-testing guidance when reconciling year-end totals.
Review missed tests as soon as they are identified. Record the facts, notification timeline, employee explanation, and DER determination according to the governing DOT rule or the employer's non-DOT policy. Schedule periodic audits of pool membership, selections, collections, results, access permissions, and required reports. At least annually, and whenever operations or regulations change, review the written policy and workflow with the DER, HR, legal or compliance advisers, and testing provider. Update responsibilities and employee instructions when the process changes, then retain evidence of the review.
Request help setting up your random drug testing program.
Frequently Asked Questions
How do I keep DOT and non-DOT testing pools separate?
Create and administer them as distinct pools, with separate eligibility rules, selections, records, and reporting. FMCSA states that non-DOT testing cannot be represented as DOT testing and must remain in a pool completely separate from the DOT-covered pool. Non-CDL drivers also may not be included in a DOT random pool. Source: FMCSA random testing guidance.
What should an employer look for in random selection software or a TPA?
Choose a process that gives every eligible employee an equal opportunity for selection, documents each selection, protects confidentiality, and supports timely notifications and collection tracking. A TPA or consortium can also help coordinate selections, collection sites, MRO communication, and audit-ready records. The employer should still assign a DER to oversee results and program decisions.
How often must DOT employees be selected for random testing?
For FMCSA-regulated employees, the minimum annual random testing rates are 25% for controlled substances and 10% for alcohol. Track the year by the date the specimen was collected, not the date the Medical Review Officer verifies the test. Source: FMCSA random testing guidance.
When can a DOT alcohol random test be performed?
The driver must be performing safety-sensitive functions, just before performing them, or just after stopping those functions. Build notifications and collection timing around that requirement rather than sending a driver for testing at any unrelated time. Source: FMCSA random testing guidance.
Who manages a result after the specimen is collected?
The DER receives and manages test results and coordinates the employer's program. In a DOT process, the collection, split specimen procedures, and MRO review should be handled through qualified providers, with secure records retained for reconciliation and audit purposes.
Contact us to plan your random testing program
A well-defined program helps your team keep pool management, notifications, collections, and records organized from the start. Contact us to discuss your employer requirements and next steps for a compliant drug and alcohol testing process. Reach out through the contact page to talk with Patriot Safety and Services LLC.