Drug test results are not public record. Federal law treats them as confidential medical information, and the employer, lab, or agency that holds them faces real legal limits on who they can share results with. The main protections come from the Americans with Disabilities Act for workplace testing, Department of Transportation rules for safety-sensitive jobs, and the Privacy Act for federal employees. The most common way results lose that confidentiality is when they get filed as evidence in a court case.
Why Employment Drug Test Results Are Confidential
When you take a drug test for a job, the result is classified as confidential medical information under the ADA. Employers must store any medical information they collect on separate forms and in separate files from your general personnel records, and they must treat those files as confidential medical records.1Office of the Law Revision Counsel. 42 USC 12112 – Discrimination That applies whether the test was pre-employment screening, random testing, or a for-cause situation.
The statute allows only narrow exceptions for who can see what’s inside those files. Supervisors and managers can be told about necessary work restrictions or accommodations. First aid and safety personnel can be informed if a condition might require emergency treatment. Government officials investigating ADA compliance can request relevant records.1Office of the Law Revision Counsel. 42 USC 12112 – Discrimination Outside those situations, the employer has no business sharing your results with coworkers, other companies, or anyone else.
The practical consequence is that a failed drug test at one job doesn’t automatically follow you to the next. Your former employer can’t broadcast the results, and the testing lab can’t hand them out. An employer who shares your results with someone who had no legitimate reason to see them may be committing an ADA violation, which is enforceable through the Equal Employment Opportunity Commission.
HIPAA Usually Isn’t What’s Protecting You
A lot of people assume the Health Insurance Portability and Accountability Act is the reason drug test results stay private. In most workplace testing situations it isn’t. HIPAA applies to “covered entities” like health care providers, health plans, and their business associates. Your employer is generally not a covered entity, so HIPAA doesn’t directly restrict what the employer does with the result once it has it. The ADA does that work.
Even where HIPAA does apply, it has exceptions that surprise people. When an employer requests a service like a drug test, the provider who performed the test can disclose the result to the employer without your written authorization under certain conditions, such as workplace medical surveillance or evaluation of work-related conditions where the employer has recordkeeping obligations under OSHA or similar laws.2U.S. Department of Health & Human Services. HIPAA Privacy Rule Public Health Provision and Employer Disclosures For DOT-regulated drug testing, the federal government has confirmed that HIPAA does not require employee written authorization for the disclosures that DOT testing regulations already require.3Federal Transit Administration. Drug and Alcohol Testing – DOT HIPAA Responses
None of that means your results are unprotected. It means the protection comes from the ADA, from DOT regulations in transportation industries, and from state drug testing laws, rather than from HIPAA alone.
Safety-Sensitive Transportation Jobs
Workers in DOT-regulated jobs operate under a separate confidentiality framework. The rules in 49 CFR Part 40 prohibit employers and service agents from releasing individual test results or medical information to third parties without the employee’s specific written consent. That consent has to be narrow: it must name a particular piece of information, a particular recipient, and a particular time. Blanket releases covering all future results or all possible employers are not allowed.4eCFR. 49 CFR Part 40 Subpart P – Confidentiality and Release of Information
The regulations permit disclosure without consent in specific situations. An employer can release drug or alcohol test information to a decision-maker in a lawsuit, grievance, or administrative proceeding that the employee initiated arising from a positive test or a refusal to test. A court can also order disclosure in a criminal or civil action related to the employee’s safety-sensitive duties.4eCFR. 49 CFR Part 40 Subpart P – Confidentiality and Release of Information
Commercial truck drivers and other FMCSA-regulated employees carry an additional layer through the FMCSA Drug and Alcohol Clearinghouse, a federal database where employers, medical review officers, and substance abuse professionals must report drug and alcohol program violations.5Federal Motor Carrier Safety Administration. Commercial Driver’s License Drug and Alcohol Clearinghouse The Clearinghouse is not open to the public. Employers access it only through a query system, and a driver’s electronic consent through the Clearinghouse is required before any specific violation details are released.6Federal Motor Carrier Safety Administration. What Is the Difference Between a Full and Limited Query
Drivers also have a clear right to their own records. Under 49 CFR 382.405, an employer must promptly provide copies of any records related to your drug or alcohol testing on written request, and the employer cannot condition that access on payment for records you didn’t specifically ask for.7eCFR. 49 CFR 382.405 – Access to Facilities and Records Regulatory agencies with jurisdiction can inspect employer records. The general public cannot.
Federal Employees and FOIA
Government workers sometimes worry that public records laws could expose their results. Executive Order 12564 established the drug-free federal workplace program, requiring agencies to test employees in sensitive positions connected to national security or public safety.8National Archives. Executive Order 12564 – Drug-Free Federal Workplace The results still stay out of the public file.
The Freedom of Information Act contains an exemption built for exactly this. Exemption 6 protects information in personnel files, medical files, and similar records where disclosure would constitute a clearly unwarranted invasion of personal privacy.9FOIA.gov. Freedom of Information Act – Frequently Asked Questions Drug test results fall squarely inside it. A FOIA request for a federal employee’s results would almost certainly be denied.
The Privacy Act of 1974 adds a second layer. It prohibits federal agencies from disclosing records about an individual to any person or agency without the individual’s prior written consent, subject to a limited set of exceptions such as agency employees who need the record for their duties, disclosures required by FOIA, law enforcement requests, and court orders.10Office of the Law Revision Counsel. 5 USC 552a – Records Maintained on Individuals Unauthorized disclosure by a federal officer or employee can carry criminal penalties.
When Results Do Become Public
The biggest crack in confidentiality opens when drug test results get introduced as evidence in court. Once results are filed in a legal proceeding, they typically become part of the case file, and court records are generally accessible to the public unless a judge orders them sealed.
This comes up in several familiar situations. Prosecutors introduce test results in DUI cases or to prove probation violations. Family courts order drug testing during custody disputes and enter the results into the case file. In personal injury lawsuits, a defendant might argue the plaintiff’s impairment contributed to the accident and offer results as evidence. In each situation, what started as a private medical record can end up in the public court file.
For DOT-regulated testing, the regulations try to limit the damage. When an employer releases test information in a legal proceeding, the rule requires a binding stipulation that the decision-maker will make the information available only to parties in the case and not to the general public.4eCFR. 49 CFR Part 40 Subpart P – Confidentiality and Release of Information That’s a real safeguard, but it only covers DOT-regulated tests and depends on the court enforcing the stipulation.
Protective Orders in Family Court
Custody cases involve some of the most sensitive uses of drug test results. Judges routinely order parents to submit to testing, and the accompanying orders are often written to limit who sees the results. A protective order might restrict access to the attorneys, the judge, a guardian ad litem, and a case manager, and prohibit anyone from sharing the results further or using them for any purpose outside the custody proceeding. Whether to request a protective order is worth raising with your attorney before results are filed, because it’s much harder to claw back information after it becomes publicly accessible.
Asking a Judge to Seal Results
If results have been filed or are about to be filed in a court case, you can ask the judge to seal them. The standard varies by jurisdiction, but courts generally require you to show good cause: a specific and serious privacy interest that outweighs the public’s general right of access to court records. Medical records, including drug tests, are among the stronger candidates for sealing because courts recognize a real privacy interest in health information. Timing matters. It’s far easier to file under seal from the start than to seal something that’s already been sitting in the public file.
Extra Protection for Treatment-Related Testing
Drug tests connected to substance abuse treatment get stronger federal protection than routine workplace tests. Under 42 USC 290dd-2, records maintained by any federally assisted program relating to substance use disorder education, prevention, treatment, rehabilitation, or research are confidential and may be disclosed only under circumstances the statute specifically authorizes.11Office of the Law Revision Counsel. 42 USC 290dd-2 – Confidentiality of Records The protection covers the identity, diagnosis, prognosis, and treatment of the patient, and it continues to apply after treatment ends.
The statute has teeth. Violations are subject to the same civil monetary penalty structure that applies to HIPAA violations, which can reach into the millions for willful neglect. The notable exceptions are limited: reporting suspected child abuse or neglect under state law, and certain transfers within the military or Veterans Affairs health system.11Office of the Law Revision Counsel. 42 USC 290dd-2 – Confidentiality of Records If your test was administered as part of a treatment program, this statute is very difficult to pierce.
If Someone Shared Your Results Without Permission
When results are disclosed to someone who had no right to see them, the person or organization responsible may face legal consequences. The available remedies depend on who did the disclosing and under what authority.
An employer who shared medical records outside the narrow group the ADA permits can be reported to the EEOC. Remedies can include back pay, compensatory damages, and injunctive relief ordering the employer to fix its recordkeeping practices.
A federal agency that improperly disclosed records can be sued under the Privacy Act, which authorizes actual damages with a $1,000 minimum plus attorney’s fees.10Office of the Law Revision Counsel. 5 USC 552a – Records Maintained on Individuals Unauthorized disclosure of substance abuse treatment records protected under 42 USC 290dd-2 triggers civil monetary penalties aligned with the HIPAA penalty framework.11Office of the Law Revision Counsel. 42 USC 290dd-2 – Confidentiality of Records Most states also recognize tort claims for invasion of privacy or negligent disclosure of confidential medical information, and many states have their own drug testing statutes with specific confidentiality rules and penalties, though those vary significantly by jurisdiction.
The strongest cases involve employers who casually shared results with coworkers or business contacts who had no involvement in the employment decision. Documentation helps. If you suspect an unauthorized disclosure, write down who told you, what they said, and when, before memories fade and stories shift.