Most small business owners write their drug policy the week a problem shows up. Maybe a forklift operator nods off at the wheel, or a customer complains that a crew member smelled like a dispensary. You draft something fast, you hand it to your office manager, and you file it in a binder nobody opens again. That binder is where good intentions go to die.

The employers who never have a crisis are the boring ones. They built the program before they needed it. Here’s the promise: by the end of this piece you’ll have a clear sequence, policy first, panel second, paperwork third, and you’ll know exactly which decisions to make and in what order. I’ve watched enough of these programs get built to tell you the sequence matters more than the budget.

Start With the Policy, Not the Lab

Every employer I’ve talked to wants to skip straight to the urine cup. That’s backwards. The policy is the document that protects you when a test comes back positive and someone’s cousin is a lawyer. Write it before you test a single person.

Your policy needs to answer a handful of questions in plain language. Who gets tested and when. What happens after a positive result. Who pays for the test. Who sees the results. How long you keep them. If your policy can’t answer those in one page, it’s too long to enforce.

Here’s the part that trips up Northwest employers in particular: state legalization did not change your right to run a drug-free workplace. It changed how you have to talk about it. If your policy says “no marijuana use, period” without addressing off-duty use, you’re inviting a fight you don’t need. Say what you actually mean, which is usually “no impairment at work and no positive test on a safety-sensitive role.”

Get a labor attorney to read the draft. Yes, it costs money. It costs less than the first wrongful termination claim.

Which Testing Panel Do You Actually Need?

The standard five-panel covers amphetamines, cocaine, opiates, PCP, and THC. That’s the baseline most employers start with, and for a lot of warehouse and retail operations it’s plenty. But your industry shapes the list more than a template will.

Ask yourself what you’re trying to prevent. A delivery company worried about impairment on the road has different priorities than a hospital worried about diversion of controlled substances. A construction firm with federal contracts is playing by a different rulebook entirely.

According to the U.S. Department of Labor, employers in regulated industries answer to federal testing requirements that override whatever they’d prefer to do on their own. If you hold a DOT-regulated role, whether that’s a commercial driver, a pipeline worker, or a Coast Guard-credentialed mariner, your panel, your cutoff levels, and your random selection pool are already decided for you.

Everyone else picks. My advice: match the panel to the risk, not to the cheapest option. A hair test catches a longer window of use than urine, which matters if you’re hiring for a role where you can’t afford to miss chronic use. Urine catches recent use better. Saliva is fast and hard to cheat. Pick the specimen that answers the question you’re actually asking.

What a Federal Compliance Program Looks Like

If your employees hold commercial driver’s licenses or work in safety-sensitive transportation roles, you’re not running a company policy. You’re running a federal program, and the rules come from above.

The testing categories are fixed. Pre-employment, random, post-accident, reasonable suspicion, return-to-duty, and follow-up. Random means random, with a pool that gets selected by a scientifically valid method, not a manager pulling names out of a hat. Every test goes through a certified laboratory, every result goes to a Medical Review Officer, and every positive gets a chance for the employee to explain a legitimate prescription.

Records live for set periods. Some for a year, some longer. The Substance Abuse and Mental Health Services Administration sets the standards that the labs and MROs operate under, and that’s the framework your whole program hangs on.

The piece most employers miss is the Clearinghouse. It’s a federal database, and if you employ CDL drivers you have to query it before you hire and at least once a year after. Skip that step and you can put an ineligible driver behind the wheel without knowing it.

A Practical Rollout Sequence

Here’s how I’d run this if it were my company, in order.

1. Write the policy. One page, plain language, reviewed by counsel.
2. Choose your panel and specimen type. Match them to the actual risk in each role.
3. Pick your testing partner. Ask about turnaround time, mobile and onsite capability, and whether they handle DOT consortium and Clearinghouse work directly.
4. Train your supervisors on reasonable suspicion. This is the step that gets skipped and it’s the one that saves you in a hearing. Your manager needs to document specific, observable behavior, not a gut feeling.
5. Communicate to your team before you test anyone. A surprise test without a written policy in the break room is the fastest route to a morale problem and a legal one.
6. Decide where employees go. If your crews work across multiple sites, an onsite or mobile collection setup saves you hours of paid drive time. Employers who need workplace testing services in the Pacific Northwest often end up coordinating multi-state collections, so a partner with regional coverage and mobile capability keeps that from turning into a scheduling nightmare.
7. File everything. Results, custody forms, training records, consortium enrollment. Keep them locked and keep them for the period your policy states.

That’s the whole sequence. None of it is complicated. It just has to happen in order, and it has to happen before the incident, not after.

The Gray Areas Nobody Warns You About

Now for the texture. Positive results are not the hard part. The hard part is everything around them.

What do you do with an employee who shows you a valid medical marijuana card for a non-DOT role? What about the prescription opioid that’s legitimate but the employee drives a truck? What happens when a long-haul driver gets flagged on a random and swears he was around it at a concert? These are the calls that separate a policy that works from a policy that reads well.

Build a decision tree before you need one. Positive result, this happens. Medical explanation, this happens. Return-to-duty, this happens. Write it down, keep it short, and make sure your manager knows where it is.

And here’s a finding worth knowing: the Centers for Disease Control and Prevention has documented that overdose deaths have shifted heavily away from prescription opioids toward illicitly manufactured drugs, which means the risk profile your policy was written for five years ago may not match the one you face today. Fentanyl shows up in unexpected supply chains. That’s changed what testing programs need to screen for, and it’s changed how supervisors should read impairment signs.

What You Get When You Do This Right

A program that holds up under scrutiny does three things at once. It protects your people, it protects your company, and it gives your managers a script to follow instead of a judgment call to make at 6 a.m. on a Tuesday.

What’s your policy doing right now? If you had to produce it for a lawyer this afternoon, would you know where it is and would it hold up? Answer that honestly, and you’ll know your next move.