Understand CLIA certification tiers, staffing requirements, and how to determine whether your testing operation actually needs a CLIA waiver — before you apply.
The Clinical Laboratory Improvement Amendments (CLIA) regulate laboratory testing by classifying tests into complexity tiers. Each tier carries its own certification requirements, staffing qualifications, and oversight standards. Here's what you need to know.
Start with what the testing is for, then the device — and check your state separately. State law is not irrelevant: some states run their own laboratory licensure programmes, and CMS recognises a “CLIA‑exempt” laboratory only where a State’s laws are equal to or more stringent than CLIA (42 CFR 493.2). A device answer alone does not tell you whether a state licence is required.
Instant drug test devices come in two regulatory categories — but what decides whether CLIA applies is the purpose of your testing (a medical decision vs. an employment decision), not the device's clearance.
Marketed and labeled for non-clinical use — employment, workplace, legal, insurance, athletic.
NOT FDA-cleared for clinical use. Used by most TPAs, employers, and workplace testing programs.
→ No CLIA Certificate of Waiver required.
FDA-cleared for clinical / medical use — clinics, treatment programs, anywhere results inform medical decisions.
Used in healthcare settings, MRO offices, rehab programs, occupational health.
→ CLIA Certificate of Waiver required if read onsite for a clinical / medical purpose.
Source: Official CMS guidance — CMS CLIA Certification brochure (revised March 2026). See also FDA CLIA Database for the current waived-analyte list.
One of the most common — and costly — misunderstandings in workplace testing. Reading an instant device is a collector function, not a lab result.
An instant cup, dip card, or oral-fluid device gives a presumptive screening result — not a confirmed one. Whether laboratory confirmation and MRO review are legally required depends on your programme: they may be required by state law, by the programme you collect for, by a contract or CBA, or by employer policy — and for DOT tests Part 40 requires them. Where nothing compels them they remain a strong defensibility practice rather than a federal mandate on private employers. On that footing there are two sound things to do with a presumptive result:
No detectable presence on the panel. This is the only outcome a screening device can resolve on its own — and it's why instant testing saves non-DOT employers time and money.
A presumptive positive should go to a certified laboratory for confirmation, then to an MRO, before anyone is told a “positive.” Part 40 requires that for DOT tests. For non-DOT testing it is required only where state law, the programme, a contract or CBA, or employer policy says so — no single federal rule imposes it on every private employer. Where nothing compels it, it remains a strong defensibility practice.
Sources: SAMHSA Mandatory Guidelines for Federal Workplace Drug Testing Programs (initial/screen test vs. confirmatory test); for DOT testing, the screen-then-confirm-then-MRO sequence is required by 49 CFR Part 40 (§§ 40.91—40.97, 40.123). For non-DOT programs there is no single nationwide rule. Confirmation and MRO review may be required by state law, by the requirements of the programme you collect for, by a contract or collective bargaining agreement, or by employer policy — and where none of those compels it, screen-then-confirm with MRO review remains a strong defensibility practice. Do not present Part 40’s MRO structure as universal private-sector law; identify the source that actually binds your programme.
Answer 4 quick questions — including the critical one about your test device — and we'll give you a clear answer for your situation.
Question 1 of 4
Question 2 of 4
Question 3 of 4
Check the box, package insert, or manufacturer’s product page. Device labelling is one input, not the deciding factor. Work it in order: 1. what is the purpose or function of the testing? 2. on that basis, does CLIA apply at all? 3. if it does, what is the test’s complexity/category and which certificate does that require? 4. separately, what does your state require? Labelling does not create the federal exemption. Whether CLIA applies turns on the purpose and context of the testing — CMS does not require a CLIA certificate for drug testing performed for employment purposes unless the testing is performed and individual treatment is offered or made available. An “FUO” marking is an FDA/device-labelling fact; it informs what a device is cleared for, but it is not the reason ordinary workplace testing sits outside CLIA. Keep three questions separate: (1) federal CLIA applicability, driven by purpose; (2) FDA/device labelling; (3) independent state laboratory or workplace-testing rules.
Question 4 of 4
New York and Washington have their own HHS-approved state programs (per the CMS CLIA brochure). California, Maryland, Pennsylvania and Rhode Island are commonly cited examples of states adding their own laboratory licensing on top of federal CLIA. Treat that as examples, not an exhaustive national list — CMS warns that states may maintain separate laboratory licensing laws and that both state and CLIA requirements can apply. Check the current CMS State Agency / state laboratory authority for your state rather than relying on a short list.
—
This tool gives a general answer based on federal CLIA rules and known state licensing programs. Always confirm with your state's CLIA agency before relying on a particular path — contact your state’s CLIA agency directly — CMS publishes the current State Agency contact list.
There's an important exemption that applies specifically to drug testing — here's what it means for you.
This exemption applies to the laboratory that analyzes the specimen, not to upstream collection sites. If a lab is certified by the Substance Abuse and Mental Health Services Administration (SAMHSA) and its drug testing follows SAMHSA guidelines, that lab is not required to hold a CLIA certificate for that drug testing.
Important: This exemption covers SAMHSA-regulated drug testing performed at the certified lab. Any other testing at the same facility still requires CLIA certification. Collection-only operations (collect & ship) are separately outside CLIA because they don't perform the test.
Per CMS, "any laboratory that only performs testing for forensic purposes" is exempt from CLIA — the example CMS gives is criminal investigations. The industry has long applied the same logic to workplace drug testing performed with FUO (Forensic Use Only) labeled devices, since those tests are not used for clinical diagnosis or treatment.
The purpose of the test — and the device labeling — is what determines whether CLIA applies, not the act of testing itself.
If you've decided you need one — i.e., you plan to read FDA-cleared / CLIA-Waived devices onsite for clinical purposes — here's the federal application process.
“Forensic Use Only” is a device label, not a permission slip.
Sitting outside CLIA does not put a device outside every other rule. Two things apply independently of CLIA:
And note the word only in §493.3(b)(1): the exemption reaches a facility, or a component of one, that only performs forensic testing. If the same site also performs clinical testing, work out where that boundary sits before relying on the exemption.
Per the CMS CLIA brochure (March 2026), two states operate their own HHS-approved laboratory programs:
Washington — Medical Test Site (MTS) program replaces federal CLIA. Do NOT submit Form CMS-116.
New York — partial exemption. Contact the state agency to determine what applies.
These states require state-level licensing in addition to federal CLIA (where CLIA applies):
California, Maryland, Pennsylvania, Rhode Island. California specifically applies to specimens shipped to a clinical lab — not to onsite workplace testing using FUO devices. Confirm each agency’s rules with that state directly.
Each fixed location where you perform testing requires its own CLIA certificate.
Mobile units (health fairs, temporary screening sites) may operate under the certificate of their designated primary site — no separate certificate needed.
You must notify your State Agency within 30 days if any of the following change:
If you want to add moderate or high complexity testing later, you must reapply using the same Form CMS-116 — and cannot begin that testing until the new certificate is received.
Your CLIA waiver covers your lab testing — make sure your collectors are DOT-qualified and your business is accredited and listed.