๐ TestRight Academy
The Complete Beginner's Roadmap
How to Start a
Drug & Alcohol
Testing Company
A step-by-step guide to launching a compliant DOT & non-DOT specimen collection and C/TPA business — from business setup and collector qualification through labs, MROs, recordkeeping, pricing, and your first clients.
About this guide
Everything you need to go from "I want to start a drug testing business" to an operating, compliant company — written for someone with zero industry experience.
The drug & alcohol testing industry runs on procedure. Federal rules spell out exactly how a specimen must be collected, handled, tested, and reported — and the businesses that win are the ones that get those details right, every time. This guide walks you through the entire journey in plain English, step by step, and points you to the official rules and to TestRight Academy training so you can go deeper wherever you need to.
How to use it
- Read it in order the first time. Each step builds on the one before — business setup, then qualification, then compliance, then operations and clients.
- Use the checklists. The final "Complete Startup Checklist" consolidates the whole guide into checkable tasks you can work through top to bottom.
- Verify with the primary sources. Look for the blue compliance reference callouts and the Resources directory at the end — rules change, so always confirm against the current regulation.
Important — please read: This guide is provided for general educational purposes only and is not legal, regulatory, tax, or compliance advice. Drug and alcohol testing requirements change over time and vary by state and by DOT mode (FMCSA, FAA, FRA, FTA, PHMSA, USCG). Always verify every requirement against the current Code of Federal Regulations on eCFR and the relevant federal or state agency, and consult a qualified legal or compliance professional before making business decisions. References to 49 CFR Part 40, FMCSA Part 382, SAMHSA/HHS guidelines, CMS/CLIA, and OSHA reflect publicly available information as of 2026. A completion certificate or collector qualification is documentation of training — it is not a government-issued license.
Part 1 of 16
Understanding the Drug & Alcohol Testing Industry
Before you register a business name or print a single chain-of-custody form, it helps to understand exactly what this industry does, who the players are, and where the money comes from. At its core, a drug and alcohol testing business sits between employers who are required (or who choose) to test their workers and the laboratories and medical professionals who turn a specimen into a defensible, verified result. Your job is to operate trusted links in that chain, and there are several profitable links you can choose to fill.
What the business actually does day-to-day
Most of the work is operational and people-facing. A typical day might involve checking in a donor (the person being tested), verifying their photo ID, witnessing a urine collection under strict procedures, sealing and labeling the specimen, completing a federal chain-of-custody form, and shipping the sealed specimen to a lab. You might also administer a breath alcohol test, run an instant (point-of-care) screen for a non-regulated employer, or, if you grow into program management, spend the afternoon running random selections and chasing down paperwork for a dozen trucking-company clients. It is detail-oriented, compliance-driven work where doing things in the exact right order matters more than speed.
The money-making roles you can fill
A new owner does not have to do everything. You can start with one role and add others as you grow. Here are the main revenue-generating roles:
- Specimen collector. The person who collects urine specimens for testing. Under DOT rules, only a trained, qualified collector may perform a regulated urine collection (49 CFR §40.31, §40.33). This is the most common entry point into the industry.
- Breath Alcohol Technician (BAT). A person trained to instruct and assist employees through the alcohol testing process and to operate an evidential breath testing (EBT) device (defined in 49 CFR §40.3). Some operators also train as Screening Test Technicians (STTs), who conduct initial alcohol screens using approved saliva or breath devices.
- Mobile / on-site collections. Instead of waiting for donors to come to a fixed site, you bring the collection to the employer's job site, terminal, or the scene of an accident. Mobile and after-hours service often commands premium pricing and is a strong differentiator for a new business, especially for post-accident testing that must happen quickly.
- Point-of-care (instant) testing. For non-regulated (non-DOT) employers, you can offer rapid screening devices, such as instant cups, dip cards, or oral-fluid devices, that give a presumptive result on the spot. Important nuance: an instant device only resolves a true negative on its own; any "non-negative" must go to a certified lab for confirmation and medical review before anyone is told "positive." See the DOT vs. Non-DOT guide. If you perform instant testing as a screening service, CLIA (the Clinical Laboratory Improvement Amendments program administered by CMS) generally requires at least a CLIA Certificate of Waiver, obtained from CMS; our CLIA Waiver Guide walks through this.
- Consortium/Third-Party Administrator (C/TPA). The highest-value, most recurring role. A C/TPA is a service agent that provides or coordinates testing services and administers an employer's program on its behalf (defined in 49 CFR §40.3), running random pools, scheduling tests, and keeping records. This shifts you from one-time transactions to predictable recurring revenue. See Adding C/TPA Services.
Watch out: A DOT collector qualification is not a federal "license." It is a combination of training on the procedures plus a set of consecutive error-free mock collections, completed per 49 CFR §40.33. No federal agency issues you a card or registers you as a collector; you keep documentation of your own qualification.
Who's who in the testing ecosystem
Specimens pass through several independent parties, each with a defined job. Understanding the cast tells you which roles you can sell and which you must partner with.
| Player | Who they are / what they do |
| Employer / DER | The company that owns the testing program. The Designated Employer Representative (DER) is an actual employee authorized to receive results and pull workers from safety-sensitive duty. Note: a service agent like you can never act as the DER (49 CFR §40.3). |
| Collector | Collects the urine specimen and completes the chain-of-custody form. This can be you. |
| BAT / STT | Conducts alcohol testing using approved devices. This can also be you. |
| Laboratory | Performs the actual analysis. For DOT testing, the lab must be HHS-certified under SAMHSA's National Laboratory Certification Program (NLCP). You partner with a lab; you do not need to be one. |
| Medical Review Officer (MRO) | A licensed physician who reviews and verifies lab results, contacting the donor about legitimate medical explanations before reporting a confirmed positive. A required service-agent role you coordinate with, not perform. |
| Substance Abuse Professional (SAP) | Evaluates employees who violate a DOT testing rule and manages the return-to-duty process (49 CFR Part 40, Subpart O). Another partner role you refer to. |
You can find vetted partners through our Find an MRO and Drug Testing Labs directories.
How a specimen flows from collection to verified result
- Collection. The collector verifies ID, conducts the collection under Part 40 procedures, and splits a DOT urine specimen into a primary ("A") bottle and a split ("B") bottle.
- Chain of custody. The collector seals the bottles, completes the federal Chain of Custody Form (CCF), and documents every transfer so the specimen's handling is traceable.
- Lab analysis. An HHS-certified lab runs an initial screen; any non-negative is confirmed by a more precise method (such as GC/MS or LC/MS/MS) before being reported.
- MRO review. The MRO reviews the lab result and, for non-negatives, interviews the donor about legitimate medical explanations, then verifies the result as positive or negative.
- Report to the DER. The verified result goes to the employer's DER, who takes any required action. A verified positive result triggers the SAP and return-to-duty process.
Compliance reference: Part 40 is the DOT-wide procedural rule and applies to all DOT-required testing regardless of transportation mode (49 CFR Part 40). The drugs currently tested under DOT rules are marijuana, cocaine, amphetamines, phencyclidine (PCP), and opioids.
Understanding the market: DOT vs. non-DOT
The industry splits into two broad markets. The regulated DOT market covers safety-sensitive employees in federally regulated transportation, where testing follows Part 40 exactly. Each mode has its own agency rule on who gets tested and when:
| Industry | Agency | Agency rule |
| Trucking / commercial drivers (CDL) | FMCSA | 49 CFR Part 382 |
| Aviation | FAA | 14 CFR Part 120 |
| Rail | FRA | 49 CFR Part 219 |
| Transit | FTA | 49 CFR Part 655 |
| Pipeline | PHMSA | 49 CFR Part 199 |
| Maritime | USCG | 46 CFR Parts 4 & 16 |
The non-DOT / private-employer market is larger and more flexible: construction firms, healthcare and staffing agencies, manufacturers, and any company running a drug-free workplace program. These employers set their own panels, forms, and consequences by policy, with no federal procedure mandated. Many new owners serve both markets: DOT for steady, rules-driven volume; non-DOT for breadth and greater pricing freedom.
Typical revenue streams
- Per-collection fees for each urine collection or breath alcohol test (DOT and non-DOT).
- Mobile / on-site surcharges and after-hours or emergency post-accident call-outs.
- Instant (point-of-care) screening for non-regulated clients.
- Recurring C/TPA fees, such as monthly consortium membership for owner-operators and ongoing program-management retainers for small employers. This is the recurring income that smooths out the lumpiness of one-off collections.
- Add-on services such as policy development, FMCSA Clearinghouse management, and recordkeeping support.
Pro tip: Many successful owners start as a collector to learn the procedures cold, then layer on BAT capability, then build a consortium. Each role you add deepens client relationships and raises your revenue per account.
Avoid this
- Assuming a "drug testing company" must be a laboratory. Most owners are collectors and program administrators who partner with labs, MROs, and SAPs.
- Treating an instant-test non-negative as a final "positive." It is only presumptive until confirmed by a certified lab and verified by an MRO.
- Offering to be a client's DER. Service agents are prohibited from holding that role.
- Running point-of-care screening for employers without checking whether a CLIA Certificate of Waiver is required.
- Decide which role(s) you will start with: collector, BAT, mobile, instant testing, and/or C/TPA.
- Map the ecosystem partners you will need: a certified lab, an MRO, and a SAP referral.
- Choose your target market: DOT, non-DOT, or both.
- Review the DOT vs. Non-DOT and C/TPA Services guides, then browse the full Learning Center.
Part 2 of 16
Step 1 โ Setting Up Your Business (Legal Foundation)
Before you ever greet your first donor, you need a legal business behind you. This step builds the administrative foundation everything else rests on โ your business structure, name, tax ID, bank account, licenses, and insurance. The good news: starting a drug and alcohol testing business does not require any special or licensed entity. A standard setup that any small-business owner could complete works just fine here. Mirroring TestRight Academy's LLC Startup Guide and Startup Checklist, here is how to do it in the right order.
Choosing your business structure
Your business structure determines how you are taxed and โ more importantly for this industry โ whether your personal assets are protected if something goes wrong. You have three common options:
| Structure | What it is | Liability protection | Best for |
| Sole proprietorship | You and the business are legally the same. No formal filing โ you just start operating. | None. Your personal home, car, and savings are exposed if you are sued. | Almost no one in this field. The risk is too high. |
| LLC (Limited Liability Company) | A separate legal entity you register with your state. Owners are called "members." | Strong. A properly maintained LLC shields your personal assets from most business debts and claims. | Most independent collectors and breath alcohol technicians (BATs). |
| S-corp (S corporation) | A tax election, not a separate entity type. An LLC or corporation can elect S-corp tax treatment with the IRS. | Same as the underlying entity (usually an LLC). | Established businesses earning enough profit that the payroll-tax savings outweigh the added paperwork. |
Our recommendation: form an LLC. You are handling biological specimens, signing federal Chain of Custody Forms (CCFs), and making documentation decisions that affect people's jobs. That is real exposure. An LLC separates your business from your personal life so a mistake or a lawsuit does not reach your house. An S-corp election can save money on self-employment taxes once you are profitable, but that is an optimization for later โ not a day-one decision.
Pro tip: You do
not need a Professional LLC (PLLC). PLLCs are generally reserved for state-licensed professions like medicine, law, or accounting. DOT collectors and BATs qualify under federal training standards (49 CFR Part 40), not a state professional license, so a standard LLC is correct in most states. State rules on PLLCs do vary, so confirm locally. See
testrightacademy.com/llc-guide for the full walkthrough.
Watch out: Tax structure has real money consequences, and rules vary by state. Confirm your choice with a licensed attorney or CPA in your state before filing. This guide is educational, not legal or tax advice.
Naming and registering your business with the state
Once you have picked a structure, you formally create the entity:
- Choose a name and check availability. Search your state's Secretary of State business-name database before getting attached to anything. Your name does not need to contain "DOT" or "drug testing" โ but it should be professional and not already taken.
- File your formation document. For an LLC this is usually called the Articles of Organization. You file it with your state's Secretary of State (online in most states) and pay a state filing fee. The fee varies widely by state, so check your state agency for the current amount.
- Use a broad business purpose. Many states ask what your business does. Keep it general โ for example, "occupational health and drug testing services," or simply "any lawful purpose" if your state allows it โ so you are not boxed in if you later add BAT or C/TPA (Consortium/Third-Party Administrator) services.
- Designate a registered agent. This is the person or service that receives legal mail for your business. You can often serve as your own agent if you have a physical address in the state.
TestRight Academy's LLC guide also suggests a NAICS industry code โ 621999 (All Other Miscellaneous Ambulatory Health Care Services) is a common fit for independent collectors, and the Census Bureau lists employee drug testing services under this code. NAICS codes are not legally binding and can be updated later, so do not agonize over the choice.
Pro tip: Even for a single-member LLC, draft a simple operating agreement. It documents your ownership and how the business is run, and many banks and clients ask for it. Multi-member LLCs should cover profit splits, decision-making, and exit terms.
Getting your EIN from the IRS โ free
An EIN (Employer Identification Number) is your business's federal tax ID, like a Social Security number for your company. You need it to open a business bank account, file business taxes, and sign certain contracts.
Compliance reference: An EIN is issued directly by the IRS and is
completely free. Apply online at
irs.gov and, if approved, the number is issued immediately. The IRS expressly warns: "Beware of websites that charge for an EIN. You never have to pay a fee for an EIN."
Watch out: Many third-party sites mimic the IRS and charge a fee to "obtain" your EIN. They are simply filling out the free IRS form for you. Go straight to irs.gov. The online application must be completed in one session and expires after 15 minutes of inactivity, so have your formation documents handy before you start.
Opening a business bank account
Open a dedicated business checking account before you collect a dollar of revenue. Keeping business and personal money separate is not just tidy โ it is what preserves your LLC's liability shield. Commingling funds is one of the fastest ways a court can "pierce the corporate veil" and hold you personally liable. Bring your Articles of Organization and your EIN confirmation letter to open the account. A business debit card and a simple bookkeeping app from day one will save you enormous headaches at tax time.
Business and occupational licenses
Beyond forming the entity, many cities and counties require a general business license (sometimes called a business tax certificate) to operate legally at your address. A few jurisdictions also have occupational or home-occupation permits if you work from home, and some states require you to register for state sales or use tax.
Watch out: Licensing requirements vary widely by city, county, and state โ there is no single national rule. Check directly with your city or county clerk and your state agency for what applies to you. Do not assume forming the LLC is the end of the paperwork.
Insurance you actually need
Two coverages matter most for a collection business, and many clients and C/TPAs will require proof of both before they place work with you:
- General liability (GL) insurance covers third-party bodily injury and property damage โ for example, a donor who slips and falls at your collection site. This is the baseline every small business should carry.
- Professional liability / errors & omissions (E&O) insurance covers claims arising from how you do your job โ a mistake, oversight, or alleged negligence in performing the service. General liability will not cover these claims.
Why E&O matters so much for a collector: a single procedural error can cancel a federally regulated test. If you mishandle a temperature-out-of-range specimen, break the chain of custody, or make a "fatal flaw" on the CCF, the result can be thrown out โ and an employer who relied on that test (or a donor who lost a job over it) may come after you. E&O is the coverage built for exactly that scenario. For a business whose entire value is accurate, defensible documentation, it is not optional in practice.
Example
Maria forms "Summit Compliance Testing LLC" in her state for a modest filing fee, gets her EIN free at irs.gov in a matter of minutes, and opens a business checking account the same week. Her county requires an annual business license, which she files online for a small fee. She then buys a general liability policy plus a professional liability (E&O) rider through an agent who insures medical-collection businesses. When a local trucking company later asks for a certificate of insurance before signing her on, she emails it the same day โ and wins the account.
Avoid this
- Paying a third-party website for an EIN โ it is always free directly from the IRS.
- Operating as a sole proprietor "to save money," leaving your personal assets exposed in a high-liability field.
- Running business income through your personal bank account, which can void your LLC's liability protection.
- Buying general liability only and assuming it covers a botched collection โ it does not. You need E&O for that.
- Skipping the city/county business license because the LLC is filed. They are separate requirements.
A note on NPI: An NPI (National Provider Identifier) is for healthcare providers who bill insurance. A standard DOT collection or C/TPA business does not bill insurance and generally does not need one โ so you can skip it unless you are adding clinical services that require it.
Step 1 setup checklist
- Decide which services you will offer (DOT collection, BAT, non-DOT, C/TPA)
- Choose your structure โ LLC recommended; confirm with an attorney or CPA
- Search your state's database and reserve a business name
- File Articles of Organization with your Secretary of State (use broad purpose language)
- Draft an operating agreement, even for a single-member LLC
- Apply for your EIN โ free at irs.gov
- Open a dedicated business bank account (bring Articles + EIN)
- Obtain your city/county business license and any state tax registration
- Buy general liability insurance
- Add professional liability / errors & omissions (E&O) coverage
- Set up basic bookkeeping from day one
With your legal foundation in place, you are ready to move on to earning your DOT qualifications. Keep in mind that becoming a urine collector is a qualification โ training plus five consecutive error-free mock collections under 49 CFR ยง40.33 โ not a federal license. The next step covers exactly how to get there.
Part 3 of 16
Step 2 โ The Rules You Must Know
Before you collect a single specimen, you need a mental map of who makes the rules and which rule applies when. It looks intimidating from the outside, but the framework is actually well-organized: one master rulebook for procedure, a separate rule for each transportation industry, and a handful of supporting agencies that handle the lab, the doctor, and the federal database. Once you see how the pieces fit together, the rest of this guide makes sense. (For a side-by-side primer, see TestRight Academy's DOT vs. Non-DOT guide, and keep the glossary open as you read.)
49 CFR Part 40 โ the master rulebook
49 CFR Part 40 ("CFR" means the Code of Federal Regulations) is the single set of procedures for all U.S. Department of Transportation (DOT) drug and alcohol testing. It tells everyone in the chain โ collector, lab, doctor, employer โ exactly how to conduct a test, step by step, and how to return an employee to safety-sensitive work after a violation. Crucially, Part 40 applies to all parties who conduct DOT-required testing, regardless of which transportation industry the worker is in.
Part 40 is owned by the DOT's Office of Drug and Alcohol Policy and Compliance (ODAPC) โ not by any one industry agency. When you hear "follow Part 40 to the letter," this is the rule. As a collector, the bulk of your job lives here: the collection steps, the federal Chain of Custody Form (CCF), what counts as a refusal, direct observation, the "shy bladder" procedure, and confidentiality.
Compliance reference: 49 CFR Part 40 is the government-wide procedure for transportation workplace drug and alcohol testing and applies to all parties who conduct DOT-required testing, regardless of mode (49 CFR §40.1). ODAPC administers it (transportation.gov/odapc).
One master rule, six industry rules
Here's the part that confuses beginners. Part 40 says how to test. But who must be tested, when, and what happens to their job โ that lives in a separate rule for each transportation industry ("mode"). Each DOT agency writes its own rule and then points back to Part 40 for the procedures.
| Agency | Covers | Their testing rule |
| FMCSA | Commercial truck & bus drivers (CDL) | 49 CFR Part 382 |
| FAA | Aviation (pilots, mechanics, controllers) | 14 CFR Part 120 |
| FRA | Railroads | 49 CFR Part 219 |
| FTA | Mass transit | 49 CFR Part 655 |
| PHMSA | Pipelines | 49 CFR Part 199 |
| USCG | Maritime / commercial vessels | 46 CFR Parts 4 & 16 |
For most beginners, the practical center of gravity is trucking. The FMCSA rule, 49 CFR Part 382, governs the largest pool of testable workers and is where most new collection sites and Consortium/Third-Party Administrators (C/TPAs) earn their living. If you remember just two numbers, make them Part 40 (how) and Part 382 (who, for trucking).
Compliance reference: FMCSA's controlled-substances and alcohol-testing requirements for CDL drivers are at 49 CFR Part 382. Each mode still follows Part 40 for collection and laboratory procedures. (Note: USCG/maritime employees are not covered by a DOT random alcohol-testing pool โ confirm any alcohol-testing duties against the current 46 CFR text.)
The DOT 5-panel: what a federal urine test screens for
Every DOT drug test screens for the same five drug classes โ the DOT 5-panel:
- Marijuana (THC metabolite)
- Cocaine
- Amphetamines (including methamphetamine, MDMA, and MDA)
- Opioids (codeine, morphine, 6-AM/heroin, plus the semi-synthetics hydrocodone, hydromorphone, oxycodone, oxymorphone)
- PCP (phencyclidine)
The lab uses fixed cutoff concentrations, measured in nanograms per milliliter (ng/mL): a result below the cutoff is reported negative, and a result at or above it goes to confirmation testing. An employer running a non-DOT program can add panels (for example, expanded opioids or benzodiazepines), but on a DOT test you cannot add to or subtract from this five.
Compliance reference: The drug classes that laboratories test for are listed at 49 CFR §40.82 ("What drugs do laboratories test for?"), and the initial and confirmatory cutoff concentrations are at 49 CFR §40.85 ("What are the cutoff concentrations for urine drug tests?").
Who certifies the lab โ and who reviews the result
DOT doesn't run the laboratory. A DOT specimen must be analyzed by a lab certified by the U.S. Department of Health and Human Services (HHS) under SAMHSA's National Laboratory Certification Program (NLCP). Those labs operate under the HHS/SAMHSA Mandatory Guidelines for Federal Workplace Drug Testing Programs โ a separate document from Part 40 that governs the scientific side (lab methods, cutoffs, quality control). Part 40 then requires DOT labs to meet those HHS standards. SAMHSA/HHS publishes the current list of certified labs; you can route specimens only to a name on that list. (See TestRight's drug testing labs page.)
Once the lab reports a result, it isn't final until a Medical Review Officer (MRO) โ a licensed physician trained in DOT testing โ reviews every non-negative. The MRO interviews the employee, considers legitimate medical explanations, and then verifies the result as positive or negative. The collector never reports a "positive"; that is the MRO's job. To connect with an MRO, see Find an MRO.
The Clearinghouse (trucking only)
For FMCSA-regulated drivers, there's one more federal system: the Drug and Alcohol Clearinghouse, a national database of CDL drivers' drug and alcohol violations. It is created by Part 382, Subpart G. Employers and C/TPAs must register, run pre-employment and annual queries, and report violations. If you plan to offer C/TPA services, Clearinghouse administration is a core deliverable โ see TestRight's Clearinghouse and C/TPA services pages.
Compliance reference: The Clearinghouse and the employer query/reporting duties are established at 49 CFR Part 382 Subpart G (for example, §382.701 establishes the Clearinghouse, §382.705 covers reporting, and §382.711 covers registration). It applies only to CDL drivers subject to Part 382 โ not to FAA, FRA, FTA, PHMSA, or USCG testing.
OSHA Bloodborne Pathogens โ if you handle specimens
Anyone whose job involves handling specimens (including the occasional blood spot, or oral-fluid and urine where contamination is possible) may fall under OSHA's Bloodborne Pathogens Standard, 29 CFR 1910.1030. In plain terms: you need a written exposure-control plan, the right personal protective equipment, safe handling and disposal, the offer of the hepatitis B vaccine to at-risk staff, and documented training at initial assignment and at least annually thereafter. This is a workplace-safety requirement, separate from any DOT rule. TestRight offers an audit-ready OSHA Bloodborne Pathogens certificate for exactly this.
Compliance reference: OSHA's Bloodborne Pathogens Standard, 29 CFR 1910.1030, requires a written exposure control plan, PPE at no cost to employees, a hepatitis B vaccination offer, and training at initial assignment and at least annually thereafter.
Confidentiality and HIPAA basics
Drug and alcohol testing records are sensitive. Part 40 itself imposes strict confidentiality: results and testing information may only be released as the rule specifically permits โ generally to the employer, the MRO, the C/TPA, and the employee, and otherwise only with the employee's specific written consent (49 CFR §40.321–§40.323). You must also keep records and restrict who can see them (49 CFR §40.331 and §40.333). Separately, if your operation is a HIPAA "covered entity" or handles protected health information for one, HIPAA's privacy and security rules may also apply. A safe default for a new operator: lock down every record, share results only with the people Part 40 names, and train your staff on confidentiality before they ever touch a file.
Pro tip: Regulations change. Always read the current version on the eCFR (ecfr.gov) rather than a blog or a printout, and treat ODAPC's site (transportation.gov/odapc) as the official source for Part 40 interpretations. Bookmark the exact Part 40 and Part 382 pages.
Avoid this
- Assuming Part 40 tells you who to test โ it tells you how; the "who/when" lives in the modal rule (e.g., Part 382 for trucking).
- Sending DOT specimens to a non-HHS-certified lab, or letting a collector announce a "positive" โ only an MRO verifies results.
- Adding extra drugs to a DOT 5-panel because a client asked. On a DOT test, the panel is fixed.
- Skipping OSHA Bloodborne Pathogens training because "it's only urine." If staff can be exposed, the standard applies.
- Confusing the Clearinghouse (FMCSA only) with a DOT-wide system โ it does not cover aviation, rail, transit, pipeline, or maritime.
Quick self-check before Step 3
- I can name the master rule (49 CFR Part 40) and what it governs (procedures).
- I can match at least FMCSA to its rule (49 CFR Part 382) and name the other modes.
- I can list the DOT 5-panel drug classes from memory.
- I understand that HHS/SAMHSA certifies labs and an MRO verifies results.
- I know the Clearinghouse is trucking-only (Part 382 Subpart G).
- I know OSHA 29 CFR 1910.1030 applies if my staff handle specimens.
- I've bookmarked the eCFR and ODAPC pages for the current text.
Part 4 of 16
Step 3 โ Getting Qualified: Collector & BAT Training
This is the heart of the business. Before you can legally perform a DOT-regulated drug or alcohol test, you have to become a qualified collector (for drug specimens) or a Breath Alcohol Technician, or "BAT" (for alcohol tests). The good news for a beginner: there is no exam to pass at a government office and no waiting list. Qualification is something you earn by completing training and proving you can run a flawless collection โ and you can start that training today.
It's a qualification, not a government license
One of the biggest misconceptions new collectors have is that the DOT or FMCSA issues a "collector license" or "BAT certificate" you apply for. It does not. Under 49 CFR Part 40, you become qualified by doing three things and keeping the paperwork that proves it:
- Qualification training โ knowledge instruction covering the collection procedure, the chain-of-custody (the documented trail showing a specimen was never tampered with or mixed up), Part 40 requirements, and how to handle problem collections.
- A proficiency demonstration โ a set of supervised, error-free "mock collections" (practice runs using real forms and equipment, but no actual specimen) observed and attested to by a qualified monitor.
- Documentation โ written proof you met the requirements, which you must keep and hand over on request to a DOT agency representative or to any employer or C/TPA considering using you.
Compliance reference: The requirement to maintain training documentation and provide it on request to DOT representatives, employers, and C/TPAs appears in 49 CFR ยง40.33(g) (urine collectors), ยง40.35(g) (oral fluid collectors), and ยง40.213(g) (BATs/STTs). There is no federal "license" โ your qualification packet is your proof.
DOT urine collector qualification (49 CFR ยง40.33)
Urine collection is the foundation methodology and still the most common DOT test. After you complete the knowledge portion of qualification training, ยง40.33(c) requires you to demonstrate proficiency by completing five consecutive error-free mock collections. The five scenarios are spelled out in the rule and are not optional:
- Two uneventful collection scenarios (a normal, by-the-book collection)
- One insufficient quantity of urine scenario (the "shy bladder" situation)
- One temperature out of range scenario
- One refusal scenario โ a scenario in which the employee refuses to sign the CCF (the Custody and Control Form)
A separate, qualified monitor must observe each mock collection โ in person or by a real-time method that allows live observation and interaction โ and attest in writing that the collections were error-free. "Error-free" is strict: if you make a mistake on one, the count restarts.
Watch out: The five mock collections must be consecutive and error-free. A fumbled seal or a skipped step on collection number four means you start the sequence over. This is by design โ a single procedural error on a real collection can get a test cancelled.
DOT oral fluid collector qualification (49 CFR ยง40.35)
Oral fluid (saliva) collection was added as a DOT methodology in the Part 40 rule that took effect June 1, 2023, and it is a growing add-on for collectors. The structure mirrors urine: knowledge training plus five consecutive error-free mock collections. A key difference is that oral fluid qualification is device-specific โ ยง40.35(c) requires you to complete the five mock collections for each collection device you intend to use, because the steps differ between approved devices. The ยง40.35 mock scenarios include an uneventful collection, an insufficient-specimen collection, a scenario in which the employee has something in their mouth that could interfere, a tampering attempt, and a refusal-to-sign scenario, with a qualified evaluator attesting in writing.
Good to know: A DOT oral fluid test cannot actually be run until HHS has certified the laboratories needed to process it, so check current ODAPC guidance before marketing oral fluid collections. Qualifying now still positions you to offer the service as it rolls out.
Breath Alcohol Technician (BAT) qualification (49 CFR ยง40.213)
Alcohol testing is a separate credential from drug collection. A BAT operates an Evidential Breath Testing device, or EBT (a breath instrument on DOT's approved Conforming Products List). Under ยง40.213(b), qualification training must be conducted in accordance with the DOT Model BAT Course (or an equivalent course reviewed by ODAPC) and train you to proficiency on the specific EBT(s) you will use. The proficiency bar here is higher than for collections: ยง40.213(c) requires you to complete seven consecutive error-free mock tests on the EBT device(s) you intend to operate.
A related, lighter role is the Screening Test Technician (STT), who may conduct only initial screening tests using an Alcohol Screening Device (ASD); STTs need five consecutive error-free mock tests. BATs can do both screening and confirmation testing, so most people qualify as a BAT.
Compliance reference: ยง40.213 also requires BATs and STTs to keep current on Part 40 procedures and DOT guidance. Subscribing to the free ODAPC list-serve at
transportation.gov/odapc is a simple way to stay informed of changes.
Refresher and error-correction training
Qualification is not "once and done." Two ongoing rules apply across all three credentials:
- Refresher training every five years. Urine collectors (ยง40.33(e)), oral fluid collectors (ยง40.35(e)), and BATs/STTs (ยง40.213(e)) must complete refresher training no less frequently than once every five years from the date they completed initial qualification.
- Error-correction training within 30 days. If you make a mistake that causes a test to be cancelled, you must complete error-correction training within 30 days of being notified (ยง40.33(f), ยง40.35(f), ยง40.213(f)). For collectors, that retraining ends with three consecutive error-free mock collections โ one routine scenario plus two scenarios covering the specific area where the error occurred.
Example
Maria finishes the knowledge modules, then gets on a live video session with a qualified monitor. She runs her five mock urine collections; on the temperature-out-of-range scenario she forgets to note the reading on the CCF. The monitor flags it, and Maria restarts the sequence. On her next clean run of all five, the monitor signs an attestation. Maria saves that attestation, her training completion record, and her certificate in one PDF โ that packet is her qualification when an auditor or a new client asks for proof.
What about non-DOT collector training?
Most testing businesses serve both DOT-regulated employers and private (non-DOT) employers โ think a local warehouse running its own drug-free workplace program. Non-DOT testing is not governed by Part 40, so it has more flexibility (employers can test for different panels, and instant/point-of-care testing is common). But you should still be trained for it. Proper non-DOT collector training covers the company's chosen protocol, chain of custody, instant-test reading, and specimen handling โ and it protects you if a non-DOT result is ever challenged. (Note: if you run instant/point-of-care drug tests, a CLIA Certificate of Waiver may be required โ that's covered in its own section.)
How TestRight Academy gets you qualified
TestRight Academy's programs are built to satisfy these exact Part 40 elements. You can begin the 49 CFR Part 40 Foundations course free and self-paced โ study now, pay only when you're ready for the live, supervised mock-collection qualification that produces your trainer-issued certificate and attestation packet. Available programs include the DOT Urine Collector (ยง40.33), Breath Alcohol Technician (ยง40.213), and DOT Oral Fluid Collector (ยง40.35), plus free non-DOT methodology modules.
- Complete qualification knowledge training for your chosen methodology
- Pass the required error-free mock collections (5 for urine/oral fluid; 7 mock tests for BAT)
- Get the monitor's written attestation and your certificate
- Save everything in one qualification packet you can produce on request
- Calendar your five-year refresher date now, so it never lapses
Avoid this
- Believing a "DOT certificate" alone makes you qualified โ the mock-collection proficiency demonstration and written attestation are mandatory.
- Skipping the device-specific mock collections for oral fluid, or the proficiency demonstration for each EBT you'll run as a BAT.
- Letting refresher training lapse past five years, which means you no longer meet the qualification requirements.
- Throwing away your training records โ you must produce them for auditors, employers, and C/TPAs on request.
Explore the qualification programs at testrightacademy.com/programs, and keep the step-by-step process at your side during collections with the Collector Cheat Sheet.
Part 5 of 16
Step 4 โ CLIA Waiver & Point-of-Care Testing
Bottom line: For workplace / employment drug testing, the normal and recommended choice is FUO (Forensic Use Only) cups — no CLIA waiver required. You're free to use CLIA-Waived cups instead, but only if you obtain the Certificate of Waiver — and doing so restricts you to CLIA-Waived devices only. Most employers stick with FUO for exactly that reason.
This step answers one question that confuses almost every newcomer: do you need a federal lab certificate to run drug tests? The short answer is that it depends on whether you read results yourself or ship the specimen to a lab. If you only collect and ship, you generally do not need anything from CLIA. If you read a rapid "instant" device onsite for medical purposes, you may. Let's untangle exactly where that line falls.
What CLIA is (and who runs it)
CLIA stands for the Clinical Laboratory Improvement Amendments โ the federal law that governs laboratory testing on human specimens in the United States. It is administered by CMS (the Centers for Medicare & Medicaid Services), part of HHS, under the regulations at 42 CFR Part 493. CLIA sorts every test into a complexity tier โ waived, moderate, or high complexity โ and each tier carries its own certificate and staffing rules. As a brand-new testing startup, the only tier you could plausibly fall under is the lowest one: the Certificate of Waiver (CoW), which covers simple, low-risk tests like many rapid drug screens that are designed to be hard to perform incorrectly.
The deciding question: do you "test," or do you "collect"?
CLIA regulates the act of analyzing a specimen and producing a result โ not the act of collecting one. That single distinction decides whether CLIA applies to you.
- You collect and ship to a lab โ CLIA generally does NOT apply to you. You are a specimen collector. The certified laboratory that runs the analysis is the regulated party, and it already holds its own certifications. Your job ends when the specimen is sealed, the chain-of-custody form is completed, and the package goes out the door.
- You read/report an instant result yourself onsite โ this is "testing," and CLIA may apply. An instant cup, dip card, or oral-fluid device produces a result that you interpret. Depending on the device and purpose, that act can put you under CLIA.
Compliance reference: CLIA's scope and exceptions live in 42 CFR Part 493. A facility "that only performs testing for forensic purposes" is excepted from CLIA (42 CFR §493.3(b)(1)), and laboratories certified by SAMHSA are excepted for the drug testing they perform that meets SAMHSA guidelines (42 CFR §493.3(b)(3)). CMS administers the program โ see the
CMS CLIA program.
The device label is the real trigger โ FUO vs. CLIA-Waived
Here is the nuance that trips people up: instant drug-test devices are sold in two regulatory flavors, and the labeling on the box, not your state, is what determines whether CLIA applies.
| Device type | What the label says | Do you need CLIA? |
| FUO โ Forensic Use Only | Marketed for non-clinical use: employment, workplace, legal, insurance. Most workplace cups and dip cards fall here. | No. Covered by the forensic exception (42 CFR §493.3(b)(1)). This is why many TPAs need no CLIA certificate at all. |
| FDA-cleared / CLIA-Waived | FDA-cleared for clinical/medical use and assigned waived complexity. Used in clinics, treatment programs, and occupational health. | Yes, if you read it onsite โ you need a Certificate of Waiver. |
Watch out: A Certificate of Waiver is not a free "extra credential." Once you hold one, you may only perform tests that are classified as waived โ you cannot run FUO devices under that certificate. Getting a CoW you don't need can actually limit your business and add quality-control and documentation burdens.
Our CLIA Waiver Guide includes a short interactive wizard that walks you through your program type, where results are read, your device label, and your state to help you reason through your specific situation.
A rapid screen is never a final "positive"
Even when you read instant results, remember what that result is: a presumptive screen, not a confirmed outcome. There are only two correct things to do with it:
- Negative โ the screen detected nothing on the panel. This is the only result a screening device can resolve on its own.
- Non-negative (presumptive positive) โ the specimen must be sent to a certified laboratory for confirmation by GC/MS or LC/MS/MS, and then reviewed by a Medical Review Officer (MRO) โ a licensed physician trained to interpret drug-test results โ before anyone is ever told "positive."
Compliance reference: For
DOT-regulated testing, instant/point-of-collection devices are
not authorized โ DOT urine and oral-fluid specimens must be screened and confirmed at HHS-certified laboratories, then verified by an MRO (49 CFR Part 40; see the laboratory requirements in Subpart F and the MRO verification procedures in Subpart G). See
DOT ODAPC, 49 CFR Part 40. Instant testing is therefore a
non-DOT service.
Example
A non-DOT manufacturing client wants same-day pre-employment results to speed up hiring. You read FUO instant cups onsite: negatives clear the candidate immediately, and any non-negatives you ship to your reference lab for GC/MS confirmation and MRO review before reporting anything to the employer. Because you used FUO-labeled devices for an employment (forensic) purpose, no CLIA certificate is required.
How to get a Certificate of Waiver (if you actually need one)
If you will read FDA-cleared / CLIA-Waived devices onsite for clinical purposes, here is the federal process:
- Complete Form CMS-116. This is the official CLIA application (current revision 03/24), available from CMS. Select the Certificate of Waiver.
- Mail it to your State Agency โ the CLIA office for the state where your testing site is located, not directly to CMS. Do not send payment with the application.
- Pay the biennial waiver fee when CMS sends your fee coupon. CMS sets the Certificate of Waiver fee and updates it periodically, so confirm the current amount on the CMS fee schedule before budgeting.
- Receive your certificate and 10-character CLIA number. You may begin testing once the certificate is in hand.
- Renew every two years. CLIA certificates run on a two-year cycle. Certificate-of-Waiver labs are not subject to routine inspections, so renewal is largely a matter of paying the fee on time.
Compliance reference: The certificate types, fees, and two-year cycle are set by CMS โ see
Form CMS-116 and the
CMS "How to Apply for a CLIA Certificate" page. CMS has been updating CLIA fees and moving payment online, so always confirm the current fee and payment method before you apply.
State rules can add a layer
Federal CLIA is not always the whole story. Some states run their own CMS-approved laboratory programs or require extra state licensing on top of CLIA:
- Washington and New York operate CMS-approved exempt-state programs. Washington's Medical Test Site license stands in for federal CLIA (do not file CMS-116); New York licenses laboratories through its own program, so contact the state for how it applies to you.
- A number of other states (for example, California and Rhode Island) require additional state-level laboratory licensing even where federal CLIA already applies. The exact list changes, so check your specific state.
- Many other states simply apply federal CLIA directly.
Because these rules change and vary, always confirm with your own state agency โ start with our CLIA State Directory, which lists each state's CLIA contact, then make a quick confirming phone call.
Avoid this
- Assuming you need CLIA just because you "do drug testing." If you only collect and ship, you almost certainly do not.
- Getting a Certificate of Waiver you don't need โ it locks you into waived devices and out of FUO devices.
- Treating a non-negative instant screen as a confirmed positive. It must go to a lab and MRO first.
- Running instant tests for DOT employers โ DOT does not authorize instant results; specimens must go to an HHS-certified lab.
- Forgetting your state. Some states require licensing or run their own program regardless of the federal answer.
Pro tip: Most lean startups launch as collect-and-ship operations using a certified reference lab and add instant point-of-care testing later. That keeps you outside CLIA on day one and lets you add the Certificate of Waiver only when a real client need justifies the trade-offs.
Your CLIA action checklist
- Decide whether you will only collect-and-ship (likely no CLIA) or read instant results onsite.
- Check your instant device label: FUO (no CLIA) vs. FDA-cleared/CLIA-Waived (CLIA if read onsite).
- Confirm your state's rules in the CLIA State Directory.
- If you need a CoW, complete Form CMS-116, mail it to your State Agency, and pay the current biennial fee when CMS sends your coupon.
- Build your process so every non-negative instant result goes to a certified lab and an MRO before reporting.
Part 6 of 16
Step 5 โ Testing Methods & Services You Can Offer
Once you are trained and your business is set up, the next decision is what you will actually offer. A drug and alcohol testing collection business can perform several different testing services, and each one has its own equipment, its own training, and its own rules about whether it counts for federal (DOT) testing. This section walks through the main methods so you can decide what to launch with and what to add later.
Two quick definitions before we start. A collector is the person who follows the procedures to obtain a specimen (urine, oral fluid, breath) and document it correctly. DOT means the U.S. Department of Transportation; testing performed under its rules (49 CFR Part 40) for safety-sensitive workers like commercial drivers is "DOT" testing, and everything else an employer orders on its own authority is "non-DOT." Many successful collection sites do both.
The core testing methods you can offer
Urine collection โ the DOT standard
Urine is the longtime workhorse of workplace drug testing and is the default specimen under the DOT program. To collect DOT urine specimens you must be a qualified collector โ this is not a federal "license," but a training requirement: you complete qualification training on the collection procedure and perform five consecutive error-free mock collections (covering the specific scenarios DOT lists) monitored by a qualified person (49 CFR ยง40.33). TestRight Academy's DOT Urine Collector qualification is built around exactly this ยง40.33 requirement, and the live mock-collection process is described on How It Works.
Compliance reference: A DOT urine collector must complete qualification training and five consecutive error-free mock collections monitored by a qualified person, and must complete refresher training no less often than every five years (49 CFR ยง40.33).
Oral fluid collection โ DOT-authorized since 2023
Oral fluid (a saliva-based specimen collected with a swab) is the newest DOT-authorized methodology. DOT's final rule published May 2, 2023 (effective June 1, 2023) added oral fluid as an alternative to urine under Part 40, with its own collector qualification standard at ยง40.35. Like urine, it requires qualification training plus monitored, error-free mock collections.
Watch out: Although oral fluid is authorized under DOT rules, it cannot actually be used for DOT testing until the U.S. Department of Health and Human Services (HHS) certifies at least two laboratories for oral fluid. As of mid-2026 no laboratories had yet received that certification, so confirm the current HHS lab-certification status (DOT/ODAPC publishes the list) before marketing DOT oral fluid collections. Training now means you are ready the moment it goes live.
Hair testing โ non-DOT only
Hair testing offers a long detection window (often cited around 90 days) because drugs become embedded as the hair grows. It is popular with private employers for pre-employment screening. Hair testing is not an authorized DOT methodology โ it is non-DOT only โ but it can be a strong add-on service for your private-employer clients. You can review the non-DOT options among TestRight Academy's training programs.
Breath alcohol testing (BAT)
Alcohol testing is a separate service from drug testing. Under DOT, a Breath Alcohol Technician (BAT) performs alcohol tests using an Evidential Breath Testing device (EBT) that is approved by the National Highway Traffic Safety Administration (NHTSA) and appears on the conforming-products list DOT/ODAPC publishes. A screening test may also use an Alcohol Screening Device (ASD), but a confirmation test must be done on an EBT. BAT qualification is governed by ยง40.213, and the device must be on the approved list. You can browse the approved devices on the DOT Approved Devices reference page, and qualify through the BAT program.
Compliance reference: Only NHTSA-approved EBTs on the conforming-products list may be used for DOT alcohol confirmation testing; the EBT must print the result and assign a unique sequential test number, and any result of 0.02 or higher must be confirmed on such an EBT (49 CFR ยง40.213, ยง40.231).
Instant (point-of-care) vs. lab-based testing
Instant tests โ also called point-of-care (POCT) or rapid tests โ give a preliminary screening result on the spot using a cup or device. Lab-based testing sends the specimen to a laboratory for analysis. The big distinction:
- DOT drug tests must go to an HHS-certified laboratory โ instant/point-of-care results are not valid for DOT drug testing.
- Non-DOT instant testing is allowed and very common for private employers who want fast pre-employment screening.
If you offer instant drug testing in your own shop, you may be performing a "laboratory test" under federal law and need a CLIA certificate (Clinical Laboratory Improvement Amendments; the program is run by CMS together with the FDA and CDC). Most instant cups are CLIA-waived devices, which means you typically need only a Certificate of Waiver โ a low-cost, low-complexity certificate โ rather than a full lab license. See TestRight Academy's CLIA Waiver guide and CLIA State Directory.
Pro tip: Breath alcohol testing is not a CLIA-regulated lab test, so an EBT/BAT service does not require a CLIA certificate. CLIA applies to the instant drug-screen cups and analyzers, not to your breathalyzer.
Screening vs. confirmation, chain of custody, and split specimens
Three concepts run through everything above:
- Screening vs. confirmation. A screening (initial) test sorts out the clearly negative specimens. Anything that screens "non-negative" goes to a confirmation test using a more precise method (laboratory GC-MS or LC-MS for drugs; a second EBT reading for alcohol). A non-negative screen is never a final positive โ the confirmation result is what counts.
- Chain of custody. This is the documented, unbroken trail showing who handled the specimen and when, recorded on the Custody and Control Form (CCF). It is the backbone of a defensible test, and the DOT urine collection procedure is built around it. (TestRight Academy's Forms Library covers these forms.)
- Split specimen. For DOT urine, the specimen is split into a primary "A" bottle and a secondary "B" bottle. If the A bottle confirms positive, the employee may request that the B bottle be tested at a second HHS-certified lab to verify the result (49 CFR ยง40.71, ยง40.171).
And one more role you will hear about constantly: the MRO (Medical Review Officer) โ a licensed physician who reviews lab-confirmed results before they are reported to the employer, ruling out legitimate medical explanations. DOT lab-based drug tests require an MRO; you can find one through the Find an MRO directory.
Comparison of testing methods
| Method | Typical detection window | DOT-allowed? | Needs lab / MRO? | Equipment / qualification |
| Urine (lab-based) | ~Hours up to several days (varies by drug) | Yes โ the DOT standard | HHS-certified lab + MRO required | Collection kit, split-specimen CCF; ยง40.33 qualified collector |
| Oral fluid | Shortest โ generally recent use | Authorized (pending HHS lab certification) | HHS-certified lab + MRO required for DOT | Approved oral-fluid collection device; ยง40.35 qualified collector |
| Hair | Longest โ commonly cited up to ~90 days | No โ non-DOT only | Lab required; MRO commonly used | Hair collection kit; non-DOT training |
| Breath alcohol (EBT/ASD) | Current alcohol concentration (real-time) | Yes | No lab; no MRO (result is immediate) | NHTSA-approved EBT (ASD for screening); ยง40.213 BAT |
| Instant / point-of-care drug | Preliminary screen only | No (not valid for DOT) | Non-negatives need lab confirmation | CLIA-waived cup/device; usually a CLIA Certificate of Waiver |
Detection windows are general ranges that vary by substance, dose, and individual; treat them as guidance, not exact cutoffs.
Avoid this
- Marketing instant-cup drug results as valid DOT tests โ DOT drug testing must be lab-based.
- Offering hair testing to a DOT client for a federal test โ hair is non-DOT only.
- Running an in-house instant drug screen without checking whether you need a CLIA Certificate of Waiver.
- Advertising DOT oral fluid collections before HHS has certified the required laboratories.
- Treating a non-negative screen as a "positive" โ only the confirmation (and MRO review, for DOT) makes it final.
Example
A new collector launches with two services: DOT urine collection (ยง40.33 qualified, specimens sent to an HHS-certified lab with MRO review) and DOT breath alcohol testing using an NHTSA-approved EBT (ยง40.213 BAT). For her private-employer clients she adds non-DOT instant 10-panel urine cups under a CLIA Certificate of Waiver, sending only the non-negatives to the lab. As the business grows, she qualifies on oral fluid (ยง40.35) so she is ready when HHS certifies the labs, and adds hair testing for clients who want a longer detection window.
A practical starting point
- Decide your launch services: most start with DOT urine + breath alcohol (the "Starter" pairing).
- Complete the matching qualifications: ยง40.33 urine collector and/or ยง40.213 BAT (see Programs).
- If offering instant drug testing, determine whether you need a CLIA Certificate of Waiver (CLIA guide).
- Line up an HHS-certified lab and an MRO before you collect your first DOT specimen.
- Plan add-ons (oral fluid, hair) as your client base grows.
Part 7 of 16
Step 6 โ Your Collection Site: Setup, Supplies & Equipment
Your collection site is where the regulations meet reality โ it's the physical space (or van) where you actually collect specimens, and it has to be set up so a donor cannot dilute, substitute, or adulterate (tamper with) their sample. Whether you run a fixed location or a mobile unit, the same federal security rules apply, and getting the room and supplies right is the difference between a defensible collection and one that gets questioned at the lab.
Fixed vs. mobile: two ways to set up
You don't need a full medical office to start. A compliant DOT urine collection site can be as simple as a single private restroom you control, and many collectors begin with a small clinic-style room or even a mobile setup that travels to the employer's worksite for events like a fleet's post-accident or random testing day.
- Fixed site: a dedicated restroom or collection area in your own office or clinic. Easiest to keep secured and stocked, and best if you expect steady walk-in volume.
- Mobile site: a van or a room you set up temporarily at a customer's location. Often in demand from trucking and construction clients, but you must re-secure the area every time because you don't control it day-to-day.
For breath alcohol testing, note that the only devices you may use are units on the NHTSA Conforming Products List of Evidential Breath Measurement Devices โ Evidential Breath Testing (EBT) units. Devices on that list are evaluated for mobile and/or non-mobile use, so if you plan to test in a van, confirm your device is approved for mobile use. TestRight maintains a current reference to the approved list at testrightacademy.com/dot-approved-devices.
Securing the collection area (the ยง40.43 rules)
This is the heart of a compliant site. Before every urine collection, the collector must take concrete steps to secure water sources and eliminate anything a donor could use to beat the test.
Compliance reference: Before each collection, the collector must (1) secure water sources or otherwise make them unavailable; (2) ensure the water in the toilet is blue (add a bluing agent โ a coloring dye); (3) ensure no soap, disinfectants, cleaning agents, or other possible adulterants are present; (4) inspect the site to ensure no foreign or unauthorized substances are present; (5) tape or otherwise secure shut any movable toilet tank top, or put bluing in the tank; (6) ensure undetected access (for example, through a door not in your view) is not possible; (7) secure areas and items โ ledges, trash receptacles, paper towel holders, and under-sink areas โ suitable for concealing contaminants; and (8) recheck all of these items following each collection (49 CFR ยง40.43).
Two practical points beginners miss. First, in a multi-stall restroom you generally need to secure all water sources and address every toilet, or conduct the collection as a monitored collection โ most collectors simply use a single-toilet room to keep it simple. Second, if you borrow a space normally used for something else (a public restroom, a hospital exam room), you must restrict access to your collection materials and specimens and secure the facility against access during the procedure to ensure privacy (49 CFR ยง40.43).
Pro tip: Build a small "site kit" you carry to every mobile collection โ painter's tape for faucet handles and tank lids, a bottle of bluing tablets/dye, and trash bags to bag up the soap and paper towels you remove. Once you have a routine, setup is quick.
Required signage
Clear signage helps protect you: it documents that the donor was instructed, deters tampering, and keeps unauthorized people out of the area mid-collection. At a minimum, post a door/"do not enter" sign on the collection room, restroom and sink/faucet signs marking water sources as off-limits, donor instructions, a photo-ID-required notice, and a tampering-warning sign. TestRight offers a free, printable sign set covering these areas at testrightacademy.com/collection-site-signs โ laminate them so they wipe clean and travel with your mobile kit.
The forms you must use
Every DOT collection is documented on the Federal Drug Testing Custody and Control Form (CCF) โ the chain-of-custody paperwork that follows the specimen from your hands to the lab to the Medical Review Officer. The CCF must be used to document every DOT collection, and you must not use a non-Federal form or an expired CCF for a DOT collection (49 CFR ยง40.40). For your non-DOT (employer/private) clients, you'll use a separate non-Federal chain-of-custody form instead โ never the Federal CCF. TestRight's Forms Library bundles current CCF references and non-DOT forms with free updates when the federal form is revised.
Watch out: The CCF gets periodically revised and old versions expire. Using an expired CCF for a DOT collection can be a flaw in the collection โ check the form's expiration before you order a stack, and don't accept expired stock from a supplier.
Your supply list
Here's what a working DOT/non-DOT collection station needs on hand. Buy collection kits from a reputable supplier; many ship pre-assembled with the cup, seals, and temperature strip together.
| Supply | What it's for |
| Federal CCF | Documents every DOT collection; required by ยง40.40. |
| Non-DOT chain-of-custody forms | For private/employer (non-regulated) clients. |
| Collection cups / split-specimen kits | The donor voids into the cup; you split into primary (A) and split (B) bottles. |
| Temperature strip | Built into the cup; you read it within four minutes to confirm 90โ100 ยฐF (49 CFR ยง40.65). |
| Tamper-evident seals & labels | Sealed over each bottle and initialed/dated by the donor to lock chain of custody. |
| Bluing agent (dye/tablets) | Colors the toilet and tank water so it can't be used to dilute (ยง40.43). |
| Nitrile gloves | Worn by the collector for every collection (bloodborne-pathogen safety, OSHA 29 CFR 1910.1030). |
| EBT / breath screening device | NHTSA Conforming Products List unit for DOT alcohol tests; confirm mobile/non-mobile approval. |
| Oral fluid collection device | For oral fluid testing โ see the note below on availability. |
| Shipping materials | Leak-proof specimen bags, absorbent sheets, and a lab-supplied mailer/box to send sealed specimens to the lab. |
Watch out: DOT's rules now include a framework for oral fluid drug testing, but it is not yet usable in practice: oral fluid testing only becomes "available" once at least two HHS-certified oral fluid laboratories exist (along with a qualified oral fluid collector and a conforming device), and as of June 2026 HHS has not certified those laboratories. Until that happens, urine remains the method you'll actually run for DOT drug collections. Stock oral fluid devices only when HHS certification and a conforming device are confirmed available. Check the current status on DOT's ODAPC page before you rely on oral fluid.
Example
Maria sets up a mobile collection at a trucking yard. She picks the single-toilet restroom in the office, tapes the faucet handle shut, drops a bluing tablet in the bowl and the tank, bags up the hand soap and paper towels, and tapes her TestRight door and sink signs in place. She lays out a Federal CCF, gloves, and a split-specimen kit. After the driver voids, she reads the temperature strip within four minutes (98 ยฐF โ in range), has him initial the seals over both bottles, completes the CCF, and seals everything into the lab mailer.
Avoid this
- Leaving soap, cleaner, or a "courtesy" air freshener in the room โ any of these can be flagged as a possible adulterant.
- Forgetting to secure a movable toilet tank lid โ a classic hiding spot for substitute urine.
- Reusing an expired CCF, or grabbing a non-DOT form for a DOT collection.
- Skipping the post-collection recheck of the room before the next donor.
- Reading the temperature strip late โ you have a four-minute window (ยง40.65).
Setup checklist
- Choose a single-toilet, securable room (or plan your mobile re-securing routine).
- Secure/tape water sources; add bluing to the bowl and tank.
- Remove soap, cleaners, and any foreign substances; secure ledges and trash areas.
- Post your required signs (door, restroom, sink, donor instructions, photo ID, tampering warning).
- Stock current Federal CCFs plus non-DOT forms.
- Stock collection kits with temperature strips and tamper-evident seals.
- Have gloves, bluing agent, and lab-approved shipping mailers ready.
- Confirm your EBT is on the NHTSA Conforming Products List and approved for how you'll use it (mobile vs. non-mobile).
- Recheck the room after every collection.
Part 8 of 16
Step 7 โ Lab & Medical Review Officer (MRO) Relationships
If you plan to offer lab-based urine testing, you can't simply collect a specimen and hand the customer a result. Federal rules build in two independent professional safeguards between the cup and the employer: an HHS-certified laboratory that analyzes the specimen, and a Medical Review Officer (MRO), a licensed physician who reviews every non-negative result before it becomes official. As a collector or C/TPA (Consortium/Third-Party Administrator โ a company that manages testing programs for employers), you don't perform either of these roles yourself, but you must connect your clients to both. This section explains how.
Why you need an HHS-certified lab for DOT testing
Every DOT urine specimen must be analyzed by a laboratory certified by the U.S. Department of Health and Human Services (HHS) under the National Laboratory Certification Program (NLCP). This is not optional or a "nice to have" โ it is the rule. A U.S. laboratory may participate in DOT drug testing only if it is HHS-certified under the NLCP for each testing methodology it performs (49 CFR §40.81). A regular hospital or clinical lab down the street does not qualify unless it appears on the HHS certified list.
Compliance reference: Under 49 CFR §40.81, U.S. laboratories may participate in DOT drug testing only if they are certified by HHS under the National Laboratory Certification Program for each testing methodology used. HHS publishes an updated list of currently certified laboratories in the Federal Register during the first week of each month.
HHS-certified status changes over time, so always confirm a lab is currently listed before you route specimens to it. SAMHSA (the HHS agency that runs the program) maintains the official certified-lab list. For non-DOT testing the rules are looser, but using an HHS-certified lab is still considered best practice and is what most professional programs use.
Setting up a lab account
Most new collection sites do not contract directly with a national lab on day one. There are two common paths:
- Direct lab account. National reference labs such as LabCorp and Quest Diagnostics โ both HHS-certified and integrated with most industry platforms โ can set you up with an account, a client code, a courier or shipping arrangement, and a supply of DOT federal chain-of-custody forms (CCFs). Independent HHS-certified labs (for example, Clinical Reference Laboratory) are also options.
- Through a C/TPA platform. Many collectors instead plug into an established platform such as FormFox (an electronic CCF / eCCF system used across many collection sites) or a large TPA, which bundles the lab, MRO, and reporting together. This is often the fastest way for a beginner to start because the lab and MRO relationships are pre-built.
To set up an account you'll typically provide your business information (EIN, address), your collector qualification documentation, and shipping details, and you'll order DOT-specific CCFs and shipping materials. TestRight Academy's drug-testing labs directory lists major HHS-certified labs and the TPA platforms that connect collectors, labs, MROs, and employers.
Watch out: Point-of-care "instant" cups and dip cards may NOT be used as the final result for DOT testing โ DOT specimens must go to an HHS-certified lab. Instant devices are for non-DOT programs only.
What a Medical Review Officer (MRO) is and does
An MRO is a licensed physician (M.D. or D.O.) who is knowledgeable about substance-abuse disorders, has completed qualification training in the federal drug-testing regulations, and has passed an examination given by a nationally recognized MRO certification board (49 CFR §40.121). The MRO is the independent gatekeeper between the laboratory and the employer. A lab result that is anything other than a clean negative cannot go straight to the employer โ it must first be reviewed and verified by the MRO (49 CFR Part 40, Subpart G).
When the lab reports a confirmed non-negative (positive, adulterated, substituted, or invalid), the MRO:
- Reviews the chain-of-custody form and the laboratory result for any fatal or correctable errors that would require cancelling the test;
- Contacts the employee (donor) directly to ask whether there is a legitimate medical explanation โ for example, a valid prescription;
- Determines and reports the final verified result (negative, positive, refusal to test, or cancelled) to the employer or C/TPA.
Compliance reference: Under 49 CFR Part 40, Subpart G, the MRO must review and verify confirmed non-negative laboratory results โ including giving the employee an opportunity to provide a legitimate medical explanation โ before a verified result is reported to the employer. See §40.121 for MRO qualifications and §§40.123โ40.135 for the MRO's responsibilities and the verification process.
This protects honest employees from results caused by legitimate medications, while preserving the integrity of the program. It is a legally required safeguard, not a courtesy.
How results flow: lab → MRO → employer
| Step | Who | What happens |
| 1. Collection | You (the collector) | Collect the specimen under chain-of-custody and ship it to the HHS-certified lab. |
| 2. Analysis | HHS-certified lab | Screens, then confirms any non-negative, and reports the result to the MRO. |
| 3. Verification | MRO | Reviews the paperwork, interviews the donor on non-negatives, and verifies the final result. |
| 4. Reporting | MRO → Employer / C/TPA | The verified result reaches the employer's Designated Employer Representative (DER). |
Negative results with no problems can flow more directly, but only the MRO issues the official verified determination for non-negatives. As a collector, your job ends at Step 1 โ done correctly, with no errors on the CCF.
How to find and contract an MRO
You don't have to employ a physician โ most C/TPAs and collection sites contract with an MRO service, or use the MRO bundled into their TPA platform. To find a qualified MRO, you can use the directories of nationally recognized MRO certification bodies, such as:
- MROCC โ Medical Review Officer Certification Council (mrocc.org)
- AAMRO โ American Association of Medical Review Officers (aamro.com)
TestRight Academy's Find an MRO page explains the MRO's role in detail and links to these directories. Always confirm the MRO holds a current certification recognized under 49 CFR Part 40.
Pro tip: For a brand-new business, the simplest setup is to partner with one TPA platform that already includes an HHS-certified lab and a contracted MRO. You focus on doing flawless collections; the platform handles lab logistics and MRO verification. As you grow, you can negotiate direct lab and MRO relationships for potentially better margins.
One more role to know: the SAP
You'll also hear about the Substance Abuse Professional (SAP). Briefly: when an employee tests positive or refuses a DOT test, they cannot return to safety-sensitive duties until they complete the return-to-duty process with a SAP, who evaluates the employee and recommends education and/or treatment, then conducts a follow-up evaluation and sets a follow-up testing plan (49 CFR Part 40, Subpart O; §40.281 covers who is qualified to act as a SAP). The SAP is a different professional from the MRO โ you generally won't provide SAP services as a collector, but your employer clients will need access to one, so it's worth knowing the role.
Avoid this
- Routing DOT specimens to a clinical lab that isn't on the HHS/NLCP certified list โ verify current certification first.
- Letting a non-negative lab result go to the employer without MRO verification.
- Assuming an instant/point-of-care result can stand as a final DOT result โ it cannot.
- Confusing the MRO (verifies test results) with the SAP (manages the return-to-duty process). They are separate roles.
- Choose your path: a direct HHS-certified lab account, or a C/TPA platform that bundles lab + MRO.
- Confirm the lab's current HHS/NLCP certification on the SAMHSA list before sending specimens.
- Set up your lab account: client code, DOT CCFs, shipping/courier, and supplies.
- Contract a certified MRO (via MROCC or AAMRO) or confirm one is included in your platform.
- Map your result flow (lab → MRO → DER) and identify each client's Designated Employer Representative.
- Know a SAP resource you can refer employer clients to for return-to-duty cases.
Part 9 of 16
Step 8 โ DOT vs. Non-DOT Testing (Running Both Correctly)
If your collection business serves trucking, transit, aviation, or any federally regulated client, you will quickly find yourself running two very different kinds of tests side by side: DOT tests (governed by federal rules) and non-DOT tests (governed by an employer's own policy). They look similar on the surface, but they follow different rules, use different paperwork, and carry different consequences. Mixing them up is one of the fastest ways for a new collector to invalidate a test and lose a client, so this step is about understanding the difference and keeping the two programs strictly separate.
What "DOT" and "non-DOT" actually mean
A DOT test is a drug or alcohol test performed under the U.S. Department of Transportation's uniform procedures in 49 CFR Part 40 (the federal rulebook every DOT collector follows). It applies only to safety-sensitive employees in federally regulated industries โ for example, commercial drivers with a CDL (regulated by the FMCSA), pilots and aircraft mechanics (FAA), railroad workers (FRA), transit operators (FTA), pipeline workers (PHMSA), and maritime crew (USCG). On a DOT test, the collection procedure is fixed: the same forms, the same panel, the same steps, every time, no matter who the employer is.
A non-DOT test is any drug or alcohol test that is not required by a DOT agency. It is driven entirely by the employer's drug-free workplace policy โ the employer decides who gets tested, which substances are on the panel, what form is used, and what happens after a positive. There is no single federal procedure governing it. (For a deeper plain-English breakdown, see TestRight Academy's DOT vs. Non-DOT guide.)
Side-by-side: the differences that matter
| Element | DOT testing | Non-DOT testing |
| Governed by | 49 CFR Part 40 (federal procedures), plus the relevant DOT agency rule (e.g., FMCSA Part 382) | Employer's drug-free workplace policy |
| Who it covers | Safety-sensitive employees in DOT-regulated industries | Anyone not in a DOT-regulated safety-sensitive role |
| Form used | Federal CCF (Custody and Control Form) for drug tests; the DOT Alcohol Testing Form (ATF) for alcohol tests | A non-DOT / non-Federal form (employer- or lab-provided) |
| Procedures | Fixed and non-negotiable; the employer cannot modify them | Flexible; set by employer policy |
| Lab | Must be an HHS-certified laboratory | Employer's choice |
| MRO review | Required (a Medical Review Officer verifies drug results) | Not federally required; employer decides |
| Drug panel | The standard five-class DOT panel: marijuana, cocaine, amphetamines, opioids, PCP | Employer's choice; can be larger or smaller |
| Consequences | Federally mandated (e.g., removal from safety-sensitive duty, SAP process) | Determined by employer policy |
The six DOT testing "reasons"
Every DOT test must have a reason, and there are six recognized testing scenarios across the DOT programs. The "reason for test" is recorded on the CCF, so you need to know all six cold. Keep in mind that Part 40 sets the procedures for how a test is conducted, while when and whether a test is required is set by each DOT agency's own rule โ for trucking, that is the FMCSA rule in 49 CFR Part 382. (See the DOT Testing Reasons guide for the full timing rules.)
- Pre-employment โ Done before a new hire performs safety-sensitive duties; the employer must receive a verified negative drug result first. (A pre-employment alcohol test is optional, not required.)
- Random โ Unannounced testing of a randomly selected pool throughout the year. Selected employees must report immediately.
- Reasonable suspicion โ Triggered by a trained supervisor's specific, documented observations of the employee's appearance, behavior, speech, or odor. (See Reasonable Suspicion.)
- Post-accident โ Required after qualifying accidents. Under the FMCSA rule, alcohol is tested as soon as possible (attempts cease after 8 hours; if not done within 2 hours, the employer must document why) and drugs within 32 hours. Triggers and timing vary by DOT agency. (See Post-Accident Testing.)
- Return-to-duty โ Required before an employee returns after a violation; always conducted under direct observation, and only after the SAP (Substance Abuse Professional) process is complete.
- Follow-up โ Unannounced, directly observed tests on a schedule set by the SAP after the employee returns to duty.
Compliance reference: The requirement to keep DOT and non-DOT testing entirely separate โ including the prohibition on using the federal CCF or ATF for non-DOT collections, even with the DOT references crossed out โ is in 49 CFR ยง40.13. The five-class DOT drug panel is set in 49 CFR ยง40.85, and the DOT alcohol testing form is in 49 CFR ยง40.225. The six testing scenarios themselves are established by each DOT agency's rule (for trucking, FMCSA's 49 CFR Part 382, Subpart C), not by Part 40.
Why you must keep the two programs strictly separate
This is the single most important takeaway of this step. Under ยง40.13, DOT and non-DOT testing must be completely separate in all respects. In practical terms:
- Never use the federal CCF or ATF for a non-DOT test, and never use a non-DOT form for a DOT test. The rule expressly prohibits using the DOT forms in a non-DOT program.
- Crossing out the "DOT" references on a CCF does not make it a non-DOT form. The rule specifically bans this workaround.
- DOT tests take priority. If a person needs both a DOT and a non-DOT test, complete the DOT collection first. You cannot use one specimen for both โ for a urine collection, discard any excess from the DOT test and collect a separate void for the non-DOT test.
- Confirm the test type before you touch anything. The DER (Designated Employer Representative โ the employer's contact for testing decisions) or the order form tells you whether it is DOT or non-DOT. When in doubt, ask before you start.
Watch out: A presumptive positive on an instant device is never a final result โ DOT and non-DOT alike, a non-negative screen must go to a confirmation lab and (for DOT) an MRO before anyone is told "positive." Calling a result before that step is a serious error.
Pro tip: Physically separate your supplies. Keep DOT CCFs and ATFs in one labeled folder or tray and non-DOT forms in another, with clear signage at the collection station. The cheapest way to avoid a "wrong form" mistake is to make it hard to grab the wrong one.
Avoid this
- Grabbing a federal CCF for a test that turns out to be non-DOT (or vice versa).
- Modifying or "crossing out" a CCF or ATF to use it for a non-DOT collection.
- Starting the non-DOT collection first when both are due โ the DOT test comes first.
- Assuming the employer's panel or procedures apply to a DOT test. They never override Part 40.
- Reusing one urine specimen to satisfy both a DOT and a non-DOT test.
Action checklist
- Confirm DOT vs. non-DOT (and the reason for test) before every collection.
- Stock and clearly separate federal CCFs/ATFs and non-DOT forms.
- For DOT tests, follow Part 40 exactly โ no employer modifications.
- For non-DOT tests, read the employer's policy and form instructions first.
- When both are due for one person, do the DOT test first with its own specimen.
- Know all six DOT test reasons and where each is recorded on the CCF.
Part 10 of 16
Step 9 โ C/TPA Services & Random Consortium Management
Once you are an established collector, the single fastest way to turn one-time transactions into predictable monthly income is to add C/TPA services. A Consortium/Third-Party Administrator (C/TPA) is a service agent that manages an employer's drug and alcohol testing program on their behalf โ running random selections, scheduling tests, keeping records, and handling FMCSA Clearinghouse duties. The employer stays legally responsible for compliance, but you do the work. This is recurring-revenue gold, and it is the focus of TestRight Academy's C/TPA Services guide.
What a C/TPA Actually Does
Under DOT rules, employers can outsource the day-to-day administration of their program to a service agent. As a C/TPA you typically combine two roles that are often bundled together:
- Consortium โ you operate a shared "random pool" that combines safety-sensitive employees from many small employers so each one can hit the required random testing rates. This is the practical way a very small or one-person operation can meet the rules (more on that below).
- Third-Party Administrator โ you handle the administrative machinery: ordering tests, coordinating with the lab and the Medical Review Officer (MRO), tracking deadlines, and storing records.
Watch out: Be crystal clear with clients (and in your contracts) that they remain legally responsible for their DOT program. Under 49 CFR ยง382.705, an employer retains ultimate responsibility for compliance even when it designates a C/TPA. A C/TPA acts on the employer's behalf โ it does not absorb the employer's liability. Misrepresenting that is both inaccurate and a sales risk.
The Owner-Operator Opportunity (Your Bread and Butter)
Here is the market that makes this service line so valuable. A solo owner-operator โ a CDL driver who employs themselves โ cannot run a credible one-person random testing program, because you cannot meaningfully "randomly" select from a pool of one. To meet the random testing requirement, these drivers join a consortium. They must also designate a C/TPA in the Clearinghouse to report any violations on their behalf: under 49 CFR ยง382.705, an employer who employs himself or herself as a driver must designate a C/TPA to comply with the employer reporting requirements (ยง382.705(b)(6)).
That makes owner-operators in your area a natural, often underserved customer base for a consortium. TestRight Academy's C/TPA guide highlights this same audience, plus small fleets that have no internal compliance staff.
Running a Compliant Random Program
Random selection is the core deliverable members are paying for. To do it right:
- Use a scientifically valid, neutral selection method โ such as a random number table or a computer-based random number generator โ so every covered employee has an equal chance of selection each cycle.
- Select from the pool at spread-out, unannounced intervals throughout the year โ not all at once in December to "catch up."
- Meet the applicable agency's minimum annual random rates. For FMCSA, the current minimums are 50% of the average number of driver positions for controlled substances and 10% for alcohol โ but these rates are set by each DOT agency and can be adjusted, so confirm the current year's rate before every cycle.
- Notify the employer/driver promptly once selected, and require the test be completed as soon as possible (the selection stays confidential until notification).
- Keep selection records showing the dates, pool size, and who was chosen โ your audit trail.
Compliance reference: FMCSA random testing must use a scientifically valid method โ such as a random number table or computer-based random number generator โ and give each covered driver an equal chance of being selected each time selections are made (49 CFR ยง382.305, which also sets the minimum annual random rates). Procedural collection and testing steps are governed by 49 CFR Part 40. Always confirm the current minimum annual percentage rate published by the relevant DOT agency.
The FMCSA Clearinghouse โ and Why Carriers Need You
The FMCSA Drug & Alcohol Clearinghouse is a secure federal online database that records CDL/CLP drivers' drug and alcohol program violations and their return-to-duty progress. Small carriers consistently struggle with it, which makes Clearinghouse management one of your highest-value services. Learn more on TestRight Academy's FMCSA Clearinghouse page.
There are two recurring employer query duties you can own for clients:
| Duty | What it requires | Consent |
| Pre-employment query | A full query before a driver first performs safety-sensitive functions, to confirm no unresolved violation. | Driver's specific electronic consent inside the Clearinghouse for each full query. |
| Annual query | At least one query per current driver within each 365-day period. A limited query (which only tells you whether records exist) is enough; if it shows a hit, you must follow up with a full query within 24 hours. | General written consent obtained outside the Clearinghouse; can cover multiple years. |
Compliance reference: Pre-employment queries must be full queries with the driver's specific electronic consent; the annual query may be a limited query and must occur at least once within each 365-day period, with a full query required within 24 hours if a limited query shows records exist (49 CFR ยง382.701). Employers must also report violations โ such as refusals and actual knowledge โ to the Clearinghouse (49 CFR ยง382.705). If a driver does not provide the required query consent, they may not perform safety-sensitive functions for that employer.
Once a client designates your business as their C/TPA in the Clearinghouse, you can run their queries and report violations on their behalf โ but note your C/TPA account must be registered first, before a client can select you. For owner-operators, the C/TPA designation is mandatory specifically so violations get reported.
Example
A new owner-operator signs up for your consortium at a flat monthly membership fee. You enroll them in the random pool, help register the C/TPA designation in the Clearinghouse, and complete their pre-employment full query. Each year you run their annual limited query and keep their records on file. When a random selection hits, you notify them, schedule the collection, and route results through your MRO partner. One driver, one small recurring fee โ multiply that across many owner-operators and small fleets, and you build a predictable monthly revenue base.
What You Need to Launch
- Deep Part 40 and agency-rule knowledge โ your DOT collector training is the foundation; layer on FMCSA Part 382.
- A registered C/TPA Clearinghouse account so clients can designate you.
- Established lab, MRO, and collection-site relationships before you sign anyone.
- TPA/consortium software to manage pools, randoms, results, and reminders.
- Written service agreements spelling out what you manage vs. what the employer owns โ have an attorney review the template.
- Errors & Omissions (E&O) insurance โ a missed selection or query can expose a client to penalties and you to liability.
Avoid this
- Skipping the pre-employment full query and doing only a limited query โ limited queries are for the annual check, not hiring.
- Letting an annual query slip past the 365-day window for any driver.
- Bunching all random selections at year-end instead of spreading them out.
- Telling clients you "take over" their legal responsibility โ you administer; the employer remains responsible.
- Forgetting to register your C/TPA in the Clearinghouse before trying to onboard clients who need to designate you.
Pro tip: Price for recurring revenue. Charge a flat monthly or annual consortium membership per enrolled driver, separate from per-collection fees. Because compliance never ends, neither does the relationship โ this is how a drug testing business shifts from one-off collections to predictable monthly income. See the
C/TPA Services guide for the full service menu.
Part 11 of 16
Step 10 โ Recordkeeping, Confidentiality & Compliance
Once you start collecting specimens and helping employers run testing programs, you also become a keeper of sensitive records. DOT rules tell you exactly which documents to keep, for how long, and who is allowed to see them โ and getting this right is what makes you (and your clients) "audit-ready" instead of scrambling when an inspector calls.
Why recordkeeping is a core part of the business
A drug and alcohol testing record is more than paperwork โ it is the legal proof that a test was conducted correctly. When a federal agency such as FMCSA (Federal Motor Carrier Safety Administration) audits one of your employer clients, the inspector does not watch a collection happen. They read the records. If a record is missing, incomplete, or stored where the wrong people can see it, that is a finding against the employer โ and a fast way to lose a client. Strong, "audit-ready" documentation is therefore one of the most valuable things a collector or C/TPA (Consortium/Third-Party Administrator โ the company that manages testing programs for employers) can offer. TestRight Academy's Recordkeeping guide and Employer Policy guide walk through this in employer-facing terms.
How long records must be kept (49 CFR ยง40.333)
Part 40 โ the government-wide DOT testing rule โ sets retention periods by record type. The more serious the result, the longer you keep it. These are minimums; keeping records longer is allowed.
| Retention period | Records it covers (per ยง40.333) |
| 5 years | Verified positive drug test results; alcohol test results of 0.02 or greater; documentation of refusals to test (including substituted or adulterated results); SAP (Substance Abuse Professional) reports; and all follow-up tests and follow-up testing schedules. |
| 3 years | Information obtained from an applicant's previous DOT employers under ยง40.25 (the prior drug-and-alcohol testing history you collect during the inquiry process). |
| 2 years | Records of the inspection, maintenance, and calibration of EBTs (Evidential Breath Testing devices used for alcohol testing). |
| 1 year | Negative and cancelled drug test results, and alcohol test results below 0.02. |
Compliance reference: Retention tiers are set in 49 CFR ยง40.333. Your DOT operating agency adds its own rule โ for trucking, FMCSA's 49 CFR ยง382.401 requires program-administration records (including driver violations and the annual calendar-year summary) to be kept 5 years and most collection-process records 2 years, and states that records must be maintained "in a secure location with controlled access."
Watch out: The retention periods and the categories are not identical across every agency. Part 40 governs the testing process; the modal agency rule (for example FMCSA ยง382.401, plus the FAA, FTA, FRA, PHMSA, and USCG rules) governs the employer's program records. When in doubt, follow the longer period.
Keeping records secure and confidential
Test results are confidential. They are not ordinary HR paperwork, and they may not sit in a general personnel file where any supervisor can flip through them.
- Store records in a secure location with restricted, controlled access โ a locked cabinet or an access-controlled electronic system.
- Keep drug-and-alcohol records separate from general personnel files.
- Electronic storage is fine as long as records are accurate, retrievable, and legible โ and protected by passwords or role-based access.
- Be able to produce records for an authorized inspector within a reasonable time.
Release-of-information rules (49 CFR ยง40.321 and ยง40.323)
The general confidentiality rule (ยง40.321) is simple: do not release an individual's test result or related medical information to a third party without that employee's specific written consent. Part 40 then spells out the narrow situations where you may release information without consent โ for example, to the employee themselves, to the employer's DER (Designated Employer Representative) and others who manage the program, to a DOT agency or the NTSB during an investigation, and (under ยง40.323) to a decision-maker in a formal legal proceeding (such as a lawsuit, grievance, arbitration, or administrative hearing) that arises from a positive test or refusal.
| May receive results | May NOT receive results |
| The employee (their own records, on written request) | Coworkers |
| The employer's DER and program administrators | Supervisors not involved in the program |
| DOT agency officials during an audit or investigation | General HR staff with no program role |
| A subsequent DOT employer โ only with the employee's written authorization | Anyone, without consent, outside the listed exceptions |
Compliance reference: The general confidentiality rule is at 49 CFR ยง40.321; release in litigation and other proceedings is at ยง40.323. Note ยง40.323(d)'s notice duty: when you release information under that section, you must immediately notify the employee in writing.
OSHA, HIPAA, and your own internal records
Because you handle urine specimens (and sometimes blood for non-DOT work), you fall under OSHA's Bloodborne Pathogens standard, 29 CFR 1910.1030. That rule requires training for employees with occupational exposure โ and you must keep BBP training records for 3 years from the date the training occurred, including the training dates, a summary of the content, the names and qualifications of the trainer, and the names and job titles of attendees. (Employee medical records under that standard are kept far longer โ the duration of employment plus 30 years.)
HIPAA awareness matters too. Most DOT collection-site test data is governed by DOT's own confidentiality rules rather than HIPAA directly, but you will routinely handle health-related information tied to named individuals, so treating every record with HIPAA-level care (minimum-necessary access, secure transmission, no casual disclosure) is the right professional standard. TestRight Academy's audit-ready certificates include OSHA Bloodborne Pathogens and HIPAA training that produce the dated, verifiable proof an auditor wants to see.
Example
An FMCSA auditor reviews a carrier you serve as C/TPA. They ask for the random selection list for the second quarter, proof each selected driver was tested, the EBT calibration log, and the SAP follow-up schedule for a driver who tested positive last year. Because you retained the positive result and follow-up schedule for 5 years, kept calibration logs for 2 years, and stored the random pool records, you produce everything in minutes. That is "audit-ready."
Avoid this
- Filing test results in the regular employee personnel folder.
- Shredding negatives at 1 year but forgetting positives need 5.
- Emailing an unredacted result to a supervisor "just so they know."
- Letting EBT calibration logs lapse before the 2-year mark.
- Skipping the OSHA BBP training or failing to document it.
Your audit-readiness checklist
- Positives, refusals, 0.02+ alcohol results, SAP reports, and follow-up records kept at least 5 years
- Previous-employer inquiry information kept 3 years
- EBT inspection, maintenance, and calibration logs kept 2 years
- Negatives, cancelled tests, and sub-0.02 alcohol results kept 1 year
- Records stored in a secure, access-controlled location, separate from personnel files
- Written-consent procedure in place before any release; ยง40.321 and ยง40.323 exceptions understood
- OSHA Bloodborne Pathogens training documented and retained 3 years
- HIPAA-level handling applied to all health-related records; staff trained and certificates on file
- Random selection records and the annual calendar-year summary retained per your DOT agency rule
Pro tip: Build a one-page "retention matrix" for each client folder listing every record type and its destroy-after date. Auditors appreciate it, it prevents accidental early shredding, and it doubles as a selling point when you pitch your C/TPA services.
Part 12 of 16
Step 11 โ Pricing & Building Your Revenue Model
Pricing is where many new collectors freeze up โ they have no idea what to charge, so they either lowball and burn out, or guess high and lose bids. The good news: you don't need to invent prices from scratch. You need a framework that ties every price back to your costs, then validate it against what's actually offered in your local market. This section gives you that framework, realistic ranges to test, and a simple profit-and-loss (P&L) model. Every dollar figure below is illustrative only โ verify it locally by calling a few collection sites and C/TPAs in your area and asking what they charge.
Start with your cost components โ price is what's left over
You can't price a service until you know what it costs you to deliver. For a drug & alcohol testing business, costs fall into two buckets: per-test variable costs (you pay these every time you run a test) and fixed overhead (you pay these whether you test one person or one hundred).
| Cost component | Type | What it covers |
| Collection supplies | Variable | Specimen cups/devices, tamper seals, gloves, Chain of Custody Forms (CCFs), shipping pouches |
| Instant-test devices | Variable | Point-of-care cups/oral devices for instant (non-lab) screens |
| Laboratory fee | Variable (pass-through) | What the HHS-certified lab charges to screen and confirm a specimen |
| MRO fee | Variable (pass-through) | What the Medical Review Officer charges to review and verify results (required for DOT tests) |
| Breath alcohol supplies | Variable | Mouthpieces, EBT calibration/QA, printer paper for the Alcohol Testing Form (ATF) |
| Software / TPA platform | Fixed | Scheduling, results tracking, random selection, recordkeeping (e.g., a TPA platform subscription) |
| Insurance | Fixed | General liability and, for program management, Errors & Omissions (E&O) |
| Vehicle / mobile costs | Mostly fixed | Fuel, mileage, insurance for mobile collections |
| Business overhead | Fixed | LLC fees, phone, website, banking, your time |
Pro tip: Treat the lab fee and MRO fee as pass-through costs. They aren't your profit โ you collect them from the client and forward most of it to the lab and MRO. Quote them as a clearly itemized line so clients understand they're paying for a federally required service, not padding your margin.
Build your price list, service by service
Per-collection (collection-only) fee
This is your core product: you collect the specimen, complete the CCF, and ship it. It does not include the lab or MRO. Many collection sites quote a flat collection fee per donor, then add lab and MRO as separate line items. Verify locally: your floor is your supply cost plus your time, and your ceiling is what the nearest competitor charges โ collection-only fees tend to run higher in rural or low-competition areas. Call a few local sites to anchor your number.
Instant vs. lab test โ two different products
An instant test (also called point-of-care or rapid) gives a presumptive screen on the spot. A lab-based test sends the specimen to an HHS-certified laboratory. They are priced differently because the cost stacks differently:
- Instant (non-DOT): your price = device cost + collection labor + a small margin. Any non-negative result ("non-negative" = a presumptive positive) should still go to a lab for confirmation, so build that follow-up into your pricing.
- Lab-based: your price = collection fee + lab fee (pass-through) + MRO fee (pass-through). Quote the bundle with the pass-throughs itemized.
Watch out: Whether
CLIA (the Clinical Laboratory Improvement Amendments, administered by CMS) applies to your instant testing depends on
why you test. Per CMS guidance, drug or alcohol testing done strictly for employment or forensic purposes is generally
not subject to CLIA โ but the moment results are used to refer, offer, or make available
treatment to the person tested, the testing becomes a laboratory subject to CLIA (typically a Certificate of Waiver for simple rapid tests). Some states also impose their own lab licensing on point-of-care testing. Confirm how these rules apply to your model before you offer instant testing. See
testrightacademy.com/clia-waiver and the
CLIA state directory.
Compliance reference: Instant/point-of-care results are not valid for federal DOT drug testing โ DOT urine and oral fluid drug tests must be screened and confirmed at an HHS-certified laboratory and verified by an MRO (49 CFR Part 40; see Subparts F and G for the laboratory and MRO requirements). Reserve instant testing for non-DOT/employer programs that allow it.
Breath alcohol tests (BAT)
A breath alcohol test is priced as a standalone service because it uses different equipment and no lab. Under DOT rules, an alcohol screening result of 0.02 or higher must be followed by a confirmation test, performed on an Evidential Breath Testing device (EBT) that appears on the approved-device list maintained through DOT/ODAPC (devices conforming to NHTSA model specifications), conducted by a trained Breath Alcohol Technician (BAT) (49 CFR ยงยง40.231 and 40.251; 0.04 is the violation threshold). Price to cover EBT calibration/QA and your time, and consider bundling it with a drug test as a "DOT pre-employment package." Verify your rate locally.
Mobile and after-hours premiums
Mobile collection โ you drive to the worksite โ is a premium service, especially for post-accident and reasonable-suspicion tests that can't wait. Charge a trip/travel fee on top of the per-collection fee, and a higher rate for nights, weekends, and emergencies (an after-hours multiplier is common). Emergency post-accident response is one of the highest-value things you can offer; see testrightacademy.com/post-accident-testing.
Consortium / C/TPA recurring fees
This is your recurring-revenue engine. A consortium membership puts an employer's drivers into a shared random pool so even an owner-operator can meet the required random testing rate. Most C/TPAs charge a flat monthly or annual membership fee per enrolled driver or per program, separate from per-test fees. Set this rate by checking what local C/TPAs charge for owner-operator and small-fleet memberships. See testrightacademy.com/ctpa-services.
Clearinghouse query handling
FMCSA-regulated employers must run Clearinghouse queries on CDL drivers โ a pre-employment full query, plus at least one query per driver every 12 months. FMCSA charges a flat $1.25 per query (limited or full), sold in query plans. That $1.25 is a government pass-through, not your fee. You earn by charging a service fee per query for running it on the client's behalf and documenting it. Learn the process at testrightacademy.com/clearinghouse.
Compliance reference: The Clearinghouse query and consent rules โ including the pre-employment full query and the annual query requirement โ are in 49 CFR Part 382, Subpart G (see ยง382.701). The $1.25 per-query fee is set by FMCSA; see clearinghouse.fmcsa.dot.gov.
Training and consulting
Once you're experienced, you can sell knowledge: helping employers write a DOT-compliant policy, training a Designated Employer Representative (DER), or delivering reasonable-suspicion supervisor training. These are high-margin because the main cost is your time. Price per project or per hour. TestRight Academy already offers several of these certificates (for example, DER training and Reasonable Suspicion Supervisor training) โ you can refer clients or build your offering around them; see testrightacademy.com/compliance-certs.
A simple example P&L for a mobile collector
Here's an illustrative one-month snapshot for a solo mobile collector. Every number is an example only โ verify locally. The goal is to show the shape of the math, not to predict your results. The assumptions (volumes, prices, and costs) are placeholders; replace them with your own.
| Line item | Assumption | Monthly amount |
| Revenue โ collections | 60 lab-based DOT collections @ $70 (incl. pass-throughs) | $4,200 |
| Revenue โ breath alcohol | 20 BATs @ $35 | $700 |
| Revenue โ consortium fees | 25 owner-operators @ $40/mo | $1,000 |
| Revenue โ mobile/trip fees | 15 trips @ $75 | $1,125 |
| Total revenue | | $7,025 |
| Less: lab fees (pass-through) | 60 @ $20 | ($1,200) |
| Less: MRO fees (pass-through) | 60 @ $15 | ($900) |
| Less: supplies | ~$8 ร 80 tests | ($640) |
| Less: software / TPA platform | Subscription | ($150) |
| Less: insurance (GL + E&O) | Monthly portion | ($200) |
| Less: vehicle / fuel | Mobile mileage | ($400) |
| Estimated net before taxes | | ~$3,335 |
Notice what carries the profit: the recurring consortium fees and mobile trip fees contribute margin with little added cost, while collections barely clear their pass-throughs. That's the core lesson โ transactional collections pay the bills, but recurring C/TPA revenue and premium mobile work build a real business.
Example
Maria starts as a mobile collector charging a flat fee per DOT collection. After three months she signs 20 owner-operators to a monthly consortium membership โ recurring income she earns before she does a single test for them. When one gets randomly selected, she earns the collection fee and a trip fee on top. Her predictable monthly income now covers her insurance and software fixed costs, so every collection after that is closer to pure margin.
Avoid this
- Burying pass-throughs. Quoting one blended price hides that lab + MRO are non-negotiable costs and makes you look expensive. Itemize them.
- Forgetting your own labor. A cheap collection that takes 90 minutes round-trip mobile is a losing trade. Always price your drive time.
- Charging only the bare $1.25 for Clearinghouse queries. The query costs you $1.25, but running and documenting it is billable work โ charge a service fee on top.
- Pricing instant tests like lab tests. They have different cost stacks and different legal uses (and possible CLIA/state-licensing considerations). Keep them as separate products.
- Never raising prices. Re-quote competitors yearly; supply, lab, and fuel costs drift up.
Your pricing checklist
- Call 3โ5 local collection sites and C/TPAs and record their per-collection, BAT, mobile, and consortium prices
- Get written lab and MRO fee schedules so you know your exact pass-through costs
- Calculate your true cost per test (supplies + labor + drive time) before setting any price
- Set a separate, itemized price for: collection-only, instant, lab-based, breath alcohol, and mobile/after-hours
- Decide your consortium membership fee (monthly or annual, per driver) โ your recurring-revenue anchor
- Add a service fee on top of the $1.25 FMCSA Clearinghouse query cost
- Build a simple monthly P&L spreadsheet and confirm net margin after all pass-throughs and fixed costs
- Confirm whether CLIA (and any state lab license) applies to your instant testing before pricing it
- Write your prices into a client service agreement so terms are clear and enforceable
- Review and re-quote against competitors at least once a year
Part 13 of 16
Step 12 โ Marketing & Landing Your First Clients
You can be a perfectly trained, fully compliant collector and still have an empty calendar โ because being qualified and being found are two different things. This step turns your business into one that clients can discover, trust, and hire. The good news: drug and alcohol testing is a relationship business, not an advertising business, so a beginner with persistence and a clear message can land first clients without a big budget.
Know Exactly Who Your Customers Are
"Anyone who needs a drug test" is not a marketing plan. The fastest path to your first clients is picking two or three specific groups, learning their pain, and speaking directly to it. Your strongest early targets fall into two buckets: DOT-regulated (federally required testing) and non-DOT (private employers and other testing needs).
| Customer type | What they need | Why they're a good first client |
| Owner-operators (solo CDL truckers) | To join a random testing consortium โ they cannot meet the random rule alone | Clear legal requirement, low friction to sign, recurring monthly fee |
| Small trucking companies (1โ10 drivers) | Random pool, written policy, Clearinghouse help, recordkeeping | Usually have no internal compliance staff and need it all |
| Construction & trades | Pre-employment + random testing for drug-free workplace programs | High turnover means steady pre-employment volume |
| Staffing agencies | Fast, high-volume pre-employment screening across many placements | One account can mean many tests a month |
| Manufacturing & warehousing | Random and post-accident testing for safety-sensitive roles | Established programs that need a reliable local collector |
| Occupational health clinics | Overflow collections, mobile/after-hours coverage | Refer-out partners, not competitors, if you fill a gap they can't |
| Attorneys, probation, family-law (non-DOT) | Court-ordered and individual testing with documented chain of custody | Often willing to pay a premium for fast, defensible results |
| Schools, daycares, fleets | Pre-employment and reasonable-suspicion testing | Predictable, relationship-driven local business |
Pro tip: Owner-operators are the classic beginner's wedge. A solo CDL driver is legally required to be in a random consortium and cannot satisfy that rule on their own โ an easy "yes" that turns into recurring monthly revenue. See
Adding C/TPA Services for how the consortium model works.
Build a Simple, Findable Online Presence
You do not need a fancy website. You need to show up when a local business searches "DOT drug testing near me" and to look legitimate when someone checks you out. Three things do most of the work:
- Google Business Profile (free). This is one of the highest-impact marketing assets for a local service business. Create a profile, choose accurate categories (for example, "Drug testing service"), and add your service area, hours, photos, and a phone number that you actually answer. Profiles that appear in the local map results tend to win calls.
- A one-page website. State clearly: what you offer (DOT & non-DOT collections, alcohol testing, mobile/on-site, C/TPA), who you serve, your service area, and how to book. Add your business hours and a contact form. Keep it fast and mobile-friendly โ most clients will find you on a phone.
- Local SEO basics. Make sure your business name, address, and phone number are identical everywhere they appear. List yourself in free directories. Ask satisfied clients for Google reviews โ a handful of honest reviews often moves the needle more than paid ads early on.
Pro tip: Your training credentials are marketing. State plainly that your collectors are trained under 49 CFR Part 40 and have completed the required error-free mock collections. Be accurate about what that means โ it is a qualification (training plus a proficiency demonstration), not a federal license. TestRight Academy's
audit-ready certificates give you documentation you can show clients and auditors.
Network Where the Work Already Flows
Most first clients come from people who already touch the testing world. Spend your first weeks meeting them.
- Partner with an existing C/TPA. Consortium/Third-Party Administrators often need local collectors to service their employer clients. Becoming a "collection site" in their network can help fill your calendar before you have a single direct client. This is often the fastest path to live collections โ see C/TPA Services.
- Build relationships with occupational clinics. Clinics turn away or refer out work โ overflow, after-hours, on-site needs. Position yourself as the partner who covers what they can't, not a competitor.
- Connect with MROs, labs, and SAPs. Medical Review Officers and Substance Abuse Professionals talk to employers regularly and can be natural referral sources. Find one through Find an MRO.
- Join associations. The National Drug & Alcohol Screening Association (NDASA) serves exactly this industry โ collectors, TPAs, and labs โ and offers education, networking, and credibility. Also engage local DOT-mode trade groups: state trucking associations, builders/contractors associations, and chambers of commerce where your target employers gather.
Differentiate with Mobile and On-Site Collections
Many employers dislike sending workers off-site to test โ it costs them productive hours. If you can come to them (or be open evenings and weekends), you solve a real problem that larger fixed-location competitors often won't. Mobile and on-site collection is one of the easiest ways for a small operator to win business on convenience instead of price. Post-accident testing is a good example: under 49 CFR ยง382.303, an employer must stop trying to administer an alcohol test if it cannot be done within 8 hours of the accident, and must stop trying to administer a controlled substances test if it cannot be done within 32 hours โ and the rule directs that these tests be done promptly. A collector who can respond at 2 a.m. helps the employer meet those windows. Read Post-Accident Testing before marketing this as a service.
Outreach Scripts You Can Actually Use
Keep it short, lead with their problem, and make the next step easy.
Example
Cold email to a small trucking company: "Hi [Name] โ I run a local DOT-qualified collection service in [City]. Many carriers your size are required to keep drivers in a random testing pool and run Clearinghouse queries, but don't have anyone managing it. I handle collections and can connect you with consortium and recordkeeping support so you stay audit-ready. Could I send a one-page overview, or grab 10 minutes this week?"
Phone intro to an occupational clinic: "Hi, I'm a Part 40-trained collector covering [area] and I offer mobile and after-hours DOT and non-DOT collections. If you ever need overflow or on-site coverage, I'd love to be your go-to. Who handles your scheduling so I can leave my info?"
Owner-operator (in person or social): "If you're a solo CDL driver, you're required to be in a random testing consortium โ you can't satisfy the rule on your own. I can get you enrolled and compliant fast. Want me to walk you through it?"
Avoid this
- Competing only on price. Convenience, reliability, and compliance knowledge win more loyal clients than being the cheapest.
- Overpromising. Don't claim to be "DOT certified" or "licensed by DOT" โ you are a trained, qualified collector. Misstating credentials damages trust and can mislead clients.
- Ignoring follow-up. Many deals close on the second or third touch. Track who you contacted and circle back.
- Forgetting that your existing collections are your best ads. Every clean, professional collection is a referral waiting to happen โ ask.
Compliance reference: If you market Clearinghouse help to carriers, be accurate: under 49 CFR ยง382.701, employers of CDL drivers must conduct a query at least once every 12 months for each currently employed driver, plus a full pre-employment query before allowing a new driver to perform safety-sensitive functions. See
FMCSA Clearinghouse.
Your 30-Day Launch Marketing Checklist
- Pick your top 2โ3 target customer types and your service radius.
- Create and fully complete a Google Business Profile with photos and accurate hours.
- Publish a one-page website listing services, area, credentials, and a contact method.
- Write a one-page service sheet (PDF) you can email or hand out.
- Make sure your name, address, and phone match everywhere online.
- Apply to become a collection site for 2โ3 local C/TPAs.
- Visit or call 5 occupational health clinics about overflow/mobile coverage.
- Identify and introduce yourself to at least one local MRO and one SAP.
- Join NDASA and one local trade group (trucking, contractors, or chamber).
- Build a simple contact list of 25 local target employers.
- Send your cold email/script to all 25 and log every contact.
- Follow up with non-responders after 5โ7 business days.
- Promote mobile/on-site and after-hours availability as your differentiator.
- Ask your first 3 clients for a Google review and a referral.
- Decide which one service to add next (for example, C/TPA) to grow recurring revenue.
Pro tip: Track everything in one simple spreadsheet โ who you contacted, when, the response, and the next step. Marketing for a service business is mostly disciplined follow-up, and a beginner who follows up consistently can out-earn a more experienced operator who doesn't. When you're ready to convert collections into recurring income, revisit
the startup checklist and
C/TPA services.
Part 14 of 16
Common Mistakes to Avoid
Most of the costly errors in this business are not exotic โ they are the same handful of avoidable missteps that new collectors and C/TPAs (Consortium/Third-Party Administrators, the companies that manage testing programs for employers) make again and again. The good news: every one of them is preventable once you know what to watch for. Here are the mistakes that most often invalidate tests, trigger audit findings, or expose you to liability โ each with why it matters and how to fix it.
Avoid this
- Mixing DOT and non-DOT programs and forms. Why it matters: A DOT-regulated test must use the Federal Custody and Control Form (CCF) and follow 49 CFR Part 40 exactly; a non-DOT test uses a separate, employer-specific form. Using the wrong form is a procedural error that can invalidate the test. The fix: Confirm the test type and reason with the employer's Designated Employer Representative (DER) before you open a kit, and keep DOT and non-DOT supplies, forms, and files physically separate. See DOT vs. Non-DOT.
Avoid this
- Skipping or faking the ยง40.33 mock collections. Why it matters: Reading a training course is not enough to qualify as a DOT urine collector. After qualification training you must complete five consecutive error-free mock collections โ two routine (uneventful), one insufficient-quantity, one temperature-out-of-range, and one where the employee refuses to sign the CCF and initial the specimen bottle seal โ monitored and evaluated by an already-qualified collector who attests in writing that they were error-free (49 CFR ยง40.33). The fix: Do the real mock collections, keep the signed attestation, and maintain documentation showing you currently meet the requirements. Cutting this corner means your collections aren't valid in the first place. Our DOT collector program walks through the qualification path.
Avoid this
- Running instant tests that require a CLIA certificate โ without one. Why it matters: If you read an FDA-cleared/CLIA-waived instant device onsite for a clinical purpose, you generally need a CLIA certificate (apply with Form CMS-116, submitted to your state agency) before testing. Many workplace programs avoid this by using Forensic Use Only (FUO) devices for employment testing, because facilities that test only for forensic purposes fall under the CLIA forensic exemption (42 CFR ยง493.3(b)(1)) โ but the labeling and intended use on the box decide which rule applies. The fix: Check your device label and intended use. FUO for employment = no CLIA certificate; CLIA-waived/clinical use = certificate required. Full breakdown in our CLIA Waiver Guide.
Avoid this
- Breaking chain of custody or mislabeling the specimen. Why it matters: Chain of custody โ the documented, unbroken trail of who handled the specimen and when โ is the backbone of a defensible test. An unsigned form, a mismatched specimen ID, a broken or missing tamper-evident seal, or letting the donor out of your line of sight can get a result thrown out. The fix: Keep the specimen in view at all times, have the donor initial the seal, complete every CCF step in order, and never pre-fill or back-date. When in doubt, follow the form line by line.
Avoid this
- Calling a non-negative instant result "positive." Why it matters: An instant cup, dip card, or oral-fluid device only produces a presumptive screening result. A "non-negative" must go to a certified laboratory for confirmation (GC/MS or LC/MS/MS) and then to a Medical Review Officer (MRO) โ a licensed physician who reviews and verifies results โ before anyone is told "positive." Announcing a positive off a screening device can defame a donor and undermine a real positive's legal standing. The fix: Report only "negative" or "non-negative" from the device, and route non-negatives to the lab and MRO. See our Find an MRO resource.
Avoid this
- Sloppy or non-confidential recordkeeping. Why it matters: Drug and alcohol test information is confidential. Under DOT rules you generally may release individual test results or medical information only with the employee's specific written consent (49 CFR ยง40.321, general confidentiality rule; ยง40.331, release of information with written consent). Leaving CCFs on a desk, emailing results unsecured, or storing files where staff can browse them is both an audit finding and a liability. The fix: Store records in locked or access-controlled systems, retain them for the required periods, and release only with proper written authorization. See Recordkeeping.
Avoid this
- Operating without Errors & Omissions (E&O) insurance. Why it matters: A single invalidated collection, mishandled specimen, or wrongly released result can become a claim. E&O (professional liability) coverage exists for exactly these mistakes; general liability typically won't cover a professional error. The fix: Carry E&O coverage appropriate to collection/C-TPA work before you take your first client, and ask larger clients what limits they require โ many will.
Avoid this
- Ignoring state-specific rules. Why it matters: Federal Part 40 is uniform, but states layer on their own requirements โ business licensing, lab/collection-site licensing, marijuana and off-duty-use protections, and notice rules. Some states run their own laboratory programs in place of federal CLIA; New York and Washington, for example, are CLIA-exempt states that operate their own approved laboratory licensing programs, and a number of other states add their own lab licensing on top of CLIA. The fix: Verify requirements with your state agency before operating, and don't assume "it's federal, so I'm covered." See our CLIA State Directory.
Avoid this
- Not registering for โ or not querying โ the FMCSA Clearinghouse for motor-carrier clients. Why it matters: Employers of CDL drivers must register in the FMCSA Drug & Alcohol Clearinghouse, run a full pre-employment query (which requires the driver's specific consent), and run at least an annual limited query on each current driver (49 CFR ยง382.701). Missing this is a common, citable violation. The fix: If you serve trucking/bus clients, build Clearinghouse registration and the rolling annual query into your service and remind clients before deadlines. See Clearinghouse and C/TPA Services.
Avoid this
- Treating a "certificate of completion" as a government license. Why it matters: Becoming a DOT collector is a matter of training plus error-free monitored mock collections under ยง40.33 โ there is no federal collector "license" or government-issued credential. Marketing yourself as "DOT-licensed" or "federally certified" is misleading and can backfire in an audit. The fix: Describe yourself accurately as a qualified DOT collector who has met Part 40 training requirements, and keep your training records and mock-collection attestation on file as proof.
Compliance reference: Collector qualification (training plus five consecutive error-free monitored mock collections) is required by 49 CFR ยง40.33; confidentiality and release of results by 49 CFR ยงยง40.321 and 40.331; the pre-employment and annual Clearinghouse queries for CDL drivers by 49 CFR ยง382.701. CLIA applicability turns on device labeling and intended use, with a forensic exemption at 42 CFR ยง493.3(b)(1). Always confirm against the current regulation text.
Pro tip: Build a one-page pre-collection checklist โ confirm DOT vs. non-DOT, correct form, donor ID, sealed kit, line-of-sight, donor initials on the seal โ and run it every single time. Most of the mistakes above disappear when the first 60 seconds of every collection are standardized.
- Confirm DOT vs. non-DOT and use the matching form before opening any kit
- Complete and document the ยง40.33 monitored mock collections; keep the signed attestation
- Verify your device label/intended use against CLIA before any onsite instant testing
- Report only "negative" or "non-negative" from screening devices โ never "positive"
- Store records securely; release results only with proper written consent
- Carry E&O insurance before taking your first client
- Check state licensing and testing rules with your state agency
- For CDL clients, register and run pre-employment and annual Clearinghouse queries
- Describe yourself as a "qualified DOT collector," not "federally licensed"
Part 15 of 16
Your Complete Startup Checklist
This is your master to-do list โ the entire roadmap distilled into checkable steps you can work through top to bottom. Print it, tape it to your wall, and tick each box as you go. The phases are ordered so that each one builds on the last: form the business, get qualified, line up your compliance and partners, then open your doors. For the deeper "why" behind any item, see our full How to Start a Drug Testing Business walkthrough.
Pro tip: Do not skip ahead. Your LLC and EIN are just paperwork until you are trained, and you cannot order compliant supplies until you have a lab or C/TPA (Consortium/Third-Party Administrator) relationship to source them through. Work the phases in order.
Phase 1 โ Business foundation
Before you can train, contract, or collect a single specimen, you need a legal business entity and clean financial separation.
- Decide which services you will offer: DOT urine collection (the typical starting point), breath alcohol testing (BAT), and/or non-DOT testing. See DOT vs. Non-DOT.
- Choose a business name and confirm it is available in your state's Secretary of State business-name database.
- Form your LLC by filing Articles of Organization with your state. A standard LLC is fine โ there is no federal entity-level license required to perform DOT collections. Use broad purpose language (e.g., "occupational health and drug testing services"). See the LLC Startup Guide.
- Apply for a free EIN (Employer Identification Number โ your business's federal tax ID) directly at IRS.gov. It is issued online in minutes โ never pay a third party for one.
- Open a dedicated business bank account (bring your Articles of Organization and EIN). Keeping business and personal money separate helps protect your LLC's liability shield.
- Buy business insurance โ general liability at minimum, plus professional liability (errors & omissions), since you will be handling specimens. Many clients and C/TPAs require a certificate of insurance before sending work your way.
- Draft an operating agreement (recommended even for a single-member LLC).
- Check for any local business license, zoning, or seller's permit requirements (these vary by city and county โ check your local agency).
Phase 2 โ Get qualified
This is the heart of the business. You cannot legally perform DOT collections without meeting the training requirements in 49 CFR Part 40 โ and there is no federal "license," only documented training plus error-free mock collections.
- Complete qualification training as a DOT urine specimen collector, covering 49 CFR Part 40, the federal Chain of Custody Form (CCF), and problem scenarios. See DOT Collector training.
- After qualification training, demonstrate proficiency by completing five consecutive error-free mock collections monitored and attested to by a qualified collector โ specifically two uneventful collections, one insufficient-quantity scenario, one out-of-temperature-range scenario, and one in which the donor refuses to sign the CCF and initial the bottle seal (49 CFR §40.33).
- If offering alcohol testing, complete separate Breath Alcohol Technician (BAT) training. Plan ahead โ the hands-on portion requires access to an actual DOT-approved Evidential Breath Testing (EBT) device.
- Study the DOT testing reasons (pre-employment, random, post-accident, reasonable suspicion, return-to-duty, and follow-up) and the DOT drug panel. See DOT Testing Reasons.
- Keep your training certificate and mock-collection records โ they are your credentials, the proof you show to C/TPAs, clients, and auditors.
Compliance reference: Collectors must complete qualification training and then demonstrate proficiency through five consecutive error-free mock collections โ monitored and attested to in writing by a qualified collector โ before performing real collections (49 CFR §40.33). Employees may not act as their own collector, and an immediate supervisor must not collect from an employee they supervise unless no other collector is available and the DOT agency regulation permits it (49 CFR §40.31).
Phase 3 โ Compliance & credentials
Sort out the regulatory questions that depend on the exact devices and services you choose, so you do not buy the wrong equipment.
- Determine whether you need a CLIA certificate. DOT specimens always ship to an HHS-certified laboratory, so CLIA does not apply to DOT urine collection. CLIA only comes into play if you read instant/point-of-care devices on-site for non-DOT clinical purposes. Take the quiz on the CLIA Waiver Guide and check the CLIA State Directory.
- Understand OSHA's Bloodborne Pathogens standard (29 CFR §1910.1030) โ relevant whenever you may have occupational exposure to blood or other potentially infectious materials; review the exposure-control plan and PPE expectations.
- Confirm any state-specific drug-testing or collection-site rules that apply where you operate (these vary by state โ check your state agency).
- Bookmark your authoritative references: 49 CFR Part 40 on eCFR and the DOT Office of Drug and Alcohol Policy and Compliance (ODAPC).
Phase 4 โ Site, supplies & equipment
Set up a private, compliant collection space and stock only compliant supplies โ most of which flow through your lab or C/TPA relationship (Phase 5), so coordinate the two.
- Establish a collection area with a restroom that meets DOT site-security and privacy requirements (no access to water sources the donor could use to dilute the specimen; bluing agent in the toilet). See Collection Site Signs.
- Source federal CCFs through your C/TPA or HHS-certified lab. Never use generic or blank forms in place of the federal CCF.
- Assemble your DOT collection kit: collection cups with temperature strips, specimen bottles with tamper-evident seals, gloves, bluing tablets, and leak-resistant transport bags.
- If offering BAT, purchase an EBT device that appears on the current NHTSA Conforming Products List of Evidential Breath Measurement Devices, and keep its inspection, maintenance, and calibration records. See DOT Approved Devices.
- Grab a copy of the Collector Cheat Sheet and stock up on documentation forms from the Forms Library.
Phase 5 โ Partners (lab, MRO, consortium)
Every DOT urine specimen must go to an HHS-certified laboratory, and every non-negative result must be reviewed by a Medical Review Officer (MRO). You need a pathway for both.
- Decide whether to join a C/TPA or contract directly with a lab. Many independent collectors join a C/TPA โ it can bundle lab access, CCFs, MRO review, and random-pool management. See C/TPA Services.
- If going direct, open a collection account with an HHS-certified laboratory (HHS publishes the certified-lab list through SAMHSA's National Laboratory Certification Program). See Drug Testing Labs.
- Confirm your MRO pathway and understand split-specimen and turnaround procedures. See Find an MRO.
- Set up a chain-of-custody-compliant specimen shipping process and practice it before your first live collection.
- Learn how the FMCSA Clearinghouse fits in for your trucking clients. See Clearinghouse.
Phase 6 โ Operations & recordkeeping
Build the systems that keep you audit-ready and your clients compliant. Set these up before your first collection, not after.
- Create a confidential, organized filing system (physical or digital) sized to DOT retention periods: five years for verified positives and refusals, two years for EBT inspection/maintenance/calibration records, and one year for negative and cancelled results. See Recordkeeping.
- Learn what your DOT employer-clients must have in place: a written policy, a Designated Employer Representative (DER), and safety-sensitive staff in a random pool. See Employer Policy Guide.
- Master the post-accident and reasonable-suspicion procedures. Under FMCSA, if a post-accident alcohol test is not administered within 2 hours the employer must document why, must cease alcohol-test attempts after 8 hours, and must cease drug-test attempts after 32 hours (49 CFR §382.303). See Post-Accident Testing and Reasonable Suspicion.
- Build fluency in the terminology (CCF, EBT, MRO, DER, SAP, fatal flaw, shy bladder). See the Glossary.
Compliance reference: Under 49 CFR §40.333, records of verified positive results and refusals must be kept five years; EBT inspection, maintenance, and calibration records two years; and negative and cancelled results one year. Under FMCSA's 49 CFR §382.303, post-accident alcohol-test attempts must cease after 8 hours (with written documentation required if not administered within 2 hours) and drug-test attempts must cease after 32 hours, with a record of the reason for any delay.
Phase 7 โ Launch & marketing
With the foundation set, win clients and add the services that turn one-time collections into recurring revenue.
- Identify your target market: small DOT-regulated employers (trucking, construction with CDL drivers, transit), staffing agencies, and occupational health clinics near you.
- Set your pricing and build a simple service menu and intake process. See our pricing guidance to help frame your own rates.
- Build a basic web presence and Google Business Profile, and reach out to local employers directly.
- Offer non-DOT testing to widen your market โ similar skills, fewer federal constraints. See DOT vs. Non-DOT.
- Expand into C/TPA services (random-pool management, MRO coordination, employer files) for recurring monthly revenue. See C/TPA Services.
- Add billable supervisor reasonable-suspicion training. For FMCSA-regulated employers, supervisors must receive at least 60 minutes of training on alcohol misuse indicators and at least 60 minutes on controlled-substances indicators (49 CFR §382.603).
- Subscribe to DOT/ODAPC updates and revisit your knowledge base when Part 40 changes. See Resources.
Avoid this
- Buying supplies or generic CCFs before you have a lab/C/TPA relationship โ DOT collections require the federal CCF, not a generic form.
- Treating the LLC and EIN as "being open for business." You are not operational until you are trained and have passed your five error-free mock collections.
- Mixing business and personal funds, which can weaken your LLC's liability protection.
- Getting a CLIA Certificate of Waiver "just in case" when your work is DOT collection โ DOT specimens go to an HHS-certified lab, so the certificate may be an unnecessary cost and obligation.
- Letting post-accident time windows lapse without documenting the reason for delay.
Example
Maria forms her LLC and gets her EIN in week one, but instead of buying a collection kit next, she enrolls in collector training and joins a C/TPA. By the time she finishes her five error-free mock collections, her C/TPA has shipped federal CCFs and a starter kit. She runs her first live pre-employment collection for a local small carrier in week six โ fully compliant, with her records system already set up.
Part 16 of 16
Official Resources & Government Links
This section is your bookmark-worthy directory. Whenever you need to confirm a rule, look up an HHS-certified lab, or register your business, start with the primary sources below rather than a random blog or sales page. We've split it into the official government and regulatory sites that govern your business, followed by the TestRight Academy pages that translate those rules into step-by-step action.
Official government & regulatory
These are the authoritative, free, taxpayer-funded sources. If a vendor's claim ever contradicts one of these, the government source wins. Bookmark them and check back periodically, because regulations and certified-provider lists are updated over time.
DOT & the testing procedures (49 CFR Part 40)
Compliance reference: Part 40 applies to all DOT-required testing across every transportation mode (FMCSA, FAA, FRA, FTA, PHMSA, and the USCG). Per 49 CFR 40.5, written interpretations issued by ODAPC and the DOT Office of General Counsel are the only official and authoritative interpretations of the rule.
FMCSA (trucking/CDL rules & the Clearinghouse)
Compliance reference: Clearinghouse requirements live in Part 382, Subpart G (49 CFR ยง382.701). If you add C/TPA services, you'll register here on behalf of your employer clients.
SAMHSA / HHS (the certified labs)
Watch out: "HHS-certified" (the lab) is not the same thing as your own training. A lab earns certification through SAMHSA's National Laboratory Certification Program; a collector qualifies through training plus error-free mock collections. Never confuse the two when marketing yourself.
CMS CLIA (for instant / point-of-care testing)
Pro tip: CLIA generally applies if you run instant/point-of-care (rapid) tests yourself. If you only collect specimens and ship them to an HHS-certified lab, you typically do not perform the test, so CLIA may not apply. Confirm your specific setup with your State Agency before buying any rapid testing devices.
OSHA (worker safety)
Business setup (IRS & SBA)
Watch out: An EIN is always free directly from the IRS. Sites that charge a fee to "get your EIN" are middlemen โ go straight to irs.gov.
State and local note: business registration, licensing, and any state-specific lab or testing rules vary by state โ check your own state agency. There is no single federal URL for these.
TestRight Academy resources
These pages take the regulations above and turn them into a clear path: how to qualify, how to set up the business, and how to add revenue streams.
Get qualified & understand the work
Start the business
Add services & build your network
Day-to-day compliance & supplies
Pro tip: Save the government links in a "Compliance" bookmark folder and the TestRight Academy links in a "How-to" folder. When a client or auditor asks "where does it say that?", you'll answer with a primary source in seconds โ which is exactly how you build a reputation for being the collector who gets it right.
- Bookmark eCFR Part 40 and Part 382 for quick rule look-ups
- Bookmark the SAMHSA HHS-certified lab list and confirm your chosen lab is on it
- Get your free EIN directly from irs.gov
- Identify your State Agency via CMS CLIA before buying any instant-test devices
- Register your business using the SBA Business Guide and your state's portal