2. The DER's Authority & Boundaries

What you can do, what you can't, and why the boundaries matter

What the DER IS authorized to do

• Receive verified results from the MRO — positive, refusal, adulterated, substituted, invalid (with no medical explanation), cancelled, and negative
• Immediately remove the employee from safety-sensitive duty on receipt of any disqualifying result
• Authorize the test types — pre-employment, random, reasonable suspicion (acting on supervisor's determination), post-accident, return-to-duty, follow-up
• Provide the employee a list of available SAPs per §40.287
• Authorize the return-to-duty test once the SAP has signed off
• Coordinate the follow-up testing plan from the SAP
• Query the FMCSA Clearinghouse for pre-employment and annual queries on CDL drivers
• Report Clearinghouse violations within 3 business days
• Maintain records per §40.333 retention schedules
• Respond to inquiries from previous/prospective employers for the limited-purpose check under §40.25

What the DER is NOT authorized to do

• Overrule an MRO's verified determination. If the MRO says "verified positive," the result is verified positive. You cannot "decide it's negative" or order a re-test on your authority.
• Make a clinical determination of impairment. Even if you see an employee acting impaired, your authority is administrative (acting on a §382.603 supervisor's reasonable-suspicion determination). You don't diagnose.
• Conduct testing collections yourself. Unless you're separately trained and qualified as a §40.33 collector, you don't do collections.
• Authorize a return-to-duty test without an SAP sign-off. The SAP must complete the evaluation AND a follow-up evaluation before you authorize the RTD test.
• Reduce or waive the §40 / §382 requirements based on the employee's circumstances. The rules apply uniformly. You can't make exceptions for "good employees."

Designation and documentation

Best practice: designate the DER in writing, in your company DOT policy. The designation should include name, title, contact information (especially 24/7 contact), and effective date. Update the designation whenever the DER changes. Provide DER contact information to your C/TPA, MRO, lab, and collection sites so they know whom to contact.

3. The DOT Testing Pipeline

The six test types and the DER's role in each

The six DOT-required test types

Pre-employment (§382.301)

Required for every new safety-sensitive hire BEFORE they perform any safety-sensitive function. The DER must also conduct a FMCSA Clearinghouse pre-employment query on every CDL applicant.

Random (§382.305)

Conducted on an unannounced basis throughout the year. FMCSA requires a 50% drug random rate and 10% alcohol rate (rates can change — check current year). The DER coordinates the random selection (usually through the C/TPA) and ensures selected employees are notified and proceed to the collection site IMMEDIATELY upon notification.

Reasonable suspicion (§382.307)

Triggered by a §382.603-trained supervisor's specific, contemporaneous observations of indicators. The DER receives the supervisor's reasonable-suspicion documentation and coordinates the test. The DER does NOT make the reasonable-suspicion determination unless they are also a §382.603-trained supervisor.

Post-accident (§382.303)

Triggered by FMCSA-qualifying accidents. Required when there's a human fatality (drug + alcohol test), OR the driver receives a citation under state/local law for a moving traffic violation AND bodily injury was treated away from the scene OR a vehicle was towed away. Strict timing rules: alcohol test within 2 hours (8 hours max attempts); drug test within 32 hours.

Return-to-duty (§382.309 / §40.305)

Required after a positive, refusal, or other DOT testing violation, before the employee can perform any safety-sensitive function again. The RTD test is observed per §40.67(b)(1). The DER authorizes the RTD test only after the SAP signs off on the follow-up evaluation.

Follow-up (§382.311 / §40.307)

After RTD, the SAP creates a follow-up testing plan: minimum of 6 unannounced tests in the first 12 months, can extend to 60 months at SAP's discretion. The DER coordinates these tests per the SAP's plan. Follow-up tests are also observed per §40.67(b)(2).

4. Working with C/TPA, Lab, and MRO

The cast of characters in a DOT testing program

The four service-agent roles

• C/TPA (Consortium / Third-Party Administrator) — Manages the random selection pool, schedules tests, handles logistics, often subcontracts collections to a network of sites. Many small employers join a C/TPA to outsource the operational work.
• Collection site — Where the actual specimen is collected by a §40.33-qualified collector. Issues the federal CCF and chain-of-custody.
• HHS-certified laboratory — Analyzes the specimen. Returns lab results to the MRO (not directly to the DER).
• MRO (Medical Review Officer) — Licensed physician trained in §40 Subpart G. Reviews lab results, contacts the employee for medical explanation if a result is positive, and issues the VERIFIED result to the DER. The MRO is the gatekeeper.

What information flows to whom

5. The MRO Process (§40.149)

What the MRO does — and what they communicate to you

The MRO's job

The MRO is a licensed physician (MD or DO) who has the training described in §40 Subpart G. When the lab reports a non-negative result, the MRO:

1. Reviews the lab result for technical adequacy
2. Contacts the employee for a confidential, private interview
3. Allows the employee to present a legitimate medical explanation (e.g., a valid prescription)
4. If the explanation is acceptable, the MRO may report the result as negative. If not, the MRO verifies it as positive (or another non-negative category).
5. Reports the verified result to the DER

What the MRO reports to you (§40.149)

The MRO reports verified results to the DER in writing, with a copy in the employee's record. Possible verified result categories:

• Verified negative — driver continues normal duty
• Verified positive — disqualifying; removal required
• Refusal to test — same consequences as positive
• Adulterated — specimen contains substance not normally found in urine; treated as refusal
• Substituted — specimen has creatinine/specific gravity outside human range; treated as refusal
• Cancelled test — fatal flaw in collection or testing; not a disqualifying event, but doesn't count as a negative either; usually requires re-collection
• Invalid result — lab couldn't get a definitive result; may require re-collection or medical evaluation

Split-specimen testing (§40.171)

After the MRO reports a verified positive, the employee has 72 hours to request a split-specimen (Bottle B) test. The split is sent to a SECOND HHS-certified lab. The DER doesn't make this decision — the employee does. If the split confirms the positive, the result stands. If the split is negative, the original result is cancelled.

6. Handling Verified Positives (§40.287)

The most important actions you'll take as DER

You receive a call from the MRO: "Verified positive for cocaine for Driver X." Now what?

The DER's required actions, in order

1. Document the MRO communication. Date, time, MRO name, employee name, verified result.
2. Notify the employee. If they're on duty, contact them through the supervisor. If not on duty, contact them directly.
3. Immediately remove from safety-sensitive duty. Per §40.287 and §382.501, this must happen NOW — not "at the end of the shift," not "after they finish the load," not "next week when we have a replacement." If the employee is mid-route in a CMV, arrange to have them stop at a safe location and arrange replacement transport.
4. Provide the employee with a list of SAPs. Per §40.287(b), give the employee names and contact information of SAPs readily available and acceptable to the employer. The employee chooses which SAP to use for the evaluation.
5. Document everything. Time of MRO notification, time you contacted the employee, time of removal, time you provided the SAP list, etc.
6. Report to the FMCSA Clearinghouse within 3 business days (for CDL drivers).
7. Maintain confidentiality. Only persons with a need to know (the employee's direct supervisor, HR, your safety officer) are informed.

If the employee says they want to dispute

The DER's role is NOT to evaluate the dispute. Direct the employee to the MRO. The MRO is the gatekeeper of the result. The employee has 72 hours from the MRO's notification to request a split-specimen test. While that's pending, the employee remains removed from safety-sensitive duty.

7. Handling Refusals to Test (§40.191 / §40.261)

Treated the same as a verified positive — and the rules are strict

What counts as a refusal under §40.191 (drug) / §40.261 (alcohol)

• Failing to appear at the collection site within a reasonable time after being directed to do so
• Failing to remain at the collection site until the testing process is complete
• Failing to provide a specimen (urine, breath, saliva)
• Failing to provide a sufficient quantity of specimen, in the absence of a valid medical explanation (after the shy-bladder or shy-lung procedure)
• Failing to permit observed or monitored collection when required
• Failing to undergo a medical examination as directed by the MRO/employer
• Failing to cooperate with any part of the testing process
• Possessing or wearing a prosthetic device or other means intended to defraud the collection
• Admitting adulteration or substitution to the collector
• Being verified by the MRO as having adulterated or substituted the specimen (lab-detected)
• Verbally refusing to test

DER actions on a refusal

Same as a verified positive:

1. Immediately remove from safety-sensitive duty
2. Provide SAP list per §40.287(b)
3. Document the refusal event with date, time, specifics, and witnesses
4. Report to the FMCSA Clearinghouse within 3 business days (CDL drivers)
5. The employee cannot perform any safety-sensitive function until completing the full §40 Subpart O return-to-duty process

Use the Refusal to Test Documentation Form

TestRight Academy's Refusal to Test Documentation Form (in the Forms Library) covers all the regulatory refusal categories with checkboxes, narrative space, witness signatures, and DER notification logging. Have your trained §382.603 supervisors use it whenever a refusal happens at the collection site or before testing.

8. The Return-to-Duty Process (§40 Subpart O)

After a positive or refusal — the only pathway back

An employee who has a verified positive, refusal, or other DOT testing violation cannot return to safety-sensitive duty until they complete the full §40 Subpart O return-to-duty process. The DER manages the program-side of this, but the SAP makes the clinical calls.

The five steps

1. Initial SAP evaluation (§40.281). The employee chooses an SAP from the list you provided. The SAP conducts a face-to-face clinical evaluation and recommends a course of education and/or treatment.
2. Education and/or treatment. The employee completes whatever the SAP recommends. This could be a substance-abuse education program, a treatment program, AA/NA attendance, etc.
3. SAP follow-up evaluation (§40.293). The SAP re-evaluates the employee and confirms that they have successfully complied with the recommendations. Only then does the SAP sign off.
4. Observed return-to-duty test (§40.305, §40.67(b)(1)). The DER schedules an RTD drug test (and an alcohol test if applicable). This test is directly observed. The employee must have a verified negative result before performing any safety-sensitive function.
5. Follow-up testing plan (§40.307). The SAP determines a follow-up testing schedule: minimum 6 unannounced tests in the first 12 months, can extend to 60 months. The DER manages the schedule and ensures tests happen. Follow-up tests are also directly observed.

SAP confidentiality

The DER receives only what's needed to manage the process: the SAP's recommendation that the employee has complied, the follow-up testing plan. The DER does NOT receive treatment details, clinical notes, or specific diagnoses. That information stays with the SAP.

9. FMCSA Clearinghouse Responsibilities

The Federal Drug & Alcohol Clearinghouse — DER's queries and reports

The FMCSA Drug & Alcohol Clearinghouse went into full effect January 6, 2023. It's a federal database tracking CDL driver drug & alcohol program violations. The DER is responsible for both querying it (to check drivers' histories) and reporting to it (when violations occur).

Queries — what the DER must do

• Pre-employment queries (§382.701(a)): Before allowing any CDL applicant to perform safety-sensitive functions, the DER must conduct a full query of the Clearinghouse. Full queries require the driver's specific written consent.
• Annual queries (§382.701(b)): At least once per year for every CDL driver currently employed, the DER must conduct a limited query. Drivers must provide general consent to enable limited queries.
• If a limited query returns "information present", the DER must obtain specific written consent from the driver and conduct a full query within 24 hours, or remove the driver from safety-sensitive duty until they can.

Reports — what the DER must submit

Per §382.705, the employer must report the following events to the Clearinghouse within 3 business days:

• Verified positive drug test results
• Verified alcohol test results of 0.04 or greater
• Refusals to test (drug or alcohol)
• "Actual knowledge" violations — e.g., on-duty alcohol use, on-duty drug use, witnessed by a supervisor
• Negative return-to-duty test results
• Completion of follow-up testing plans

Driver consent

Drivers must give their consent for the employer to query the Clearinghouse:

• General consent: Allows limited queries (one-time consent, lasts until revoked)
• Specific written consent: Required for each individual full query

If a driver refuses consent for a pre-employment full query, the employer cannot allow the driver to perform safety-sensitive functions. Period.

10. Recordkeeping (§40.333)

What to keep, for how long, and what auditors will ask for

The §40.333 retention schedule

What records to keep per testing event

• Federal CCF (Custody & Control Form) — collector's, employer's, and MRO's copies
• MRO verified result letter
• Documentation of when employee was notified and removed from duty
• SAP list provided to employee (or proof it was provided)
• SAP evaluation, treatment compliance, follow-up evaluation, follow-up testing plan
• RTD test result (verified negative)
• Follow-up test results
• Clearinghouse query and report records

11. Confidentiality (§40.323)

Who can know what — and the legal exposure if you get it wrong

The §40.323 confidentiality rule

An employee's drug & alcohol test result is confidential. The DER may release the information only:

• With the employee's specific written consent
• To DOT-authorized agents (MRO, lab, C/TPA, SAP)
• To officials within the employer's organization who have a need to know — typically the direct supervisor (for personnel action), HR (for personnel action), the safety/operations manager, your attorney
• In response to a court order or other legal process
• To certain other agencies as required by law (e.g., NTSB after an accident)

Who does NOT have a need to know

• Coworkers (even if they say "I'm worried")
• Other drivers in your fleet
• Customers
• The general public
• Friends or family of the employee (without the employee's consent)
• Other DOT employers (except in the limited §40.25 employment-history check, with employee consent)

The §40.25 pre-employment history check

When a CDL driver applies to a new DOT employer, the prospective employer must request information from previous DOT employers about the applicant's drug & alcohol testing history for the past 3 years. The previous employer (acting through the DER) must respond. The employee must consent to this check.

12. Common DER Mistakes

The errors that get found in DOT audits — and how to avoid them

Almost every DOT audit finding for drug & alcohol program violations falls into a small set of categories. Avoiding these means avoiding the vast majority of penalties.

The top 10 mistakes

1. Letting an employee continue safety-sensitive duty after a verified positive or refusal. Black-letter violation of §40.287. Don't do it under any circumstance — not "to finish out the shift," not "while we find a replacement," not "until the dispute is resolved."
2. Missing the FMCSA Clearinghouse pre-employment query. Every CDL applicant requires a full query. Conducting it after the driver starts is too late.
3. Missing annual queries on existing CDL drivers. §382.701(b) — annual limited queries on every CDL driver, every year. No exceptions.
4. Missing the 3-business-day Clearinghouse reporting deadline. §382.705. The clock starts when the event is verified by the MRO (positive, refusal, etc.). Missing the deadline is itself reportable.
5. Authorizing an RTD test before the SAP follow-up evaluation. The SAP must complete the follow-up evaluation per §40.293 BEFORE you authorize the RTD test. Order matters.
6. Failing to use a directly-observed collection for RTD and follow-up tests. §40.67(b)(1) and (b)(2) — RTD and follow-up tests are ALWAYS directly observed. No exceptions.
7. Discussing test results with coworkers. §40.323. Stay confidential. Tell only those with a legitimate need to know.
8. Acting as the DER while being a service agent. §40.3. The C/TPA cannot be your DER. An employee must serve that role.
9. Skipping the SAP list. §40.287. When you notify the employee of a verified positive, you must provide a list of SAPs. Failure to do so violates the regulation.
10. Inadequate recordkeeping. §40.333. Missing records during a DOT audit. Especially missing: random selection records (proves you actually ran randoms), supervisor training records (proves you have trained supervisors), and follow-up testing records (proves you're managing the post-positive process).

You're ready to be the DER

You've completed all 12 sections of DER training:

• The §40.3 definition and the role's boundaries
• Your authority and what it doesn't extend to
• The six DOT-required test types
• The service-agent ecosystem (C/TPA, lab, MRO)
• The MRO process and verified-result categories
• Handling verified positives, refusals, and the return-to-duty process
• FMCSA Clearinghouse queries and reports
• Recordkeeping under §40.333
• Confidentiality under §40.323
• The top 10 mistakes to avoid

Next: the final test — 25 questions, you need 80% to pass. Pass it once and your audit-ready certificate with QR-coded verification URL is issued. The certificate documents that you've completed DER training and can serve as proof in any DOT audit.

Final Test

25 questions · 80% to pass · Unlimited retakes