Employee Polygraph Protection Act: Exemptions and Employee Rights

The Employee Polygraph Protection Act is a 1988 federal law that bars almost every private employer in the United States from asking employees or job applicants to take a lie detector test. Codified at 29 U.S.C. §§ 2001–2009, it covers businesses of any size, protects workers who refuse to be tested, and gives the Department of Labor and private plaintiffs the authority to enforce it.¹ A few narrow exemptions exist for security firms, drug manufacturers, and workplace theft investigations, but each comes with strict conditions and does not give an employer a free hand.

Who the Law Covers

The Act reaches every private-sector employer engaged in interstate commerce. In practice, that is nearly all of them. Company size, revenue, and headcount don’t matter.¹

Federal, state, and local governments are exempt. If you’re a police officer, correctional officer, or other public employee, this law doesn’t govern your situation; agency policies and constitutional rules do.¹

State law can add protection but not take it away. Some states ban private-employer polygraph testing outright, which shuts down the federal exemptions inside those states. A state law weaker than the EPPA is overridden by the federal rule.²

What Counts as a Lie Detector

The statutory definition is broader than the classic polygraph. It includes polygraphs, deceptographs, voice stress analyzers, psychological stress evaluators, and any other mechanical or electrical device used to render a diagnostic opinion about a person’s honesty.³

Three tools that employers sometimes use are not covered:

Medical drug and alcohol tests of bodily fluids.
Written or computer-based integrity questionnaires, often marketed as “honesty tests.”
Handwriting analysis.

The exclusion for written integrity tests is significant. Many employers moved to those questionnaires after the EPPA took effect, and the law doesn’t reach them even when the questions probe theft or workplace behavior.³

What Employers Cannot Do

Under the general rule, a private employer cannot require, request, suggest, or cause any employee or job applicant to take a lie detector test. It also cannot use, accept, refer to, or ask about the results of any test you’ve taken, whether the employer paid for it or not.¹

Saying no is protected. Your employer cannot fire, discipline, demote, refuse to promote, or refuse to hire you because you declined a test. The same protection covers workers who file EPPA complaints or cooperate with a Department of Labor investigation.¹

You can’t waive these rights in an employment contract. A polygraph consent clause buried in your hiring paperwork does nothing. The only valid waiver is a written settlement of a pending EPPA action or complaint, signed by both sides.⁴

When Testing Is Allowed During a Workplace Investigation

The exemption most private employees actually encounter allows polygraph testing of a current employee during an active investigation into workplace theft, embezzlement, industrial sabotage, or similar economic loss. Every one of the following must be satisfied:

The investigation must be tied to a specific, identifiable economic loss to the business. General suspicion, culture-of-honesty sweeps, and preventive testing don’t qualify.
You must have had access to the property or assets involved. Access means the opportunity to cause or help cause the loss, not just being nearby.
The employer must have reasonable suspicion that you specifically were involved, supported by an observable, factual basis. Access alone is not enough; tips, unusual behavior, or discrepancies uncovered during the investigation can supply the basis.
Before the test, the employer must give you a written statement identifying the loss, describing your access, and explaining the specific basis for suspecting you. Someone with legal authority to bind the company (not the polygraph examiner) must sign it.

The employer has to keep that written statement, and proof it was delivered, for at least three years and hand it over to the Wage and Hour Division on request.⁵

Even when every requirement is met, the test result alone cannot be the basis for firing or disciplining you. The employer needs additional supporting evidence, such as the access and reasonable-suspicion evidence together, or admissions made before, during, or after the exam.⁵

Industry Exemptions for Security and Drug-Handling Jobs

Two industries can polygraph applicants under controlled conditions. Both exemptions apply only to polygraphs, not to voice stress analyzers or other covered devices.

Companies whose primary business is providing armored car personnel, security alarm design and installation, or uniformed or plainclothes security may test applicants who would protect qualifying facilities such as power plants, water treatment facilities, government buildings, airports, defense contractors, financial institutions, and transportation hubs. “Primary business” means at least 50% of annual revenue comes from those services. The exemption does not cover a retailer or other business that runs its own in-house loss-prevention team alongside a different main operation.⁶

Firms authorized to manufacture, distribute, or dispense controlled substances in Schedules I through IV may polygraph applicants and employees whose duties give them direct access to the drugs.¹ As with the investigation exemption, a polygraph result cannot stand alone. The employer needs at least one additional legitimate reason to justify any adverse action, such as job performance, education, or employment history.⁵

Your Rights If You Take a Test

If a lawful exemption applies and you agree to be examined, the law gives you procedural rights the examiner and employer have to honor. Ignoring them can make the results legally unusable.

Before each phase of the examination, you can consult privately with an attorney or other representative, and the employer must provide a private space on-site for that consultation. Your representative can be kept out of the room during the actual testing, but you get access before and between phases.⁵

All test questions must be given to you in writing before the examination starts. The examiner cannot spring a question that wasn’t in the pretest review.⁷

Certain topics are off-limits entirely, regardless of the investigation:

Religious beliefs or affiliations
Beliefs or opinions about racial matters
Political beliefs or affiliations
Sexual preferences or behavior
Beliefs, opinions, or lawful activities related to unions or labor organizations

Questions also cannot be asked in a degrading or unnecessarily intrusive way.⁵

You can stop the test at any time, for any reason, and no penalty can follow.¹ The results are confidential and cannot be shared beyond you and the employer without your consent, except under a court order to a court, government agency, arbitrator, or mediator.⁸

You should also see an EPPA poster somewhere visible at work. The Department of Labor requires every covered employer to post its official notice where employees and applicants can read it.¹

How to Enforce Your Rights

If your employer violated the law, you have two options, and you can pursue both.

You can file a complaint with the Department of Labor’s Wage and Hour Division by calling 1-866-487-9243 or using the WHD website. Complaints are confidential, and retaliation for filing one is itself an EPPA violation.⁹⁴¹⁰ The Secretary of Labor can also go to federal court for injunctions and to get affected workers reinstated, promoted, and paid back wages.

You can also sue your employer directly in federal or state court. Available relief includes reinstatement, promotion, lost wages and benefits, and attorney’s fees if you prevail. You have three years from the alleged violation to file suit.⁴

1
Office of the Law Revision Counsel. 29 U.S.C. Chapter 22 – Employee Polygraph Protection
2
eCFR. 29 CFR 801.5 – Effect on Other Laws or Agreements
3
eCFR. 29 CFR 801.2 – Definitions
4
Office of the Law Revision Counsel. 29 U.S.C. 2005 – Enforcement Provisions
5
eCFR. 29 CFR Part 801 – Application of the Employee Polygraph Protection Act of 1988
6
eCFR. 29 CFR 801.14 – Exemption for Employers Providing Security Services
7
eCFR. 29 CFR Part 801, Subpart C – Restrictions on Polygraph Usage
8
U.S. Department of Labor. Fact Sheet 36 – Employee Polygraph Protection Act of 1988
9
U.S. Department of Labor. How to File a Complaint
10
U.S. Department of Labor. Civil Money Penalty Inflation Adjustments