Employee Polygraph Protection Act: Your Rights and Employer Limits

The Employee Polygraph Protection Act is a 1988 federal law that stops almost every private employer from requiring, requesting, or even suggesting that a worker or job applicant take a lie detector test.¹ A handful of narrow exceptions exist, mainly for specific-incident investigations, certain security firms, and businesses that handle controlled substances, but each one carries strict procedural rights for the person being tested. If your employer pushes you toward a polygraph outside those exceptions, or skips the required steps within them, the law is on your side.

Who the Law Covers

The act reaches any private employer engaged in or affecting interstate commerce, a standard courts read broadly enough to include most businesses in the country.² There is no minimum headcount. A five-person shop is bound by the same rules as a national chain. Protection covers full-time and part-time employees, prospective hires, and workers of foreign companies operating in the United States, whatever their citizenship.

Federal, state, and local government employers sit entirely outside the act and can polygraph their own workforce without following its procedures. Separate provisions also allow federal agencies to test intelligence community personnel, defense and energy contractors handling classified work, and FBI contractors doing counterintelligence.³

One boundary catches people off guard. The statute defines “lie detector” as a mechanical or electrical device such as a polygraph, deceptograph, voice stress analyzer, or psychological stress evaluator.⁴ Written honesty or integrity questionnaires are not devices, so they fall outside the act entirely.⁵ An employer can lawfully ask you to complete a paper integrity test without triggering any of the protections below.

What Private Employers Cannot Do

Unless a specific exemption applies, a covered employer cannot require, request, or suggest that any employee or applicant take a lie detector test.⁶ The prohibition reaches indirect pressure. Hinting that a promotion depends on “voluntary” cooperation with a polygraph violates the law just as clearly as a direct order.

Employers also cannot use, reference, or ask about the results of a lie detector test you took somewhere else, whether for a prior employer or during a criminal investigation. And retaliation for refusing a test is explicitly illegal. An employer cannot fire, demote, discipline, or deny a promotion to anyone who declines to take an exam, and the same protection covers workers who file a complaint or take part in a government investigation under the act.⁶

When a Polygraph Can Lawfully Be Requested

Ongoing Investigations of Specific Losses

The most common exception lets an employer request a polygraph while investigating a specific workplace incident that caused economic harm, such as theft or embezzlement.⁷ This is not a general license to test workers when inventory looks low. Every one of the following must be true:

There is an identifiable economic loss or injury to the business, not a vague suspicion.
The employee being tested had access to the property or information involved.
The employer has an observable, articulable basis to suspect that specific employee. Access alone is not enough, though timing or the fact that only one person had a key can add to the analysis.⁸
The employer gives the employee a written statement, signed by someone authorized to bind the company (not by the polygraph examiner), describing the incident, the economic loss, the basis for suspecting that employee, and confirmation of access.⁷

Federal regulations add a timing rule on top: the employee must receive written notice of the exam at least 48 hours in advance, excluding weekends and holidays.⁸ Miss any of these steps and the exception collapses. The request is then treated as if no exception existed.

Security Firms and Controlled-Substance Handlers

Two industry exceptions allow polygraph testing beyond specific-incident investigations. The first covers private security firms whose primary business is armored car services, alarm system installation and maintenance, or providing personnel to protect facilities like nuclear power plants, public water systems, or public transportation, along with firms guarding currency, negotiable securities, or proprietary information.³ The second covers businesses authorized to manufacture, distribute, or dispense controlled substances on Schedules I through IV, where the person tested has direct access to those drugs.

Even under these exceptions, an employer cannot fire or discipline someone based solely on polygraph results or on a refusal to take the test. There must be additional supporting evidence.⁸ A failed polygraph, standing alone, is never enough.

Your Rights If a Test Actually Happens

When a polygraph is administered under any of the exceptions, the act imposes detailed protections for the person taking it.⁹

You can end the test at any point, from the pretest interview through the last question, and no adverse action can follow from doing so. Before the exam begins, the employer must give you written notice of the date, time, and location and tell you that you may consult an attorney or other representative before each phase. Your attorney can be kept out of the testing room itself, but the employer must provide a private space on-site for consultations between phases.⁸

You must be shown every question in writing before the test and told whether the room has cameras, two-way mirrors, or recording equipment. Either side may record the session with the other’s knowledge.⁹

Some subjects are off the table entirely. The examiner cannot ask about religious beliefs, racial views, political affiliations, sexual behavior, or union membership and activity, and questions cannot be degrading or unnecessarily intrusive. If a physician has documented a medical or psychological condition that could produce abnormal responses, the examiner may not conduct the test at all.

Before the exam, you have to sign a written notice confirming that you cannot be required to take the test as a condition of employment and that you understand your rights and remedies. Those rights cannot be waived by contract, except as part of a written settlement of a pending EPPA complaint.⁸

Results have their own limits. An employer or examiner can share them only with the employee tested and the employer that requested the test, unless the employee consents in writing or a court order sends them to a court, agency, arbitrator, or mediator.⁵ Before taking any adverse action based on the exam, the employer must hold a follow-up interview with the employee and provide a written copy of the examiner’s conclusions, the questions asked, and the charted responses.⁸

Penalties and How to Enforce Your Rights

The Secretary of Labor can investigate complaints and go to court to stop violations. Civil penalties run up to $26,262 per violation under the most recent inflation adjustment; the original statutory cap of $10,000 is updated annually under the Federal Civil Penalties Inflation Adjustment Act.¹⁰¹¹ Penalty size depends on the severity of the violation and the employer’s compliance history.

You also have an independent right to sue. A private lawsuit in federal or state court can recover lost wages, benefits, and legal fees, and courts can order reinstatement, promotion, or other equitable relief.¹¹ The statute of limitations is three years from the date of the alleged violation.

To file a complaint, contact the Department of Labor’s Wage and Hour Division at 1-866-487-9243. The process is confidential: the WHD will not disclose your name, the nature of the complaint, or even the existence of a complaint to your employer.¹² Filing with the agency does not block you from also filing a private lawsuit, but the three-year clock on court claims keeps running either way.

1
Office of the Law Revision Counsel. 29 U.S.C. Chapter 22 – Employee Polygraph Protection
2
eCFR. 29 CFR Part 801 – Application of the Employee Polygraph Protection Act of 1988
3
Office of the Law Revision Counsel. 29 U.S.C. 2006 – Exemptions
4
Office of the Law Revision Counsel. 29 U.S.C. 2001 – Definitions
5
U.S. Department of Labor. Fact Sheet #36: Employee Polygraph Protection Act of 1988
6
Office of the Law Revision Counsel. 29 U.S.C. 2002 – Prohibitions on Lie Detector Use
7
Office of the Law Revision Counsel. 29 U.S.C. 2006 – Exemptions – Section: Limited Exemption for Ongoing Investigations
8
eCFR. 29 CFR Part 801 – Application of the Employee Polygraph Protection Act of 1988
9
Office of the Law Revision Counsel. 29 U.S.C. 2007 – Restrictions on Use of Exemptions
10
U.S. Department of Labor. Civil Money Penalty Inflation Adjustments
11
Office of the Law Revision Counsel. 29 U.S.C. 2005 – Enforcement Provisions
12
U.S. Department of Labor. How to File a Complaint