It happens more often than most safety managers want to admit: a new hire audit, a merger, an acquisition, or simply a lapsed vendor relationship reveals that a group of safety-sensitive employees hasn’t been part of a compliant random drug and alcohol testing program in 30 days or more — sometimes ever. If you’ve just discovered this at your organization, the good news is that there’s a clear path back to compliance. The bad news is that cutting corners on that path — or moving too slowly — can compound the exposure rather than fix it.

This guide walks through exactly what to do once you’ve identified a random testing gap, using the most common scenario C/TPAs see: an FMCSA-regulated motor carrier whose drivers have been performing safety-sensitive functions without an active random pool. The same underlying logic — get every driver current on pre-employment testing, then rebuild the program correctly — carries over to FRA, PHMSA, and USCG employers, though each of those modes has its own specific rates and mechanics worth confirming directly with your C/TPA.

Step One: Understand the Baseline Rule

Every DOT mode shares one non-negotiable starting point, found in 49 CFR Part 40: no covered employee may perform a safety-sensitive function without a verified negative pre-employment drug test result on file. Everything in a catch-up plan builds from this one requirement.

Step Two: Get Every Affected Driver Current

For FMCSA-regulated motor carriers, the roadmap looks like this:

  • Every driver needs a negative pre-employment drug test before performing any safety-sensitive function, per 49 CFR § 382.301.
  • Every driver hired on or after January 6, 2020 needs a “not prohibited” result from a full pre-employment query of the FMCSA Drug & Alcohol Clearinghouse — a requirement separate from the pre-employment drug test itself.
  • Drivers cannot be entered into random selection pool until the employer has received that negative pre-employment drug test result. FMCSA guidance is direct on this point: Question 2 under the pre-employment testing guidance states that if a driver’s negative pre-employment result is more than 30 days old and the driver still hasn’t been placed in a random pool, a new pre-employment test is required before the driver may operate a CMV requiring a CDL.
  • If no random tests have been conducted this calendar year, complete the required number of random tests over the remainder of the year — then return to a normally spread-out selection schedule the following year.

Note that this specific “30-day gap requires a brand-new pre-employment test” requirement is an FMCSA-specific interpretation. FRA, PHMSA, and USCG do not use the same expiration trigger — their pre-employment requirements generally function as a one-time. If your organization spans multiple modes, verify the pre-employment mechanics for each one directly with that agency or your C/TPA rather than assuming FMCSA’s timing applies across the board.

Step Three: Calculate How Many Random Tests You Actually Need

This is where a lot of good-faith catch-up efforts go wrong. The annual random testing rates FMCSA sets are annual minimum requirements — meaning if the drug testing rate is 50% and the alcohol rate is 10%, an employer with 100 safety-sensitive positions needs 50+ random drug tests and 10+ random alcohol tests completed somewhere across the calendar year (confirm the current-year rates, since FMCSA reviews and can adjust them annually).

But that math assumes 100 positions existed for the full year. If your program is starting mid-year — say, the fourth quarter — the calculation isn’t simply “50% of headcount.” FMCSA’s regulatory guidance on §382.305 directly addresses this fluctuation problem: employers should estimate the number of tests needed based on the average number of driver positions over the period the program is actually operating, and where the workforce fluctuates significantly, make a reasonable estimate of positions rather than guessing.

A few important caveats when catching up:

  • Cramming all required tests into the last few weeks of the year can demonstrate a good-faith effort to auditors, but it does not guarantee you’ll avoid a fine for the gap that already occurred.
  • If a driver who should have been randomly tested is later involved in a serious crash, the fact that you “caught up” afterward won’t undo the liability exposure from the period they weren’t in the pool.
  • If you unexpectedly add drivers late in the year — after your random draws for the quarter are already complete — place them in the pool immediately following their pre-employment test, then recalculate your total testing targets for the remainder of the year using a reasonable estimate of positions.

Step Four: Close the Clearinghouse Gap, Too

If your organization has FMCSA-regulated drivers and has never registered with or queried the Clearinghouse, that’s a compliance gap on its own, separate from your random testing gap. Registration is required for essentially every FMCSA-regulated employer, not just those with a known violation history, and it applies whether you have two drivers or two thousand. At minimum, employers need:

  • A full pre-employment query with driver consent before permitting any newly hired or newly assigned driver to operate a CMV requiring a CDL.
  • Annual queries (limited or full) on every currently employed driver.
  • A process for entering any violations your organization becomes aware of as the employer of record.
  • If you are playing catch-up, then you should run a pre-employment query for every driver hired on or after January 6, 2020. And an annual limited query on those hired before.
  • You also need to collect a signed General Consent for Annual Limited Query form for every driver before conducting any limited queries.

A C/TPA can manage this on an employer’s behalf under the appropriate limited-query consent structure, which is often the fastest way to close this specific gap without pulling internal staff off other priorities.

Step Five: Document the Corrective Action and Retain Records

Once a program is back on track, the next question is how long to keep the paper trail proving it. Under 49 CFR § 40.333, retention is tiered:

  • 1 year minimum for negative drug test results and alcohol results below 0.02.
  • 2 years minimum for records related to the collection process itself — including random selection lists, pool rosters, and draw dates.
  • 5 years minimum for verified positive results, refusals, alcohol results at or above 0.02, SAP records, and related documentation.

Regulatory minimums, however, are not the same thing as good risk management. DOT auditors are, absent a major incident, generally focused on current compliance rather than issues from years past — a documented “memo to the file” acknowledging a prior gap and describing the corrective steps taken may be enough to avoid a fine on a historical issue. But that calculus changes completely the moment a serious incident occurs. A fatality, a major spill, or a catastrophic derailment — the February 2023 East Palestine, Ohio incident is the example everyone in this industry now thinks of — turns “we followed the minimum retention schedule” into a much weaker defense than it sounds. In civil litigation, a plaintiff only needs to convince a jury of just over half the evidence, and it only takes one covered employee testifying that they weren’t properly pre-employment tested to support an argument that safety wasn’t taken seriously — regardless of how the rest of the program performed.

This is why many experienced Designated Employer Representatives (DERs) keep a rolling 5–7 year retention practice rather than discarding records at the bare regulatory minimum, treating drug and alcohol testing files the way they would treat other records tied to potential litigation or audit exposure. It costs very little to keep an extra accordion file in storage; it can cost a great deal not to have one when it matters.

Quick Answers for Employers Catching Up

We just found out our drivers haven’t been in a random pool for months. Where do we start?

Start with pre-employment testing for every affected driver; conduct the required Clearinghouse queries, then build out the remainder-of-year random testing schedule based on a reasonable estimate of your average safety-sensitive headcount.

Does catching up on missed random tests protect us from a fine?

It demonstrates good faith, which regulators generally view favorably, but it does not guarantee a fine won’t be issued for the period the program was non-compliant.

How long should we keep random testing and drug test records?

The regulatory minimums under §40.333 range from 1 to 5 years depending on the record type, but many DERs retain records for 5–7 years as a litigation and audit safeguard, particularly for random selection documentation.

Why Work With InOut Labs

Rebuilding a compliant program under a deadline — while trying to keep the rest of your operation running — is exactly the kind of problem a national C/TPA exists to solve. Partnering with InOut Labs means:

  • Nationwide, all-50-state compliance expertise across FMCSA, FRA, PHMSA, and USCG modal frameworks.
  • CSAPA-credentialed leadership and active NDASA involvement, so your program is built on current regulatory knowledge — not guesswork.
  • Fast, structured onboarding for employers discovering a compliance gap, including a clear plan for pre-employment testing, Clearinghouse registration and queries, and random pool rebuilding.
  • Full FMCSA Clearinghouse management, including pre-employment and annual queries handled on your behalf.
  • Ongoing random selection administration, so the “did we test enough people this year” question never becomes a surprise again.
  • Direct access to compliance experts — not a call center — when questions come up that don’t have a simple answer in the regulations.

If your organization is facing a random testing gap, an unused Clearinghouse account, or simply isn’t sure where its program stands, InOut Labs can assess the situation and build a corrective plan quickly. Contact InOut Labs to talk through your specific situation, or explore our DOT drug and alcohol testing services and FMCSA Clearinghouse management pages for more detail.

This article is for general informational purposes and does not constitute legal advice. Employers should confirm current requirements with the applicable DOT operating administration or consult qualified legal counsel for situations involving actual or potential litigation exposure.