Defense contractors sit at the intersection of three different rule sets: the general federal Drug Free Workplace Act requirement, a Department of Defense acquisition regulation clause that applies to many classified and sensitive contracts, and the personnel security guidelines that adjudicators use when an employee holds or is applying for a clearance. None of these rules add up to a single federal mandate that every defense contractor employee gets tested on a fixed schedule. What they add up to is a company obligation to build and run a program, with testing scope left largely to the contractor and the contracting officer. This article walks through who is covered, what each rule actually requires, how random testing fits in, and how a legal marijuana law in an employee's home state interacts with a federal security clearance.
Three rules, not one
The first layer is the Drug Free Workplace Act of 1988, implemented in the Federal Acquisition Regulation at FAR Subpart 26.5. This subpart applies broadly to federal contracts above the simplified acquisition threshold and requires the contractor to publish a policy statement, tell employees that unlawful drug activity in the workplace is prohibited, establish an awareness program, and notify the contracting agency if an employee is convicted of a workplace drug violation. On its own, this layer does not require drug testing.
The second layer is specific to the Department of Defense Acquisition Regulations Supplement. The current clause, found at DFARS 252.226-7003, Drug-Free Work Force, and the related policy at DFARS Subpart 226.570, is inserted into solicitations and contracts that involve access to classified information, or where the contracting officer determines the clause is necessary for national security or for the health or safety of people affected by the contract. It is not inserted into commercial product or service contracts, work performed entirely outside the United States, or contracts at or below the simplified acquisition threshold.
The third layer applies only to the subset of employees who hold or are applying for a federal security clearance. Those employees are evaluated against the adjudicative guidelines at 32 CFR Part 147, Guideline H, drug involvement. This is a suitability and trustworthiness standard applied by a government adjudicator, separate from any workplace testing program the contractor itself runs.
What the DFARS clause actually requires
DFARS 252.226-7003 does not hand the contractor a fixed testing calendar. It requires the contractor to institute and maintain a program aimed at a drug free work force, built around employee assistance, supervisory training to help identify drug use, self-referral and supervisory referral paths to treatment, and a provision for identifying illegal drug users, including testing on a controlled and carefully monitored basis. The clause leaves the extent of testing to the contractor, based on the nature of the work, the employee's duties, and the risk to health, safety or national security if that employee fails to perform the job properly. The clause defines "employee in a sensitive position" to include anyone granted access to classified information, plus any other role the contractor determines involves national security, health, safety, or a high degree of trust.
Beyond mandatory testing of sensitive-position employees, the clause lets the contractor run testing for reasonable suspicion, after an accident or unsafe practice, as part of or follow up to rehabilitation, as part of a voluntary program, or for applicants. For the substances covered, the clause allows the contractor to limit testing to those specified in the Department of Health and Human Services' Mandatory Guidelines for Federal Workplace Drug Testing Programs, the same federal guideline framework the Substance Abuse and Mental Health Services Administration uses to certify testing laboratories; SAMHSA's workplace program page lists the current Mandatory Guidelines and the certified laboratory list contractors can use to confirm a lab is eligible for this kind of testing.
The clause's testing provisions bend around conflicting state or local law and around an existing collective bargaining agreement, which is the rule's own acknowledgment that state law varies and a contractor's program has to account for that locally.
Random testing under a DFARS program
Random testing is one of the methods a contractor may choose for sensitive positions, but the clause does not dictate a random testing rate or a specific selection method the way the Department of Transportation rules do for safety sensitive transportation employees. A defense contractor designing a random testing pool for cleared or sensitive positions generally documents the selection method in its own written policy, uses a computer based random number method rather than supervisor choice, and keeps selection, notification and collection records consistent so the program can withstand a grievance or an audit. Because the standard is contractor designed rather than a single federal formula, two contractors performing similar classified work can run different random testing rates and still both be compliant, as long as the program meets the clause's underlying objective.
Security clearances and drug involvement
Holding or applying for a security clearance adds a separate evaluation that has nothing to do with whether the contractor's own workplace program tested the employee. Guideline H defines drugs as mood and behavior altering substances, including anything listed under the Controlled Substances Act, such as marijuana, depressants, narcotics, stimulants and hallucinogens, plus inhalants. Conditions that can raise a security concern include any drug abuse, illegal possession, cultivation, manufacture, purchase, sale or distribution, a credentialed professional's diagnosis of drug abuse or dependence, and failure to complete a prescribed treatment program. The guideline also lists mitigating conditions an adjudicator weighs, including whether the involvement was not recent, was an isolated event, and whether the person has since demonstrated an intent not to use drugs again and completed treatment successfully where that applied.
Because marijuana remains a Schedule I controlled substance under the federal Controlled Substances Act regardless of state law, a state legalization or medical marijuana law generally does not change how Guideline H treats marijuana use by a cleared employee or an applicant. An employee working under a legal state marijuana program may still face an unfavorable clearance determination tied to drug involvement, and a contractor should not assume that state legality resolves the federal security question. Contractors and employees facing a specific clearance question should work with their facility security officer and may want to consult counsel, since outcomes depend on the full set of facts an adjudicator reviews under the whole person concept described in 32 CFR Part 147.
Contractor roles and which rule applies
| Role or contract type | FAR Drug-Free Workplace Act (26.5) | DFARS 252.226-7003 program | Guideline H clearance review |
|---|---|---|---|
| Employee with access to classified information | Applies if the contract is covered | Mandatory sensitive position coverage | Applies at initial and periodic review |
| Other employee in a contractor-designated sensitive role (health, safety, trust) | Applies if the contract is covered | May be covered at contractor's determination | Applies only if the role also requires a clearance |
| General administrative or back office staff, no clearance | Applies if the contract is covered | Not required unless contractor opts in | Does not apply |
| Commercial product or commercial service contract | Generally excluded | Clause generally not inserted | Does not apply |
| Contract at or below the simplified acquisition threshold | Generally excluded | Clause generally not inserted | Does not apply |
| Performance entirely outside the United States | Generally excluded | Not inserted unless contracting officer determines otherwise | Applies if the individual still holds a US clearance |
Building a compliant program
A workable defense contractor program usually starts with a written policy that names which positions are sensitive, states the testing methods used (pre-employment, random, reasonable suspicion, post-accident, return to duty, and voluntary or follow up), identifies which specimen type and panel the contractor is using, and spells out how test results interact with the facility security officer's reporting obligations. Program administrators who need to keep collection supplies on hand for pre-employment, random and reasonable suspicion events can review bulk specimen cup, oral fluid device and confirmation testing options through the wholesale ordering portal, which is set up for employers and clinics buying in volume rather than single kits.
Because the clause allows limiting tested substances to those in the HHS Mandatory Guidelines, many contractor programs align their panel to the same drug classes a federally certified lab screens for, then send any nonnegative screen to a certified laboratory for confirmation rather than relying on a screening result alone. That confirmation step, combined with a medical review officer review of any legitimate prescription, keeps the program defensible if a result is ever challenged.
For related reading, see our guides on Drug-Free Workplace Act requirements for federal contractors and grantees and on drug testing programs for military and federal agencies. Employers building out cup or oral fluid supply for a program can start from our drug test cup collection.
Frequently asked questions
Does every defense contractor employee have to be drug tested?
No. DFARS 252.226-7003 requires mandatory testing only for employees the contractor designates as holding a sensitive position, generally those with access to classified information or roles the contractor determines involve national security, health, safety or a high degree of trust. Other staff may be covered by the contractor's voluntary policy, but the clause does not require it.
Is random testing required on every defense contract?
No. The clause lets the contractor choose testing on a controlled and carefully monitored basis, which can include random selection, but it does not set a fixed random testing rate the way DOT rules do for safety sensitive transportation roles. The contracting officer can require specific terms for a given contract, so the applicable solicitation and contract language controls.
Does a state marijuana law protect a cleared employee from an adjudication issue?
Generally no. Marijuana is still a Schedule I substance under the federal Controlled Substances Act, and the drug involvement guideline used in clearance adjudications is a federal standard. A state legalization or medical marijuana law does not control how a federal adjudicator weighs drug involvement under 32 CFR Part 147.
What substances can a DFARS program test for?
The clause allows the contractor to limit testing to the substances specified in the Department of Health and Human Services' Mandatory Guidelines for Federal Workplace Drug Testing Programs, the same framework SAMHSA uses for laboratory certification, though a contractor policy can cover additional substances if it chooses.
What happens if an employee tests positive or discloses past drug use?
Under the DFARS clause, the contractor must not allow the employee to remain on duty or perform in a sensitive position until the contractor determines, under its own established procedures, that the employee may safely return. For cleared employees, the same facts may separately go to the adjudicator under Guideline H, where mitigating factors like time since the involvement and completed treatment are considered. This is general information, not a determination of any individual's situation, and specific cases should go through the contractor's facility security officer and, where appropriate, counsel.
Does the Drug-Free Workplace Act itself require testing?
No. FAR Subpart 26.5, which implements the Drug-Free Workplace Act, requires a published policy, employee notification, an awareness program and conviction reporting. The testing requirement for sensitive positions comes from the DFARS clause on contracts where it is inserted, not from the Drug-Free Workplace Act provisions alone.
This article is general information about federal acquisition and personnel security rules, not legal advice. Contractors should work with counsel and their facility security officer to apply these rules to a specific contract or employee situation.
