Last updated: DATE
Drug and alcohol test results are sensitive personal information governed by 49 CFR Part 40 confidentiality rules, and California's CCPA/CPRA adds its own obligations. Have this reviewed alongside your terms.
From employers: company name, contact details, USDOT or permit number, billing information, and driver rosters.
From drivers: name, date of birth, CDL number, and drug and alcohol testing records, including test results, refusals, and return-to-duty documentation.
From website visitors: standard analytics — pages viewed, approximate location, device and browser type, and referring site. UPDATE once you add an analytics tool.
Solely to administer your drug and alcohol testing program: maintaining the random selection pool, coordinating testing, reporting to and querying the FMCSA Clearinghouse, maintaining records required by federal regulation, and billing you.
We do not sell your data. We do not share it with advertisers, data brokers, or any third party except as set out below.
Only the parties necessary to deliver the service: collection sites, SAMHSA-certified laboratories, Medical Review Officers, Substance Abuse Professionals where applicable, our back-office platform provider, our payment processor, and federal or state regulators where disclosure is legally required.
Test results are confidential and released only as permitted under 49 CFR Part 40.44. A driver's individual test result is not released to any third party without the driver's specific written consent, except where regulation requires it.
For the retention periods required by federal regulation — generally one to five years depending on record type, and longer for records relating to violations. We retain records after cancellation only as required by law.
Employers may request a full export of their records at any time, at no charge, including after cancellation.
Drivers have the right under 49 CFR Part 40.329 to obtain copies of their own test records. Contact us and we will provide them.
California residents have additional rights under the CCPA/CPRA, including the right to know what personal information is collected and to request deletion where not subject to a legal retention requirement. LAWYER — confirm scope and add the required disclosures.
Records are stored on our back-office platform with encryption in transit and at rest. Access is limited to personnel administering your program. UPDATE once your platform partner is selected — describe their actual security posture, not a generic claim.
Nine North Solutions LLC
hello@ninenorthsolutions.com
(XXX) XXX-XXXX