Hospitals handle medication, records, and vulnerable patients, so screening matters; this guide explores how a lie detector test may be used with healthcare staff within legal limits.
Healthcare organisations face unique integrity challenges — from controlled substance diversion to patient data theft. This guide explains when and how hospitals can legally use polygraph testing under the EPPA's pharmaceutical and ongoing investigation exemptions, and how lie detector examinations help safeguard patients, staff, and institutional trust.
TL;DR — The Short Version
- Hospitals and pharmacies registered with the DEA to handle controlled substances qualify for the EPPA's pharmaceutical exemption (Section 7(f)), allowing polygraph testing of employees with direct access to scheduled drugs.
- The EPPA's ongoing investigation exemption (Section 7(d)) permits polygraph testing of any private-sector healthcare worker reasonably suspected of involvement in a specific theft, fraud, or economic loss incident.
- An estimated 10–15% of healthcare professionals will misuse drugs or alcohol during their career, and experts agree most drug diversion events go undetected — making proactive integrity tools essential.
- Polygraph testing cannot be the sole basis for adverse employment action; it must be combined with additional supporting evidence and must follow strict EPPA procedural requirements.
Who This Guide Is For
- Hospital administrators and HR directors seeking to understand lawful polygraph use in healthcare settings
- Healthcare compliance officers investigating drug diversion, theft, or data breach incidents
- Pharmacy managers and controlled substance dispensers looking to strengthen integrity screening
- Healthcare workers wanting to understand their rights regarding employer-requested polygraph examinations
- Loss prevention specialists and security directors at medical facilities
Why Healthcare Needs Polygraph Testing
The Unique Integrity Challenges in Healthcare
Healthcare facilities occupy a singular position in the employment landscape. Staff members routinely access controlled substances, sensitive patient data, vulnerable populations, and high-value medical equipment. This combination creates integrity risks that few other industries face.
Statistics from the U.S. Substance Abuse and Mental Health Services Administration (SAMHSA) and the American Nurses Association (ANA) suggest that approximately 10% of healthcare workers are abusing drugs [1]Verified Quick Safety Issue 48: Drug diversion and impaired health care workers
Confirms approximately 10% of healthcare workers abuse drugs based on SAMHSA and ANA statistics, and details patient safety risks including inadequate pain relief and infectious disease exposure. Broader estimates indicate that as many as 10 to 15 percent of all healthcare professionals will misuse drugs or alcohol at some point during their career [2]Verified Drug Diversion in Health Care
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina. Opioids are the most commonly diverted drug class, with oxycodone, fentanyl, and hydrocodone leading the way [3]Verified Substance use disorders and drug diversion among nurses
Confirms nurses responsible for 31% of publicly reported drug diversion in 2020, opioids are the most commonly diverted drug class, and details consequences including felony charges.
The financial impact is staggering. According to the U.S. Department of Justice National Drug Intelligence Center (NDIC), the estimated cost of drug diversion to public and private medical insurers exceeds $72.5 billion per year [4]Verified Drug Diversion and Loss Prevention: A Changing Landscape
Confirms the $72 billion+ annual cost of drug diversion per U.S. DOJ National Drug Intelligence Center and 10-15% of healthcare workers at risk. Employee theft in healthcare results in an average loss of $12,000 per incident [5]Verified Employee Theft Statistics
Confirms healthcare employee theft averages $12,000 per incident and comprehensive internal controls reduce theft-related losses by 35%, and organisations with comprehensive internal controls see a 35% reduction in theft-related losses [5]Verified Employee Theft Statistics
Confirms healthcare employee theft averages $12,000 per incident and comprehensive internal controls reduce theft-related losses by 35%.
Beyond financial losses, drug diversion directly endangers patients. Risks include inadequate pain relief and exposure to infectious diseases from contaminated needles and drugs, compounded by potentially unsafe care due to the healthcare worker's impaired performance [1]Verified Quick Safety Issue 48: Drug diversion and impaired health care workers
Confirms approximately 10% of healthcare workers abuse drugs based on SAMHSA and ANA statistics, and details patient safety risks including inadequate pain relief and infectious disease exposure. Since 1983, drug diversion by healthcare workers has led to dozens of outbreaks of Hepatitis C and other bloodborne infections [3]Verified Substance use disorders and drug diversion among nurses
Confirms nurses responsible for 31% of publicly reported drug diversion in 2020, opioids are the most commonly diverted drug class, and details consequences including felony charges.
Why Traditional Detection Methods Fall Short
Experts believe that only a fraction of those diverting drugs are ever caught, despite clear signals such as abnormal behaviours, altered physical appearance, and poor job performance [1]Verified Quick Safety Issue 48: Drug diversion and impaired health care workers
Confirms approximately 10% of healthcare workers abuse drugs based on SAMHSA and ANA statistics, and details patient safety risks including inadequate pain relief and infectious disease exposure. A 2025 State of Drug Diversion Report from Wolters Kluwer found that about two-thirds of healthcare leaders say they are either "not confident" or only "somewhat confident" in their organisation's drug diversion programme's effectiveness [6]Verified The State of Drug Diversion Report 2025
Confirms two-thirds of healthcare leaders lack confidence in their diversion programme effectiveness and only 37.5% use AI tools for detection. Only 37.5% of respondents reported using AI tools for diversion detection [6]Verified The State of Drug Diversion Report 2025
Confirms two-thirds of healthcare leaders lack confidence in their diversion programme effectiveness and only 37.5% use AI tools for detection.
The Protenus 2023 Diversion Report estimated that more than 1 in every 100 healthcare workers in the United States are diverting drugs [7]Verified Prevalence of Drug Diversion in Healthcare
Confirms over 1 in 100 healthcare workers are diverting drugs and the largest reported DEA settlement exceeded $7 million. Nurses were responsible for 31% of publicly reported drug diversion incidents in 2020, according to the 2021 Diversion Digest Report [3]Verified Substance use disorders and drug diversion among nurses
Confirms nurses responsible for 31% of publicly reported drug diversion in 2020, opioids are the most commonly diverted drug class, and details consequences including felony charges. These statistics underscore why healthcare employers need every available integrity tool — including polygraph testing.
Research by Charles Robert Honts and William J. Schweinle demonstrated that polygraph tests provide substantial improvements in information gain over unassisted laypersons across nearly the complete range of base rates of guilt in forensic settings [8]Verified Information gain of psychophysiological detection of deception in forensic and screening settings
Confirms polygraph tests provide substantial improvements in information gain over unassisted laypersons across nearly the complete range of base rates of guilt in forensic settings. When unaided human deception detection hovers around just 54% accuracy, polygraph testing offers healthcare employers a significant investigative advantage.
Healthcare Data Breaches: A Growing Threat
Drug diversion is not the only integrity challenge facing healthcare facilities. For the 14th consecutive year, the healthcare sector saw the costliest data breaches across all industries, with average breach costs reaching $9.77 million according to IBM's 2024 Cost of a Data Breach Report [9]Verified Cost of a Data Breach: The Healthcare Industry
Confirms healthcare data breach costs averaged $9.77 million in 2024, and healthcare breaches take 213 days before discovery. Healthcare data breaches typically take 213 days before discovery — longer than the cross-industry average [9]Verified Cost of a Data Breach: The Healthcare Industry
Confirms healthcare data breach costs averaged $9.77 million in 2024, and healthcare breaches take 213 days before discovery.
Insider threats are a major driver: 59% of healthcare data breaches are attributed to insiders [10]Verified 70+ Employee Theft Statistics for 2025
Confirms 5% revenue loss from fraud (ACFE), 43% of cases reported by tips, 59% of healthcare data breaches from insiders, and 61% of healthcare data breach threats come from negligent employees [11]Verified 80+ Healthcare Data Breach Statistics 2026
Confirms 61% of healthcare data breach threats come from negligent employees. Stolen medical records can sell for over $500 on the dark web [12]Verified Why the healthcare industry is a common victim of data breaches
Confirms stolen medical records can sell for over $500 and 283 breaches occurred in H1 2025 impacting 16+ million individuals, making healthcare data an attractive target for both external hackers and internal bad actors.
Polygraph testing under the EPPA's ongoing investigation exemption can be a valuable tool when investigating suspected data breaches or unauthorised access to protected health information, provided the investigation meets the specific procedural requirements. Learn more about how businesses protect sensitive assets in our guide to polygraph testing for high-value asset transport services.
EPPA Exemptions That Apply to Healthcare Employers
The Pharmaceutical Exemption (Section 7(f))
The EPPA's pharmaceutical exemption is the primary legal pathway for healthcare polygraph testing. Under Section 7(f), the EPPA does not prohibit the use of polygraph tests by any employer authorised to manufacture, distribute, or dispense a controlled substance listed in Schedules I through IV [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. This covers hospitals, clinics, and pharmacies registered with the DEA.
The exemption permits polygraph testing in two specific scenarios. First, it allows testing of prospective employees who would have direct access to the manufacture, storage, distribution, or sale of controlled substances [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. Second, it permits testing of current employees when the test is administered in connection with an ongoing investigation of criminal or other misconduct involving loss or injury related to controlled substances [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements.
Hospitals and institutional providers register with the DEA using Form 224, which covers business activity categories including Hospital/Clinic, Retail Pharmacy, Practitioner, and Teaching Institution [14]Verified DEA Registration
Confirms DEA Form 224 covers Hospital/Clinic, Retail Pharmacy, Practitioner, and Teaching Institution registration categories. Every healthcare provider who administers, prescribes, or dispenses controlled substances must hold an active DEA registration [15]Verified A guide to obtaining DEA registration and licensing
Confirms every healthcare provider who administers, prescribes, or dispenses controlled substances must be DEA-registered. For detailed guidance on how the pharmaceutical exemption works for pharmacies, see our pharmacy EPPA exemption guide.
The Ongoing Investigation Exemption (Section 7(d))
Even when the pharmaceutical exemption does not apply — for example, when investigating theft of medical equipment, billing fraud, or data breaches — healthcare employers may use the EPPA's ongoing investigation exemption. Under Section 7(d), the EPPA permits polygraph testing when four conditions are met: the test is administered in connection with an ongoing investigation involving economic loss or injury to the employer's business; the employee had access to the property in question; the employer has reasonable suspicion that the employee was involved; and the employer provides a written statement to the examinee detailing the specific incident and basis for testing [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements.
This exemption does not permit random or blanket screening. The Department of Labor's regulations confirm that random employer polygraph testing is precluded, and the exemption requires a specific incident — not a continuous investigation [16]Verified 29 CFR Part 801 - Application of the Employee Polygraph Protection Act of 1988
Confirms random employer polygraph testing is precluded and exemption requires a specific incident not continuous investigation. Each investigation must be tied to a particular event, such as a missing supply of controlled substances, a specific theft of equipment, or a confirmed financial discrepancy.
For a comprehensive overview of EPPA requirements, visit our workplace polygraph policy guide.
Government Hospital Exemptions
Government-operated healthcare facilities — including Veterans Affairs (VA) hospitals, military medical centres, and state or county-run facilities — are completely exempt from the EPPA [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. Federal, state, and local government agencies are not affected by the law [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements, which means these facilities have unrestricted authority to use polygraph testing for both pre-employment screening and ongoing investigations.
This is a significant distinction. While a private hospital must carefully navigate EPPA exemption requirements, a VA hospital or military medical facility can implement polygraph programmes without the same procedural constraints. Research conducted by Gordon H. Barland at the 902nd Military Intelligence Group provided the first scientific validation of directed lie control questions and the CIST format under controlled conditions [17]Verified A Validation and Reliability Study of the Counterintelligence Screening Test
Provided the first scientific validation of directed lie control questions and the CIST format under controlled conditions, and his subsequent studies found significantly better than chance detection rates for screening applications [18]Verified A Validation and Reliability Study of Counterintelligence Screening Tests
US military study finding polygraph screening detection rates significantly better than chance for counterintelligence screening.
Key Applications of Polygraph Testing in Healthcare
Drug Diversion Investigations
Drug diversion is the most common and consequential application for polygraph testing in healthcare. When controlled substances go missing or dispensing records show unexplained discrepancies, DEA-registered facilities can invoke the pharmaceutical exemption to administer polygraph examinations to employees who had access to the missing substances.
The consequences of undetected diversion are severe. Healthcare facilities face civil litigation, fines, loss of eligibility for Medicare and Medicaid reimbursement, and loss of public trust [2]Verified Drug Diversion in Health Care
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina. Healthcare workers who divert substances put themselves at risk for criminal prosecution, civil malpractice suits, and administrative discipline, including loss of their professional licences [2]Verified Drug Diversion in Health Care
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina.
As a condition of participation in Medicare and Medicaid, the Centers for Medicare and Medicaid Services (CMS) requires hospitals to report abuses and losses of controlled substances to the individual responsible for pharmaceutical services and the chief executive officer [2]Verified Drug Diversion in Health Care
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina. Failure to properly detect and report drug diversion could jeopardise a hospital's participation in Medicare and Medicaid [2]Verified Drug Diversion in Health Care
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina.
Polygraph testing provides a powerful investigative tool to resolve these cases. For more on how polygraph examinations support workplace theft investigations, see our guide on money missing from a family business.
Theft of Medical Equipment and Supplies
Beyond controlled substances, healthcare facilities experience theft of medical equipment, surgical instruments, pharmaceuticals, and supplies. Employee theft costs U.S. businesses over $50 billion annually [19]Verified Employee Theft Statistics
Confirms employee theft costs U.S. businesses $50 billion annually, and the healthcare sector is no exception. Fraud causes companies to lose an estimated 5% of revenue every year according to the Association of Certified Fraud Examiners [10]Verified 70+ Employee Theft Statistics for 2025
Confirms 5% revenue loss from fraud (ACFE), 43% of cases reported by tips, 59% of healthcare data breaches from insiders, and 43% of occupational fraud cases are initially detected through employee tips [10]Verified 70+ Employee Theft Statistics for 2025
Confirms 5% revenue loss from fraud (ACFE), 43% of cases reported by tips, 59% of healthcare data breaches from insiders.
The EPPA's ongoing investigation exemption covers these scenarios, provided the employer can document the specific economic loss and establish reasonable suspicion. Polygraph testing acts as both an investigative tool and a deterrent: when employees know that testing is part of the facility's integrity programme, the temptation to steal is significantly reduced.
For comprehensive data on workplace theft, visit our employee theft statistics guide.
Pre-Employment Screening Under the Pharmaceutical Exemption
The pharmaceutical exemption uniquely permits pre-employment polygraph testing — something not available under the ongoing investigation exemption. However, this authority is limited to prospective employees who would have direct access to controlled substances [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements.
This means a hospital can administer a polygraph to a pharmacy technician candidate or a nurse applicant who will handle Schedule II narcotics, but cannot test a candidate for an administrative role with no controlled substance access. The American Polygraph Association (APA) reports accuracy rates ranging from 80 to 98 percent for validated polygraph techniques [20]Verified The Polygraph and Lie Detection
NRC 2003 report establishing median CQT accuracy of 85%, with APA reporting accuracy rates from 80 to 98 percent, providing healthcare employers with reliable pre-employment screening data.
For more information about nursing-specific screening considerations, read our dedicated guide: Do nurses need a polygraph?.
Fraud and Billing Investigations
Healthcare billing fraud is another area where polygraph testing can play a role. In June 2025, the Department of Justice announced the largest healthcare fraud enforcement action in the nation's history, charging 324 defendants across fifty federal districts with $14.6 billion in alleged fraud [21]Verified What Is Drug Diversion?
Confirms DOJ's 2025 healthcare fraud enforcement action charging 324 defendants with $14.6 billion in alleged fraud, including 74 for drug diversion. Seventy-four of those defendants, including forty-four licensed medical professionals, faced charges for drug diversion involving more than fifteen million pills [21]Verified What Is Drug Diversion?
Confirms DOJ's 2025 healthcare fraud enforcement action charging 324 defendants with $14.6 billion in alleged fraud, including 74 for drug diversion.
When a healthcare employer suspects internal billing fraud, embezzlement, or financial misconduct, the ongoing investigation exemption may permit polygraph testing of employees with access to the relevant financial systems. This complements other investigative methods and can help resolve complex fraud cases more efficiently. Learn more in our guide to polygraph testing for insurance fraud.
Legal Requirements and Employee Rights
EPPA Procedural Requirements
When an EPPA exemption applies, healthcare employers must still follow strict procedural requirements. Every employer who requests a polygraph examination must provide reasonable written notice of the date, time, and place of the examination, as well as the examinee's right to consult with legal counsel before each phase of the test [22]Verified Employment Law Guide - Lie Detector Tests
Confirms all EPPA notice, recordkeeping, and disclosure requirements for employers and examiners, including examiner licensing and bonding requirements. Written notice must also cover the nature and characteristics of the polygraph instrument, prohibited question categories, the right to terminate the examination, and the right to file a complaint with the Department of Labor [22]Verified Employment Law Guide - Lie Detector Tests
Confirms all EPPA notice, recordkeeping, and disclosure requirements for employers and examiners, including examiner licensing and bonding requirements.
For ongoing investigation examinations, the employer must prepare a written statement that sets forth with particularity the specific incident being investigated and the basis for testing particular employees. This statement must be signed by a person authorised to legally bind the employer — not the polygraph examiner — and must be provided to the examinee before testing [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements.
Violating these requirements can be costly. If an employer violates the EPPA, the Secretary of Labor may assess civil penalties of up to $10,000 per violation [23]Verified Compliance Assistance - The Employee Polygraph Protection Act (EPPA)
Confirms $10,000 penalty per EPPA violation and employees' right to file private lawsuits. The EPPA also provides employees the right to file private lawsuits [23]Verified Compliance Assistance - The Employee Polygraph Protection Act (EPPA)
Confirms $10,000 penalty per EPPA violation and employees' right to file private lawsuits.
Limitations on Use of Results
A critical protection for healthcare workers is the EPPA's limitation on how polygraph results can be used. Under the pharmaceutical exemption (Section 7(f)), the exemption does not apply if polygraph results or a refusal to take a test are used as the sole basis for adverse employment action [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. Under the ongoing investigation exemption (Section 7(d)), an employee cannot be discharged, disciplined, or discriminated against based on polygraph results without additional supporting evidence [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements.
This means hospitals must always corroborate polygraph findings with other investigative evidence — surveillance data, dispensing records, witness statements, or automated monitoring system reports — before taking any employment action. The polygraph is one piece of a comprehensive investigation, not a standalone decision-making tool.
Both the employer and the examiner must retain all polygraph-related records for a minimum of three years from the date the examination is conducted [24]Verified Employment Law Guide - Lie Detector Tests (Examiner Standards)
Confirms examiners must be state-licensed and bonded, and records must be retained for minimum three years. For a broader perspective on employee rights during polygraph testing, see our guide on polygraph testing for drug use allegations.
Employee Right to Refuse
Under the EPPA, healthcare workers cannot be discharged, disciplined, denied employment or promotion, or otherwise discriminated against for refusing to take a polygraph test [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. Even when a valid exemption applies, the employee retains the right to decline. The investigation then proceeds with all other available evidence.
This right cannot be waived by contract or employment agreement. Healthcare employers should ensure that their HR policies clearly communicate this protection, and that no adverse inference is drawn from a refusal alone.
The Science Behind Healthcare Polygraph Testing
Accuracy in Specific-Issue Investigations
Specific-issue polygraph testing — such as investigating a particular drug diversion incident — achieves the highest accuracy levels. The National Research Council (NRC) evaluated 37 laboratory studies and 7 field studies and established a median accuracy of 85% for the Comparison Question Technique (CQT) [20]Verified The Polygraph and Lie Detection
NRC 2003 report establishing median CQT accuracy of 85%, with APA reporting accuracy rates from 80 to 98 percent. An analysis of seven field studies involving specific incidents revealed a median accuracy of 89% [20]Verified The Polygraph and Lie Detection
NRC 2003 report establishing median CQT accuracy of 85%, with APA reporting accuracy rates from 80 to 98 percent. The APA reports that validated polygraph techniques show accuracy rates ranging from 80 to 98 percent [20]Verified The Polygraph and Lie Detection
NRC 2003 report establishing median CQT accuracy of 85%, with APA reporting accuracy rates from 80 to 98 percent.
Research by Charles Robert Honts and William J. Schweinle (2009) demonstrated that polygraph tests provide substantial improvements in information gain over unassisted decision-making across nearly the complete range of base rates of guilt [8]Verified Information gain of psychophysiological detection of deception in forensic and screening settings
Confirms polygraph tests provide substantial improvements in information gain over unassisted laypersons across nearly the complete range of base rates of guilt in forensic settings. This is particularly significant in healthcare investigations, where unaided human judgement — averaging just 54% accuracy — is insufficient for the high stakes involved.
The APA's exhaustive meta-analysis of 38 peer-reviewed studies found that single-issue polygraph techniques produced an aggregated decision accuracy of approximately 89%, while multiple-issue techniques showed accuracy around 85% [20]Verified The Polygraph and Lie Detection
NRC 2003 report establishing median CQT accuracy of 85%, with APA reporting accuracy rates from 80 to 98 percent.
Importance of Validated Testing Formats
Not all polygraph testing formats perform equally in healthcare screening contexts. Research by Donald J. Krapohl concluded that the decision accuracy of the Relevant-Irrelevant (RIR) screening format is substantially poorer than other validated screening formats [25]Verified Relevant-Irrelevant Screening Format Accuracy
Concluded that the decision accuracy of the RIR screening format is substantially poorer than other validated screening formats. This finding underscores the importance of selecting examiners who use evidence-based, validated testing methods.
Subsequent research by Krapohl and Walt Goodson (2015) addressed the poor interrater reliability problem that has plagued RI screening tests, investigating whether algorithmic support could resolve fundamental reliability issues [26]Verified Decision Accuracy for the Relevant-Irrelevant Screening Test: Influence of an Algorithm on Human Decision-Making
Addressed the poor interrater reliability problem that has plagued RI screening tests, investigating whether algorithmic support could resolve fundamental reliability issues. Meanwhile, research by Stuart M. Senter confirmed that structured numerical scoring demonstrates superior consistency over subjective interpretation for screening data [27]Verified An Exploration of Methods for the Analysis of Multiple-Issue Relevant/Irrelevant Screening Data
Confirms structured numerical scoring demonstrates superior consistency over subjective interpretation for screening data.
These findings are especially important for healthcare employers, who should insist on examiners using validated formats with structured scoring methods. Our polygraph research database provides access to the full range of peer-reviewed studies on testing methodology.
State-Level Considerations for Healthcare Employers
States with Additional Polygraph Restrictions
Several states have enacted laws imposing restrictions on employment polygraph testing that are more stringent than the federal EPPA. States that prohibit or significantly restrict employment polygraph use include Alaska, California, Connecticut, Delaware, Iowa, Massachusetts, Michigan, Minnesota, Montana, New Jersey, Rhode Island, Vermont, and West Virginia [28]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms list of U.S. states that prohibit or restrict employment polygraph testing including Alaska, California, Connecticut, Delaware, Massachusetts, and others. In West Virginia, polygraph testing is permitted only for employees handling pharmaceuticals [28]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms list of U.S. states that prohibit or restrict employment polygraph testing including Alaska, California, Connecticut, Delaware, Massachusetts, and others.
In California, Labor Code Section 432.2 prohibits private employers from demanding or requiring any applicant or employee to submit to a polygraph test as a condition of employment [29]Verified California Polygraph Laws
Confirms California Labor Code Section 432.2 prohibits private employers from requiring polygraph tests. Even the EPPA's pharmaceutical exemption may not override these state restrictions. Healthcare employers operating in these states must comply with whichever law — federal or state — provides greater employee protection.
Conversely, some states have no additional restrictions beyond the EPPA, giving healthcare employers broader latitude to use polygraph testing within the federal exemption framework. For state-specific cost information, see our guides on lie detector test costs in North Carolina and Delaware.
The Role of State Licensing Boards
Healthcare workers who divert controlled substances face consequences beyond employment termination, including criminal prosecution, civil malpractice suits, and loss of professional licences [2]Verified Drug Diversion in Health Care
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina. State licensing boards may investigate and discipline healthcare professionals independently of any employer action.
Some jurisdictions require mandatory reporting of suspected drug diversion. For example, North Carolina law requires licensees to report incidents involving controlled substance violations to the state Medical Board within 30 days [2]Verified Drug Diversion in Health Care
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina. Polygraph examination results, when combined with other evidence as required by the EPPA, can strengthen a facility's report to state authorities.
The interplay between employer polygraph investigations and state board proceedings requires careful coordination. Healthcare employers should involve legal counsel to ensure that polygraph-related evidence is properly handled and documented for potential regulatory proceedings.
For international healthcare organisations, polygraph use is expanding in many regions. Our guide to EyeDetect in Africa and emerging markets provides regional context for healthcare compliance programmes abroad.
Best Practices for Healthcare Polygraph Programmes
Building an Effective Programme
Healthcare facilities should approach polygraph testing as one component of a comprehensive integrity and diversion prevention programme. The Joint Commission recommends that all healthcare facilities have policies and procedures in place to deter, detect, and intervene when drug diversion occurs, created through collaboration between healthcare staff, pharmacy services, safety and security personnel, legal counsel, human resources, and industry loss-prevention experts [1]Verified Quick Safety Issue 48: Drug diversion and impaired health care workers
Confirms approximately 10% of healthcare workers abuse drugs based on SAMHSA and ANA statistics, and details patient safety risks including inadequate pain relief and infectious disease exposure.
Polygraph testing fits within this framework as a targeted investigative tool. Best practices include establishing clear policies that define when polygraph testing may be requested, documenting all preliminary investigations thoroughly before invoking an EPPA exemption, engaging licensed and experienced examiners who understand healthcare terminology and pharmaceutical processes, coordinating with legal counsel to ensure compliance with both federal and state requirements, and training supervisory staff on the signs of drug diversion and proper reporting procedures.
A strong integrity programme also relies on automated dispensing cabinet monitoring, random audits, and tip-based reporting systems. The most common methods hospitals use to detect diversion include automated dispensing cabinets (91%), internal audits (90%), soliciting tips from other healthcare workers (83%), and anomalous usage reports (68%) [30]Verified Survey Report: Drug Diversion in U.S. Health Systems
Confirms most common diversion detection methods: automated dispensing cabinets (91%), internal audits (90%), employee tips (83%), and anomalous usage reports (68%). Polygraph testing complements these methods by providing a direct assessment of employee truthfulness during investigations.
Selecting a Qualified Examiner
Healthcare polygraph examinations require examiners with specific expertise. The examiner must be licensed in the state where the test is conducted and must be bonded or carrying professional liability coverage [24]Verified Employment Law Guide - Lie Detector Tests (Examiner Standards)
Confirms examiners must be state-licensed and bonded, and records must be retained for minimum three years. Beyond these legal requirements, healthcare investigations demand familiarity with medical terminology, pharmaceutical dispensing processes, controlled substance schedules, and the clinical environment.
Examiners should use validated testing formats with structured numerical scoring — not outdated methods with known reliability issues. As our polygraph research database demonstrates, the choice of testing format significantly impacts accuracy and reliability.
At LieDetectorTest.com, our examiners have extensive experience conducting workplace investigations in healthcare settings. Contact us to arrange a consultation or book an examination tailored to your facility's needs. View our polygraph test pricing or find a testing location near your facility.
How to Arrange Polygraph Testing for Healthcare Staff
Preparing for a Healthcare Polygraph Examination
When a healthcare organisation determines that a polygraph examination is appropriate and lawful, several preparatory steps ensure a smooth and legally compliant process.
First, conduct a thorough preliminary investigation to document the specific incident, the economic loss or controlled substance discrepancy, and the employees who had access. This investigation forms the legal foundation for any EPPA exemption. Second, prepare all required EPPA documentation, including the written statement of specifics. Have the statement signed by an authorised company representative — not the polygraph examiner [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. Third, select an experienced examiner and schedule the examination at a neutral, private location away from patient care areas. Ensure the examinee receives proper written notice of their rights, including the right to consult with legal counsel before each phase of testing [22]Verified Employment Law Guide - Lie Detector Tests
Confirms all EPPA notice, recordkeeping, and disclosure requirements for employers and examiners, including examiner licensing and bonding requirements.
For guidance on what happens during the examination itself, see our article on the most asked questions during lie detector tests.
What to Expect During the Examination
A typical polygraph examination includes three phases: a pre-test interview, the chart collection phase, and the test data analysis phase [31]Verified Polygraph Frequently Asked Questions
Confirms APA meta-analysis findings on validated polygraph techniques and describes the typical three-phase examination process. During the pre-test, the examiner discusses the investigation, reviews all test questions with the examinee, and explains the instrument and process. No surprise questions are asked.
During chart collection, the examiner administers several rounds of questions while the polygraph instrument records physiological responses — cardiovascular activity, respiratory patterns, and electrodermal activity. The number of charts varies depending on the testing format and number of relevant issues.
After testing, the examiner analyses the collected data using validated scoring methods. Research by Stuart M. Senter has shown that structured numerical scoring produces superior consistency over subjective interpretation [27]Verified An Exploration of Methods for the Analysis of Multiple-Issue Relevant/Irrelevant Screening Data
Confirms structured numerical scoring demonstrates superior consistency over subjective interpretation for screening data. The examiner then prepares a detailed report of the findings.
The entire process typically takes 90 minutes to two and a half hours. Results are provided to the employer in writing, and both the employer and examiner must retain records for at least three years [24]Verified Employment Law Guide - Lie Detector Tests (Examiner Standards)
Confirms examiners must be state-licensed and bonded, and records must be retained for minimum three years.
Identify the Incident and Applicable Exemption
Document the specific incident — whether drug diversion, theft, fraud, or other economic loss — and determine which EPPA exemption applies: the pharmaceutical exemption (Section 7(f)) for controlled substance matters, or the ongoing investigation exemption (Section 7(d)) for other economic losses.
Conduct a Preliminary Investigation
Gather evidence establishing the specific economic loss, identify employees who had access to the property or substances in question, and develop a reasonable basis for suspicion regarding specific employees. Document all findings thoroughly.
Prepare EPPA-Required Documentation
Draft and sign the required written statement detailing the specific incident, the employee's access, and the basis for suspicion. This must be signed by an authorised company representative (not the polygraph examiner) and provided to the employee before testing.
Engage a Qualified Polygraph Examiner
Retain an examiner who is licensed in your state, bonded or carrying professional liability coverage, and experienced in healthcare workplace investigations. Contact LieDetectorTest.com to arrange a consultation or book an examination.
Provide Required Notice to the Employee
Deliver all EPPA-required written notices to the employee, including the right to consult legal counsel, the nature of the examination, prohibited question categories, the right to terminate the test, and the right to file a DOL complaint.
Conduct the Examination and Document Results
The examiner administers the polygraph using a validated testing format and provides a written report. Combine the results with other evidence when making employment decisions — polygraph findings alone cannot serve as the sole basis for adverse action.
Pros
- Hospitals registered with the DEA qualify for the EPPA pharmaceutical exemption, enabling lawful polygraph testing of staff with controlled substance access
- Polygraph testing provides substantial information gain over unaided human judgement in determining truth and deception, as demonstrated by peer-reviewed research
- Acts as a powerful deterrent against drug diversion, theft, and fraud when employees know testing is part of the integrity programme
- Helps resolve workplace investigations more quickly, reducing the period of uncertainty that affects staff morale
- Government-operated hospitals (VA, military, state-run) have unrestricted authority to use polygraph testing
- Supports DEA and Medicare/Medicaid compliance requirements by demonstrating proactive diversion prevention efforts
- Can corroborate or challenge information from tips, surveillance data, and automated monitoring systems
Cons
- Private hospitals must comply with strict EPPA exemption requirements — procedural errors can invalidate the exemption and create legal liability
- Several states impose additional restrictions that may be more limiting than the federal EPPA framework
- Pre-employment polygraph screening is only available under the pharmaceutical exemption for positions with direct controlled substance access — general hospital hiring is not covered
- Polygraph results cannot be the sole basis for adverse employment action; additional supporting evidence is always required
- Employees retain the right to refuse testing, and refusal alone cannot be used for termination or discipline
Frequently Asked Questions
Can a hospital legally require employees to take a polygraph test?
Under the EPPA, private hospitals cannot require employees to take a polygraph. They can request an examination when an applicable exemption applies — either the pharmaceutical exemption for controlled substance matters or the ongoing investigation exemption for specific economic loss incidents. Government-run hospitals (VA, military, state, county) are exempt from the EPPA and may have broader authority [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. Even when an exemption applies, an employee who refuses testing cannot be terminated or disciplined solely for that refusal.
Does the EPPA pharmaceutical exemption apply to hospital pharmacies?
Yes. Hospitals and clinics registered with the DEA to dispense controlled substances are covered by the EPPA's Section 7(f) pharmaceutical exemption [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. This permits polygraph testing of prospective employees who would have direct access to controlled substances, and of current employees during ongoing investigations involving controlled substance losses or misconduct. The hospital must hold an active DEA registration covering the applicable drug schedules. DEA Form 224 covers Hospital/Clinic, Retail Pharmacy, Practitioner, and Teaching Institution registration categories [14]Verified DEA Registration
Confirms DEA Form 224 covers Hospital/Clinic, Retail Pharmacy, Practitioner, and Teaching Institution registration categories.
What types of healthcare investigations can involve polygraph testing?
Under the applicable EPPA exemptions, polygraph testing can be used in investigations involving drug diversion or controlled substance losses (pharmaceutical exemption), theft of medical equipment or supplies, financial fraud or embezzlement, billing fraud, data breach or unauthorised access to protected health information, and any other incident involving specific economic loss or injury to the healthcare employer. Each investigation must meet the specific procedural requirements of the applicable exemption.
Can a nurse be polygraph tested for suspected drug diversion?
Yes, if the hospital is DEA-registered and the nurse had access to the controlled substances in question, the pharmaceutical exemption permits polygraph testing as part of an ongoing investigation [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. The hospital must provide the required written documentation, and results cannot be the sole basis for disciplinary action. Statistics from SAMHSA and the ANA suggest that approximately 10% of healthcare workers abuse drugs [1]Verified Quick Safety Issue 48: Drug diversion and impaired health care workers
Confirms approximately 10% of healthcare workers abuse drugs based on SAMHSA and ANA statistics, and details patient safety risks including inadequate pain relief and infectious disease exposure, and nurses were responsible for 31% of publicly reported drug diversion incidents in 2020 [3]Verified Substance use disorders and drug diversion among nurses
Confirms nurses responsible for 31% of publicly reported drug diversion in 2020, opioids are the most commonly diverted drug class, and details consequences including felony charges, highlighting the importance of these investigations.
How accurate is polygraph testing for healthcare workplace investigations?
Specific-issue polygraph testing achieves the highest accuracy levels. The National Research Council established a median accuracy of 85% for the CQT across validated studies, with field studies showing median accuracy of 89% for specific incidents [20]Verified The Polygraph and Lie Detection
NRC 2003 report establishing median CQT accuracy of 85%, with APA reporting accuracy rates from 80 to 98 percent. The APA reports accuracy rates ranging from 80 to 98 percent for validated techniques [20]Verified The Polygraph and Lie Detection
NRC 2003 report establishing median CQT accuracy of 85%, with APA reporting accuracy rates from 80 to 98 percent. Research by Honts and Schweinle (2009) demonstrated that polygraph tests provide substantial improvements in information gain over unassisted decision-making [8]Verified Information gain of psychophysiological detection of deception in forensic and screening settings
Confirms polygraph tests provide substantial improvements in information gain over unassisted laypersons across nearly the complete range of base rates of guilt in forensic settings.
What happens if a healthcare worker refuses a polygraph test?
Under the EPPA, a healthcare worker cannot be discharged, disciplined, denied employment or promotion, or otherwise discriminated against for refusing to take a polygraph test [13]Verified Employee Polygraph Protection Act (Full Text)
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements. The employer may continue its investigation using other methods and evidence. However, the refusal itself cannot be used as the basis for adverse action. The investigation proceeds with all other available evidence.
Are there states where hospital polygraph testing is prohibited?
Several states — including Alaska, California, Connecticut, Delaware, Iowa, Massachusetts, Michigan, Minnesota, Montana, New Jersey, Rhode Island, Vermont, and West Virginia — have enacted laws that impose restrictions on employment polygraph testing more stringent than the federal EPPA [28]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms list of U.S. states that prohibit or restrict employment polygraph testing including Alaska, California, Connecticut, Delaware, Massachusetts, and others. In these states, even when a federal EPPA exemption might otherwise apply, the state law may limit or prohibit testing. Healthcare employers must comply with whichever law provides the greater employee protection.
How should hospitals prepare for a polygraph examination?
Hospitals should conduct a thorough preliminary investigation documenting the specific incident and economic loss, identify employees with access, develop reasonable suspicion regarding specific individuals, prepare all EPPA-required written documentation, engage a licensed and experienced polygraph examiner, and provide proper written notice to the employee of all their rights under the law. The process should be coordinated with legal counsel and HR. Contact LieDetectorTest.com to arrange a professional consultation.
What is the cost of drug diversion to the healthcare system?
According to the U.S. Department of Justice National Drug Intelligence Center, the estimated cost of controlled prescription drug diversion to public and private medical insurers exceeds $72.5 billion per year [4]Verified Drug Diversion and Loss Prevention: A Changing Landscape
Confirms the $72 billion+ annual cost of drug diversion per U.S. DOJ National Drug Intelligence Center and 10-15% of healthcare workers at risk. Beyond these insurance costs, drug diversion can result in DEA fines (the largest reported settlement for a health system exceeded $7 million [7]Verified Prevalence of Drug Diversion in Healthcare
Confirms over 1 in 100 healthcare workers are diverting drugs and the largest reported DEA settlement exceeded $7 million), loss of Medicare/Medicaid eligibility, patient lawsuits, and reputational damage.
Can polygraph results be used in regulatory proceedings against a healthcare worker's licence?
Polygraph examination results, when combined with other evidence as required by the EPPA, can strengthen a facility's report to state licensing boards and regulatory authorities [2]Verified Drug Diversion in Health Care
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina. However, the EPPA prohibits using polygraph results as the sole basis for adverse employment action. State licensing boards may investigate and discipline healthcare professionals independently, and some jurisdictions require mandatory reporting of suspected drug diversion. Healthcare employers should coordinate with legal counsel to ensure proper handling of polygraph-related evidence in regulatory proceedings.
Sources & References
Confirms approximately 10% of healthcare workers abuse drugs based on SAMHSA and ANA statistics, and details patient safety risks including inadequate pain relief and infectious disease exposure
Confirms 10-15% of healthcare workers divert drugs, civil/criminal consequences for facilities and workers, and mandatory reporting requirements in states like North Carolina
Confirms nurses responsible for 31% of publicly reported drug diversion in 2020, opioids are the most commonly diverted drug class, and details consequences including felony charges
Confirms the $72 billion+ annual cost of drug diversion per U.S. DOJ National Drug Intelligence Center and 10-15% of healthcare workers at risk
Confirms healthcare employee theft averages $12,000 per incident and comprehensive internal controls reduce theft-related losses by 35%
Confirms two-thirds of healthcare leaders lack confidence in their diversion programme effectiveness and only 37.5% use AI tools for detection
Confirms over 1 in 100 healthcare workers are diverting drugs and the largest reported DEA settlement exceeded $7 million
Confirms polygraph tests provide substantial improvements in information gain over unassisted laypersons across nearly the complete range of base rates of guilt in forensic settings
Confirms healthcare data breach costs averaged $9.77 million in 2024, and healthcare breaches take 213 days before discovery
Confirms 5% revenue loss from fraud (ACFE), 43% of cases reported by tips, 59% of healthcare data breaches from insiders
Confirms 61% of healthcare data breach threats come from negligent employees
Confirms stolen medical records can sell for over $500 and 283 breaches occurred in H1 2025 impacting 16+ million individuals
Confirms the full text of EPPA Section 7(d) ongoing investigation and Section 7(f) pharmaceutical exemptions with all procedural requirements
Confirms DEA Form 224 covers Hospital/Clinic, Retail Pharmacy, Practitioner, and Teaching Institution registration categories
Confirms every healthcare provider who administers, prescribes, or dispenses controlled substances must be DEA-registered
Confirms random employer polygraph testing is precluded and exemption requires a specific incident not continuous investigation
Provided the first scientific validation of directed lie control questions and the CIST format under controlled conditions
US military study finding polygraph screening detection rates significantly better than chance for counterintelligence screening
Confirms employee theft costs U.S. businesses $50 billion annually
NRC 2003 report establishing median CQT accuracy of 85%, with APA reporting accuracy rates from 80 to 98 percent
Confirms DOJ's 2025 healthcare fraud enforcement action charging 324 defendants with $14.6 billion in alleged fraud, including 74 for drug diversion
Confirms all EPPA notice, recordkeeping, and disclosure requirements for employers and examiners, including examiner licensing and bonding requirements
Confirms $10,000 penalty per EPPA violation and employees' right to file private lawsuits
Confirms examiners must be state-licensed and bonded, and records must be retained for minimum three years
Concluded that the decision accuracy of the RIR screening format is substantially poorer than other validated screening formats
Addressed the poor interrater reliability problem that has plagued RI screening tests, investigating whether algorithmic support could resolve fundamental reliability issues
Confirms structured numerical scoring demonstrates superior consistency over subjective interpretation for screening data
Confirms list of U.S. states that prohibit or restrict employment polygraph testing including Alaska, California, Connecticut, Delaware, Massachusetts, and others
Confirms California Labor Code Section 432.2 prohibits private employers from requiring polygraph tests
Confirms most common diversion detection methods: automated dispensing cabinets (91%), internal audits (90%), employee tips (83%), and anomalous usage reports (68%)
Confirms APA meta-analysis findings on validated polygraph techniques and describes the typical three-phase examination process
Provides initial empirical validation of PCASS as a portable credibility assessment tool for field deployment in military contexts
Foundational research confirming polygraph examination as an evidence-based tool that improves case management and community safety monitoring
Foundational research on security screening polygraph accuracy relevant to healthcare screening contexts
Confirms EPPA prevents most private employers from using polygraph tests with exemptions for security, pharmaceutical, and government employers
If your hospital needs to screen staff discreetly, you can arrange a corporate polygraph service with an experienced professional.