Polygraph Testing for Corporate Fraud: HR Guide

Complete HR guide to using polygraph testing in corporate fraud investigations. EPPA exemptions, 48-hour notice rules, documentation requirements, and best practices.

Published March 22, 2026 Updated July 24, 2026 54 min read All articles

When corporate fraud surfaces, HR teams must decide how far an internal inquiry should go, and a lie detector test is one tool that, used correctly, can support a fair investigation.

A comprehensive guide to lawfully deploying polygraph examinations during internal corporate fraud investigations, from understanding federal EPPA exemptions to structuring the examination process and integrating results with other evidence.

89%Specific-Issue Accuracy
48 hrsMin Notice Required
$10K+EPPA Violation Penalty
EPPAFederal Law Governs

TL;DR — The Short Version

  • EPPA generally prohibits employer polygraph use — but a specific 'ongoing investigation' exemption under 29 U.S.C. § 2006(d) exists for corporate fraud, theft, embezzlement, and economic loss cases.
  • Strict procedural requirements apply — employers must provide 48-hour written notice, document reasonable suspicion, and cannot test employees who had no access to the loss.
  • Results alone are never enough — polygraph findings cannot be the sole basis for adverse employment action under federal law; additional supporting evidence is always required.
  • State laws may impose additional restrictions — some states like California ban employer polygraph testing entirely, potentially overriding the federal EPPA exemption.
  • The ACFE estimates organizations lose 5% of revenue to fraud annually, with a median loss of $145,000 per case, making effective investigation tools essential.
  • Event-specific polygraph testing achieves a mean accuracy of 89% according to APA-cited research, making it a powerful investigation tool when conducted properly.
  • Documentation is everything — thorough records of reasonable suspicion, proper notice, and examination procedures protect against legal liability and must be retained for at least three years.

Who This Guide Is For

  • HR directors investigating internal fraud, theft, or embezzlement
  • Compliance officers developing corporate fraud investigation protocols
  • Corporate counsel advising on EPPA-compliant polygraph procedures
  • Loss prevention professionals in retail, warehousing, and distribution
  • CFOs and executives managing responses to suspected financial crimes
  • Risk management professionals assessing investigation tools
  • Small business owners experiencing unexplained inventory or financial losses

Overview: Polygraph in Corporate Fraud Contexts

Why Corporate Fraud Demands Specialized Investigation Tools

Corporate fraud represents one of the most significant financial risks facing organizations of every size. The Association of Certified Fraud Examiners (ACFE) 2024 Report to the Nations analyzed 1,921 actual fraud cases from 138 countries and territories and found that organizations lose an estimated 5% of their annual revenue to fraud each year [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
. With total identified losses across the studied cases exceeding $3.1 billion [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
, and a global loss estimate of over $5 trillion annually, the financial impact is staggering.

The median loss per fraud case in the 2024 study was $145,000, a 24% increase from the 2022 report [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
. The median fraud scheme takes 12 months to uncover [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
, during which time the average loss per month is $9,900. These figures underscore why organizations need every effective investigation tool available — including polygraph testing.

Event-specific diagnostic polygraph testing produces an aggregated decision accuracy of 89% (with a 95% confidence interval of 83%–95%) according to meta-analytic research cited by the American Polygraph Association [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. This level of accuracy, combined with the deterrent effect of polygraph availability, makes it a valuable component of any corporate fraud investigation strategy. For organizations looking to protect their interests, our comprehensive guide to polygraph testing for business explains the broader benefits.

The Scale of Occupational Fraud by Category

Understanding the types of fraud your organization may face helps determine the appropriate investigation approach. The ACFE 2024 report identifies three primary categories of occupational fraud [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
:

Asset misappropriation is the most common, representing 89% of cases, though it carries the lowest median loss at $120,000 per incident. This includes theft of cash, inventory, and other company resources — precisely the type of situation where the EPPA ongoing investigation exemption most commonly applies.

Corruption was present in 48% of cases, including kickbacks, bribes, and extortion, with a median loss of $200,000. Financial statement fraud, while occurring in only 5% of cases, caused the highest median loss at $766,000 per incident [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
.

Notably, 35% of fraud cases involved both asset misappropriation and corruption, and 84% of fraud perpetrators displayed at least one behavioral red flag before detection [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
. Research into why employees lie at work provides further insight into the psychological factors that drive workplace deception.

Research on deception detection in fraud contexts has advanced significantly. A 2023 study published in Frontiers in Psychology found that 69% of near-victims cited fraud knowledge as their primary detection strategy [10]Verified In Their Own Words: Deception Detection by Victims and Near Victims of Fraud
Confirms 69% of near-victims cited fraud knowledge as primary detection strategy, while actual victims reported seeking more information as key.
, emphasizing the importance of structured investigative approaches over intuition alone. Similarly, emerging research into video-based deception detection has shown that visual deception cues can predict financial fraud [12]Verified Video-Based Deception Detection and Financial Fraud
Confirms visual deception scores from IPO roadshow videos significantly predict financial fraud, with strongest effects for financial performance discussions.
, demonstrating the growing scientific interest in multi-modal approaches to fraud detection.

The EPPA Framework: What Employers Must Know

Understanding the Employee Polygraph Protection Act

The Employee Polygraph Protection Act of 1988 (EPPA) is the foundational federal law governing polygraph use in the private sector [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. Enacted on June 27, 1988 and effective December 27, 1988, it generally prohibits most private employers from using lie detector tests — including polygraphs, deceptographs, voice stress analyzers, and psychological stress evaluators — either for pre-employment screening or during the course of employment [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Under EPPA, it is illegal for covered private employers to require, request, suggest, or cause any employee or job applicant to take a lie detector test; to use, accept, refer to, or inquire about the results of such tests; or to discharge, discipline, or discriminate against anyone who refuses to take a test [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. For a complete history of this landmark legislation, see our guide to the Employee Polygraph Protection Act of 1988.

Critically, EPPA does not apply to federal, state, and local government employers [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. Government agencies at all levels, including police departments, school systems, and correctional institutions, are exempt from the Act's prohibitions [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. The Act also provides specific exemptions for certain private-sector employers, including security service firms (armored car, alarm, and guard companies) and pharmaceutical manufacturers, distributors, and dispensers [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

The penalty for violating EPPA provisions is a civil penalty of up to $10,000 per violation [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
, and employees may also bring private civil lawsuits seeking reinstatement, back pay, and attorney's fees. Understanding these provisions is essential before considering any workplace polygraph program.

Key EPPA Definitions and Scope

EPPA defines a 'lie detector' broadly as any device — mechanical or electrical — used to render a diagnostic opinion regarding an individual's honesty [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. This includes but is not limited to polygraphs, deceptographs, voice stress analyzers, and psychological stress evaluators. However, written or oral honesty tests that do not measure physiological responses are generally not covered by EPPA.

The Act defines a 'polygraph' specifically as an instrument that records continuously, visually, permanently, and simultaneously changes in cardiovascular, respiratory, and electrodermal patterns as minimum instrumentation standards, used for the purpose of rendering a diagnostic opinion regarding honesty [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. This precise definition matters because under the exemptions, only polygraph tests — not other types of lie detector tests — are permitted [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

EPPA broadly defines 'employer' to include any person acting directly or indirectly in the interest of an employer in relation to an employee or prospective employee [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Since most employers engage in activities affecting commerce, virtually all private employers are covered by the Act unless specifically exempted.

EPPA Exemptions for Fraud Investigations

The Ongoing Investigation Exemption (Section 7(d))

The exemption most relevant to corporate fraud investigations is found in Section 7(d) of EPPA (29 U.S.C. § 2006(d)). This limited exemption permits an employer to request an employee to submit to a polygraph test when all four of the following conditions are met [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
:

1. The test is administered in connection with an ongoing investigation involving economic loss or injury to the employer's business, such as theft, embezzlement, misappropriation, or an act of unlawful industrial espionage or sabotage.

2. The employee had access to the property that is the subject of the investigation.

3. The employer has a reasonable suspicion that the employee was involved in the incident or activity under investigation.

4. The employer executes a written statement, provided to the examinee before the test, that sets forth the specific incident being investigated and the basis for testing particular employees, is signed by someone authorized to legally bind the employer (other than the polygraph examiner), and is retained by the employer for at least three years.

This exemption is narrowly construed. The Department of Labor regulations in 29 CFR Part 801 make clear that random testing by an employer is precluded by the Act [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Furthermore, the exemption is limited to a specific incident or activity — an employer cannot use it when the 'ongoing investigation' is continuous or general in nature [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. For example, the mere fact that items in inventory are frequently missing from a warehouse would not be a sufficient basis, standing alone, for administering a polygraph test [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

What Constitutes Economic Loss or Injury

The economic loss or injury must be specific and identifiable. According to DOL regulations, economic losses resulting from unintentional or lawful conduct do not serve as a basis for polygraph testing [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Routine inventory shortages, normal cash register discrepancies, and losses from workplace accidents do not qualify.

However, where additional evidence is obtained through investigation of specific items missing through intentional wrongdoing — and there exists reasonable suspicion that the employee to be tested was involved — polygraph testing becomes permissible [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. The loss must also be the employer's own loss. An indirect loss to a client does not constitute a loss to the employer unless the employer has custody of, management over, or security responsibility for the client's property [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

For organizations in specific industries, our specialized guides cover common fraud scenarios: warehouse theft investigations, restaurant employee theft, and construction site theft all provide industry-specific guidance on structuring EPPA-compliant investigations.

Other Relevant EPPA Exemptions

Beyond the ongoing investigation exemption, EPPA provides two additional categories of exemptions relevant to certain employers [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
:

Security service firms whose primary business purpose consists of providing armored car personnel, security alarm installation and maintenance personnel, or other uniformed or plainclothes security personnel may administer polygraph tests to prospective employees [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. Our guide to polygraph testing for security guards and private security covers this exemption in detail, and our article on why security firms use polygraph tests explains the business rationale.

Pharmaceutical employers authorized to manufacture, distribute, or dispense controlled substances listed in Schedules I through IV may also use polygraph testing, subject to restrictions regarding employee access to the controlled substances [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

For a broader understanding of pre-employment polygraph restrictions, see our article on why polygraphs are restricted in pre-employment screening.

Pre-Test Requirements and Employee Rights

The 48-Hour Written Notice Requirement

Before any polygraph examination can be administered under the ongoing investigation exemption, the employer must provide the employee with a comprehensive written statement at least 48 hours before the test, excluding weekend days and holidays [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
[3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. This is not optional — failure to comply invalidates the exemption and exposes the employer to EPPA penalties.

The written statement must include [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
[3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
:

- A description with particularity of the specific incident or activity being investigated - The specific economic loss or injury to the employer's business - A description of the employee's access to the property that is the subject of the investigation - The basis of the employer's reasonable suspicion that the employee was involved in the incident - The date, time, and location of the scheduled polygraph test - Written directions if the test is conducted at a location other than the workplace

The statement must be signed by a person authorized to legally bind the employer — not the polygraph examiner [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. The employee must sign and date the statement acknowledging receipt. All documents must be retained by the employer for a minimum of three years [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

The 48-hour notice period serves an important purpose: it provides the employee adequate time to obtain and consult with legal counsel or an employee representative before the test [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

Employee Rights During the Process

EPPA establishes robust protections for employees throughout the polygraph process [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
:

Voluntary participation: Employees cannot be required to take a polygraph test. They have the right to refuse, and the employer cannot discharge, discipline, or discriminate against an employee for refusing to take the test [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. While refusal can be noted in the investigation record, it cannot be used as the basis for adverse action.

Right to counsel: Employees have the right to consult with legal counsel or an employee representative before each phase of the examination [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. Understanding your rights is crucial — our article on whether you can refuse a lie detector test provides detailed guidance.

Restrictions on questions: The examiner is prohibited from asking questions about religious beliefs, racial matters, political beliefs, sexual behavior, or union activities [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. Questions must be limited to the specific investigation.

Right to terminate: The employee may stop the examination at any time [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Right to results: The employee must be informed of the results and given an opportunity to explain any physiological reactions [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

Confidentiality: Results may only be disclosed to the employer, the employee, a court or government agency pursuant to court order, or a governmental agency if the results involve an admission of criminal conduct [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Employees may not waive their EPPA rights [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Any purported waiver is void and unenforceable.

Structuring the Investigation Process

Step 1: Documenting the Economic Loss

Before engaging a polygraph examiner, the employer must establish and document the specific economic loss. This means identifying the particular incident — not a pattern of general shortages — that triggered the investigation. The documentation should include:

- Specific dollar amount or description of the loss - Date or time period when the loss was discovered - How the loss was detected (audit findings, discrepancy reports, witness reports) - Evidence that the loss resulted from intentional wrongdoing rather than accident or lawful conduct

This documentation forms the foundation of the employer's written statement required under EPPA. Without a clearly identified economic loss tied to a specific incident, the exemption simply does not apply [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. For a practical framework, our workplace polygraph policy guide covers policy development in detail.

Step 2: Establishing Access and Reasonable Suspicion

The employer must document two critical elements for each employee to be tested:

Access: The employee must have had access to the property that is the subject of the investigation [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. This does not mean merely being present at the workplace — it means having a credible opportunity to commit or participate in the specific act under investigation.

Reasonable suspicion: The employer must have a specific, articulable basis for suspecting each individual employee's involvement [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. General suspicion of a department or group is insufficient. The EPPA requires specificity beyond mere assertions regarding economic loss, employee access, and reasonable suspicion [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Each employee tested must have an individualized basis for suspicion documented in the written statement.

This is one of the most important safeguards against 'fishing expeditions.' If your organization is investigating a specific theft from a secure area, you cannot test all 200 employees — only those who had documented access to that area and against whom specific evidence supports a reasonable suspicion of involvement.

Step 3: Engaging a Qualified Polygraph Examiner

Selecting the right examiner is critical to both the quality of results and EPPA compliance. EPPA establishes minimum qualifications: the examiner must have a valid and current license if required by the state where the test is conducted, must carry a minimum of $50,000 in professional liability coverage, and must conduct no more than five polygraph tests during one calendar day [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

Beyond these minimums, look for examiners who are members of the American Polygraph Association (APA) and are bound by its Standards of Practice and Code of Ethics [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. APA members must use only evidence-based validated polygraph procedures and have access to continuing education and peer-reviewed research to stay current with best practices [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
.

The APA Standards of Practice require that polygraph techniques used for evidentiary examinations demonstrate an unweighted average accuracy rate of 90% or greater, excluding inconclusive results, in at least two published empirical studies [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. This sets a high bar that helps ensure the reliability of examination results.

The examiner should not be involved in determining who should or should not be tested, nor in deciding who has access or reasonable suspicion [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. These are employer determinations. The examiner's role is to conduct the examination professionally and render an objective opinion. For additional context on examiner qualifications and the profession, our polygraph examiner salary guide provides industry background.

During the Polygraph Examination

EPPA Requirements for Test Administration

When polygraph examinations are permitted under EPPA, they are subject to strict standards covering all three phases of the examination — pre-test, testing, and post-test [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

The examination must last a minimum of 90 minutes [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Before testing begins, the examiner must read and explain the Notice to Examinee, which must be signed, timed, dated, and witnessed. The employee must be provided with a written explanation of the polygraph test and procedures.

During the test, the examiner must provide the employee with the test questions in writing beforehand and have the employee write out their answers [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. No questions may be asked regarding religious beliefs, racial matters, political beliefs, sexual behavior, or beliefs and affiliations with labor organizations [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

After the test, the examiner must inform the employee of the results and allow an opportunity to explain any reactions [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Any opinion of deception or non-deception must be provided in writing, and results must be based solely on the polygraph data — not on behavioral observations during the interview [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

For a detailed examiner's perspective on this process, our guide to polygraph in workplace investigations provides practical insights from experienced professionals.

What Happens During the Examination

A professional polygraph examination conducted under EPPA guidelines follows a structured protocol. The pre-test interview establishes rapport, discusses the examination issues, reviews questions, and explains the polygraph process including instrumentation and sensors [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. The examiner obtains informed consent before any testing begins.

During the chart collection phase, the examiner administers and collects multiple polygraph charts. The polygraph instrument records changes in cardiovascular activity (blood pressure and heart rate), respiratory patterns (thoracic and abdominal breathing), and electrodermal activity (skin conductivity), along with data from a seat activity sensor [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. These physiological measurements form the scientific basis for the examiner's assessment.

After chart collection, the examiner analyzes the data using validated scoring methods and renders an opinion. Three outcomes are possible: No Deception Indicated (NDI), Deception Indicated (DI), or Inconclusive [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. Research has shown that the PolyScore algorithmic scoring system achieves 90.9% accuracy on validated examination techniques [7]Verified A Comparison of Polygraph Data Obtained from Individuals Involved in Mock Crimes and Actual Criminal Investigations / PolyScore Accuracy / Concealed Information Field Study
Confirms logistic regression classification accuracy consistency between lab and field settings, PolyScore 3.3 achieving 90.9% accuracy, and real-world validity data for concealed information testing.
, providing an objective complement to examiner judgment.

Interpreting and Using Polygraph Results

Results Cannot Be the Sole Basis for Adverse Action

This is one of the most critical legal requirements under EPPA: the exemption for ongoing investigations does not apply if an employee is discharged, disciplined, denied employment or promotion, or otherwise discriminated against based solely on polygraph test analysis or refusal to take a test, without additional supporting evidence [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

However, the law provides an important clarification: the evidence that formed the basis for reasonable suspicion (which was required to justify administering the test in the first place) may serve as the additional supporting evidence [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. This means the documentation assembled to establish the grounds for testing can also support any subsequent employment action when combined with polygraph findings.

In practice, polygraph results should be treated as one piece of a larger investigative picture. They are most effective when integrated with documentary evidence, witness statements, financial records, surveillance data, and other investigative findings. Our guide to polygraph testing for banking and finance examines how financial institutions integrate polygraph results with forensic accounting.

Disclosure Restrictions

EPPA imposes strict limits on who can receive polygraph results [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. A polygraph examiner may disclose information only to the examinee, any person specifically designated in writing by the examinee, or to any court, governmental agency, arbitrator, or mediator pursuant to a court order [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

An employer for whom a polygraph test is conducted may disclose information only in accordance with these same provisions, or to a governmental agency — but only insofar as the disclosed information involves an admission of criminal conduct [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. This means if an employee confesses to criminal activity during the examination, the employer may report that admission to law enforcement. However, the mere polygraph result (e.g., 'deception indicated') cannot be shared with external parties without the examinee's written consent or a court order.

These restrictions underscore the importance of maintaining thorough internal documentation. Results shared beyond the authorized scope create EPPA violation exposure of up to $10,000 per violation [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Integrating Results with Other Evidence

Building a Comprehensive Investigation File

The most effective corporate fraud investigations use polygraph testing as part of a multi-faceted approach. Before and after the polygraph examination, the investigation file should include:

- Complete documentation of the economic loss or injury - Records establishing each tested employee's access to the property - Written basis for reasonable suspicion of each individual - All EPPA-required notices, statements, and employee acknowledgments - Polygraph examination results and examiner's written opinion - Independent corroborating evidence (financial records, surveillance, witness statements, digital forensics) - Record of any admissions made during the examination - Documentation of the 48-hour notice compliance - Record of any additional interview conducted before taking adverse action

The employer must maintain a statement of adverse actions taken against the employee following a polygraph test and must conduct an additional interview of the employee before any adverse action [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. This additional interview requirement provides a final safeguard and gives the employee an opportunity to respond.

Research supports the value of structured investigative interviewing alongside polygraph testing. A study by Walsh and Bull (2013) analyzing 142 benefit fraud interviews found that investigator skill varied significantly, with particular shortcomings in rapport development and flexibility [9]Verified The Investigation and Investigative Interviewing of Benefit Fraud Suspects in the UK
Confirms analysis of 142 benefit fraud interviews revealed shortcomings in investigative interviewing skill, particularly rapport development and flexibility.
. This underscores the importance of professional, trained examiners who can conduct thorough interviews as part of the polygraph process.

The Deterrent Effect of Polygraph Availability

Beyond the direct investigative value of polygraph results, organizations that include polygraph testing in their fraud investigation toolkit often experience a powerful deterrent effect. When employees know that polygraph testing is available and may be used during investigations, the perceived probability of detection increases substantially.

The ACFE's research supports this principle: organizations with strong anti-fraud controls — including investigation capabilities — experienced fraud losses that were 50% smaller than those without such controls [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
. Training and awareness programs that include information about investigation tools, including polygraph testing, reduce fraud losses by nearly half [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
.

Research on polygraph use in corporate structures confirms this growing acceptance. A 2024 study by Tsygankov and Kravchuk published in Vestnik Universiteta found that polygraph screening is increasingly accepted and utilized as a personnel tool in corporate structures, with both employers and employees showing attitudes that support its use [8]Verified Use of Special Technical Means (Polygraph) on Personnel Recruitment in Corporate Structures
Confirms polygraph screening is increasingly accepted as a personnel recruitment tool in corporate structures with supportive employer and employee attitudes.
. This reflects a broader trend toward organizations recognizing the protective value of credibility assessment tools.

For organizations in specialized sectors, polygraph testing for healthcare workers and polygraph for transportation and trucking provide industry-specific insights on implementation.

Common Mistakes and How to Avoid Them

Critical EPPA Compliance Errors

The most common mistakes employers make when using polygraph testing in fraud investigations can lead to EPPA violations carrying penalties of up to $10,000 each [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
, plus potential civil liability. Here are the critical errors to avoid:

Testing without a specific incident: Using the exemption for general shortages, ongoing patterns, or vague suspicions rather than a documented specific incident involving intentional wrongdoing. The DOL regulations explicitly prohibit this 'fishing expedition' approach [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

Inadequate notice: Failing to provide the full 48-hour advance written notice (excluding weekends and holidays) or omitting required elements from the written statement [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Every element specified in Section 7(d)(4) must be present.

Testing employees without documented access: Testing employees who did not have access to the property that is the subject of the investigation. Each employee tested must be individually vetted for access [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Lacking individualized reasonable suspicion: Applying group suspicion rather than documenting specific, articulable reasons to suspect each individual employee [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Using results as the sole basis for adverse action: Terminating or disciplining an employee based exclusively on polygraph results without additional supporting evidence [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Disclosure violations: Sharing polygraph results with unauthorized persons, including other employees, clients, or external parties without proper authorization [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Retaliating against refusals: Taking adverse action against an employee who refuses to submit to the polygraph test [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Best Practices for Compliance

To protect your organization from EPPA liability:

- Have corporate counsel review all investigation documentation and EPPA compliance materials before any polygraph is scheduled - Use standardized forms that incorporate all EPPA requirements - Maintain a comprehensive, chronological investigation file - Ensure the written statement is reviewed and signed by authorized legal representative — not the polygraph examiner [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
- Document everything: the investigation timeline, evidence gathered, notice delivery, employee responses, examination results, and any post-test actions - Retain all records for a minimum of three years as required by EPPA [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
- Conduct an additional interview with the employee before taking any adverse action following a polygraph test [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
- Work only with examiners who are APA members, properly licensed in the state of testing, and carry the required $50,000 minimum liability insurance [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.

The APA's checklist for employers provides a practical step-by-step guide to EPPA compliance [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. Organizations that follow these procedures systematically can use polygraph testing as a powerful and legally defensible investigation tool.

State-Level Considerations

States with Additional Polygraph Restrictions

EPPA establishes a federal floor, not a ceiling. Section 10 of the Act provides that it does not preempt any provision of state or local law that is more restrictive than EPPA with respect to lie detector tests [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. This means state laws that impose broader prohibitions on employer polygraph use remain fully enforceable.

Several states broadly prohibit employer-related polygraph testing, including Alaska, California, Connecticut, Delaware, Hawaii, Iowa, Maine, Maryland, Massachusetts, Michigan, Minnesota, Montana, Nebraska, New Jersey, New York, Oregon, Pennsylvania, Rhode Island, Vermont, Virginia, Washington, West Virginia, and Wisconsin [4]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms that many states have laws prohibiting or restricting employer polygraph use that may be more restrictive than federal EPPA, and lists states with specific prohibitions.
. The District of Columbia also prohibits pre-employment testing specifically [4]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms that many states have laws prohibiting or restricting employer polygraph use that may be more restrictive than federal EPPA, and lists states with specific prohibitions.
.

Californiadeserves special attention: it maintains an absolute ban on employer polygraph testing under California Labor Code Section 432.2, even for roles that fall under EPPA exemptions at the federal level. This means that even the security firm and pharmaceutical exemptions cannot be used in California.

Alaska is also notably strict — even the suggestion of a polygraph by an employer is prohibited.

New York law prohibits employers from requiring, requesting, suggesting, permitting, or using results of a lie detector test for any purpose.

Employers must check their specific state's restrictions before proceeding with any polygraph testing, as the federal EPPA ongoing investigation exemption may be overridden by state law [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
[4]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms that many states have laws prohibiting or restricting employer polygraph use that may be more restrictive than federal EPPA, and lists states with specific prohibitions.
. For state-specific guidance, our resources on Florida polygraph licensing and Pennsylvania polygraph standards provide regional details.

The Science Behind Corporate Polygraph Testing

Polygraph Accuracy in Event-Specific Testing

The scientific case for polygraph testing is strongest in precisely the context most relevant to corporate fraud investigations: event-specific diagnostic testing. According to the APA's meta-analytic survey of validated polygraph techniques, event-specific (single-issue) diagnostic testing produces an aggregated decision accuracy of 89%, with a 95% confidence interval of 83%–95% and an inconclusive rate of approximately 11% [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
.

Multi-issue screening polygraphs, which encompass several independent target questions, show a mean accuracy of 85% with a confidence interval of 77%–93% [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. The combination of all validated polygraph techniques produces an overall decision accuracy of 87% [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
.

The 2003 National Research Council (NAS) review placed median accuracy for event-specific testing between 85% and 90% [6]Verified The Polygraph and Lie Detection
Confirms 2003 NAS review findings that specific-incident polygraph tests can discriminate lying from truth telling at rates well above chance, with median accuracy between 85% and 90% for event-specific testing.
, and found that specific-incident polygraph tests can discriminate lying from truth telling at rates well above chance in untrained populations [6]Verified The Polygraph and Lie Detection
Confirms 2003 NAS review findings that specific-incident polygraph tests can discriminate lying from truth telling at rates well above chance, with median accuracy between 85% and 90% for event-specific testing.
. The APA's more recent meta-analysis findings are consistent with and provide further support for these conclusions [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
.

The distinction between event-specific and screening testing is crucial for corporate fraud investigations. Because EPPA's ongoing investigation exemption requires a specific incident, the testing naturally falls into the event-specific category — exactly where polygraph accuracy is highest.

Research Supporting Polygraph in Investigations

Multiple peer-reviewed studies support the validity of polygraph testing in investigative contexts. Research by Pollina et al. (2004) published in the Journal of Applied Psychology confirmed that classification accuracy did not significantly differ between laboratory and field settings, supporting the generalizability of polygraph research to real-world investigations [7]Verified A Comparison of Polygraph Data Obtained from Individuals Involved in Mock Crimes and Actual Criminal Investigations / PolyScore Accuracy / Concealed Information Field Study
Confirms logistic regression classification accuracy consistency between lab and field settings, PolyScore 3.3 achieving 90.9% accuracy, and real-world validity data for concealed information testing.
.

The PolyScore 3.3 algorithmic scoring system has been shown to achieve 90.9% accuracy on validated examination techniques [7]Verified A Comparison of Polygraph Data Obtained from Individuals Involved in Mock Crimes and Actual Criminal Investigations / PolyScore Accuracy / Concealed Information Field Study
Confirms logistic regression classification accuracy consistency between lab and field settings, PolyScore 3.3 achieving 90.9% accuracy, and real-world validity data for concealed information testing.
, providing an objective analytical complement to examiner judgment. This computer-assisted scoring reduces the potential for examiner bias and enhances the reliability of results.

Field research by Elaad (1990), also published in the Journal of Applied Psychology, provided rare real-world validity data for the concealed information approach under actual investigative conditions [7]Verified A Comparison of Polygraph Data Obtained from Individuals Involved in Mock Crimes and Actual Criminal Investigations / PolyScore Accuracy / Concealed Information Field Study
Confirms logistic regression classification accuracy consistency between lab and field settings, PolyScore 3.3 achieving 90.9% accuracy, and real-world validity data for concealed information testing.
, further supporting the utility of polygraph in genuine criminal and fraud investigations rather than just laboratory settings.

Emerging research is also expanding the deception detection toolkit. Studies examining P300-based deception detection in simulated network fraud conditions have demonstrated the feasibility of brain-wave-based approaches to detecting concealed information about fraudulent activities [11]Verified P300-based Deception Detection in Simulated Network Fraud Condition
Foundational research demonstrating feasibility of P300-based testing for detecting concealed information in fraud contexts.
. Advanced computational methods including domain-agnostic adapter architectures have achieved strong performance across multiple fraud domains [13]Verified Domain-Agnostic Adapter Architecture for Deception Detection
Confirms domain-agnostic architecture achieved state-of-the-art performance on DIFrauD benchmark across seven fraud domains.
, while linguistic analysis of corporate documents has identified deception markers in organizational communications [15]Verified A Corpus-Based Analysis of Potential Linguistic Indicators of Corporate Deception
Confirms cognitive-emotional verbs were strongly associated with likely deception in corporate documents, suggesting verb analysis as a deception detection tool.
. These developments suggest a rich future for fraud detection technology that builds on the scientific foundations established by polygraph research.

Court Admissibility of Polygraph Evidence

The admissibility of polygraph evidence varies by jurisdiction. In federal courts, the Daubert v. Merrell Dow Pharmaceuticals standard (1993) superseded the older Frye v. United States standard (1923) for evaluating scientific evidence [6]Verified The Polygraph and Lie Detection
Confirms 2003 NAS review findings that specific-incident polygraph tests can discriminate lying from truth telling at rates well above chance, with median accuracy between 85% and 90% for event-specific testing.
. The Frye case itself actually involved the admissibility of a systolic blood pressure deception test — a predecessor to the modern polygraph.

Most federal courts have excluded polygraph evidence, though some circuits have permitted it under specific conditions. The Fifth Circuit in United States v. Posado (1995) notably reversed its per se ban on polygraph evidence, stating that the rationale underlying its exclusionary rule did not survive Daubert. Some courts allow polygraph evidence by stipulation of both parties.

For corporate fraud investigations, however, the court admissibility question is generally secondary. The more relevant question is whether polygraph results can support internal employment decisions — and under EPPA, they clearly can, provided they are combined with additional supporting evidence and all procedural requirements are met [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. Polygraph results are most commonly used to guide the investigation, obtain admissions, and inform internal decision-making rather than as courtroom evidence.

Specialized Applications by Industry

Industry-Specific Fraud Investigation Considerations

Different industries face distinct fraud challenges that influence how polygraph testing is deployed. The ACFE 2024 report found that the industries with the highest median fraud losses per case include mining ($550,000), wholesale trade ($361,000), manufacturing ($267,000), and construction ($250,000) [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
.

Banking and financial services reported the most fraud cases (305) with a median loss of $120,000, while the most common fraud scheme across all industries was corruption [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
. For financial institutions, our guide to polygraph for banking and finance provides targeted strategies.

Retail and hospitality businesses frequently encounter asset misappropriation — the most common category at 89% of all cases [1]Verified Occupational Fraud 2024: A Report to the Nations
Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.
. Our resources on restaurant employee theft and warehouse theft investigations address these specific scenarios.

Educational institutions face unique challenges, as our guide on polygraph testing for educational institutions explains. And for workers' compensation fraud scenarios — where the economic loss can be particularly difficult to quantify — our workers' compensation fraud polygraph guide provides specialized procedures.

The global perspective on corporate polygraph use is also expanding. Our guides on polygraph in Korea's corporate sector, polygraph in Nigeria and West Africa, and polygraph in Tanzania and Uganda document the growing international adoption of polygraph testing in business contexts.

Frequently Asked Questions

Can polygraph results be used in court?

The admissibility of polygraph evidence varies by jurisdiction. Most federal courts have restricted polygraph evidence, though the Daubert v. Merrell Dow Pharmaceuticals standard (1993) opened the door for consideration of polygraph evidence on a case-by-case basis [6]Verified The Polygraph and Lie Detection
Confirms 2003 NAS review findings that specific-incident polygraph tests can discriminate lying from truth telling at rates well above chance, with median accuracy between 85% and 90% for event-specific testing.
. Some courts allow it by stipulation of both parties, and several circuits have permitted it under specific conditions. In the corporate fraud context, the more practical question is whether polygraph results can support internal employment decisions — and under the EPPA, they clearly can, but only when combined with additional supporting evidence [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. Results may also be disclosed to a governmental agency if they involve an admission of criminal conduct [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

What states prohibit employer polygraph testing?

Multiple states broadly prohibit employer-related polygraph testing, including Alaska, California, Connecticut, Delaware, Hawaii, Iowa, Maine, Maryland, Massachusetts, Michigan, Minnesota, Montana, Nebraska, New Jersey, New York, Oregon, Pennsylvania, Rhode Island, Vermont, Virginia, Washington, West Virginia, and Wisconsin [4]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms that many states have laws prohibiting or restricting employer polygraph use that may be more restrictive than federal EPPA, and lists states with specific prohibitions.
. The District of Columbia prohibits pre-employment testing specifically [4]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms that many states have laws prohibiting or restricting employer polygraph use that may be more restrictive than federal EPPA, and lists states with specific prohibitions.
. California maintains an absolute ban even for roles that would qualify for EPPA exemptions at the federal level. State laws may override the federal EPPA ongoing investigation exemption, so employers must check their specific state's restrictions before proceeding.

What documentation is required before administering a workplace polygraph test?

The employer must provide a written statement describing the specific incident under investigation, the economic loss involved, the employee's access to the property in question, and the specific basis for reasonable suspicion of the employee's involvement [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
[3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. This statement must be signed by someone authorized to legally bind the employer — not the polygraph examiner — and delivered at least 48 hours before the test, excluding weekends and holidays [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. It must include the date, time, and location of the test, along with written directions if the test is at a different location. All documents must be retained for at least three years [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
.

Can an employer fire an employee based on a failed polygraph test?

No — not based on the polygraph result alone. The EPPA explicitly prohibits employers from taking adverse employment action based solely on polygraph test results or refusal to take a test [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. The employer must have additional supporting evidence beyond the polygraph to justify any termination or discipline. However, the evidence that formed the basis for reasonable suspicion — which was required to administer the test in the first place — may serve as that additional evidence [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. The employer must also conduct an additional interview with the employee before taking any adverse action following a polygraph test [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
.

How does the EPPA ongoing investigation exemption differ from pre-employment polygraph screening?

Pre-employment polygraph screening is generally prohibited for most private employers under the EPPA, with narrow exceptions for security service firms and pharmaceutical companies [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. The ongoing investigation exemption applies only to current employees during an active investigation into a specific economic loss, requires documented reasonable suspicion of each individual tested, and mandates a 48-hour written notice with specific disclosures [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. The two situations have entirely different legal requirements, thresholds, and documentation obligations. For more on pre-employment restrictions, see our guide on why polygraphs are restricted in pre-employment screening.

How accurate is polygraph testing for corporate fraud investigations?

Event-specific diagnostic polygraph testing — the type used in corporate fraud investigations — produces an aggregated decision accuracy of 89% with a 95% confidence interval of 83%–95%, according to meta-analytic research cited by the American Polygraph Association [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. Multi-issue screening polygraphs show a mean accuracy of 85% [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. The NAS 2003 review placed median accuracy for event-specific testing between 85% and 90% [6]Verified The Polygraph and Lie Detection
Confirms 2003 NAS review findings that specific-incident polygraph tests can discriminate lying from truth telling at rates well above chance, with median accuracy between 85% and 90% for event-specific testing.
. Corporate fraud investigations naturally fall into the event-specific category where accuracy is highest, because EPPA requires a specific incident to invoke the ongoing investigation exemption.

What happens if an employer violates EPPA requirements?

EPPA violations can result in civil penalties of up to $10,000 per violation, assessed by the Secretary of Labor [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. The Secretary may also bring injunctive actions in federal courts to restrain violations. Beyond government enforcement, employees and prospective employees may bring their own civil lawsuits seeking legal and equitable relief including employment reinstatement, promotion, payment of lost wages and benefits, and reasonable attorney's fees and costs [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. Each procedural failure — from inadequate notice to improper disclosure — can constitute a separate violation.

Can an employee be required to take a polygraph during a fraud investigation?

No. Even when all EPPA exemption conditions are met, the employer may only request that an employee submit to a polygraph test — not require it [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. If an employee refuses, the employer cannot discharge, discipline, discriminate against, or deny promotion to the employee based on that refusal [2]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.
. However, the employee's refusal can be noted in the investigation record. The voluntary nature of polygraph participation is a fundamental protection under EPPA that cannot be waived.

What qualifications should a polygraph examiner have for corporate investigations?

At minimum, EPPA requires that the examiner hold a valid license if required by the state where the test is administered, carry at least $50,000 in professional liability coverage, and conduct no more than five tests per calendar day [3]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.
. Beyond these minimums, seek examiners who are APA members bound by the Association's Standards of Practice and Code of Ethics, use only validated testing techniques, and have specific experience conducting EPPA-compliant workplace examinations [5]Verified Polygraph Validity Research
Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.
. LieDetectorTest.com provides access to examiners trained to APA standards experienced in corporate fraud investigations.

Sources & References

1
Occupational Fraud 2024: A Report to the Nations
Association of Certified Fraud Examiners (2024) — ACFE Report to the Nations
Verified

Confirms organizations lose 5% of revenue to fraud annually, $3.1 billion total losses across 1,921 cases, median loss of $145,000 per case, 12-month median detection time, and 24% increase in median losses from 2022.

2
29 U.S.C. Chapter 22 — Employee Polygraph Protection Act
U.S. Congress (1988) — United States Code
Verified

Confirms EPPA prohibitions, exemptions under § 2006(d) for ongoing investigations, $10,000 civil penalties, 48-hour notice requirements, employee rights, examiner qualifications, and disclosure restrictions.

3
29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
U.S. Department of Labor (1991) — Code of Federal Regulations
Verified

Confirms DOL regulations interpreting EPPA exemptions, specific incident requirements, prohibition on fishing expeditions, 48-hour notice requirements, disclosure restrictions, and state law preemption rules.

4
State Laws on Polygraphs and Lie Detector Tests
Lisa Guerin, J.D. (2024) — Nolo Legal Encyclopedia
Verified

Confirms that many states have laws prohibiting or restricting employer polygraph use that may be more restrictive than federal EPPA, and lists states with specific prohibitions.

5
Polygraph Validity Research
American Polygraph Association (2024) — American Polygraph Association
Verified

Confirms event-specific diagnostic testing produces 89% aggregated decision accuracy with CI of 83%–95%, multi-issue screening shows 85% mean accuracy with CI of 77%–93%, and combined accuracy of 87%.

6
The Polygraph and Lie Detection
National Research Council (2003) — The National Academies Press
Verified

Confirms 2003 NAS review findings that specific-incident polygraph tests can discriminate lying from truth telling at rates well above chance, with median accuracy between 85% and 90% for event-specific testing.

7

Confirms logistic regression classification accuracy consistency between lab and field settings, PolyScore 3.3 achieving 90.9% accuracy, and real-world validity data for concealed information testing.

8
Use of Special Technical Means (Polygraph) on Personnel Recruitment in Corporate Structures
A. Yu. Tsygankov, A. A. Kravchuk (2024) — Vestnik Universiteta
Verified

Confirms polygraph screening is increasingly accepted as a personnel recruitment tool in corporate structures with supportive employer and employee attitudes.

9
The Investigation and Investigative Interviewing of Benefit Fraud Suspects in the UK
Dave Walsh, Ray Bull (2013) — Applied Issues in Investigative Interviewing
Verified

Confirms analysis of 142 benefit fraud interviews revealed shortcomings in investigative interviewing skill, particularly rapport development and flexibility.

10
In Their Own Words: Deception Detection by Victims and Near Victims of Fraud
Marianne Junger, Luka Koning, Pieter Hartel, Bernard Veldkamp (2023) — Frontiers in Psychology
Verified

Confirms 69% of near-victims cited fraud knowledge as primary detection strategy, while actual victims reported seeking more information as key.

11
P300-based Deception Detection in Simulated Network Fraud Condition
Jizhong Shen, Jianwei Liang, Xiaochen Liu (2016) — Electronics Letters
Verified

Foundational research demonstrating feasibility of P300-based testing for detecting concealed information in fraud contexts.

12
Video-Based Deception Detection and Financial Fraud
Binglei Duan, Danqi Hu, Hai Lu (2024) — SSRN Electronic Journal
Verified

Confirms visual deception scores from IPO roadshow videos significantly predict financial fraud, with strongest effects for financial performance discussions.

13
Domain-Agnostic Adapter Architecture for Deception Detection
Dainis A. Boumber, Fatima Zahra Qachfar, Rakesh Verma (2024) — LREC-COLING 2024
Verified

Confirms domain-agnostic architecture achieved state-of-the-art performance on DIFrauD benchmark across seven fraud domains.

14
Accounting Variables, Deception, and a Bag of Words: Assessing the Tools of Fraud Detection
Lynnette Purda, David Skillicorn (2015) — Contemporary Accounting Research
Verified

Foundational research on linguistic and accounting-based methods for detecting corporate fraud.

15

Confirms cognitive-emotional verbs were strongly associated with likely deception in corporate documents, suggesting verb analysis as a deception detection tool.

16
P300-based Deception Detection of Mock Network Fraud with Modified Genetic Algorithm
Xiaochen Liu, Jizhong Shen, Wufeng Zhao (2019) — 2019 BCI Conference
Verified

Confirms modified genetic algorithm approach effectively detected concealed information about network fraud activities.

17

Confirms Decision Engine achieved 69-72% accuracy detecting deception using linguistic markers including hedging and pronoun usage.

18
Employee Polygraph Protection Act of 1988 (Wikipedia)
Wikipedia Contributors (2026) — Wikipedia
Verified

Confirms EPPA is a federal law generally preventing employer use of polygraph tests with specific exemptions for security firms and pharmaceutical employers, enacted June 27, 1988.

Start Your Booking

Get a quote, choose a location, assess your case, formulate suitable questions and request your preferred appointment date — all through one guided conversation.

Quick & Secure — Examiner Calls You Back Personal Follow-Up Included
Start Booking