Employee Polygraph Protection Act (EPPA): Complete Guide

Origins and Enactment of EPPA

The Employee Polygraph Protection Act of 1988 (EPPA), codified at 29 U.S.C. §§ 2001–2009, is a federal statute that dramatically restricts the use of lie detector tests in the private-sector workplace [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies. Before EPPA was enacted, an estimated two million polygraph examinations were administered annually by American employers — the vast majority in the private sector — often as routine pre-employment screening tools with little oversight or procedural protection for examinees [5]Verified Specific Incident Polygraph Testing under the Employee Polygraph Protection Act of 1988
Confirms more than two million polygraph examinations before EPPA and that approximately 85 percent of tests were screening tests[6]Verified ACLU Briefing Paper No. 4: Lie Detector Testing
Confirms estimated two million lie detector tests annually with 98 percent in the private sector, and that EPPA does not protect government employees.

Congress enacted EPPA after extensive hearings revealed widespread misuse. Employees were being fired or denied jobs based solely on polygraph results, testing conditions were often coercive, and many examiners lacked professional training [7]Verified Pre-Employment Polygraph Screening
Confirms 2 million Americans tested yearly by the 1980s and describes pre-EPPA problems including poorly standardized field practices. A representative of the American Medical Association testified before the Senate Committee on Labor and Human Resources that polygraph results were unreliable enough that a minimum of 400,000 honest workers were being wrongfully labeled deceptive each year [8]Verified Violation of Federal Law for Employer to Require a Polygraph
Confirms the American Medical Association's conclusion that polygraphs detect deception only 'somewhat better than chance' and that 400,000 honest workers were wrongfully labeled deceptive annually. The Congressional Office of Technology Assessment (OTA) published a landmark 1983 technical memorandum — "Scientific Validity of Polygraph Testing: A Research Review and Evaluation" — which found limited scientific basis for polygraph validity in screening situations [9]Verified Scientific Validity of Polygraph Testing: A Research Review and Evaluation
Confirms the 1983 OTA technical memorandum found limited scientific basis for polygraph validity in screening situations.

The bill was introduced in the House of Representatives in February 1987 by Representative Pat Williams of Montana as H.R. 1212 [10]Verified Employee Polygraph Protection Act (EPPA) — What It Means for Employees and Employers
Confirms Representative Pat Williams introduced EPPA in February 1987 and Senator Kennedy introduced the Senate bill, signed by President Reagan on June 27, 1988. A corresponding bill was introduced in the Senate by Senator Edward M. Kennedy of Massachusetts [10]Verified Employee Polygraph Protection Act (EPPA) — What It Means for Employees and Employers
Confirms Representative Pat Williams introduced EPPA in February 1987 and Senator Kennedy introduced the Senate bill, signed by President Reagan on June 27, 1988. The Act was signed into law by President Ronald Reagan on June 27, 1988, and took effect on December 27, 1988 [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies[2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. Leonard Saxe, who served as Principal Investigator for the OTA polygraph study, later analyzed the EPPA's long-term impact in a detailed 2007 law review article examining the Act's first twenty years [11]Verified Employee Polygraph Protection Act: 20 Years Later
Analyses EPPA's impact after two decades, documenting how the Act banned most private employer polygraph use while maintaining government and industry exceptions.

Scope and Enforcement

The law is enforced by the Wage and Hour Division of the U.S. Department of Labor [3]Verified Fact Sheet #36: Employee Polygraph Protection Act of 1988
Confirms DOL enforcement authority, civil penalties up to $10,000 per violation, and private right of action for employees. It covers most private employers engaged in or affecting interstate commerce, regardless of company size [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies. The Act applies to all forms of "lie detector" testing, including polygraphs, deceptographs, voice stress analyzers, psychological stress evaluators, and similar devices used to render a diagnostic opinion about honesty or dishonesty [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

According to the Office of Justice Programs, EPPA effectively eliminated approximately 85 percent of the lie detector tests that were being administered at the time it was enacted — primarily the pre-employment screening tests that had been the most problematic [12]Verified Employee Polygraph Protection Act of 1988: Background and Implications
Confirms EPPA eliminated 85 percent of tests then being given and that the American Polygraph Association advocated for strict examiner standards. Understanding EPPA is essential whether you are an employee who has been asked to undergo polygraph testing at work, an employer conducting a workplace theft investigation, or a polygraph examiner performing tests in an employment context. For an overview of polygraph testing across the United States, see our guide to the purpose and use of the lie detector test in the USA.

Three Categories of Prohibited Conduct

The Act establishes three categories of prohibited employer conduct regarding lie detector tests in the private workplace [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies[2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day:

1. Require or Request Testing — Employers cannot require, request, suggest, or cause any employee or job applicant to take a lie detector test for any reason.

2. Use Results in Decisions — Employers cannot use, accept, refer to, or inquire about lie detector test results for any employment decision.

3. Retaliate for Refusal — Employers cannot discharge, discipline, discriminate against, or deny employment to anyone who refuses a lie detector test.

Understanding the Scope of EPPA Prohibitions

EPPA's prohibitions extend far beyond simply ordering an employee to sit for a polygraph examination. The Act explicitly prohibits employers from directly or indirectly requiring, requesting, suggesting, or causing any employee or prospective employee to take or submit to any lie detector test [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. Even subtle pressure constitutes a violation.

The Department of Labor's regulations at 29 CFR Part 801 make clear that simulated use of a polygraph instrument is also prohibited [13]Verified The Polygraph Protection Act Becomes Law
Foundational analysis of EPPA's passage and immediate implications for employers. Placing a polygraph instrument in a room used for interrogation, connecting an employee to the instrument without diagnostic purpose, or merely suggesting the instrument may be used all constitute violations — even if no actual test is administered [13]Verified The Polygraph Protection Act Becomes Law
Foundational analysis of EPPA's passage and immediate implications for employers.

The prohibition on using results is equally expansive. An employer cannot base any hiring, firing, promotion, demotion, or disciplinary decision on lie detector test results. They cannot even ask whether an employee has taken a lie detector test or what the results were [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies. The anti-retaliation provision protects employees who refuse testing, file a complaint, or testify in an EPPA proceeding [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies. To learn more about your rights when asked to take a test, see our guide on whether you can refuse a lie detector test.

EPPA applies to all forms of lie detection devices, not just traditional polygraphs. The statute specifically encompasses deceptographs, voice stress analyzers, psychological stress evaluators, and any other similar device [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. However, the Act does not cover written honesty tests, integrity questionnaires, or psychological assessments that do not use a physiological measurement device [12]Verified Employee Polygraph Protection Act of 1988: Background and Implications
Confirms EPPA eliminated 85 percent of tests then being given and that the American Polygraph Association advocated for strict examiner standards.

Six Categories of Exemptions

While EPPA provides broad protections for private-sector employees, Congress carved out specific exemptions for certain employers and circumstances where polygraph testing was deemed necessary for security, public safety, or law enforcement purposes [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Government Agencies — Federal, state, and local government employers are fully exempt, including police departments, school districts, correctional institutions, and all public agencies [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies[2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. Many law enforcement agencies routinely use polygraph testing as part of their hiring process. Learn more about what to expect in a pre-employment polygraph test.

Security Services — Armored car companies, alarm system firms, and security guard services may test prospective employees whose duties involve protection of facilities, materials, or personnel. The key restriction is that the employee's duties must directly involve protection functions [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Pharmaceutical Companies — Manufacturers, distributors, and dispensers of controlled substances may test employees with direct access to controlled substances in the course of their employment [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Federal Contractors — Businesses under contract with federal departments or agencies involving intelligence, counterintelligence, or national security functions, including the Department of Defense, the CIA, and the NSA [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Ongoing Investigations — Current employees may be asked (not required) to take a polygraph during an ongoing investigation of workplace theft, embezzlement, or economic loss if specific conditions are met [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. This is the exemption most commonly invoked by private employers.

Critical Infrastructure — Security service firms whose function includes protection of facilities with significant impact on public health or safety, including nuclear power plants, public water systems, electric power facilities, and toxic waste facilities [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Exemptions Are Narrowly Construed

The exemptions under EPPA are narrowly construed by the Department of Labor and the courts. Employers who wish to rely on an exemption bear the burden of proving that their specific circumstances qualify [14]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms APA compliance checklists for employers and examiners, 90-minute minimum test duration, and five-test daily maximum. A security company cannot test its administrative staff under the security services exemption. A pharmaceutical company cannot test employees who have no interaction with controlled substances [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Importantly, even under exemptions, only polygraph tests — not other types of lie detectors — are permitted [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies. And all exemptions are subject to strict procedural requirements under Sections 2007 and 2009 of the Act [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. For employers investigating workplace theft, our specific loss exam guide provides detailed guidance on conducting EPPA-compliant investigations.

Four Mandatory Prerequisites

The ongoing investigation exemption is the most frequently used exemption by private employers but has strict prerequisites that must all be met simultaneously [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day:

1. Specific Economic Loss — The test must be administered in connection with an ongoing investigation involving economic loss or injury to the employer's business, such as theft, embezzlement, misappropriation, or industrial espionage or sabotage [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

2. Employee Had Access — The employee under investigation must have had access to the property that is the subject of the investigation [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

3. Reasonable Suspicion — The employer must have a reasonable suspicion that the specific employee was involved in the incident under investigation [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

4. Written Statement Provided — The employer must execute a written statement, provided to the examinee before the test, that sets forth with particularity the specific incident being investigated and the basis for testing the particular employee, is signed by a person (other than the examiner) authorized to legally bind the employer, and is retained for at least three years [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Critical Conditions and Nuances

Even when all four prerequisites are satisfied, additional rules govern how the exemption operates in practice.

The employee can always refuse. Even when every condition for the ongoing investigation exemption is met, the employer may only request or suggest the polygraph test — they cannot require it. If the employee declines, the employer is absolutely prohibited from disciplining, discharging, or discriminating against them based on that refusal [15]Verified EPPA (Employee Polygraph Protection Act): The Fine Print
Confirms three groups of employees are exempt from the polygraph prohibition under certain conditions, and examines state law interactions.

Results cannot stand alone. Under Section 2007(a) of the Act, no employee can be terminated or disciplined based solely on polygraph results. There must be additional supporting evidence — independent of the polygraph examination — before any adverse employment action is taken [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day[16]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association Checklist
Confirms practical compliance guidelines including 90-minute minimum, five-test daily maximum, and record-keeping requirements.

"Specific incident" means specific. The Department of Labor's regulations at 29 CFR § 801.12 make clear that routine inventory shrinkage, cash register shortages, or unintentional losses do not satisfy the "specific incident" requirement [13]Verified The Polygraph Protection Act Becomes Law
Foundational analysis of EPPA's passage and immediate implications for employers. Employers cannot use the ongoing investigation exemption as a substitute for broad-based employee screening.

Access alone is insufficient. Even if an employee had access to the area where the loss occurred, EPPA requires that the employer also have reasonable suspicion that this particular employee was involved [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. The employer cannot test all employees who had access. For more information about employee rights relating to lie detector tests, visit our dedicated guide.

Comprehensive Procedural Protections

When a polygraph test is administered under one of the lawful exemptions, the examinee retains extensive procedural rights throughout the entire examination process under Section 2007(b) of the Act [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day:

48-Hour Written Notice — The examinee must receive reasonable written notice of the date, time, and location of the examination, along with the right to consult with legal counsel or an employee representative before each phase of the test [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Question Preview and Restrictions — All questions must be reviewed before testing. No questions are permitted about religious beliefs, racial matters, political opinions, sexual behavior, or labor union activities [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Right to Legal Counsel — The examinee has the right to consult with an attorney or union representative before each phase of the examination and during the entire testing process [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Confidential Results — Results may only be disclosed to the examinee, the employer who requested the test, a court or government agency pursuant to a court order, or authorized arbitrators or mediators [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Right to Terminate at Any Time — The examinee can stop the test at any point during the examination without explanation and without any adverse consequences [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Qualified Examiner Required — The test must be administered by a polygraph examiner who has a valid and current license (if required by the state) and maintains a minimum of $50,000 in professional liability coverage or bond [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day.

Minimum Test Duration — The examiner shall not conduct any test for less than 90 minutes in duration and shall not conduct more than five polygraph tests on a calendar day [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. These requirements are mandated directly by Section 2007(b)(5) of the EPPA statute. To learn more about how to avoid polygraph fraud, review our consumer protection guide.

Administrative and Private Enforcement

EPPA provides multiple enforcement mechanisms, creating significant financial and legal risk for employers who violate its provisions [3]Verified Fact Sheet #36: Employee Polygraph Protection Act of 1988
Confirms DOL enforcement authority, civil penalties up to $10,000 per violation, and private right of action for employees. Employers face civil penalties of up to $10,000 for each violation [3]Verified Fact Sheet #36: Employee Polygraph Protection Act of 1988
Confirms DOL enforcement authority, civil penalties up to $10,000 per violation, and private right of action for employees. Each individual test, act of retaliation, or separate prohibited conduct constitutes a separate violation.

The Act provides two distinct enforcement paths, and employees can pursue both simultaneously:

Administrative Enforcement — The Secretary of Labor, through the Wage and Hour Division, may bring actions in federal court to restrain violations [3]Verified Fact Sheet #36: Employee Polygraph Protection Act of 1988
Confirms DOL enforcement authority, civil penalties up to $10,000 per violation, and private right of action for employees. The Division investigates complaints, conducts compliance reviews, and can assess civil money penalties.

Private Lawsuits — EPPA explicitly grants employees and applicants the right to bring civil actions in federal or state court. The statute of limitations is three years from the date of the violation [17]Verified H.R.1212 — 100th Congress (1987-1988): Employee Polygraph Protection Act of 1988
Confirms EPPA was introduced as H.R. 1212 in the 100th Congress and enacted as Public Law 100-347. Available remedies include employment reinstatement, promotion if the violation prevented advancement, back pay with interest, restoration of benefits, and reasonable attorney's fees and court costs [3]Verified Fact Sheet #36: Employee Polygraph Protection Act of 1988
Confirms DOL enforcement authority, civil penalties up to $10,000 per violation, and private right of action for employees.

Employers must retain all polygraph-related records — including the written statement of specific incident, examinee consent forms, and examination results — for a minimum of three years [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day. Courts have penalized employers for indirect pressure tactics such as holding meetings in rooms containing polygraph equipment or telling employees that "everyone else" had agreed to be tested [13]Verified The Polygraph Protection Act Becomes Law
Foundational analysis of EPPA's passage and immediate implications for employers.

Voluntary Testing Is Always Permitted

One of the most important distinctions in EPPA is the difference between employer-mandated testing and voluntary testing initiated by the individual. EPPA restricts what employers can require — but it does not prevent you from voluntarily taking a polygraph and presenting the results on your own terms.

When you face false accusations at work, a voluntary polygraph is one of the most powerful tools available. It demonstrates initiative, confidence in your truthfulness, and produces a professional report you can share with HR, management, or legal counsel. For more about why polygraph testing matters for protecting your business, see our business guide.

How Voluntary Testing Works in Practice

The distinction between employer-mandated and voluntary testing is fundamental to EPPA. The Act regulates the employer-employee power dynamic; it does not restrict an individual citizen's right to undergo a polygraph examination of their own choosing.

The process typically works as follows: The employee independently contacts a polygraph service and arranges the examination — the employer does not request, suggest, or facilitate the test in any way. The examination is conducted by a qualified examiner at an independent location. The results belong entirely to the examinee, who decides whether and how to share them.

For residents in specific states, we have dedicated guides including our private polygraph testing guide for New York residents and resources for avoiding scams in North Carolina and Florida.

Essential Steps for EPPA Compliance

The American Polygraph Association provides detailed checklists for both employers and examiners to ensure EPPA compliance [15]Verified EPPA (Employee Polygraph Protection Act): The Fine Print
Confirms three groups of employees are exempt from the polygraph prohibition under certain conditions, and examines state law interactions. Key compliance requirements include:

For Employers: - Post the EPPA notice in a prominent and conspicuous location in every establishment [1]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA is a 1988 federal law preventing most private employers from using polygraph tests, with exemptions for security firms and pharmaceutical companies - Never require, request, or suggest that an employee take a lie detector test unless a valid exemption applies - For ongoing investigations, prepare a detailed written statement identifying the specific incident, the basis for suspicion, and the employee's access — signed by an authorized person other than the polygraph examiner [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day - Provide the written statement to the employee at least 48 hours before the examination [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day - Never take adverse employment action based solely on polygraph results [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day - Retain all polygraph-related records for a minimum of three years [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day - Have corporate counsel review all EPPA-related actions [15]Verified EPPA (Employee Polygraph Protection Act): The Fine Print
Confirms three groups of employees are exempt from the polygraph prohibition under certain conditions, and examines state law interactions

For Polygraph Examiners: - Conduct no more than five polygraph tests per calendar day [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day - Administer no test for less than 90 minutes in duration [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day - Provide all test questions in writing for the examinee's review before testing [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day - Maintain a valid state license (where required) and $50,000 minimum bond or professional liability coverage [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day - Provide results to the examinee and allow opportunity to explain reactions [15]Verified EPPA (Employee Polygraph Protection Act): The Fine Print
Confirms three groups of employees are exempt from the polygraph prohibition under certain conditions, and examines state law interactions - Maintain records for a minimum of three years [2]Verified Employee Polygraph Protection Act of 1988 (29 U.S.C. §§ 2001-2009)
Confirms full text of EPPA including exemptions, examinee rights, 90-minute minimum test duration, $50,000 bond requirement, and maximum five tests per day

The American Polygraph Association emphasizes a simple rule of thumb for examiners: "No form, no test. No identification, no test" [15]Verified EPPA (Employee Polygraph Protection Act): The Fine Print
Confirms three groups of employees are exempt from the polygraph prohibition under certain conditions, and examines state law interactions. Understanding compliance obligations is also critical for examiners in states like Indiana, which has its own state police regulation of polygraph examiners.

States with Laws Stricter Than EPPA

EPPA Section 10 explicitly provides that the Act does not preempt any state or local law that prohibits lie detector tests or is more restrictive than EPPA [4]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA regulations including state preemption rules, simulated use prohibition, definition of employer, and economic loss requirements. This means that in states with stricter protections, the state law applies in addition to — or instead of — federal EPPA exemptions [4]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA regulations including state preemption rules, simulated use prohibition, definition of employer, and economic loss requirements. The 29 CFR Part 801 regulations clarify that if a state prohibits the use of polygraphs in all private employment, the limited exemptions under EPPA Sections 7(d), (e), and (f) cannot be used [4]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA regulations including state preemption rules, simulated use prohibition, definition of employer, and economic loss requirements.

Several states have enacted laws that significantly exceed EPPA's protections:

California — Under Labor Code Section 432.2, employers cannot require, request, or suggest polygraph tests for any position, including armed security guards. This effectively eliminates the EPPA security services and pharmaceutical exemptions within California [18]Verified Lie Detector Tests: The Employee Polygraph Protection Act of 1988
Confirms three-year statute of limitations for private lawsuits and that EPPA does not override stricter state laws.

Massachusetts — Under General Laws Chapter 149, Section 19B, employers are broadly prohibited from using polygraph testing, with very limited exceptions [19]Verified Lie Detectors and Labor Laws: The Employee Polygraph Protection Act
Confirms California Labor Code Section 432.2 imposes an absolute ban on polygraph testing, overriding EPPA exemptions.

New York — N.Y. Labor Law §§ 733–739 specifically prohibits employers from requiring, requesting, suggesting, or permitting any employee to submit to a psychological stress evaluator (PSE) examination, and violations are criminal misdemeanors [20]Verified Hofstra Labor & Employment Law Journal — History of Polygraphs and EPPA
Confirms states with pre-EPPA polygraph restrictions including Alaska, Connecticut, Delaware, Maine, Massachusetts, Michigan, Minnesota, New Jersey, Oregon, Rhode Island, and Washington. Combined with federal EPPA protections against polygraph instruments, New York workers have broad protection from both polygraphs and PSE devices. Learn more about New York PSE criminal penalties.

Other states with significant restrictions include Alaska, Connecticut, Delaware, Hawaii, Idaho, Iowa, Maine, Michigan, Minnesota, New Jersey, Oregon, Rhode Island, Washington, and West Virginia [19]Verified Lie Detectors and Labor Laws: The Employee Polygraph Protection Act
Confirms California Labor Code Section 432.2 imposes an absolute ban on polygraph testing, overriding EPPA exemptions. Many of these state laws also extend protections to public-sector employees — a category not covered by federal EPPA [21]Verified Are Polygraph Tests Legal at Work? — New York Workplace Rights
Confirms New York Labor Law §§ 733-739 prohibits PSE examinations for all employers, both private and public.

Conversely, some states have no additional polygraph-specific statutes beyond EPPA, relying entirely on federal protections. Employers operating in multiple states must comply with the most restrictive applicable law [4]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA regulations including state preemption rules, simulated use prohibition, definition of employer, and economic loss requirements. For state-specific guidance, see our resources on employer polygraph requests in North Carolina and polygraph admissibility in North Carolina.

Filing with the Department of Labor

If you believe your EPPA rights have been violated, you have two primary options [3]Verified Fact Sheet #36: Employee Polygraph Protection Act of 1988
Confirms DOL enforcement authority, civil penalties up to $10,000 per violation, and private right of action for employees[17]Verified H.R.1212 — 100th Congress (1987-1988): Employee Polygraph Protection Act of 1988
Confirms EPPA was introduced as H.R. 1212 in the 100th Congress and enacted as Public Law 100-347:

File a complaint with the Wage and Hour Division of the U.S. Department of Labor. There is no official form required [22]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms state coverage may be broader than EPPA, with many state statutes covering state and local government employees not covered by EPPA. Contact your local Wage and Hour Division office and provide the name and address of the employer, details of the incident, when it occurred, and contact information for the investigator to reach you [22]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms state coverage may be broader than EPPA, with many state statutes covering state and local government employees not covered by EPPA. The Division will investigate the complaint and can assess civil penalties.

File a private lawsuit in federal or state court. You have three years from the date of the violation to file [17]Verified H.R.1212 — 100th Congress (1987-1988): Employee Polygraph Protection Act of 1988
Confirms EPPA was introduced as H.R. 1212 in the 100th Congress and enacted as Public Law 100-347. Available remedies include reinstatement, back pay with interest, benefits restoration, and reasonable attorney's fees [3]Verified Fact Sheet #36: Employee Polygraph Protection Act of 1988
Confirms DOL enforcement authority, civil penalties up to $10,000 per violation, and private right of action for employees. You can pursue both administrative and private remedies simultaneously.

Document everything. Keep copies of any written notices, correspondence about polygraph testing, and records of conversations where testing was discussed. Note dates, times, and witnesses. If you were asked to take a test as a condition of continued employment, document this as precisely as possible. An employment attorney can help evaluate whether a violation occurred and advise on the best enforcement strategy.

International Comparisons

The EPPA represents one of the most comprehensive legislative frameworks governing employment polygraph testing in the world. Other nations have taken different approaches. In Poland, employee polygraph examinations in the private sector face significant legal obstacles absent explicit statutory authorization or genuine voluntary consent, while government agencies have clearer authority for polygraph screening [23]Verified Employment Law Guide — Lie Detector Tests
Confirms DOL recordkeeping requirements, three-year retention period, and notice obligations for exempt employers and examiners. In Russia, researchers have identified substantial gaps between domestic legislation and international human rights standards for consent and data protection in polygraph use [24]Verified Legal Admissibility of Employee Polygraph Examinations in Poland
Confirms private sector employee polygraph examinations in Poland face significant legal obstacles without explicit statutory authorization. The European Union's GDPR framework raises additional challenges for automated profiling and lie detection technologies, requiring tiered explainability for AI-based systems [25]Verified Protection of Individual Rights in the Application of Profiling and Lie Detection Methods
Identifies gaps in Russian legislation governing polygraph examination and divergence from international human rights standards.

Emerging applications of polygraph testing in countries like Mozambique, Egypt, and Uganda highlight the continuing global relevance of establishing clear legal frameworks for polygraph use in employment contexts. The UK has taken its own approach with the Domestic Abuse Act 2021 polygraph pilot programme.