Polygraph Results Confidentiality: Who Can See Your Report?

Why Polygraph Confidentiality Matters

A polygraph examination is one of the most sensitive assessments a person can undergo. During the pre-test interview, examinees often disclose deeply personal information about their behaviors, relationships, health conditions, and past experiences. The physiological data collected during the in-test phase reveals involuntary stress responses tied to specific questions. The examiner's diagnostic opinion — documented in the final report — carries potential consequences for employment, legal proceedings, relationships, and personal reputation.

Because of these high stakes, confidentiality is not merely a courtesy in polygraph testing; it is a professional, ethical, and often legal requirement. Unauthorized disclosure of polygraph results can cause irreparable harm to an examinee's career, family, and standing in their community. Research has shown that the examiner's approach itself significantly affects test validity and outcomes [4]Verified Examiner Approach and its Impact on Polygraph Results
Demonstrates that interrogative examiner approaches compromise polygraph validity, emphasizing the importance of professional standards in the examination process, making the entire process — from data collection to result storage — highly consequential.

Confidentiality in polygraph testing operates at the intersection of multiple regulatory frameworks: federal employment law (principally EPPA), state privacy statutes, professional ethical codes established by organizations like the American Polygraph Association (APA), contractual agreements, and in some cases, court orders. No single rule governs all situations. The protections that apply to your results depend heavily on the context of your examination — whether it is for employment screening, a private relationship matter, a legal defense strategy, or post-conviction supervision.

The Informed Consent Foundation

Every professionally conducted polygraph examination begins with an informed consent process. The informed consent document is a legally binding agreement that establishes the boundaries of confidentiality for your specific examination. It specifies who will receive the results, how the data will be stored, and under what circumstances disclosure to third parties is permitted. Understanding what your polygraph report should contain is essential context for evaluating your consent form.

Before signing the informed consent form, examinees should carefully review the following provisions:

Identification of the requesting party — who ordered the examination and will receive the results.

Scope of disclosure — whether results may be shared with supervisors, HR departments, courts, therapists, or other third parties.

Data retention policy — how long the examiner will keep your records and what happens to them when the retention period expires.

Recording policies — whether the pre-test interview or in-test phase will be audio or video recorded, and who may access those recordings. Many examiners now video record their sessions as a quality assurance and legal protection measure.

Examinee rights — your right to receive a copy of the questions, charts, and examiner's opinion.

If the informed consent form does not address these points clearly, the examinee has every right to ask the examiner for clarification before proceeding. Any reputable polygraph examiner will welcome these questions and provide transparent answers.

Primary Access Parties

Understanding who can view your polygraph report depends on who requested the examination and the legal framework governing that context. In general, the following categories of individuals and entities may have access to your results:

The Examinee: You, the person who was tested, have a fundamental right to know and understand your own results. Under EPPA, examinees must be provided with a copy of the questions asked, the charted responses, and the examiner's written opinion [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners. In private testing scenarios, you may need to specifically request a written copy of the report.

The Polygraph Examiner: The examiner who conducted your test retains access to your records as the professional responsible for the examination. They must maintain records for quality assurance, potential legal challenges, and professional review. The APA promotes professional ethical and scientific standards for its 2,700+ members, including standards governing record handling [5]Verified American Polygraph Association — Official Website
Confirms APA established in 1966, has 2700+ members, promotes highest standards of professional, ethical and scientific practices. Examiner access is governed by their professional ethical codes and the standards of their credentialing organizations.

The Authorizing Party: The person or entity who requested and authorized the examination receives the report. This could be an employer (in workplace testing), an attorney (in legal defense testing), a court (in court-ordered testing), a treatment provider (in therapeutic contexts), or a private client (in relationship or personal testing).

Court or Government Authority: Under EPPA, a polygraph examiner may disclose information only to the examinee, persons designated in writing by the examinee, or any court, governmental agency, arbitrator, or mediator pursuant to an order from a court of competent jurisdiction [6]Verified Employee Polygraph Protection Act — Full Text (29 USC Chapter 22)
Confirms statutory text on disclosure restrictions: examiner may only disclose to examinee, designated persons, or courts; employers limited to same plus governmental agencies for criminal admissions. An employer may additionally disclose information to a governmental agency, but only insofar as the disclosed information is an admission of criminal conduct [6]Verified Employee Polygraph Protection Act — Full Text (29 USC Chapter 22)
Confirms statutory text on disclosure restrictions: examiner may only disclose to examinee, designated persons, or courts; employers limited to same plus governmental agencies for criminal admissions. This is an involuntary disclosure that overrides other confidentiality protections, though the examiner may challenge improper requests.

Who Cannot See Your Results Without Authorization

Equally important is understanding who is explicitly barred from viewing your polygraph results. Without your written consent, a court order, or another specific legal basis, the following parties generally cannot access your polygraph report:

Other employers or prospective employers — An employer who administered a polygraph cannot share results with another company or a future employer. EPPA specifically limits disclosure to authorized parties [6]Verified Employee Polygraph Protection Act — Full Text (29 USC Chapter 22)
Confirms statutory text on disclosure restrictions: examiner may only disclose to examinee, designated persons, or courts; employers limited to same plus governmental agencies for criminal admissions.

Insurance companies — Polygraph results are not medical records and insurance companies have no inherent right to access them.

Family members — Even in relationship testing, the report goes to the client who requested the test. If your partner ordered the examination, they receive the report, but they have no legal obligation to share it with extended family, friends, or social media.

Media organizations — Journalists have no right to access polygraph results. Any examiner who discloses results to media without authorization would be violating professional ethics and potentially the law.

The general public — Polygraph results are not public records unless they are entered into evidence in an open court proceeding. Research has established that polygraph results are classified as circumstantial evidence requiring logical inference rather than direct evidence [7]Verified Results of Polygraph Examinations: Direct or Circumstantial Evidence?
Establishes that polygraph results are classified as circumstantial evidence requiring logical inference rather than direct evidence, which helps explain why their disclosure pathways differ from other forms of forensic evidence.

If you believe your polygraph results have been disclosed to an unauthorized party, consult with an attorney who specializes in privacy or employment law. You should also file a complaint with the professional organization that credentials the examiner, such as the APA, and consider reporting the incident to the Department of Labor's Wage and Hour Division if EPPA applies.

How the Employee Polygraph Protection Act Safeguards Your Data

The Employee Polygraph Protection Act of 1988 (EPPA) is the most significant federal law governing polygraph testing in the private employment context [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners. While EPPA is primarily known for restricting when employers can require polygraph tests, it also contains robust confidentiality provisions that protect employees who do undergo testing. EPPA prohibits most private employers from using any lie detector tests either for pre-employment screening or during the course of employment [3]Verified Employment Law Guide — Lie Detector Tests
Confirms employers and polygraph examiners must retain records for minimum three years from date of examination, and that EPPA strictly limits disclosure. For a deeper understanding of your workplace rights, see our employee rights and lie detector tests guide.

Under EPPA, an employer who administers or arranges a polygraph examination is subject to the following confidentiality requirements:

Restricted Disclosure: Under the statute, a private employer may only disclose information from a polygraph test to the examinee, persons designated in writing by the examinee, a court or governmental agency pursuant to a court order, or to a governmental agency if the disclosed information is an admission of criminal conduct [6]Verified Employee Polygraph Protection Act — Full Text (29 USC Chapter 22)
Confirms statutory text on disclosure restrictions: examiner may only disclose to examinee, designated persons, or courts; employers limited to same plus governmental agencies for criminal admissions. The employer cannot share results with unrelated departments, branch offices, or affiliated companies unless they are directly involved in the employment decision.

No Use Beyond Stated Purpose: Results obtained for one purpose (such as investigating a specific theft) cannot be repurposed for other employment decisions (such as a promotion decision or performance review). The scope of use is limited to the specific matter that justified the examination.

Written Report Required: The examiner must provide a written report to the examinee that includes a copy of all questions asked, the corresponding physiological charts, and the examiner's opinion [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners. Understanding the diagnostic impression in a polygraph report is important for evaluating these documents.

Minimum Record Retention: Both employers and polygraph examiners must retain all polygraph-related records for a minimum of three years from the date the polygraph examination is conducted, or from the date the examination is requested if no examination is conducted [3]Verified Employment Law Guide — Lie Detector Tests
Confirms employers and polygraph examiners must retain records for minimum three years from date of examination, and that EPPA strictly limits disclosure. This includes the informed consent form, the examiner's report, and any related documentation.

Civil Penalties for Violations: Any employer who violates any provision of EPPA may be assessed a civil penalty of not more than $10,000 per violation [8]Verified EPPA Civil Penalties — 29 USC § 2005
Confirms any employer who violates any provision of EPPA may be assessed civil penalty of not more than $10,000. Additionally, affected employees can file a private lawsuit in federal or state court to recover lost wages, employment reinstatement, legal fees, and other damages [8]Verified EPPA Civil Penalties — 29 USC § 2005
Confirms any employer who violates any provision of EPPA may be assessed civil penalty of not more than $10,000. The Department of Labor's Wage and Hour Division enforces EPPA compliance [9]Verified DOL Fact Sheet #36: Employee Polygraph Protection Act
Confirms Wage and Hour Division enforces EPPA compliance and employees can file complaints.

EPPA Coverage and Exemptions

EPPA applies to most private employers engaged in or affecting interstate commerce, which covers virtually all private companies that use a computer, the U.S. mail, or a telephone system to send messages across state lines [10]Verified State Laws on Polygraphs and Lie Detector Tests
Confirms EPPA covers all private employers in interstate commerce including virtually every private company; DOL can fine offending employer up to $10,000. Importantly, federal, state, and local government employers are exempt from EPPA [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners. If you are a government employee, your polygraph results are governed by agency-specific policies and potentially by state privacy laws rather than EPPA.

While EPPA provides strong protections, certain exemptions allow employers in specific industries to conduct polygraph testing with fewer restrictions. These exemptions include:

Security service firms — Companies providing armored car, alarm monitoring, and guard services to facilities that impact public health, safety, or national security may polygraph current and prospective employees [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners.

Pharmaceutical manufacturers and distributors — Employers involved in manufacturing, distributing, or dispensing controlled substances may polygraph employees who have access to those substances [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners.

Ongoing investigations — Any employer may request a polygraph of a specific employee if there is a reasonable suspicion that the employee was involved in a specific economic loss, such as theft or embezzlement, provided the employer has documented the investigation and the basis for suspicion [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners.

Even in these exempted scenarios, the confidentiality provisions of EPPA still apply. The exemptions expand when employers can test, not to whom they can disclose the results. An employer operating under an EPPA exemption is still prohibited from sharing your polygraph results with unauthorized parties [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners. For context on how these exemptions play out in specific industries, see our guide on Wall Street polygraph testing for internal fraud investigations.

Private Polygraph Examinations

When an individual arranges a private polygraph examination on their own behalf, the confidentiality framework is simpler in some ways but carries its own complexities. In private testing, the client who requests and pays for the examination is typically the sole recipient of the report. If you schedule your own polygraph to clear your name of false allegations or for personal peace of mind, you control who sees the results.

However, there are important nuances to understand:

If a third party is paying — If someone else is paying for your examination (such as a parent paying for a teen's test or an employer covering the cost), the payer may have a contractual right to receive the report. Clarify this before the examination.

Attorney-arranged tests — If your attorney commissions a polygraph as part of your legal defense, the results may fall under attorney-client privilege or the work product doctrine, offering an additional layer of protection. The work product doctrine as applied to polygraph results was first established through case law beginning with Hickman v. Taylor and later codified in the Federal Rules of Civil Procedure rule 26(b)(3) [11]Verified Attorney Polygraph Exams — Work Product Doctrine
Confirms polygraph examinations of clients may fall under attorney-client privilege, first established by Hickman v. Taylor and codified in FRCP rule 26(b)(3). However, this privilege can be waived if the results are voluntarily disclosed to third parties.

Voluntary disclosure by the examinee — You are free to share your own polygraph results with anyone you choose. But once you voluntarily disclose results, you generally cannot "un-share" that information or claim a confidentiality breach if the person you told shares it further.

Relationship and Infidelity Testing

Relationship polygraph testing, particularly testing related to suspected infidelity, raises unique confidentiality concerns because the emotional stakes are extremely high and the results directly affect interpersonal relationships. In a typical relationship testing scenario, one partner (the requesting party) arranges the examination and the other partner (the examinee) agrees to take it. The report is generally delivered to the requesting party. For comprehensive guidance, see our polygraph testing for infidelity consumer guide.

Key confidentiality considerations include:

Both parties should understand the disclosure terms — Before the examination, it should be clear who will receive the report and whether the examiner will verbally discuss results with both parties present, separately, or only with the requesting party.

Therapist involvement — In many cases, a therapist or counselor may be involved in the process and may receive a copy of the report as part of the treatment plan. This should be explicitly agreed upon in the informed consent.

No obligation to disclose publicly — Neither party is required to share the results with family members, friends, or on social media. However, once results leave the examiner's office, the examiner has no control over how the receiving party uses the information.

Couples considering a polygraph as part of relationship repair should discuss the confidentiality terms with each other and with the examiner before scheduling. If the examination is part of a therapeutic process, it may be beneficial to have the therapist coordinate the result disclosure to ensure it occurs in a supportive environment. Our guide on whether a lie detector can prove emotional cheating addresses additional complexities in this area.

Attorney-Client Privilege and Polygraph Results

When an attorney arranges a polygraph examination as part of a legal defense strategy, the results may be protected under attorney-client privilege or the work product doctrine. This is one of the strongest forms of confidentiality protection available for polygraph results and is a primary reason why defense attorneys often commission their own polygraph examinations rather than relying on results from other parties [11]Verified Attorney Polygraph Exams — Work Product Doctrine
Confirms polygraph examinations of clients may fall under attorney-client privilege, first established by Hickman v. Taylor and codified in FRCP rule 26(b)(3).

The key principles governing attorney-polygraph privilege include:

Work product doctrine — Materials prepared in anticipation of litigation, including polygraph reports commissioned by an attorney, are generally protected from discovery by opposing counsel [11]Verified Attorney Polygraph Exams — Work Product Doctrine
Confirms polygraph examinations of clients may fall under attorney-client privilege, first established by Hickman v. Taylor and codified in FRCP rule 26(b)(3). This means a prosecutor or opposing attorney cannot typically force disclosure of a defense polygraph. As one criminal defense attorney explains, when the defense hires the polygrapher, the results are protected by work product and attorney-client privileges regardless of whether they are favorable [12]Verified Polygraphs in Texas Criminal Law: Not Admissible but Useful
Confirms defense attorneys should hire the polygrapher and ensure results are protected by work product and attorney-client privileges.

Voluntary waiver — If the defense voluntarily introduces polygraph results into proceedings (for example, during plea negotiations or at trial), the privilege is waived and the other side gains access to the full report.

Strategic non-disclosure — If a defense polygraph produces unfavorable results, the attorney can simply choose not to disclose them. This strategic advantage is a significant reason for the prevalence of defense-initiated polygraph testing [12]Verified Polygraphs in Texas Criminal Law: Not Admissible but Useful
Confirms defense attorneys should hire the polygrapher and ensure results are protected by work product and attorney-client privileges.

Attorneys should be aware that privilege protections vary by jurisdiction. For deeper insight into how polygraph evidence functions in courtroom settings, see our article on polygraph admissibility in federal courts.

Court-Ordered Polygraph Testing

When a court orders a polygraph examination, the confidentiality framework shifts significantly. Court-ordered tests are administered under the authority of the court, and the results are typically directed to the court and relevant parties in the proceeding. This can include judges, probation officers, attorneys on both sides, and in some cases, treatment providers.

Common scenarios for court-ordered polygraph testing include:

Probation and parole compliance — Courts may order periodic polygraph examinations as a condition of probation or parole. Results are typically reported to the supervising probation or parole officer and may be shared with the court if a violation is suspected. For details on how this works in practice, see our probation polygraph testing guide.

Family court proceedings — In family court and child custody cases, polygraph results may be ordered to address allegations of abuse, substance use, or other concerns. The judge and both parties' attorneys typically receive the results.

Stipulated polygraphs — In criminal cases, both prosecution and defense may agree (stipulate) to a polygraph examination, with the understanding that results will be shared with both sides and potentially admitted as evidence. In the landmark 1998 case United States v. Scheffer, the U.S. Supreme Court left it up to individual jurisdictions whether polygraph results could be admitted as evidence in court cases [13]Verified Polygraph — United States v. Scheffer (1998)
Confirms states including Massachusetts, Maryland, New Jersey, Oregon, Delaware and Iowa ban employer polygraph testing. Once a stipulation is made, neither party can suppress unfavorable results.

Examinees in court-ordered situations should understand that they have significantly less control over who sees their results compared to private testing. However, they still retain the right to receive a copy of their report and to understand how it will be used. For insight into how polygraphs appear in popular culture versus reality, see our piece on Law & Order SVU polygraph episodes.

Law Enforcement Pre-Employment Screening

Polygraph testing is widely used in law enforcement hiring, and the confidentiality rules for these examinations differ from private-sector testing because government employers are generally exempt from EPPA [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners. Federal, state, and local government agencies — including police departments — are not affected by EPPA [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners. Instead, confidentiality for law enforcement polygraph results is governed by agency policies, civil service regulations, and state public records laws.

The DHS and other federal agencies have their own internal policies governing polygraph testing and result handling. For recent developments in this area, see our report on the DHS CISA polygraph probe. The 2011 APA meta-analysis established new mandatory standards requiring only scientifically validated techniques for all polygraph examinations, including those in law enforcement screening — effectively ending the era when tradition alone could justify testing methods [14]Verified Validated Techniques and Scoring Models for PDD Test Data Analysis
Confirms the 2011 APA meta-analysis established mandatory standards requiring only scientifically validated techniques.

Confidentiality in Post-Conviction Sex Offender Testing

Post-Conviction Sex Offender Testing (PCSOT) represents one of the most structured and regulated polygraph contexts, and confidentiality rules here are particularly detailed. According to the APA's Model Policy for PCSOT (2021), information from the polygraph examination and test outcomes should be kept confidential and provided only to those professionals involved in the multi-disciplinary supervision and treatment team [15]Verified Model Policy for Post-Conviction Sex Offender Testing (2021)
Confirms PCSOT results should be kept confidential within multi-disciplinary containment team; polygraph results should not be sole basis for supervision revocation.

PCSOT operates within what is known as the Containment Model, a multi-disciplinary approach involving supervising officers, treatment providers, and polygraph examiners working collaboratively [16]Verified CASOMB Post-Conviction Sex Offender Polygraph Standards
Confirms PCSOT results should be kept confidential within Containment Approach; examiners should emphasize multi-disciplinary collaboration. In California, this containment approach became mandatory beginning July 1, 2012, requiring three core team members: the supervising officer, the sex offender treatment provider, and the polygraph examiner [17]Verified CASOMB Containment Model — Mandatory Components
Confirms California mandated the Containment Model with three required components beginning July 1, 2012. Results flow among these containment team members but should not be disseminated more broadly without legal authorization.

Importantly, while PCSOT examinees are often required to waive certain confidentiality protections as a condition of supervision, there are limits. The APA Model Policy specifies that polygraph test results should never be used as the sole basis for revocation of court supervision or termination of treatment [15]Verified Model Policy for Post-Conviction Sex Offender Testing (2021)
Confirms PCSOT results should be kept confidential within multi-disciplinary containment team; polygraph results should not be sole basis for supervision revocation. Research surveying sex offenders about their polygraph experiences found that a majority reported the polygraph motivated them to be more honest in treatment and supervision, with many acknowledging its utility [18]Verified Post-Conviction Sex Offender Polygraph Examination: Client-Reported Perceptions of Utility and Accuracy
Found majority of surveyed sex offenders reported polygraph motivated them to be more honest in treatment and supervision. This underscores the important role that appropriate confidentiality protections play in encouraging honest participation.

For detailed information about PCSOT programs by state, see our Georgia sex offender polygraph program guide.

Mandatory Reporting Exceptions in PCSOT

A critical nuance in PCSOT confidentiality involves mandatory reporting. The APA Model Policy notes that while polygraph examiners are generally not mandated reporters, other members of the containment team (therapists, probation officers) likely are [19]Verified PCSOT Model Policy — Mandatory Reporting
Confirms examiners are generally not mandated reporters; results should be kept confidential within Containment Approach. This means that disclosures made during a polygraph session could trigger mandatory child-abuse reporting obligations for other team members, even if the examiner personally is not required to report.

Some jurisdictions address this by providing limited immunity for disclosures made during PCSOT sessions. For example, in California, case law has established that answers given during compelled polygraph examinations cannot be used against the offender in subsequent criminal proceedings, though they can be used in revocation hearings [20]Verified CASOMB Polygraph Policy Statement — Immunity and Informed Consent
Confirms California case law grants immunity from prosecution for statements made during compelled polygraph examinations. This careful balance between confidentiality and public safety is essential to the functioning of PCSOT programs.

Federal and Professional Retention Requirements

How long your polygraph records are retained depends on the context of the examination and the regulations that apply.

EPPA Retention for Employment Tests: Under EPPA, employers and polygraph examiners must retain required records for a minimum of three years from the date the polygraph examination is conducted, or from the date the examination is requested if no examination is conducted [3]Verified Employment Law Guide — Lie Detector Tests
Confirms employers and polygraph examiners must retain records for minimum three years from date of examination, and that EPPA strictly limits disclosure. This includes the employer's statement of reasons, the notice provided to the examinee, and all opinions, reports, charts, written questions, and other records relating to the examination [3]Verified Employment Law Guide — Lie Detector Tests
Confirms employers and polygraph examiners must retain records for minimum three years from date of examination, and that EPPA strictly limits disclosure.

Government Agency Retention: Federal law enforcement and intelligence agencies typically retain polygraph records for the duration of an employee's tenure plus additional years determined by agency policy. These records may be subject to Freedom of Information Act (FOIA) requests, though exemptions often apply to personnel and investigative files.

Private Examiner Retention: Private polygraph examiners should follow their professional organization's standards for record retention. The APA Standards of Practice, which were most recently effective August 23, 2024, set professional benchmarks for record-keeping [21]Verified APA Bylaws and Standards of Practice
Confirms APA Standards of Practice were most recently made effective August 23, 2024. Many examiners retain records for at least three to five years as a matter of professional practice, though specific timeframes may vary by state licensing requirements.

Understanding what happens after your polygraph and the timeline for results delivery can help you plan for record management.

What Happens When Retention Periods Expire

When the applicable retention period expires, records should be securely destroyed. Reputable examiners will have documented procedures for record destruction, including shredding of paper documents and secure deletion of electronic files. Before your examination, ask the examiner about their destruction procedures so you understand the full lifecycle of your data.

If you need your records for an ongoing legal matter, request copies well before the retention period expires. Once records are destroyed, they cannot be recovered — even by court order.

Steps Every Examinee Should Take

Protecting your polygraph results begins before you ever sit down for the examination. Here are actionable steps to safeguard your privacy:

Read the informed consent form carefully. Do not sign until you understand every provision, including who receives the results, how they will be stored, and when they will be destroyed. If you are considering what a polygraph waiver means, consult with an attorney before signing.

Ask who will receive the report. Get a clear, specific answer about every person or entity that will receive the full report, a summary, or verbal results.

Request a copy of your report in writing. Under EPPA, you are entitled to a copy of questions, charts, and the examiner's opinion in employment contexts [1]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association
Confirms EPPA became law December 27, 1988, imposes $10,000 penalty per violation, requires minimum 3-year record retention for employers and examiners. In private testing, make this request part of your agreement with the examiner.

Verify examiner credentials. Choose an examiner who is APA-standards-trained and licensed in your state if required. Many states require polygraph examiners to be licensed, and licensing serves as an additional layer of professional accountability [22]Verified State Licensing Boards & Associations — APA Directory
Provides comprehensive directory of state polygraph licensing requirements across the United States, revised 03/21/2024. The APA has over 2,700 members committed to professional, ethical, and scientific standards [5]Verified American Polygraph Association — Official Website
Confirms APA established in 1966, has 2700+ members, promotes highest standards of professional, ethical and scientific practices.

Do not voluntarily disclose results beyond what is necessary. Once you share your results with someone, you lose control over further distribution.

Document everything. Keep copies of the informed consent form, any correspondence with the examiner, and your copy of the report. Store these in a secure location.

Legal Remedies for Unauthorized Disclosure

If your polygraph results are disclosed without authorization, you may have several avenues for legal recourse.

EPPA Violations: Under the federal statute, any employer who violates EPPA provisions — including confidentiality requirements — may be assessed a civil penalty of not more than $10,000 per violation [8]Verified EPPA Civil Penalties — 29 USC § 2005
Confirms any employer who violates any provision of EPPA may be assessed civil penalty of not more than $10,000. Additionally, EPPA allows affected employees to bring civil lawsuits to recover lost wages, employment reinstatement, legal fees, and other damages [8]Verified EPPA Civil Penalties — 29 USC § 2005
Confirms any employer who violates any provision of EPPA may be assessed civil penalty of not more than $10,000. The Department of Labor's Wage and Hour Division investigates complaints of EPPA violations [9]Verified DOL Fact Sheet #36: Employee Polygraph Protection Act
Confirms Wage and Hour Division enforces EPPA compliance and employees can file complaints.

State Law Claims: Many states have their own privacy statutes and causes of action for unauthorized disclosure of personal information. These claims can supplement federal remedies.

Professional Discipline: Filing a complaint with the APA or the examiner's state licensing board can result in professional sanctions, including suspension or revocation of credentials.

Common Law Claims: In some jurisdictions, you may have tort claims for invasion of privacy, breach of fiduciary duty, or intentional infliction of emotional distress if unauthorized disclosure causes significant harm.

States More Restrictive Than EPPA

EPPA establishes a federal baseline, but Section 10 of the Act provides that it does not preempt any state or local law that is more restrictive with respect to lie detector tests [23]Verified 29 CFR Part 801 — Application of EPPA
Confirms EPPA does not preempt state or local laws more restrictive with respect to lie detector tests. Several states have enacted laws that go significantly further than EPPA in restricting employer polygraph use:

Massachusetts prohibited both public and private employers from requiring applicants and employees to submit to any kind of lie detector testing in 1959, making it one of the earliest states to act [24]Verified Polygraphs are not the way forward in police reform — Boston Globe
Confirms Massachusetts prohibited employer polygraph testing in 1959; Michigan, Minnesota, New Jersey, and Oregon followed suit. Michigan, Minnesota, New Jersey, and Oregon subsequently followed suit with similar broad prohibitions [24]Verified Polygraphs are not the way forward in police reform — Boston Globe
Confirms Massachusetts prohibited employer polygraph testing in 1959; Michigan, Minnesota, New Jersey, and Oregon followed suit. In states like Rhode Island, Maryland, Delaware, and Iowa, it is also illegal for any employer to order a polygraph either as a condition for gaining employment or for investigating suspected wrongdoing [13]Verified Polygraph — United States v. Scheffer (1998)
Confirms states including Massachusetts, Maryland, New Jersey, Oregon, Delaware and Iowa ban employer polygraph testing.

California stands out for its absolute ban on polygraph testing under California Labor Code Section 432.2, which prevents employers from requiring, requesting, or even suggesting polygraph tests for any position — including roles that would fall under EPPA exemptions at the federal level [25]Verified Lie Detectors and Labor Laws: The Employee Polygraph Protection Act
Confirms California has absolute ban under Labor Code Section 432.2; Massachusetts, Michigan, and New Jersey impose similar restrictions.

These state-level restrictions often carry their own penalties and enforcement mechanisms that operate in addition to EPPA. If a state prohibits the use of polygraphs in all private employment, employers cannot conduct polygraph examinations even under the limited exemptions provided in EPPA [23]Verified 29 CFR Part 801 — Application of EPPA
Confirms EPPA does not preempt state or local laws more restrictive with respect to lie detector tests. For international perspectives on polygraph regulation, see our guides on polygraph testing in Namibia and polygraph history in Spain.

Licensing Requirements Across States

Many states require polygraph examiners to be licensed through state boards or regulatory agencies, which serves as an additional confidentiality safeguard by imposing ethical standards and accountability. According to the APA's state licensing directory, approximately 25 to 28 states have some form of polygraph examiner licensing requirement [22]Verified State Licensing Boards & Associations — APA Directory
Provides comprehensive directory of state polygraph licensing requirements across the United States, revised 03/21/2024. States with robust licensing frameworks include Alabama, Arkansas, Illinois, Indiana, Kentucky, Louisiana, Maine, Michigan, Mississippi, Missouri (St. Louis County only), Nebraska, New Mexico, North Carolina, North Dakota, Oklahoma, Oregon, South Carolina, Tennessee, Texas, Utah, Vermont, Virginia, and West Virginia [22]Verified State Licensing Boards & Associations — APA Directory
Provides comprehensive directory of state polygraph licensing requirements across the United States, revised 03/21/2024.

However, some large states — including California, Florida, New York, and Georgia — do not require a state-specific polygraph license, though examiners in those states often carry APA certification voluntarily [22]Verified State Licensing Boards & Associations — APA Directory
Provides comprehensive directory of state polygraph licensing requirements across the United States, revised 03/21/2024. EPPA itself requires that examiners have a valid and current license granted by the state in which the test is conducted, if so required by the state [6]Verified Employee Polygraph Protection Act — Full Text (29 USC Chapter 22)
Confirms statutory text on disclosure restrictions: examiner may only disclose to examinee, designated persons, or courts; employers limited to same plus governmental agencies for criminal admissions. Regardless of state licensing status, always insist on working with an APA-qualified examiner for the highest standards of professional practice [5]Verified American Polygraph Association — Official Website
Confirms APA established in 1966, has 2700+ members, promotes highest standards of professional, ethical and scientific practices.

Canadian Polygraph Regulation

In Canada, polygraph regulation is primarily handled at the provincial level rather than through a single federal statute. Ontario and New Brunswick expressly ban employers from using lie detector tests for employment-related purposes through their employment standards legislation [26]Verified Is It Legal to Make Employees Take a Lie Detector Test? — Ontario and New Brunswick
Confirms Ontario and New Brunswick expressly ban employer use of lie detector tests; other provinces use privacy laws. Ontario's Employment Standards Act, 2000 makes it illegal for an employer or anyone on behalf of an employer to directly or indirectly require, request, enable, or influence an employee to take a lie detector test [27]Verified Lie Detector Tests — Ontario Employment Standards Act
Confirms it is against the law for an employer in Ontario to require, request, enable or influence an employee to take a lie detector test.

Outside of Ontario and New Brunswick, employment standards laws do not specifically address lie detectors, though four jurisdictions — Federal, Alberta, British Columbia, and Québec — have personal privacy laws that limit an employer's right to collect, use, and disclose an employee's protected personal information, which may encompass polygraph results [28]Verified Is It Legal to Make Employees Take a Lie Detector Test? — Privacy Laws
Confirms Federal, Alberta, BC, and Québec have personal privacy laws covering the employment relationship that may limit polygraph use. The Supreme Court of Canada has rejected polygraph evidence since 1987 [29]Verified What Canadian Bosses Can and Cannot Do To Staff
Confirms Supreme Court of Canada rejected polygraph evidence since 1987; polygraph testing only disallowed by law in Ontario, and the National Security and Intelligence Review Agency (NSIRA) questioned the merits of polygraph tests in a December 2020 report, though the federal government continues to use them for enhanced top secret security clearances [30]Verified Federal government rethinking use of controversial polygraph test — CBC News
Confirms NSIRA questioned merits of polygraph tests in December 2020 report; polygraph required for enhanced top secret clearance in Canada.

Professional Standards Governing Confidentiality

The American Polygraph Association, established in 1966, is the world's leading association dedicated to evidence-based scientific methods for credibility assessment [5]Verified American Polygraph Association — Official Website
Confirms APA established in 1966, has 2700+ members, promotes highest standards of professional, ethical and scientific practices. The APA's Standards of Practice, most recently effective August 23, 2024, establish comprehensive ethical requirements including confidentiality obligations for its members [21]Verified APA Bylaws and Standards of Practice
Confirms APA Standards of Practice were most recently made effective August 23, 2024.

Key ethical obligations relevant to confidentiality include:

Results may only be shared with authorized persons, which can include other polygraph examiners in private consultation when appropriate [31]Verified APA Standards and Principles of Practice (Historical)
Confirms APA Standards include provisions that authorized persons may include other polygraph examiners in private consultation; recording without subject awareness prohibited.

Examiners must not record any physiological phenomenon without the subject being aware that their physiological responses are being recorded [31]Verified APA Standards and Principles of Practice (Historical)
Confirms APA Standards include provisions that authorized persons may include other polygraph examiners in private consultation; recording without subject awareness prohibited.

Examiners should not conduct examinations where there is reason to believe the examination is intended to interfere with lawful organizational activities [31]Verified APA Standards and Principles of Practice (Historical)
Confirms APA Standards include provisions that authorized persons may include other polygraph examiners in private consultation; recording without subject awareness prohibited.

In PCSOT contexts specifically, examiners should consider themselves an integral part of the multi-disciplinary supervision and treatment team, maintaining frequent contact with the team while ensuring that results flow only within appropriate professional channels [15]Verified Model Policy for Post-Conviction Sex Offender Testing (2021)
Confirms PCSOT results should be kept confidential within multi-disciplinary containment team; polygraph results should not be sole basis for supervision revocation.

The 2011 APA meta-analysis represented a pivotal moment for professional standards, establishing new mandatory requirements for only scientifically validated techniques — ending the era when tradition or personal preference alone could justify testing methods [14]Verified Validated Techniques and Scoring Models for PDD Test Data Analysis
Confirms the 2011 APA meta-analysis established mandatory standards requiring only scientifically validated techniques. This emphasis on scientific validation extends to result handling and reporting practices.