Employee Rights & Lie Detector Tests: EPPA Guide

A Landmark Federal Law Protecting Workers

The Employee Polygraph Protection Act of 1988 (EPPA) is a landmark piece of federal legislation that fundamentally reshaped how lie detector tests can be used in the American workplace. Signed into law by President Ronald Reagan on June 27, 1988, and effective since December 27, 1988, the EPPA was enacted as Public Law 100-347 [1]Verified It is a Violation of Federal Law for an Employer to Require an Employee to take a Polygraph…No Lie!
Confirms EPPA was signed by President Reagan on June 27, 1988 (Public Law 100-347), and that the Senate Report documented 400,000 honest workers wrongfully labeled deceptive annually[2]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA effective December 27, 1988; details all regulatory provisions including prohibitions, exemptions, employer posting requirements, and effect on state laws. The law is codified at 29 U.S.C. §§ 2001–2009 [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions.

In February 1987, Representative Pat Williams of Montana introduced the bill (H.R. 1212) in the House of Representatives, and Senator Edward M. Kennedy of Massachusetts introduced a corresponding bill in the Senate [4]Verified H.R.1212 — Employee Polygraph Protection Act of 1988
Official congressional record confirming EPPA prohibitions, exemptions, ongoing investigation provisions, and enforcement mechanisms including private civil actions. After gaining bipartisan support, the legislation passed and was signed into law.

The Senate Report that led to the law's enactment documented two critical findings: that the American Medical Association had concluded polygraphs could provide accurate evidence of deception only somewhat better than chance, and that a minimum of 400,000 honest workers were being wrongfully labeled deceptive and suffering adverse employment consequences each year [1]Verified It is a Violation of Federal Law for an Employer to Require an Employee to take a Polygraph…No Lie!
Confirms EPPA was signed by President Reagan on June 27, 1988 (Public Law 100-347), and that the Senate Report documented 400,000 honest workers wrongfully labeled deceptive annually. By the 1980s, American companies were administering over two million polygraph tests per year [5]Verified The Ultimate Guide to Polygraph Tests in U.S. Law
Confirms estimate that American companies were administering over two million polygraph tests per year by the 1980s, creating an environment that Congress ultimately deemed unacceptable.

The EPPA eliminated approximately 85% of polygraph tests then being given in the private sector [6]Verified Employee Polygraph Protection Act of 1988: Background and Implications
Confirms the EPPA eliminated approximately 85% of polygraph tests then being given in the private sector; confirms industry opposition and AMA findings. For a complete look at how polygraph technology has developed alongside these regulations, explore our Polygraph History Timeline: 1875–2025.

How the EPPA Defines 'Lie Detector'

Under the EPPA, the term "lie detector" is defined broadly. It includes a polygraph, deceptograph, voice stress analyzer, psychological stress evaluator, or any other similar device — whether mechanical or electrical — that is used for the purpose of rendering a diagnostic opinion regarding the honesty or dishonesty of an individual [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum. A "polygraph" is specifically defined as an instrument that records continuously, visually, permanently, and simultaneously changes in cardiovascular, respiratory, and electrodermal patterns [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum. To understand these components better, see our guide on the four components of a polygraph.

This distinction matters because while the EPPA bans all lie detector tests by most private employers, limited exemptions permit only polygraph tests — not other types of lie detector devices [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions.

The Pre-EPPA Landscape

Before the EPPA's passage, polygraph testing was widespread in the private sector. From the early 1970s through the late 1980s, polygraph testing became a common practice in the employment context [4]Verified H.R.1212 — Employee Polygraph Protection Act of 1988
Official congressional record confirming EPPA prohibitions, exemptions, ongoing investigation provisions, and enforcement mechanisms including private civil actions. Employers used lie detector tests for pre-employment screening, periodic evaluations, and investigations into workplace theft, embezzlement, and other misconduct.

By the 1980s, an estimated two million polygraph examinations were being conducted annually in the American workplace [5]Verified The Ultimate Guide to Polygraph Tests in U.S. Law
Confirms estimate that American companies were administering over two million polygraph tests per year by the 1980s. The EPPA was opposed by private industry, especially sectors most concerned with internal theft and security risks [6]Verified Employee Polygraph Protection Act of 1988: Background and Implications
Confirms the EPPA eliminated approximately 85% of polygraph tests then being given in the private sector; confirms industry opposition and AMA findings. The Department of Justice initially opposed the legislation as well [6]Verified Employee Polygraph Protection Act of 1988: Background and Implications
Confirms the EPPA eliminated approximately 85% of polygraph tests then being given in the private sector; confirms industry opposition and AMA findings. Meanwhile, the American Polygraph Association advocated for establishing strict standards for the training and testing of polygraph examiners rather than an outright ban [6]Verified Employee Polygraph Protection Act of 1988: Background and Implications
Confirms the EPPA eliminated approximately 85% of polygraph tests then being given in the private sector; confirms industry opposition and AMA findings.

The passage of the EPPA represented a significant policy shift, recognizing employee privacy rights while still preserving polygraph testing as a tool for legitimate investigations under carefully controlled conditions [9]Verified Employee Polygraph Protection Act: 20 Years Later
Foundational analysis of the EPPA's impact after two decades; confirms the Act banned most private employer polygraph use while maintaining exceptions for government, security, and pharmaceutical industries.

Core Prohibitions Under Section 3

The EPPA's prohibitions are sweeping. Under Section 3 of the Act, covered employers are prohibited from [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions[10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline:

1. Requiring, requesting, suggesting, or causing — directly or indirectly — any employee or prospective employee to take or submit to any lie detector test.

2. Using, accepting, or inquiring about the results of any lie detector test of any employee or prospective employee.

3. Discharging, disciplining, discriminating against in any manner, or denying employment or promotion to, or threatening to take any such action against any employee or prospective employee who refuses, declines, or fails to take or submit to any lie detector test.

4. Retaliating against any employee or prospective employee who has filed a complaint, testified, or exercised any right under the EPPA.

These protections extend to current employees, former employees, and prospective employees alike [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions. The anti-retaliation provisions are particularly broad, covering any adverse action taken against someone for exercising their EPPA rights.

Employer Posting Requirements

Every employer subject to the EPPA must post and keep posted on its premises a notice explaining the Act, as prescribed by the Secretary of Labor [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions[10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. This notice must be posted in a prominent and conspicuous place in every establishment of the employer where it can readily be observed by employees and applicants for employment. The EPPA poster is available from the U.S. Department of Labor in both English and Spanish [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. Failure to display this poster is itself a violation of the EPPA.

Government Employers

Federal, state, and local government employers are completely exempt from the EPPA [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions. This means that government agencies — including law enforcement, intelligence agencies, and public sector employers — may freely use polygraph tests for hiring and employment purposes. Police departments routinely use polygraph testing during the hiring process, as detailed in our guide on polygraph tests in Florida police hiring. Federal agencies such as the FBI, CIA, and DEA commonly require polygraph screening of prospective employees [11]Verified Employee Polygraph Protection Act (EPPA): What It Means for Employees and Employers
Confirms Rep. Pat Williams introduced H.R. 1212 in February 1987 and Sen. Ted Kennedy introduced corresponding Senate bill; signed by Reagan June 27, 1988.

FBI Contractors

The EPPA does not prohibit the federal government from administering lie detector tests to employees of contractors of the Federal Bureau of Investigation who are engaged in the performance of work under their contract [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum. This exemption also extends to employees of federal contractors engaged in national security intelligence or counterintelligence functions. Learn more in our polygraph for government contractors guide.

Security Service Firms

The EPPA permits polygraph tests to be administered to certain job applicants of private security service firms [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions[12]Verified Employee Polygraph Protection Act — Wikipedia
Confirms EPPA prevents employers from using polygraph tests for pre-employment screening or during employment; confirms exemptions for security firms and pharmaceutical companies; confirms government exemption. This exemption covers employers whose primary business purpose consists of providing armored car personnel, personnel engaged in the design, installation, and maintenance of security alarm systems, or other uniformed or plainclothes security personnel. The security function must include protection of facilities, materials, or operations having a significant impact on the health or safety of any state or the national security of the United States [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum.

Pharmaceutical Manufacturers, Distributors, and Dispensers

Employers authorized to manufacture, distribute, or dispense controlled substances listed in Schedules I through IV of the Controlled Substances Act (21 U.S.C. § 812) may polygraph test certain employees and prospective employees [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum[8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions. For prospective employees, the test is permitted if the individual would have direct access to the controlled substances. For current employees, the test must be administered in connection with an ongoing investigation of criminal or other misconduct involving loss or injury to the manufacture, distribution, or dispensing of controlled substances [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum. This exemption is specifically limited to entities registered with the DEA and does not extend to common carriers or public warehouses [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions.

Four Requirements That Must All Be Met

The most commonly invoked exemption allows private employers to request — but never require — current employees to take a polygraph test during an ongoing investigation. All four of the following conditions must be satisfied [1]Verified It is a Violation of Federal Law for an Employer to Require an Employee to take a Polygraph…No Lie!
Confirms EPPA was signed by President Reagan on June 27, 1988 (Public Law 100-347), and that the Senate Report documented 400,000 honest workers wrongfully labeled deceptive annually[7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum[10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline:

1. The test must be administered in connection with an ongoing investigation involving economic loss or injury to the employer's business, such as theft, embezzlement, misappropriation, or an act of unlawful industrial espionage or sabotage.

2. The employee must have had access to the property that is the subject of the investigation.

3. The employer must have a reasonable suspicion that the employee was involved in the incident or activity under investigation.

4. The employer must execute and provide to the examinee before the test a written statement that describes with particularity the specific incident or activity being investigated and the basis for testing that employee.

Access alone is not sufficient grounds for polygraph testing [13]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association Compliance Guidelines
Confirms employer checklist requirements, 48-hour advance notice, written statement contents, $10,000 statutory penalty, 90-minute minimum test duration, and five-test daily maximum under EPPA. Congress intended this exemption to be narrowly construed and subject to careful restrictions [1]Verified It is a Violation of Federal Law for an Employer to Require an Employee to take a Polygraph…No Lie!
Confirms EPPA was signed by President Reagan on June 27, 1988 (Public Law 100-347), and that the Senate Report documented 400,000 honest workers wrongfully labeled deceptive annually. For guidance on conducting compliant workplace investigations, see our guide on how to investigate employee theft.

Written Statement Requirements

The employer's written statement must include, at a minimum [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline[13]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association Compliance Guidelines
Confirms employer checklist requirements, 48-hour advance notice, written statement contents, $10,000 statutory penalty, 90-minute minimum test duration, and five-test daily maximum under EPPA:

- An identification with particulars of the specific economic loss or injury to the business - A description of the employee's access to the property under investigation - The basis of the employer's reasonable suspicion that the employee was involved

This statement must be signed by a person — other than the polygraph examiner — who is authorized to legally bind the employer [13]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association Compliance Guidelines
Confirms employer checklist requirements, 48-hour advance notice, written statement contents, $10,000 statutory penalty, 90-minute minimum test duration, and five-test daily maximum under EPPA. The signed statement must be retained by the employer for at least three years [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline[13]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association Compliance Guidelines
Confirms employer checklist requirements, 48-hour advance notice, written statement contents, $10,000 statutory penalty, 90-minute minimum test duration, and five-test daily maximum under EPPA. These detailed requirements help ensure that employers cannot use the ongoing investigation exemption as a pretext for general or random polygraph testing [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions.

Important Limitations on This Exemption

The ongoing investigation exemption is subject to critical limitations. Random testing is prohibited — the employer cannot use this exemption for continuous investigations or to determine whether thefts are occurring generally [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions. For example, the fact that items in inventory are frequently missing from a warehouse would not be a sufficient basis, standing alone, for administering a polygraph test [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions.

Even when the exemption applies, the employer still cannot take adverse action against an employee based solely on the polygraph results or the employee's refusal to take the test — additional supporting evidence is always required [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum.

An Absolute Legal Right for Most Private Employees

If you are a non-exempt private sector employee, you have an absolute legal right to decline any polygraph test request [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. Your employer cannot fire, discipline, demote, deny promotion, or discriminate against you in any manner for refusing to take a lie detector test [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum. This protection applies equally to current employees and job applicants.

Even when one of the limited EPPA exemptions applies, your participation remains voluntary. Employers can request but never require you to take a polygraph — and they cannot use your refusal as the sole basis for any adverse employment action [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum[10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. You also maintain the right to terminate the test at any time during the examination [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum.

For helpful preparation tips in case you do choose to take a test, review our 5 things to know before a lie detector test.

How to Exercise Your Right to Refuse

If your employer asks you to take a polygraph test, take these steps:

1. Determine whether you work for a private or government employer and whether your industry falls under an EPPA exemption.

2. If you are a non-exempt private sector employee, you have the right to decline. State your refusal calmly and in writing, citing the Employee Polygraph Protection Act.

3. Document the request — including dates, names, circumstances, and any witnesses.

4. If you experience any retaliation, contact the Department of Labor's Wage and Hour Division at 1-866-487-9243 or consult an employment attorney.

For more on the importance of voluntary participation, see our guide on informed consent in polygraph testing.

Strict Procedural Requirements Protect Examinees

When a polygraph test is conducted under one of the EPPA exemptions, strict procedural safeguards apply throughout the pretest, testing, and post-test phases [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum[10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline[14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures.

Before the test, the employer must provide the employee with at least 48 hours written notice (not counting weekends or holidays) of the date, time, and place of the scheduled examination [14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures. The employee must also receive written notice of their right to consult with legal counsel or an employee representative before each phase of the test [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline.

During the test, the examination must last a minimum of 90 minutes, and no examiner may conduct more than five polygraph tests during one calendar day [14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures. All questions to be asked must be provided in writing and reviewed with the examinee in advance [14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures. To understand the role of different question types, read about irrelevant questions in polygraph testing.

Prohibited Questions and Examinee Rights

Throughout all phases of the polygraph examination, the examinee has the right to terminate the test at any time [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum. The examiner is prohibited from asking questions in a manner designed to degrade or needlessly intrude on the examinee [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum.

The EPPA specifically prohibits the following types of questions during any examination [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum:

- Religious beliefs or affiliations - Beliefs regarding racial matters - Political beliefs or affiliations - Sexual behavior - Beliefs, affiliations, opinions, or lawful activities regarding unions or labor organizations

Additionally, the examiner must not conduct the test if there is sufficient written evidence from a physician that the examinee is suffering from a medical or psychological condition that might cause abnormal responses during testing [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum.

Post-Test Requirements

After the examination, the examiner must inform the employee of the results and provide an opportunity to explain any physiological reactions [14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures. Any opinion of deception or non-deception must be provided in writing [14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures. Results must be based solely on polygraph test data — not on behavioral observations or other subjective factors [14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures.

For a more detailed look at the testing process, including how stimulation tests work, see our guide on stimulation test vs. acquaintance test in polygraph.

Strict Limits on Disclosure of Results

The EPPA places strict limits on who can access polygraph test information. A polygraph examiner may disclose information acquired from a test only to [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum:

- The examinee or any person specifically designated in writing by the examinee - The employer that requested the test - Any court, governmental agency, arbitrator, or mediator — but only pursuant to an order from a court of competent jurisdiction

The law specifically prohibits prospective employers from gaining access to old test results [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. Sharing results without authorization is a violation of federal law.

Employers must retain all polygraph-related records — including test results, incident statements, and records of refusal — for a minimum of three years from the date the examination was conducted, or from the date the examination was requested if no test was actually conducted [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline.

States That Prohibit Employment Polygraphs

The EPPA does not preempt state or local laws, or collective bargaining agreements, that prohibit lie detector tests or are more restrictive than the federal law [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions[10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. This means that in states with stricter polygraph laws, even the EPPA's limited exemptions may not apply.

As of the latest updates, the following U.S. states and jurisdictions prohibit employment polygraph testing [15]Verified Pre-Employment Polygraph Testing — States That Prohibit Employment Polygraphs
Confirms list of U.S. states that prohibit employment polygraphs: Alaska, California, Connecticut, Delaware, DC, Iowa, Massachusetts, Michigan, Minnesota, Montana, New Jersey, Rhode Island, Vermont, West Virginia: Alaska, California, Connecticut, Delaware, District of Columbia (pre-employment testing only), Iowa, Massachusetts, Michigan, Minnesota, Montana, New Jersey, Rhode Island, Vermont, and West Virginia (permitted only for pharmaceutical employees).

Notably, in states such as Rhode Island, Massachusetts, New Jersey, Oregon, Delaware, and Iowa, it is illegal for any employer to order a polygraph — either as a condition to gain employment or when an employee is suspected of wrongdoing [16]Verified Polygraph — Wikipedia (State Law Prohibitions)
Confirms that in specific states (RI, MA, MD, NJ, OR, DE, IA) it is illegal for any employer to order a polygraph as condition of employment or if employee is suspected of wrongdoing. For state-specific information, see our guides on Minnesota polygraph laws and Delaware employer polygraph restrictions.

Massachusetts: A Leading Example of Stricter State Law

Massachusetts General Laws Chapter 149, Section 19B is one of the most comprehensive state-level polygraph restrictions in the country [17]Verified Massachusetts General Laws Chapter 149, Section 19B — Lie Detector Tests
Confirms Massachusetts makes it unlawful for any employer to subject or request employees or applicants to take a lie detector test, with criminal penalties of $300-$1,000 for first offense and up to $1,500 or 90 days imprisonment for subsequent offenses. The law makes it unlawful for any employer to subject or request any employee or job applicant to take a lie detector test — defined broadly to include any polygraph, device, mechanism, instrument, or written examination used to detect deception [17]Verified Massachusetts General Laws Chapter 149, Section 19B — Lie Detector Tests
Confirms Massachusetts makes it unlawful for any employer to subject or request employees or applicants to take a lie detector test, with criminal penalties of $300-$1,000 for first offense and up to $1,500 or 90 days imprisonment for subsequent offenses.

Violators face criminal penalties: a fine of $300 to $1,000 for a first offense, and up to $1,500 or 90 days imprisonment for subsequent violations [17]Verified Massachusetts General Laws Chapter 149, Section 19B — Lie Detector Tests
Confirms Massachusetts makes it unlawful for any employer to subject or request employees or applicants to take a lie detector test, with criminal penalties of $300-$1,000 for first offense and up to $1,500 or 90 days imprisonment for subsequent offenses. Employees may also bring civil actions seeking injunctive relief, treble damages for lost wages, and attorney fees, with a minimum award of $500 per violation [17]Verified Massachusetts General Laws Chapter 149, Section 19B — Lie Detector Tests
Confirms Massachusetts makes it unlawful for any employer to subject or request employees or applicants to take a lie detector test, with criminal penalties of $300-$1,000 for first offense and up to $1,500 or 90 days imprisonment for subsequent offenses. In the case of a corporation, the responsible individual is the president, chief operating officer, or any managerial person who allows the violation [17]Verified Massachusetts General Laws Chapter 149, Section 19B — Lie Detector Tests
Confirms Massachusetts makes it unlawful for any employer to subject or request employees or applicants to take a lie detector test, with criminal penalties of $300-$1,000 for first offense and up to $1,500 or 90 days imprisonment for subsequent offenses.

Massachusetts courts have consistently upheld these protections and required that all employment applications contain the notice that requiring lie detector tests is unlawful [17]Verified Massachusetts General Laws Chapter 149, Section 19B — Lie Detector Tests
Confirms Massachusetts makes it unlawful for any employer to subject or request employees or applicants to take a lie detector test, with criminal penalties of $300-$1,000 for first offense and up to $1,500 or 90 days imprisonment for subsequent offenses.

Civil Penalties and Financial Consequences

The statutory maximum civil penalty under the EPPA was originally set at $10,000 per violation [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum. However, under the Federal Civil Penalties Inflation Adjustment Act, this amount has been adjusted significantly. In the initial 2016 catch-up adjustment, the penalty was increased from $10,000 to $19,787 [18]Verified Department of Labor Federal Civil Penalties Inflation Adjustment Act — 2016 Catch-Up Adjustments
Confirms EPPA civil penalty was adjusted from $10,000 to $19,787 per violation in 2016 under the Federal Civil Penalties Inflation Adjustment Act using the 1.97869 inflation factor. As of the January 2025 inflation adjustment, the maximum civil penalty for each EPPA violation was further increased from $25,597 to $26,262 [19]Verified Federal Civil Penalties Inflation Adjustment Act Annual Adjustments for 2025
Confirms EPPA civil penalty in 29 CFR 801.42(a) was adjusted from $25,597 to $26,262 per violation effective January 15, 2025.

The Secretary of Labor is authorized to bring court actions to restrain violations and assess these civil penalties [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. In determining penalty amounts, the Secretary considers the employer's prior compliance record and the gravity of the violation [7]Verified Employee Polygraph Protection Act (29 U.S.C. §§ 2001-2009) — Full Text
Provides full text of EPPA including all exemptions, ongoing investigation requirements, examinee rights, prohibited questions, enforcement provisions, and the $10,000 statutory penalty maximum.

Private Lawsuits and Employee Remedies

In addition to government enforcement, employees and prospective employees may bring private civil actions against any employer who violates the EPPA [3]Verified Employee Polygraph Protection Act — Full Text (29 U.S.C. §§ 2001-2009)
Provides full statutory text of the EPPA including definitions, prohibitions, exemptions, ongoing investigation requirements, examinee rights, prohibited questions, and enforcement provisions[10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. Available remedies include:

- Employment, reinstatement, or promotion - Payment of lost wages and benefits - Reasonable costs, including attorney fees

You have three years from the date of the alleged EPPA violation to file a private civil action in federal or state court [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline[20]Verified Lie Detector Tests: The Employee Polygraph Protection Act of 1988
Confirms EPPA disclosure restrictions, three-year deadline for filing lawsuits, and that EPPA does not override stricter state or local laws. There is no administrative filing prerequisite — you do not need to file a complaint with the Department of Labor before bringing a lawsuit [20]Verified Lie Detector Tests: The Employee Polygraph Protection Act of 1988
Confirms EPPA disclosure restrictions, three-year deadline for filing lawsuits, and that EPPA does not override stricter state or local laws. However, filing with the DOL's Wage and Hour Division is also an option and may result in the Secretary of Labor pursuing enforcement action on your behalf [20]Verified Lie Detector Tests: The Employee Polygraph Protection Act of 1988
Confirms EPPA disclosure restrictions, three-year deadline for filing lawsuits, and that EPPA does not override stricter state or local laws.

Leonard Saxe's foundational analysis of the EPPA's impact after two decades confirmed that the Act successfully banned most private employer polygraph use while maintaining targeted exceptions for government, security, and pharmaceutical industries [9]Verified Employee Polygraph Protection Act: 20 Years Later
Foundational analysis of the EPPA's impact after two decades; confirms the Act banned most private employer polygraph use while maintaining exceptions for government, security, and pharmaceutical industries.

Filing with the Department of Labor

The Employee Polygraph Protection Act is enforced by the U.S. Department of Labor's Wage and Hour Division (WHD) [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline. There is no official form for filing a complaint. You can contact the WHD in several ways:

- Call the toll-free helpline: 1-866-487-9243 - Visit your local Wage and Hour Division office - Write a letter to your local WHD office describing the violation

When filing your complaint, document the following:

- Your employer's name and location - The date and circumstances of the polygraph request or test - Names of individuals involved - Any retaliation you experienced - Any written communications you received

The WHD has authority to investigate complaints, inspect records, and pursue enforcement actions including civil penalties and injunctive relief [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline.

Filing a Private Lawsuit

You may also bring a private lawsuit in federal or state court without first filing a DOL complaint [20]Verified Lie Detector Tests: The Employee Polygraph Protection Act of 1988
Confirms EPPA disclosure restrictions, three-year deadline for filing lawsuits, and that EPPA does not override stricter state or local laws. The three-year statute of limitations begins running from the date of the violation [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline[20]Verified Lie Detector Tests: The Employee Polygraph Protection Act of 1988
Confirms EPPA disclosure restrictions, three-year deadline for filing lawsuits, and that EPPA does not override stricter state or local laws. An experienced employment attorney can help you evaluate your case and pursue all available remedies, including reinstatement, back pay, and attorney fees [20]Verified Lie Detector Tests: The Employee Polygraph Protection Act of 1988
Confirms EPPA disclosure restrictions, three-year deadline for filing lawsuits, and that EPPA does not override stricter state or local laws.

International perspectives on employee polygraph rights provide additional context for understanding the strength of U.S. protections. Research has identified significant gaps between polygraph practice and international human rights standards for consent and data protection [21]Verified Protection of Individual Rights in the Application of Profiling and Lie Detection Methods
Identifies gaps and contradictions in legislation governing polygraph examination, finding divergence between practice and international human rights standards for consent and data protection, while comparative analysis of countries like Poland shows that employee polygraph examinations face significant legal obstacles without explicit statutory authorization or genuine voluntary consent [22]Verified Legal Admissibility of Employee Polygraph Examinations in Poland
Comparative analysis showing employee polygraph examinations in the private sector face significant legal obstacles absent statutory authorization or voluntary consent, providing international context for EPPA-style protections.

For Employers Conducting Lawful Investigations

When an employer legitimately qualifies for the ongoing investigation exemption, following EPPA compliance procedures is essential to avoid liability. The American Polygraph Association recommends employers follow this checklist [13]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association Compliance Guidelines
Confirms employer checklist requirements, 48-hour advance notice, written statement contents, $10,000 statutory penalty, 90-minute minimum test duration, and five-test daily maximum under EPPA[14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures:

1. Obtain a copy of the EPPA and familiarize yourself with all requirements. 2. Provide the employee with the required written statement — signed by an authorized representative of the company (not the polygraph examiner). 3. Provide 48 hours advance notice of the examination date and time. 4. Ensure the employee is read the Notice to Examinee, which must be signed, timed, dated, and witnessed. 5. Verify that the polygraph examiner meets all EPPA licensing and qualification requirements. 6. Have your corporate attorney review all actions to ensure compliance. 7. Retain all records for at least three years.

Failure to satisfy any of these requirements nullifies the statutory authority for the test and may subject the employer to civil penalties and other remedial actions [8]Verified eCFR 29 CFR Part 801 — Prohibitions and Anti-Retaliation Provisions
Confirms detailed prohibitions under Section 3 of EPPA, anti-retaliation provisions, employer posting requirements, random testing prohibition, and state law non-preemption provisions. For practical guidance on implementing polygraph testing within a trust-building framework, read our guide on cultivating trust in the workplace with lie detector tests.

Examiner Qualifications Under the EPPA

The EPPA requires that any polygraph examiner conducting tests under the employer exemptions must hold a valid license if required by the state in which the test is conducted, and must be bonded or have professional liability coverage [10]Verified Employment Law Guide — Lie Detector Tests
Confirms all EPPA exemption requirements, notice provisions, three-year recordkeeping requirement, examiner qualifications, and three-year lawsuit deadline[14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures. The APA compliance guidelines additionally require that examiners conduct no more than five polygraph tests during one calendar day (including all tests for all clients), and that each examination last a minimum of 90 minutes [14]Verified Employee Polygraph Protection Act (EPPA) — APA Examiner Compliance Checklist
Confirms 90-minute minimum test duration, five-test daily maximum, written question disclosure requirement, and post-test result notification procedures.

Employers should verify the credentials of any polygraph examiner they engage, including written proof of licensing and liability insurance [13]Verified Employee Polygraph Protection Act (EPPA) — American Polygraph Association Compliance Guidelines
Confirms employer checklist requirements, 48-hour advance notice, written statement contents, $10,000 statutory penalty, 90-minute minimum test duration, and five-test daily maximum under EPPA. For specific state licensing requirements, see our Indiana polygraph certification guide and Nevada PILB polygraph licensing regulations.

Theft and Loss Investigation Applications

Under the EPPA's ongoing investigation exemption, polygraph testing remains a valuable tool for employers dealing with specific incidents of economic loss. When properly conducted according to EPPA requirements, polygraph examinations can help resolve workplace theft investigations efficiently and fairly while protecting the rights of all parties involved.

LieDetectorTest.com provides EPPA-compliant polygraph testing for a wide range of workplace scenarios. Our examiners trained to APA standards specialize in various industry-specific applications including polygraph testing for theft in small businesses, jewelry store theft investigations, construction site theft, restaurant employee theft, and warehouse theft investigations.

For employers in the transportation sector who may qualify for exemptions, our polygraph for transportation and trucking guide provides detailed compliance information.

Insurance Fraud Investigations

Polygraph testing also plays an important role in insurance fraud investigations, where the EPPA exemption framework may apply when investigating economic losses. Our polygraph testing for insurance fraud guide provides comprehensive guidance for adjusters and investigators working within the legal framework.