Polygraph Testing for Loss Prevention: Retail Guide

The Scale of the Problem

Retail shrinkage is one of the most persistent and costly challenges facing the industry. According to the National Retail Federation's 2023 National Retail Security Survey, inventory shrink cost US retailers an estimated $112.1 billion in 2022, representing approximately 1.6% of total retail sales [1]Verified 2023 National Retail Security Survey
Confirms $112.1 billion retail shrink in 2022, up from $93.9 billion in 2021, with 65% of shrink attributed to theft. This figure climbed from $93.9 billion in 2021, reflecting both rising theft rates and inflationary pressures on inventory values [1]Verified 2023 National Retail Security Survey
Confirms $112.1 billion retail shrink in 2022, up from $93.9 billion in 2021, with 65% of shrink attributed to theft.

While external theft (shoplifting and organized retail crime) generates more media attention, internal theft by employees remains a significant and often underestimated component of total shrinkage. The NRF survey data shows that internal and external theft combined account for nearly two-thirds (65%) of retailers' shrink [1]Verified 2023 National Retail Security Survey
Confirms $112.1 billion retail shrink in 2022, up from $93.9 billion in 2021, with 65% of shrink attributed to theft. Specifically, internal/employee theft accounts for approximately 29% of total shrinkage losses, while external theft accounts for about 36% [2]Verified Organized retail crime and theft not increasing much, NRF study finds
Confirms internal/employee theft at 28.85% and external theft at 36.15% of total shrink in 2022 NRF survey. When combined with process and control failures (approximately 27%), the proportion of shrinkage traceable to internal factors rises even higher [2]Verified Organized retail crime and theft not increasing much, NRF study finds
Confirms internal/employee theft at 28.85% and external theft at 36.15% of total shrink in 2022 NRF survey.

The NRF's more recent Impact of Retail Theft & Violence 2025 report found that retailers reported an 18% increase in the average number of shoplifting incidents in 2024 versus 2023, with threats or acts of violence during theft events increasing 17% during the same period [3]Verified New Study Finds Retailers Continue to Contend with Rising Levels of Theft & Violence
Confirms 18% increase in shoplifting incidents in 2024 vs 2023 and 17% increase in violence during theft events. Additionally, 83% of respondents said that levels of aggression and violence are the same or higher compared with last year [4]Verified The Impact of Retail Theft & Violence 2025 - Organized Retail Crime
Confirms 83% of retailers report same or higher levels of aggression and violence compared to previous year. These escalating trends underscore the importance of effective investigative tools, including polygraph testing, in a retailer's loss prevention arsenal. For a deeper dive into how polygraph testing helps resolve retail theft cases, see our guide to retail theft and shoplifting investigations.

What makes employee theft particularly damaging is its persistent nature and the difficulty of detection. While a shoplifter may steal a single item, a dishonest employee with access to inventory systems, cash registers, receiving docks, or return processing areas can steal systematically over months or years. According to the Jack L. Hayes International 35th Annual Retail Theft Survey, the average dishonest employee case value in 2022 was $1,136.93 [5]Verified 35th Annual Retail Theft Survey
Confirms average dishonest employee case value of $1,136.93 in 2022 and dishonest employees steal approximately 5.5x shoplifter amounts, while internal theft losses averaged $2,180 per investigation according to the NRF [6]Verified 10 Causes of Retail Shrinkage and How to Prevent Them
Confirms internal theft losses averaged $2,180 per investigation according to NRF survey data. On a per case average, dishonest employees steal approximately 5.5 times the amount stolen by shoplifters [5]Verified 35th Annual Retail Theft Survey
Confirms average dishonest employee case value of $1,136.93 in 2022 and dishonest employees steal approximately 5.5x shoplifter amounts. Organized internal theft rings can reach into six or seven figures.

Categories of Internal Retail Theft

To effectively deploy polygraph testing as an investigative tool, loss prevention professionals need to understand the distinct categories of internal theft that plague the retail industry:

Cash Register Skimming: Employees remove cash from the register without processing a transaction, or manipulate transaction records to conceal the removal of funds. This includes pocketing cash from undocumented sales, shortchanging customers, or manipulating the count at shift end. For guidance on investigating these cases, see our cash theft investigation guide.

Merchandise Theft: Direct removal of inventory from the store, stockroom, or warehouse. This ranges from taking small items in a purse or backpack to loading cases of product onto personal vehicles from the receiving dock. Our inventory theft and polygraph testing guide covers this category in detail.

Sweethearting: Providing unauthorized discounts, voiding legitimate transactions, or failing to scan all items for friends, family, or co-conspirators at the point of sale. Modern POS analytics can flag these patterns, but confirmation often requires additional investigation.

Return and Refund Fraud: Processing fraudulent returns for merchandise that was never purchased, stolen merchandise being returned for cash, or manipulating refund transactions to divert funds. Dollars lost to returns abuse and fraud in 2023 totaled $101 billion according to NRF calculations [7]Verified Returns, Shrink Cost U.S. Retailers Billions of Dollars, NRF Reports
Confirms dollars lost to returns abuse and fraud in 2023 totaled $101 billion.

Time Theft and Payroll Fraud: While not traditional shrinkage, falsifying time records, buddy-punching, or claiming unworked hours represents a significant economic loss that can be investigated under EPPA.

Vendor Collusion: Employees working with delivery drivers or vendors to accept short shipments while signing for full deliveries, with the difference split between the parties. Our warehouse and distribution center theft guide addresses this category specifically.

Gift Card and Loyalty Program Fraud: Manipulating digital assets such as gift card activations, loyalty point allocations, or digital coupon redemptions for personal gain.

Understanding these categories is essential because EPPA requires that the employer identify a specific economic loss, not merely a general suspicion that theft is occurring. The more precisely a loss prevention team can categorize and quantify the suspected theft, the stronger their legal foundation for requesting a polygraph examination.

What Is the Employee Polygraph Protection Act?

The Employee Polygraph Protection Act (EPPA) of 1988, codified at 29 U.S.C. 2001-2009, is the federal law that governs the use of polygraph testing in the private-sector workplace [8]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA prohibitions, exemptions, and general regulatory framework for polygraph testing in private employment. Enforced by the U.S. Department of Labor's Wage and Hour Division, EPPA was enacted on December 27, 1988 in response to widespread concerns about the misuse of polygraph testing for routine employee screening [9]Verified Employee Polygraph Protection Act (EPPA) — APA Summary
Confirms EPPA exemption categories, 90-minute minimum test duration, and examiner compliance requirements.

The core prohibition of EPPA is straightforward: most private-sector employers may not require, request, suggest, or cause an employee or job applicant to submit to a lie detector test [8]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA prohibitions, exemptions, and general regulatory framework for polygraph testing in private employment. Employers also may not use, accept, refer to, or inquire about the results of any lie detector test of an employee or prospective employee [8]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA prohibitions, exemptions, and general regulatory framework for polygraph testing in private employment. Violations can result in civil penalties of up to $10,000 per violation, plus potential liability for lost wages, reinstatement, and attorney fees [10]Verified 29 U.S.C. Chapter 22 — Employee Polygraph Protection
Confirms civil penalty of not more than $10,000 per EPPA violation, plus employee remedies including lost wages and reinstatement.

However, EPPA is not an absolute prohibition. Congress recognized that employers have legitimate needs to investigate workplace dishonesty and carved out specific exemptions that permit polygraph testing — but no other types of lie detector tests — under controlled circumstances [8]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA prohibitions, exemptions, and general regulatory framework for polygraph testing in private employment. For retail loss prevention professionals, the most important of these is the ongoing-investigation exemption. For broader context on how polygraph has been used in workplace investigations throughout history, see our polygraph history timeline.

Who Is Covered and Who Is Exempt?

EPPA applies to most private-sector employers engaged in or affecting interstate commerce, which includes virtually all retail operations [8]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA prohibitions, exemptions, and general regulatory framework for polygraph testing in private employment. The law covers all employees and job applicants, regardless of their position, tenure, or employment status.

Certain categories of employers are exempt from EPPA's general prohibition:

Federal, state, and local government employers are entirely exempt from EPPA [8]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA prohibitions, exemptions, and general regulatory framework for polygraph testing in private employment. Security guard firms that provide armored car, alarm monitoring, or security guard services for facilities impacting health, safety, or national security [9]Verified Employee Polygraph Protection Act (EPPA) — APA Summary
Confirms EPPA exemption categories, 90-minute minimum test duration, and examiner compliance requirements. Pharmaceutical manufacturers, distributors, and dispensaries with employees who have direct access to controlled substances [9]Verified Employee Polygraph Protection Act (EPPA) — APA Summary
Confirms EPPA exemption categories, 90-minute minimum test duration, and examiner compliance requirements. Certain government contractors with access to classified information or national security functions [9]Verified Employee Polygraph Protection Act (EPPA) — APA Summary
Confirms EPPA exemption categories, 90-minute minimum test duration, and examiner compliance requirements.

Standard retail employers do not fall into any of these exempt categories. A department store, grocery chain, electronics retailer, or specialty shop is subject to EPPA's full requirements and can only use polygraph testing under the ongoing-investigation exemption.

It is worth noting that EPPA preempts any less restrictive state laws but does not preempt more restrictive state laws [8]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA prohibitions, exemptions, and general regulatory framework for polygraph testing in private employment. Several states — including Massachusetts, Connecticut, and New Jersey — have enacted stricter prohibitions on workplace polygraph testing. Loss prevention teams must comply with both federal and state law, and should consult legal counsel regarding any state-specific restrictions in their jurisdiction. For a deeper understanding of the legal landscape, see our guide to polygraph in workplace investigations.

Four Essential Elements of the Exemption

Section 2006(d) of EPPA establishes the ongoing-investigation exemption, which permits a private-sector employer to request a polygraph examination of a current employee (not a job applicant) when specific conditions are met [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit. All four of the following elements must be satisfied simultaneously:

1. The test must be administered in connection with an ongoing investigation involving economic loss or injury to the employer's business, such as theft, embezzlement, misappropriation, or an act of unlawful industrial espionage or sabotage [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit. An investigation must already be underway; the employer cannot initiate an investigation solely to create a pretext for polygraph testing.

2. The employee must have had access to the property or information that is the subject of the investigation [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit. General opportunity is insufficient; the employer must be able to articulate why this particular employee had specific access.

3. The employer must have a reasonable suspicion that the employee was involved in the incident or activity under investigation [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit. Suspicion must be individualized, not based on group demographics, hunches, or statistical probability.

4. The employer must provide the employee with a written statement prior to the test that sets forth with particularity the specific incident or activity being investigated and the basis for testing particular employees. This statement must be signed by a person (other than a polygraph examiner) authorized to legally bind the employer [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit.

The written notice must be received by the examinee at least 48 hours, excluding weekends and holidays, before the time of the examination [12]Verified 29 CFR Part 801 Subpart C — Restrictions on Polygraph Usage Under Exemptions
Confirms 90-minute minimum test duration, five-exam daily limit, 48-hour notice requirement, and employee rights during examination. Each of these elements deserves careful attention. Failure to satisfy any single element can invalidate the entire examination and expose the employer to significant legal liability.

What Constitutes Reasonable Suspicion?

Of the four elements, reasonable suspicion is often the most challenging for loss prevention teams to establish and document. The Department of Labor has provided guidance indicating that reasonable suspicion must be based on observable, articulable facts rather than mere conjecture or generalized distrust.

Examples of facts that may support reasonable suspicion in a retail context include: The employee was the only person with access to a secure storage area during the timeframe when inventory went missing. Video surveillance shows the employee in unauthorized areas during times that correspond with inventory discrepancies. POS data analysis reveals a statistically significant pattern of anomalous transactions linked to the employee's register sessions. A credible witness report that the employee was observed concealing merchandise or removing items from the premises. Audit trail data showing manipulation of inventory records or system entries attributed to the employee's login credentials. Informant intelligence from a co-worker, vendor, or other reliable source.

The key principle is that the suspicion must be particularized to the individual employee. An employer cannot polygraph all employees in a department simply because inventory shrinkage has increased. There must be specific, articulable facts pointing to the involvement of each individual employee who is asked to take a test. For more on the specific loss exam process, see our dedicated guide.

Building a Compliant Investigation File

Proper documentation is the foundation of any EPPA-compliant polygraph investigation. Loss prevention professionals should treat the documentation process as building a file that could withstand scrutiny from the Department of Labor, in litigation, or during arbitration.

Step 1 — Document the Specific Economic Loss: Identify and quantify the specific loss with as much precision as possible. This might include inventory count discrepancies, cash shortages, unauthorized transactions, or missing merchandise. Include dates, dollar amounts, product categories, and any supporting data from your inventory management or POS systems. General shrinkage is not enough; you need a specific, identifiable loss event or pattern.

Step 2 — Establish and Document Access: Record the employee's specific access to the property, location, systems, or information related to the loss. This includes work schedules showing the employee was present during the relevant timeframe, key or access card records, system login data, security camera coverage of the employee in relevant areas, and any role-based access to inventory systems, POS terminals, or cash handling procedures.

Step 3 — Articulate Reasonable Suspicion in Writing: Write a clear, detailed narrative explaining why you suspect this particular employee. List all observable facts, evidence, witness statements, and investigative findings that point to the employee's involvement. Be specific and avoid conclusory language.

Step 4 — Prepare the Formal Written Statement: Draft the written statement that EPPA requires to be delivered to the employee at least 48 hours before the examination (excluding weekends and holidays) [12]Verified 29 CFR Part 801 Subpart C — Restrictions on Polygraph Usage Under Exemptions
Confirms 90-minute minimum test duration, five-exam daily limit, 48-hour notice requirement, and employee rights during examination. This statement must include the specific incident being investigated, the specific economic loss, the factual basis for reasonable suspicion, and must be signed by a person legally authorized to bind the employer [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit.

Step 5 — Deliver the Statement and Obtain Acknowledgment: Deliver the written statement and have the employee sign and date a copy acknowledging receipt. Provide the employee with a copy of the EPPA Notice of Rights. Clearly explain that the examination is voluntary and that the employee has the right to refuse without penalty. Document the delivery method, date, time, and any witnesses present.

Step 6 — Coordinate With the Polygraph Examiner: Provide the examiner with a case briefing that includes the nature of the investigation, the specific issues to be addressed, and any relevant background information. Ensure the examiner is licensed in the applicable state, maintains a minimum of a $50,000 bond or equivalent professional liability coverage, and uses APA-approved testing techniques [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit.

Step 7 — Maintain Comprehensive Records: EPPA requires that the employer retain all records related to the polygraph examination for at least three years from the date the examination is conducted [13]Verified Employment Law Guide — Lie Detector Tests
Confirms three-year recordkeeping requirement and employer notice and disclosure obligations under EPPA. This includes the written statement, employee acknowledgment, examiner's report, all supporting investigation documentation, and records of any employment decisions made in connection with the investigation. Centralize these records in a secure, confidential investigation file. To book a polygraph test for your investigation, contact our scheduling team.

When Polygraph Testing Makes Strategic Sense

Not every theft investigation warrants a polygraph examination. The cost, legal requirements, and administrative burden mean that polygraph should be reserved for cases where the stakes justify the investment and where other investigative methods have been insufficient to resolve the matter.

High-Value Inventory Losses: When a specific, significant inventory discrepancy has been identified — such as missing electronics, jewelry, pharmaceuticals, or high-value merchandise — and the investigation has narrowed the pool of suspects to employees with access but cannot definitively identify the responsible party. Polygraph can help resolve these high-stakes cases where video evidence is inconclusive or absent.

Suspected Theft Rings: When evidence suggests that multiple employees may be working together in a coordinated theft operation. Polygraph is particularly valuable in these cases because it can help identify all participants, determine the scope and duration of the conspiracy, and prevent investigators from focusing solely on the most visible suspect while overlooking co-conspirators.

POS Transaction Anomalies: When data analytics have identified suspicious patterns in an employee's point-of-sale transactions — excessive voids, unauthorized discounts, irregular refund patterns, or unusual transaction sequences — but the data alone is insufficient to prove intent. Polygraph can help determine whether the anomalies reflect innocent errors or deliberate fraud.

Receiving Dock Discrepancies: When physical inventory counts consistently fall short of what shipping documents indicate was received, and the investigation points to employees responsible for receiving, checking in, and signing for deliveries. This scenario often involves vendor collusion and can represent substantial losses over time.

Cash Handling Shortages: When consistent cash shortages are linked to specific employees, shifts, or registers, and standard controls have not resolved the issue. Polygraph testing can be especially useful when shortages occur at registers without camera coverage or when multiple employees share a register.

Information and Data Theft: When proprietary information, customer data, pricing strategies, or trade secrets have been compromised and the investigation suggests an internal source. While not traditional shrinkage, intellectual property and data theft represent significant economic losses that qualify under EPPA's ongoing-investigation exemption. For small business owners facing these scenarios, our small business polygraph testing guide provides tailored advice.

How POS Fraud Creates Investigation Complexity

Point-of-sale fraud represents one of the most challenging categories of internal theft for loss prevention teams because it occurs within the normal flow of business transactions. Unlike the physical removal of merchandise, POS fraud involves the manipulation of digital records and often leaves a subtle data trail that requires sophisticated analytics to detect.

Modern exception-based reporting (EBR) systems such as Agilence and Appriss Retail have dramatically improved retailers' ability to identify suspicious transaction patterns [14]Verified Appriss Retail — 2023 National Retail Security Survey Report
Confirms Appriss Retail as an established retail data analytics and loss prevention technology provider. These systems can flag employees whose void rates, discount percentages, or refund volumes deviate significantly from peer averages. However, a data anomaly is not proof of theft — it is an indicator that warrants further investigation.

This is where polygraph becomes a valuable complement to POS analytics. When the data identifies a suspicious pattern and the investigation has eliminated innocent explanations (system errors, training gaps, legitimate operational reasons), a polygraph examination can help determine whether the remaining anomalies reflect intentional fraud.

For example, if an employee's void rate is three standard deviations above the store average and video review of a sample of those voids reveals that customers appeared to have paid for their purchases before the voids were processed, the combination of statistical data and observational evidence creates a strong foundation for reasonable suspicion. The polygraph examination can then be used to determine the full scope of the employee's involvement and identify any accomplices.

Alternative investigative technologies are also emerging in this space. EyeDetect for theft investigations represents one such innovation that can complement traditional polygraph approaches.

Common POS Fraud Schemes Investigated by Polygraph

Void-After-Sale: Processing a void transaction after the customer has paid and left the store, then pocketing the cash equivalent. EBR systems track void-to-sale ratios and time gaps between sales and voids to flag this pattern.

Sweethearting/Discount Abuse: Providing unauthorized discounts, failing to scan items, or manipulating loyalty programs for friends, family, or co-conspirators. According to NRF research, merchandise theft, refund fraud, cash/deposit theft, and passing off merchandise to friends are the top four reported methods of internal theft [1]Verified 2023 National Retail Security Survey
Confirms $112.1 billion retail shrink in 2022, up from $93.9 billion in 2021, with 65% of shrink attributed to theft.

Refund Manipulation: Processing fraudulent refunds to store credit, gift cards, or cash without legitimate returned merchandise. This scheme can be particularly hard to detect when employees process small amounts frequently.

Coupon and Promotion Fraud: Applying expired or fabricated coupons and promotional codes to transactions, then retaining the price difference. Modern analytics can now identify anomalous coupon application patterns tied to specific employees.

Using Polygraph to Unravel Organized Internal Theft

Organized internal theft rings pose unique challenges for loss prevention professionals. When multiple employees collaborate to steal merchandise, cash, or data, the conspiracy can be difficult to detect and even harder to fully unravel through conventional investigative methods alone.

Polygraph testing becomes particularly valuable in multi-subject investigations because it can help identify the full scope of a theft ring's membership, determine each participant's role and level of involvement, establish the duration and total value of the theft operation, and reveal methods and channels used to fence or convert stolen goods.

The EPPA requirements for multi-subject testing remain the same as for individual examinations — each employee must independently satisfy all four elements of the ongoing-investigation exemption. This means documented access, individualized reasonable suspicion, and separate 48-hour written notice for every employee to be examined [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit. The examiner must also ensure that no more than five polygraph examinations are conducted in any one calendar day [12]Verified 29 CFR Part 801 Subpart C — Restrictions on Polygraph Usage Under Exemptions
Confirms 90-minute minimum test duration, five-exam daily limit, 48-hour notice requirement, and employee rights during examination.

Research into the neurobiology of deception has identified the prefrontal cortex as the dominant neural substrate involved in lying, providing scientific foundation for the physiological responses measured during polygraph testing [15]Verified The neurobiology of deception: evidence from neuroimaging and loss-of-function studies
Identifies the prefrontal cortex as the dominant neural substrate of deception, supporting the scientific basis of physiological deception detection. This growing body of neuroscience research supports the validity of the physiological detection of deception approach. Learn more about this in our complete guide to psychophysiological detection of deception (PDD).

Qualifications and Standards for LP Polygraph Examiners

The quality of a polygraph examination depends heavily on the qualifications and experience of the examiner. EPPA itself requires that the examiner maintain a valid and current license in the state where the test is conducted (if the state requires licensing), and maintain a minimum $50,000 bond or equivalent professional liability coverage [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit.

Beyond these statutory minimums, loss prevention professionals should seek examiners who are members in good standing of the American Polygraph Association (APA), which was established in 1966 and is the world's leading association dedicated to evidence-based credibility assessment, with more than 2,700 members from dozens of countries [16]Verified American Polygraph Association — About APA
Confirms APA established in 1966 with 2,700+ members promoting evidence-based credibility assessment standards. The APA promotes the highest standards of professional, ethical, and scientific practices through its Standards of Practice [16]Verified American Polygraph Association — About APA
Confirms APA established in 1966 with 2,700+ members promoting evidence-based credibility assessment standards.

The APA's 2011 meta-analytic survey of criterion accuracy found that the combination of all validated psychophysiological detection of deception (PDD) techniques produced a decision accuracy of 87%, with a confidence interval of 80% to 94% [17]Verified Polygraph Validity Research — Meta-Analytic Survey of Criterion Accuracy
Confirms 87% overall decision accuracy across validated PDD techniques and 89% for event-specific testing based on 38 studies and 3,723 examinations. Event-specific (single issue) diagnostic testing — the type most commonly used in loss prevention investigations — produced an even higher aggregated decision accuracy of 89%, with a confidence interval of 83% to 95% [17]Verified Polygraph Validity Research — Meta-Analytic Survey of Criterion Accuracy
Confirms 87% overall decision accuracy across validated PDD techniques and 89% for event-specific testing based on 38 studies and 3,723 examinations. These results were based on 38 studies involving 3,723 examinations scored by 295 independent scorers [17]Verified Polygraph Validity Research — Meta-Analytic Survey of Criterion Accuracy
Confirms 87% overall decision accuracy across validated PDD techniques and 89% for event-specific testing based on 38 studies and 3,723 examinations.

When selecting an examiner for retail LP work, prioritize professionals who have specific experience with EPPA-regulated workplace investigations, are trained in event-specific testing techniques validated for theft and fraud cases, can articulate a clear pre-test process that prepares the employee without coaching, and produce comprehensive written reports suitable for use in subsequent administrative or legal proceedings. If you're interested in a career in this field, explore our guide to becoming a polygraph examiner.

A comprehensive 50-year retrospective on polygraph science has reviewed the evolution of testing methods including the Comparison Question Test (CQT) and Concealed Information Test (CIT), noting the continued development and refinement of these tools [18]Verified Psychology and the Lie Detector Industry: A Fifty-Year Perspective
Comprehensive 50-year retrospective on polygraph science reviewing the evolution of CQT, CIT, and screening tests. The polygraph industry's growing integration of psychological research into training and practice marks an important advancement in the field's scientific credibility [19]Verified Redefining the Road for the Industry
Documents the polygraph industry's critical need to integrate psychological research into training and practice.

Protections Built Into the Process

EPPA establishes comprehensive procedural safeguards that protect employees throughout the polygraph examination process. These protections are not merely formalities — they are substantive rights, and failure to observe them can invalidate the examination and expose the employer to liability.

The examination is entirely voluntary. The employee may terminate the test at any time during any phase [12]Verified 29 CFR Part 801 Subpart C — Restrictions on Polygraph Usage Under Exemptions
Confirms 90-minute minimum test duration, five-exam daily limit, 48-hour notice requirement, and employee rights during examination. The employer cannot discharge, discipline, or discriminate against an employee for refusing to take the test or for exercising any rights under EPPA [8]Verified 29 CFR Part 801 — Application of the Employee Polygraph Protection Act of 1988
Confirms EPPA prohibitions, exemptions, and general regulatory framework for polygraph testing in private employment.

No testing period subject to EPPA shall be less than 90 minutes in length [20]Verified 29 CFR § 801.24 — Rights of examinee — actual testing phase
Confirms no testing period shall be less than 90 minutes, beginning when examiner starts informing examinee of examination characteristics. This minimum duration begins when the examiner starts informing the examinee of the nature and characteristics of the examination and the instruments involved [20]Verified 29 CFR § 801.24 — Rights of examinee — actual testing phase
Confirms no testing period shall be less than 90 minutes, beginning when examiner starts informing examinee of examination characteristics. This ensures thorough and professional testing that cannot be rushed.

The examiner may not conduct more than five polygraph examinations in any one calendar day on which an EPPA-covered test is administered [12]Verified 29 CFR Part 801 Subpart C — Restrictions on Polygraph Usage Under Exemptions
Confirms 90-minute minimum test duration, five-exam daily limit, 48-hour notice requirement, and employee rights during examination. The examinee may not be asked questions in a degrading or unnecessarily intrusive manner, and may not be asked questions dealing with religious beliefs, racial matters, political beliefs, sexual behavior, or beliefs or affiliations regarding labor organizations [12]Verified 29 CFR Part 801 Subpart C — Restrictions on Polygraph Usage Under Exemptions
Confirms 90-minute minimum test duration, five-exam daily limit, 48-hour notice requirement, and employee rights during examination.

Before any adverse employment action is taken based on polygraph results, the employer must further interview the examinee on the basis of the test results [11]Verified 29 CFR Part 801 Subpart B — Exemptions (Section 801.12 Ongoing Investigation)
Confirms four elements of ongoing-investigation exemption, written notice requirements, examiner qualifications, and five-exam daily limit. Under the ongoing-investigation exemption, the employer cannot take adverse action based solely on the polygraph results — there must be additional supporting evidence [21]Verified 29 CFR Part 801 Subpart C — Section 801.26 (Additional Supporting Evidence)
Confirms polygraph results cannot serve as sole basis for adverse employment action; additional supporting evidence is required. This additional evidence includes evidence that the employee had access to the property in question and evidence supporting the employer's reasonable suspicion [21]Verified 29 CFR Part 801 Subpart C — Section 801.26 (Additional Supporting Evidence)
Confirms polygraph results cannot serve as sole basis for adverse employment action; additional supporting evidence is required.

Note regarding employer observation: employees sometimes wonder about examination privacy. Our article on whether an employer can watch a polygraph test addresses this common question in detail.

Building an Effective and Compliant Program

For retailers that regularly encounter internal theft issues, establishing a structured polygraph program — rather than using polygraph on an ad hoc basis — can improve consistency, compliance, and results.

Develop a Written Policy: Create a formal company policy governing the use of polygraph testing in internal investigations. This policy should define the types of cases that warrant polygraph, the approval process (including required sign-offs from LP leadership and legal counsel), documentation standards, and guidelines for using examination results.

Train LP Staff on EPPA Requirements: Every loss prevention professional involved in internal investigations should have a working knowledge of EPPA requirements, including the four elements of the ongoing-investigation exemption, documentation standards, employee rights, and the limitations on using test results. This training should be refreshed annually.

Establish Examiner Relationships: Develop ongoing relationships with qualified polygraph examiners who understand retail loss prevention. Regular examiners who are familiar with your company's operations, theft patterns, and investigation procedures can provide more effective examinations than examiners brought in cold.

Integrate Polygraph With Other Investigation Tools: Polygraph works best as one component of a comprehensive investigation toolkit that includes video surveillance review, POS exception-based reporting analysis, inventory audit procedures, interview and interrogation techniques, and digital forensics for system-based theft. For a comprehensive overview of how these tools work together, see our manager's guide to polygraph in retail LP programs.

Document Everything: Maintain centralized, secure investigation files that include all EPPA-required documentation plus your internal investigation records. These files should be accessible to authorized LP and legal personnel and retained for at least three years [13]Verified Employment Law Guide — Lie Detector Tests
Confirms three-year recordkeeping requirement and employer notice and disclosure obligations under EPPA — longer if ongoing litigation is anticipated.

Review and Update Regularly: Conduct annual reviews of your polygraph program in consultation with legal counsel to ensure continued compliance with EPPA and any applicable state laws. Stay current on case law developments and DOL enforcement actions that may affect your practices.

How to Handle Polygraph Results in Employment Decisions

The results of a polygraph examination must be handled carefully to maintain both legal compliance and the integrity of the investigation.

Under the ongoing-investigation exemption, polygraph results alone are never sufficient to support adverse employment action [21]Verified 29 CFR Part 801 Subpart C — Section 801.26 (Additional Supporting Evidence)
Confirms polygraph results cannot serve as sole basis for adverse employment action; additional supporting evidence is required. The employer must have additional supporting evidence, including evidence of access and reasonable suspicion, before terminating, disciplining, or otherwise penalizing an employee based on polygraph findings [21]Verified 29 CFR Part 801 Subpart C — Section 801.26 (Additional Supporting Evidence)
Confirms polygraph results cannot serve as sole basis for adverse employment action; additional supporting evidence is required.

Admissions and statements made by the employee before, during, or after the examination can serve as additional supporting evidence and often prove more valuable than the chart analysis itself [21]Verified 29 CFR Part 801 Subpart C — Section 801.26 (Additional Supporting Evidence)
Confirms polygraph results cannot serve as sole basis for adverse employment action; additional supporting evidence is required. A skilled polygraph examiner experienced in workplace investigations will conduct thorough pre-test and post-test interviews that give the employee opportunities to provide information, clarify their involvement, or make admissions.

The examiner must provide any opinion of deception or non-deception in writing [12]Verified 29 CFR Part 801 Subpart C — Restrictions on Polygraph Usage Under Exemptions
Confirms 90-minute minimum test duration, five-exam daily limit, 48-hour notice requirement, and employee rights during examination. The written report must be based solely on the polygraph test results and must not contain any recommendation concerning the employment of the examinee [12]Verified 29 CFR Part 801 Subpart C — Restrictions on Polygraph Usage Under Exemptions
Confirms 90-minute minimum test duration, five-exam daily limit, 48-hour notice requirement, and employee rights during examination. Results may only be disclosed to the examinee, the employer who requested the test (including relevant management personnel), a court or governmental agency pursuant to court order, or the Secretary of Labor [13]Verified Employment Law Guide — Lie Detector Tests
Confirms three-year recordkeeping requirement and employer notice and disclosure obligations under EPPA.

Understanding the psychology of deception can significantly enhance the effectiveness of polygraph-related interviews. Research has identified 99 elementary deception modes that combine to create enormous varieties of deceptive communication [22]Verified Supplemental Material for The General Theory of Deception
Identifies 99 elementary deception modes combining to create approximately 10^30 possible deceptive messages, highlighting why structured, scientifically-grounded approaches to deception detection are essential in workplace investigations.

Building a Multi-Layered Investigation Strategy

Polygraph testing is most effective when used as part of a comprehensive investigation strategy that leverages multiple tools and data sources.

Exception-Based Reporting (EBR) Systems: Platforms such as Agilence and Appriss Retail analyze POS transaction data to identify statistical outliers that may indicate fraud or theft [14]Verified Appriss Retail — 2023 National Retail Security Survey Report
Confirms Appriss Retail as an established retail data analytics and loss prevention technology provider. These systems can detect excessive voids, unusual discount patterns, irregular refund activity, and anomalous transaction timing. EBR provides the data foundation that can establish both the economic loss and reasonable suspicion elements of the EPPA exemption.

Video Surveillance and Analytics: Modern AI-powered video analytics can detect suspicious behaviors, correlate camera footage with transaction data, and provide visual evidence to support or refute other investigative findings.

Inventory Management Systems: Advanced inventory tracking technologies can pinpoint discrepancies to specific locations, time windows, and responsible personnel, helping narrow the field of suspects.

Digital Forensics: For system-based theft schemes involving manipulation of POS records, inventory databases, or financial systems, digital forensic analysis can identify the specific user accounts, workstations, and timestamps involved.

Emerging Technologies: Tools such as EyeDetect offer additional options for credibility assessment that can complement traditional polygraph approaches.

Corpus-based linguistic analysis research has demonstrated that certain verbal patterns — particularly the use of cognitive-emotional verbs like believe, think, seem, and feel — are strongly associated with deceptive communication [23]Verified A corpus-based analysis of potential linguistic indicators of corporate deception in tobacco industry documents
Demonstrates cognitive-emotional verbs are strongly associated with likely deception, relevant to interview techniques in investigations. Understanding these linguistic markers can enhance the interview and interrogation components of retail investigations, providing additional insights beyond what technology alone can deliver.