Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- Can You Do Random Drug Testing At Work In NZ?
How To Introduce Random Drug Testing In A Small Business (Step-By-Step)
- Step 1: Identify Which Roles Are Safety-Sensitive
- Step 2: Draft Or Update A Drug And Alcohol Policy
- Step 3: Consult With Staff Before You Finalise It
- Step 4: Decide How You’ll Record Agreement And Acknowledge The Process
- Step 5: Choose A Testing Provider And Confirm The Chain Of Custody
- Step 6: Train Your Managers
- Key Takeaways
Random drug testing can feel like a “simple” way to keep your workplace safe - especially if you run a hands-on business in construction, logistics, manufacturing, warehousing, forestry, agriculture, or any role involving vehicles, machinery, or hazardous work.
But in New Zealand, random drug testing isn’t something you can just introduce overnight (or copy-paste from an overseas template). If it’s not handled properly, you can end up with privacy complaints, employment disputes, or an expensive personal grievance.
This guide is written for small business employers and managers who want to get the balance right: protecting your people and your business, while respecting employees’ rights around random drug testing at work (i.e. what you can ask employees to do, and what protections employees have under NZ law).
We’ll walk through when random testing is likely to be lawful, what your obligations are as an employer, and the practical steps to put a compliant process in place.
Can You Do Random Drug Testing At Work In NZ?
Sometimes, yes - but not always, and not for every workplace.
In New Zealand, there isn’t one single “workplace drug testing” Act. Instead, legality usually comes down to a mix of:
- Health and safety duties (especially under the Health and Safety at Work Act 2015)
- Privacy obligations (particularly under the Privacy Act 2020)
- Good faith and fairness in employment relationships (under the Employment Relations Act 2000)
- Whether testing is justified in the circumstances (often assessed by the Employment Relations Authority/courts based on the specific workplace, role, and what was agreed/communicated)
As a general rule, random drug testing is more likely to be justified where:
- your workplace includes safety-sensitive work (e.g. operating heavy machinery, driving, working at heights, handling hazardous substances)
- the role has a real potential for serious harm if someone is impaired
- you have a clear policy and process, introduced properly (including consultation)
- you apply it consistently and fairly (not targeting individuals)
- you manage results as sensitive personal information and keep them confidential
On the other hand, random testing is less likely to be justified if:
- the work is not safety-sensitive, and the safety risk is low
- you introduce it without consultation, notice, or a proper policy
- you rely on “because I said so” rather than a documented safety rationale
- you treat a test result as automatic dismissal without a fair process
If you’re unsure whether your roles are truly “safety-sensitive”, it’s worth getting advice first - because this is usually the key question that determines whether random testing is reasonable.
What Are Your Obligations As An Employer If You Want Random Drug Testing?
When you implement random drug testing, you’re not just “running tests” - you’re collecting highly sensitive information, making decisions that can affect someone’s income and reputation, and changing workplace expectations.
To do this safely (legally and practically), your obligations generally fall into four buckets.
1) Have A Genuine Health And Safety Reason (Not Just A Preference)
Under the Health and Safety at Work Act 2015, you must take reasonably practicable steps to ensure health and safety.
That can support drug and alcohol testing where impairment could create serious risks. However, random testing should still be proportionate to the risk, and should be used as part of a wider risk management approach (not as a “default” control for every role).
A good starting point is documenting:
- what hazards exist (vehicles, machinery, hazardous substances, fatigue, public safety)
- how impairment could increase risk
- why random testing is being considered (and why other controls alone aren’t enough)
2) Follow A Fair Process Under Employment Law
New Zealand employment law expects you to act fairly and reasonably - including when you introduce a new policy and when you respond to a test result.
In practice, that means:
- consulting with employees (and any representatives) before implementing or changing a policy
- giving people a chance to provide feedback
- considering that feedback in good faith
- rolling out the final policy with training and clear communications
If you already have an Employment Contract, check what it says about workplace policies, health and safety, and drug/alcohol rules. Often, the contract and policies work together - but you still need a fair and reasonable implementation, and employees need clear notice of what will apply to them.
3) Manage Privacy Properly (Because Test Results Are Sensitive Data)
Drug test results are typically treated as sensitive personal information. That means you need to be careful about how you collect it, store it, use it, and disclose it.
Under the Privacy Act 2020, you should be thinking about:
- purpose: why you’re collecting the information (workplace safety)
- minimisation: only collect what you need, and only for roles where testing is justified
- security: keep results secure and access limited (e.g. owner/manager and HR only)
- retention: keep results only as long as you need them, then securely dispose
- disclosure: avoid sharing results broadly (even “just to the supervisor” can be risky if not necessary)
Many small businesses formalise this through an Employee Privacy Handbook and a clear internal process for handling sensitive HR information.
4) Use A Clear Policy (And Apply It Consistently)
Random testing is not something you want to “wing”. You should have a written drug and alcohol policy that explains the rules, the process, and the consequences.
This usually sits within your broader Workplace Policy framework, so expectations are consistent across safety, conduct, and disciplinary processes.
Consistency matters because inconsistency can look like:
- unfairness (one person gets tested repeatedly, others never do)
- discrimination (real or perceived)
- predetermination (you’ve decided someone is “a problem” and you’re trying to prove it)
A genuinely random selection method (and a documented approach to selection) helps reduce those risks.
How To Introduce Random Drug Testing In A Small Business (Step-By-Step)
Even if you’re confident random testing is justified for your workplace, the rollout is where many businesses get caught out.
Here’s a practical step-by-step approach.
Step 1: Identify Which Roles Are Safety-Sensitive
Not every role in your business will justify random testing. A common approach is to apply random testing to specific safety-sensitive positions (for example, forklift drivers, heavy vehicle drivers, machine operators, or staff working at heights).
Document why each role is included.
Step 2: Draft Or Update A Drug And Alcohol Policy
Your policy should be clear enough that:
- employees know what’s expected
- managers know what to do
- your process holds up if challenged
Most strong policies cover:
- your safety rationale for testing
- which roles are covered
- types of testing (random, post-incident, reasonable cause, pre-employment)
- how random selection happens
- what the test involves (e.g. urine/oral fluid) and who conducts it
- employee rights (privacy, confidentiality, ability to respond, confirmatory testing)
- how results are managed (including false positives and medication declarations)
- support pathways (EAP/support persons, rehabilitation options where appropriate)
- disciplinary consequences (and the fact that outcomes depend on a fair process)
Step 3: Consult With Staff Before You Finalise It
Even if you’re the owner and you’re certain it’s needed, you should still consult. Consultation is part of acting in good faith and reduces the risk of later disputes.
Practical options include:
- sending a draft policy with a feedback deadline
- holding a toolbox meeting/Q&A
- inviting employees to bring a support person or representative to meetings (where appropriate)
- confirming in writing what changes were made after feedback
Step 4: Decide How You’ll Record Agreement And Acknowledge The Process
Drug testing is intrusive, so it’s important employees clearly understand what’s being required and why. Many workplaces use a written acknowledgement/consent step as part of the process - but “consent” in an employment relationship can be complicated, so you should avoid relying on a signature alone as your legal justification. The safer approach is to ensure testing is reasonable for the role, properly consulted on, clearly set out in policy/terms, and implemented fairly.
A tailored Drug Test Consent Form (or acknowledgement) can still help show that employees understand:
- what test is being done
- why it’s being done
- how the results will be handled
- who will see the results
Step 5: Choose A Testing Provider And Confirm The Chain Of Custody
Your process should protect both the business and the employee. That usually means:
- using reputable testers
- having clear procedures to reduce contamination or mix-ups
- confirmatory testing processes where a non-negative result arises
- clear reporting lines (who receives the result, in what form, and when)
Step 6: Train Your Managers
Testing is only half the story - the other half is how managers respond to:
- a refusal to test
- a non-negative result
- an employee who discloses medication
- a worker who claims the process is unfair
Training helps ensure you don’t accidentally undermine your own policy through inconsistent on-the-ground decisions.
Employee Rights During Random Drug Testing (And Why Employers Should Care)
Even though this article is written from an employer’s perspective, understanding employee rights during random drug testing at work is critical - because most legal problems arise when employee protections aren’t built into the process.
In a well-run process, employees should generally have protections around the following.
Privacy And Confidentiality
Test results should be shared strictly on a need-to-know basis, stored securely, and not discussed casually on-site. A “quick chat” in the smoko room can become a privacy complaint or reputational harm issue very fast.
Many businesses also align their approach with their broader privacy settings and documentation, including a Privacy Policy (particularly if you’re also collecting other sensitive information in your business).
Fairness And A Chance To Respond
If a result comes back non-negative, employees should generally have an opportunity to:
- respond to the result
- explain any legitimate causes (including prescribed medication)
- request confirmatory testing where relevant
From a risk perspective, it’s a mistake to treat a single test result as an automatic termination event without following a fair employment process.
Being Treated Consistently (Not Targeted)
“Random” means random. If managers are selecting who gets tested, you’re exposed to arguments that the testing is targeted, biased, or used as a disciplinary shortcut.
A documented random selection method is one of the simplest protections you can put in place.
Reasonableness In The Circumstances
One of the biggest legal concepts in this area is simply: would a fair and reasonable employer do this in these circumstances?
If your workplace and roles don’t justify random testing, it may be viewed as unnecessarily intrusive.
That’s why many businesses use different testing triggers depending on the situation:
- post-incident testing after a serious incident/near miss
- reasonable cause testing where there are observable signs of impairment
- random testing only for clearly safety-sensitive roles
What Happens If Someone Refuses A Test Or Returns A Non-Negative Result?
This is where policy meets employment law. It’s also where a small business can be most exposed, because decisions are often made quickly and under pressure.
Here’s how to approach it in a way that’s more likely to be defensible.
Refusal To Test
A refusal isn’t automatically “misconduct” in every scenario - it depends on your policy/terms, the role, whether testing was reasonable in the circumstances, and whether the employee was clearly informed of the requirement and process.
Common next steps include:
- temporarily removing the worker from safety-sensitive duties while you assess risk (for example, alternative duties where available)
- meeting with the employee and allowing a support person
- confirming whether they understand the policy and the consequences
- considering whether suspension is justified while you investigate (this is usually a serious step and often needs careful handling and advice)
It’s important not to predetermine the outcome. Even if you suspect drug use, you still need to act fairly and gather information properly.
Non-Negative Result
A non-negative result is not always the end of the road. A fair process often involves:
- temporarily removing the employee from safety-sensitive work while you assess risk (where justified)
- confirming whether the result will be verified with confirmatory testing
- meeting with the employee to hear their explanation
- considering whether this is a misconduct issue, a health issue, or a capability issue
Some businesses also include rehabilitation/support pathways in their policy. That approach can be especially relevant where the employee has a dependency issue and there are safe ways to manage risk (but it must be handled carefully and consistently).
Disciplinary Action Or Termination
If you move toward disciplinary action or dismissal, you must follow a fair process - otherwise you risk a personal grievance (even if you believe the underlying conduct is serious).
That usually means following a clear performance management / disciplinary pathway, like the process covered in Performance Management, and using the right documentation when exiting an employee.
For small businesses, having a prepared suite of documents can make a real difference to consistency and compliance, like an Employee Termination Documents Suite.
Because consequences can vary a lot depending on the facts (role type, risk level, past history, policy wording, and whether the employee has raised any medical issues), it’s worth getting advice before taking decisive action.
Key Takeaways
- Random drug testing can be lawful in New Zealand, but it’s usually only justified where roles are genuinely safety-sensitive and the risk of harm is real.
- Your obligations as an employer typically include complying with the Health and Safety at Work Act 2015, acting fairly under the Employment Relations Act 2000, and handling results carefully under the Privacy Act 2020.
- A clear written policy, a fair consultation process, and consistent application are essential - random testing shouldn’t be introduced informally or used to target individuals.
- Employees have important protections around privacy, confidentiality, and procedural fairness, and building these into your process is key to doing random drug testing at work lawfully.
- Refusals and non-negative results need to be managed case-by-case under a fair process - treating outcomes as “automatic dismissal” can expose your business to disputes.
- If you’re rolling out random testing (or responding to a result), getting tailored legal advice upfront can save you significant time, cost, and stress later.
If you’d like help setting up a compliant drug and alcohol testing policy, updating your employment documents, or managing a difficult testing outcome, you can contact Sprintlaw for a free, no-obligations chat.







