Drug and alcohol testing in the workplace can be a sensitive topic. You want to keep your team safe, protect your customers, and meet your health and safety obligations - but you also need to respect people’s privacy and handle testing fairly.
That’s where a drug test consent form comes in. Used properly, it helps you show that testing is being done transparently, that the worker understands what’s happening, and that you’re collecting (and using) information in a legally careful way.
This guide is updated to reflect current expectations and good practice in New Zealand workplaces, including the ongoing focus on privacy and clear, documented processes.
A drug test consent form is a document an employee (or job applicant, contractor, or worker) signs to confirm they understand and agree to a drug and/or alcohol test.
In practical terms, it’s evidence that:
- the person has been told a test is being requested;
- they understand what the test involves (for example, urine, saliva, breath, or blood testing);
- they understand what information will be collected and how it may be used; and
- they give consent for the test and the handling of their results.
Consent forms are common where an organisation has a drug and alcohol policy, especially in higher-risk industries like construction, manufacturing, transport, logistics, and healthcare - but they can also be relevant in office-based roles if there is a genuine safety basis for testing.
Not quite. A policy sets out the rules and process. A consent form is used at the point of testing to confirm the person understands what is happening and agrees to it in that instance.
Most businesses should treat the consent form as one piece of a bigger compliance puzzle, alongside:
- a clear workplace drug and alcohol policy;
- well-drafted employment documents (often supported by an Employment Contract); and
- a privacy framework for handling test results and related health information.
Do You Need Consent For Workplace Drug Testing In New Zealand?
In New Zealand, drug and alcohol testing intersects with both workplace law and privacy law. Generally, you should not approach testing as “we can test anyone at any time, for any reason”. Instead, you want a process that is justified, proportionate, and clearly communicated.
Consent matters because drug testing involves:
- collecting personal information (and often sensitive personal information);
- potentially collecting biological samples; and
- making decisions that can affect a person’s employment (like disciplinary action or dismissal).
Even where your organisation has strong health and safety reasons to request testing, you still want to show the worker was informed and that you handled the process fairly.
How Does The Privacy Act 2020 Fit In?
Drug test results are typically treated as sensitive personal information (in many cases, health information). Under the Privacy Act 2020, you should only collect information when:
- you have a clear purpose connected to your functions or activities (for employers, often workplace safety and fitness for work);
- you collect no more than you need for that purpose;
- you store it securely and limit access; and
- you don’t keep it longer than necessary.
This is why many businesses align their testing processes with their broader privacy documents and internal procedures. For example, if you collect and store test results, it’s usually sensible to have a Privacy Policy and internal rules about who can access those results and when they’re deleted.
It’s risky to treat consent as meaningful if a person feels they have no choice. In an employment context, consent can be complicated because of the power imbalance between employer and employee.
Instead of relying on the form as your only legal justification, your best approach is to:
- make sure your testing is genuinely necessary (for example, due to safety risks);
- have a clear policy and employment terms supporting it; and
- run a fair process that gives the employee a proper opportunity to understand what is being requested and why.
If you want to be protected from day one, the goal is to make your process fair enough that if you ever need to justify your decisions, you can point to consistent policies, documented steps, and reasonable decision-making - not just a signature on a form.
There’s no single “perfect” consent form for every workplace. What you need depends on your industry, your risk profile, and how you run testing (random, reasonable cause, post-incident, pre-employment, etc.).
That said, a well-drafted drug test consent form in NZ commonly includes the following.
1. Who Is Being Tested And Why
The form should identify:
- the worker’s name and role;
- the date and time of the request;
- the reason for the test (for example, pre-employment, post-incident, reasonable cause, or as part of a random programme in a safety-sensitive workplace); and
- the policy or employment term authorising the request.
This helps show you weren’t acting arbitrarily, and it can be important if the decision is later challenged.
2. What Type Of Test Will Be Conducted
You’ll want to clearly state:
- what sample is being collected (saliva, urine, breath, etc.);
- who will conduct the test (for example, an external testing provider);
- where the test will occur; and
- any steps around chain of custody and sample handling (if relevant).
Being specific reduces confusion and helps the worker understand what they’re agreeing to.
This is the “privacy heart” of the consent form. It should explain, in plain English:
- what results may be provided to you (for example, negative/positive/non-negative, or confirmed laboratory results);
- who inside the business can access results (for example, HR, the managing director, or a nominated safety officer);
- the purpose of collecting the results (usually fitness for work and health and safety); and
- how long you will keep the results and where they’ll be stored.
If your organisation uses third-party providers (testing companies, HR platforms, cloud storage), it’s also smart to think about how data flows and whether you need extra privacy wording.
4. What Happens If The Person Refuses The Test
This is one of the most important (and most delicate) parts.
Your form (and policy) should explain what refusal might mean in your workplace. In many businesses, refusal may be treated seriously - but you still need to follow a fair process and consider the circumstances.
For example, a refusal might lead to:
- being stood down from safety-sensitive duties while you assess fitness for work;
- a meeting to discuss the refusal and next steps; and/or
- a disciplinary process, depending on the policy and the circumstances.
Be careful about “automatic” outcomes (like automatic dismissal) without process. Employment law in NZ places a strong emphasis on procedural fairness.
5. The Worker’s Acknowledgements And Signature
Most consent forms include confirmations that the worker:
- has had the testing process explained;
- has had the opportunity to ask questions;
- consents to the test and the collection of results; and
- understands the workplace policy and potential consequences.
It’s also common to include a space for the employer representative (or test provider) to sign, confirming the request and explanation were provided.
Even the best form won’t protect you if the process around it is messy. If you want testing to be legally defensible, it needs to be implemented consistently and fairly.
Step 1: Make Sure You Have A Clear Policy (And Communicate It)
Your drug and alcohol policy should explain:
- when testing may occur (pre-employment, reasonable cause, post-incident, random, return-to-work, etc.);
- who is covered (employees, contractors, labour hire workers, volunteers);
- how testing is conducted and by whom;
- what the outcomes mean (negative, non-negative, confirmed positive);
- how results are handled as personal information; and
- what support is available (for example, EAP, rehab pathways, or return-to-work plans where appropriate).
For many employers, it’s also helpful to align this with a broader employee framework such as a Workplace Policy suite, so expectations are consistent across safety, behaviour, investigations, and disciplinary action.
Step 2: Only Test Where There’s A Proper Basis
Testing should not be used as a substitute for performance management or as a reaction to a personality clash. You want to be able to explain the legitimate reason behind the test request.
Common justifications include:
- Safety-sensitive work: where impairment could cause serious harm (for example, operating machinery, driving, working at height).
- Post-incident testing: after an accident or near-miss where impairment could be relevant.
- Reasonable cause testing: where there are observable signs (for example, smell of alcohol, slurred speech, unsafe behaviour) and you document the basis for suspicion.
- Pre-employment testing: where the role genuinely warrants it and candidates are told early in the recruitment process.
This is also where your health and safety obligations come in. Under the Health and Safety at Work Act 2015, you must take reasonably practicable steps to ensure worker and public safety. For many businesses, a carefully designed drug and alcohol framework is part of that duty.
Drug test results can be highly sensitive and can seriously affect someone’s reputation and livelihood.
Good practice includes:
- limiting who receives results (need-to-know access only);
- keeping results stored securely (and not in shared inboxes or open drives);
- not discussing results casually with managers or coworkers; and
- having a clear retention/deletion process.
If you’re collecting this kind of information, your privacy compliance needs to be real - not just a document on a website.
Step 4: If There’s A Positive Result, Follow A Fair Employment Process
This is where many businesses get into trouble: not because they tested, but because they rushed the outcome.
A “non-negative” or initial positive often isn’t the end of the story. Depending on your process, it may need confirmatory testing and a chance for the worker to respond, including whether:
- there’s an explanation (for example, prescribed medication);
- there were issues with the testing process; and
- there are medical or dependency factors that should be addressed carefully.
If you’re moving into disciplinary territory, you’ll usually want to slow down and ensure your steps align with employment law expectations (including notice of allegations, a chance to respond, consideration of alternatives, and a reasoned decision).
It’s often worth getting advice early if you’re unsure - especially where you’re considering termination or stand-down decisions.
Consent forms are helpful, but they’re not a magic shield. Here are some common traps we see businesses fall into.
Using A Generic Template Without A Matching Policy
If your consent form says one thing and your policy says another (or you don’t have a policy at all), it can quickly look inconsistent and unfair.
Templates also commonly miss key details like how information will be stored, who will see it, and what the process is for confirmatory testing.
Testing Without A Clear Reason
“We just want to be sure” is rarely a good enough explanation on its own, especially in low-risk roles.
Testing should be tied back to real business needs - most often health and safety - and applied consistently. If you only test certain employees (or only test after complaints), you may create discrimination or fairness risks.
Treating Refusal As Automatic Misconduct
A refusal can be serious, but you still need to understand why the person refused and follow a fair process. Sometimes refusals happen because the worker is confused, embarrassed, or concerned about privacy.
Document what was explained, allow questions, and don’t skip procedural fairness.
Not Thinking About Contractors And Labour Hire Workers
If you use contractors, the legal relationship is different. You may need to ensure your contractor terms allow for testing and site compliance requirements.
In some cases, you might also need a tailored Contractor Agreement that covers site rules, health and safety expectations, and what happens if the contractor fails a test or refuses one.
Keeping Results Too Long (Or Sharing Them Too Widely)
Storing test results indefinitely “just in case” is risky from a privacy perspective. The longer you keep sensitive data, the greater the impact if there’s a privacy breach - and the harder it is to justify the retention as necessary.
Likewise, gossip and oversharing can expose your business to privacy complaints and workplace conflict.
Key Takeaways
- A drug test consent form is a written record that a worker understands and agrees to drug and/or alcohol testing, including how results will be collected and used.
- In New Zealand, workplace drug testing needs to be approached carefully because it involves privacy rights and sensitive personal information, often governed by the Privacy Act 2020.
- A consent form works best when it sits within a clear drug and alcohol policy and properly drafted employment documents, rather than being used as a standalone “permission slip”.
- A strong consent form typically covers the reason for the test, the type of test, how results will be handled, who will access the information, and what may happen if the person refuses.
- Even where testing is justified (for example, in safety-sensitive roles), employers should apply testing consistently and follow a fair process - especially if the result may lead to disciplinary action.
- Common mistakes include using generic templates, testing without a clear basis, oversharing results, and failing to align contractor arrangements with workplace safety requirements.
If you’d like help putting the right testing documents and processes in place - including a drug test consent form that matches your workplace and your risk profile - you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.
