EPPA penalties are not a remote concern for employers that use, request, or rely on polygraph or other lie detector testing in the workplace. The Employee Polygraph Protection Act places strict limits on most private-sector testing, and the civil money exposure is tied not only to whether a test occurred, but also to how the employer requested it, used the result, handled records, and treated the employee or applicant afterward.
For compliance purposes, the safer starting point is restraint. A polygraph process should never be treated as a routine screening shortcut unless a recognized exception applies and the required procedures are satisfied. This article is general compliance information from a polygraph services and workplace integrity perspective, not legal advice. Employers facing a specific investigation should consult qualified counsel before acting.
EPPA Penalties In The Legal Framework
EPPA Penalties Under Section 2005
The statute provides that an employer who violates the Act may be assessed a civil penalty of up to $10,000 for each violation. The same enforcement provision also identifies factors relevant to penalty setting, including the violator’s previous compliance record, the gravity of the violation, and whether the violation was knowing, willful, or repeated, as stated in 29 U.S.C. § 2005.
That statutory figure should not be read in isolation. Federal civil money penalties are subject to inflation adjustment. According to the U.S. Department of Labor, the current maximum civil monetary penalty for many EPPA violations is $26,262 for violations assessed on or after January 16, 2025; before that adjustment, the maximum was $25,597, according to the Department’s EPPA enforcement guidance.
Why The Inflation-Adjusted Amount Matters
The difference between the original statutory amount and the current adjusted maximum can be significant in internal risk assessments. A manager who remembers the $10,000 statutory number may underestimate exposure if a violation is assessed under the current adjustment. The research supplied for this article does not include how often the Department of Labor assesses the maximum amount, so employers should avoid assuming either that the maximum is routine or that it is unlikely. The case facts matter.
Because EPPA penalties may be assessed per violation, a single flawed policy can create repeated risk if it is applied to multiple applicants or employees. A request made during hiring, an inquiry about test results, a disciplinary decision based on refusal, or an improper disclosure could each create a separate compliance issue depending on the facts.
Conduct That Can Trigger Civil Money Exposure
Testing Requests And Result Use
The Act restricts employers from requiring, requesting, suggesting, or causing an employee or applicant to take a lie detector test except under limited exceptions. It also restricts using, accepting, referring to, or inquiring about lie detector test results outside authorized circumstances. Those restrictions matter because a violation can occur before any instrument is attached to a person. An unlawful request or suggestion may be enough to create risk.
Employers also face risk if they discriminate, discipline, discharge, or otherwise take adverse action because a person refuses testing or because of test results. In practical terms, the decision record must show that any employment action rests on lawful, independently supportable grounds. A polygraph result should never be treated as a stand-alone verdict on misconduct, credibility, or fitness for employment.
Disclosure, Records, And Investigation Interference
The research identifies several additional violation categories: improper disclosure of information from polygraph tests, failure to keep required records, and interference with official investigations under the Act. These are administrative and process risks, but they can be just as consequential as an improper test request.
For example, a workplace investigation may involve sensitive allegations, financial loss, or access to restricted areas. Even where a permitted exception may apply, the employer still needs a controlled process for notices, examiner qualifications, written materials, result handling, and record retention. For a related discussion of employee protections, see this explanation of EPPA employee rights.
Exceptions Do Not Remove Procedure Risk
Narrow Exceptions Require Careful Fit
The research notes that EPPA contains narrow exemptions, including certain applicants in security firms and testing connected to reasonable suspicion after an economic loss. Those categories should not be expanded casually. The employer must be able to connect the proposed test to the specific exception and must satisfy the conditions attached to it.
Where a permitted workplace polygraph examination is considered, the procedure may require detailed pre-test, test, and post-test standards. The research also identifies examiner licensing or bonding requirements and restrictions on disclosing test results. If those requirements are not met, an employer may lose the benefit of the exception and face the same civil money exposure as if no exception applied.
Notices And Workplace Communication
Employers must also provide notices summarizing EPPA protections, such as through workplace posting, employee handbooks, or bulletin boards, according to the research supplied. This is a basic compliance control, but it is often overlooked because it does not feel connected to an investigation. From a risk perspective, notice obligations help show that employees were informed of their rights before a disputed event arose.
Clear communication should be factual and limited. Employees should be told what policy applies, who is responsible for compliance review, what rights they have, and where questions can be raised. For employers looking to build comprehensive communication strategies, a related site within the network, Talk and Play, offers insights into broader communication themes, without serving as a direct EPPA authority.
Penalty Amounts Depend On Case Facts
Severity, History, And State Of Mind
The Department of Labor considers the employer’s prior compliance record, the seriousness of the violation, and whether the conduct was knowing, willful, or repeated. That means two employers can face different outcomes for conduct that appears similar on the surface. A first-time administrative error may be viewed differently from a repeated policy that pressures applicants into testing.
This is why internal documentation matters. If an employer considered an exception, obtained legal review, used a qualified examiner, provided required notices, limited questions, safeguarded results, and avoided adverse action based solely on refusal or outcome, those records may be relevant to the factual assessment. Documentation does not make an unlawful practice lawful, but it can show how decisions were made.
| Risk Area | Employer Question | Practical Control |
|---|---|---|
| Requesting a test | Is an EPPA exception actually available? | Require compliance review before any request. |
| Using results | Is the result being treated as determinative? | Require independent evidence before action. |
| Disclosure | Who can see test information? | Limit access to authorized personnel only. |
| Records | Are required materials retained? | Use a defined retention checklist. |
Managing EPPA Penalties Before Any Workplace Test
Build A Decision Gate Before Testing
Employers reduce risk most effectively before a test is discussed with an employee or applicant. Once a supervisor suggests testing, a dispute may already exist. A decision gate should require review by human resources, legal counsel where appropriate, and a qualified polygraph provider before any communication reaches the individual.
- Confirm whether the employer is covered by EPPA and whether any exception may apply.
- Document the factual basis for considering a test, including any economic loss or security-related reason identified in the research.
- Confirm examiner licensing or bonding requirements before scheduling.
- Prepare required notices and written materials before the pre-test phase.
- Restrict access to results and related records from the start.
- Separate employment decisions from unsupported assumptions about truthfulness.
EPPA penalties should be treated as one part of a larger governance issue. The same controls that reduce civil money exposure also support workplace trust: transparency, limited use, careful documentation, and respect for employee rights. A polygraph service provider can help with examination protocol, but the employer remains responsible for the employment decision and the compliance framework around it.
Civil Money Penalties For EPPA Violations
Civil money penalties for EPPA violations are best understood as a warning against casual use of workplace lie detector testing. The current adjusted maximum of $26,262 for many violations assessed on or after January 16, 2025 gives employers a clear reason to slow down, verify the legal basis, and document every step before proceeding.
EPPA penalties are not only about the final dollar amount. They reflect whether the employer respected statutory limits, used exceptions narrowly, protected test information, retained required records, and avoided retaliation or discrimination tied to refusal or results. In workplace integrity work, the strongest position is not aggressive testing; it is a disciplined process that recognizes what a polygraph can and cannot responsibly do.