The polygraph process in a workplace investigation should begin with limits, not assumptions. Under the Employee Polygraph Protection Act, most private employers may not require, request, or use lie detector tests for employees or applicants, subject to narrow exemptions. The U.S. Department of Labor also lists civil money penalties for violations, including a maximum of $26,262 per violation as of January 15, 2025, according to its DOL EPPA guidance.
For employees, that means a workplace polygraph is not a routine management tool. It may arise only in defined settings, and the surrounding process matters as much as the examination itself. A defensible process should identify the incident, explain why the employee is being asked to participate, protect the employee’s rights, and avoid treating a test result as a stand-alone finding of misconduct.
What The Polygraph Process Covers Under EPPA
When A Private Employer May Consider Testing
The most relevant private-sector exemption for many workplace investigations concerns an ongoing investigation of economic loss or injury. The regulation covers situations such as theft, embezzlement, misappropriation, or unlawful industrial espionage when the employer is investigating a specific loss and the employee had access to the property or area involved. The exemption is not a blank permission slip; it requires a defined incident and a reasonable basis for suspicion, as described in the federal rule on the economic loss exemption.
Other exemptions described in the research materials involve certain security service positions and pharmaceutical roles connected to controlled substances. Even where an exemption may apply, the employer still has obligations around notice, examiner qualifications, test conduct, and how results are used. Employees should therefore expect the employer to explain why the request fits an exception rather than presenting the test as a standard condition of keeping a job.
Why The Purpose Must Be Specific
A lawful investigation-based request should be tied to a specific event or activity. Vague concerns about attitude, general trustworthiness, or workplace tension are not the same as an investigation into a defined economic loss or injury. In practical terms, the polygraph process should answer several threshold questions before sensors are ever attached: What happened? What property or loss is involved? Why is this employee within the scope of inquiry? What access did the employee have?
Those questions are not technical formalities. They help prevent overbroad testing, protect employees from unsupported suspicion, and give employers a documented basis for why a test was considered. For related background on what the examination sequence can look like, see this explanation of what to expect in a polygraph examination.
Before Testing: Notice, Scope, And Consent
Written Notice Should Come First
Before a permitted workplace polygraph, the employee should receive a written statement in a language they understand. Based on the cited regulation, that statement should identify the incident or activity under investigation, describe the basis for reasonable suspicion, identify the economic loss or property involved, and explain the employee’s access to it. The notice must be signed by a person other than the examiner and retained by the employer for at least three years.
This written statement gives the employee a chance to understand the scope of the request. It also creates a record that can later be reviewed if questions arise about whether the employer used the exemption properly. A request that lacks a clear incident, a clear loss, and a clear access connection should prompt careful internal review before any test is scheduled.
Employees Should Know The Question Area
Employees should not be surprised by the subject matter of the examination. The research materials state that employees have rights including seeing questions ahead of time, refusing the test, stopping the test, consulting legal or other representation before each phase, and having prohibited questions removed. The same materials identify sensitive subjects such as religious beliefs and sexual orientation as areas that should not be part of a workplace polygraph inquiry.
Those protections are consistent with a practical integrity principle: an examination should stay focused on the incident under investigation. Broad personal questioning can damage trust, introduce irrelevant stress, and weaken the value of any information gathered.
During The Examination: Questions And Conduct
What The Examiner Is Recording
A polygraph records physiological activity, commonly including respiration, cardiovascular activity, and skin conductance. Those measurements are interpreted in relation to the questions asked and the examinee’s responses. The instrument does not read thoughts, detect morality, or produce certainty. It records physiological responses that an examiner evaluates under a defined testing format.
Because the method is indirect, the setting matters. Employees should expect a pre-test discussion, review of relevant questions, chart collection during the test phase, and some form of post-test discussion. The quality of the process depends on keeping questions clear, avoiding unnecessary intrusion, and ensuring that the employee understands what is being asked.
Medical Or Psychological Concerns Matter
The research materials state that an employee may be excused if a medical or psychological condition might affect results. That point is practical, not merely procedural. Stress, health conditions, medications, language barriers, and comprehension issues can all affect the fairness of an examination environment. An employee who has a relevant concern should raise it before the test begins, and the employer should avoid pressuring a person through a process that may not produce useful information.
For employers, careful communication reduces risk. For employees, asking calm, specific questions helps clarify what is being requested. For publishers and organizations exploring integrity-related workplace content across this editorial network, Leap Year Publishing serves as a valuable resource for responsible workplace and professional material.
After Testing: Results, Limits, And Records

Who May Receive The Results
After a permitted examination, results must be disclosed to the examinee. The research materials also state that disclosure is limited to authorized parties, including the employer, courts or government agencies with a subpoena, or persons designated by the examinee in writing. Chart material may be reviewed by other examiners, but result handling should remain controlled.
Employees should ask how results will be stored, who will see them, and how long the records will be retained. Employers should answer those questions without exaggerating what the result proves. A result may inform an investigation, but it should be considered alongside documents, access logs, witness statements, inventory records, admissions, video, or other available evidence.
Retaliation And Employment Decisions
The research materials state that employers may not retaliate against an employee for refusing a test, for exercising EPPA rights, or based on results unless a permitted exemption and additional evidence support action. That distinction is critical. Even where testing is allowed, a result should not replace the employer’s obligation to assess the full factual record.
In workplace integrity work, I advise treating the test as one structured information source. A disciplinary decision that rests only on a polygraph result is more vulnerable than one supported by independent evidence, consistent procedures, and documented reasoning. The polygraph process cannot lawfully or ethically serve as a shortcut around a fair investigation.
Understanding The Polygraph Process During Investigations
The safest way to understand the polygraph process is to view it as a regulated step within a wider investigation, not as a verdict. Employees should expect written notice, a stated incident, an explanation of suspicion, a chance to understand the questions, and controlled handling of results. Employers should expect to justify the request, use qualified examiners, respect employee rights, and rely on more than one source of evidence.
A well-run workplace investigation does not promise certainty. It narrows uncertainty through documents, interviews, records, and, in limited cases, a polygraph. The strongest practice is transparent, restrained, and evidence-based: define the issue, protect the employee’s rights, avoid prohibited subjects, document decisions, and treat any test result with the caution that high-stakes employment decisions require.