Electronic Signatures, Forms and Storage for Drug and Alcohol Testing Records, 47951-47956 [2022-16862]
Download as PDF
Federal Register / Vol. 87, No. 150 / Friday, August 5, 2022 / Proposed Rules
the Port Sector Ohio Valley (COTP) in
the enforcement of the safety zone.
(c) Regulations. (1) Under the general
safety zone regulations in subpart C of
this part, you may not enter the safety
zone described in paragraph (a) of this
section unless authorized by the COTP
or the COTP’s designated representative.
(2) To seek permission to enter,
contact the COTP or the COTP’s
representative by VHF–FM radio
channel 16 or phone at 1–800–253–
7465. Those in the safety zone must
comply with all lawful orders or
directions given to them by the COTP or
the COTP’s designated representative.
(d) Enforcement periods. This rule
will be enforced from 9 a.m. until 9:00
p.m. on September 23, 2022 and
September 24, 2022.
Dated: August 02, 2022.
H.R. Mattern,
Captain, U.S. Coast Guard, Captain of the
Port Sector Ohio Valley.
[FR Doc. 2022–16861 Filed 8–4–22; 8:45 am]
BILLING CODE 9110–04–P
DEPARTMENT OF TRANSPORTATION
Office of the Secretary
49 CFR Part 40
[Docket DOT–OST–2022–0027]
RIN 2105–AF01
Electronic Signatures, Forms and
Storage for Drug and Alcohol Testing
Records
Office of the Secretary,
Department of Transportation (DOT).
ACTION: Advance Notice of Proposed
Rulemaking (ANPRM); request for
public comments.
AGENCY:
The Department of
Transportation (DOT) requests public
comment on how its regulations for
conducting workplace drug and alcohol
testing for the federally regulated
transportation industry could be
amended to allow electronic signatures
on documents required to be created
and utilized under the regulations, to be
able to use electronic versions of forms,
and to electronically store forms and
data. The regulatory changes would
apply to DOT-regulated employers and
their contractors (‘‘service agents’’) who
administer their DOT-regulated drug
and alcohol testing programs. Currently,
employers and their service agents must
use, sign and store paper documents
exclusively, unless the employer is
utilizing a laboratory’s electronic
Federal Drug Testing Custody and
Control Form (electronic CCF) system
lotter on DSK11XQN23PROD with PROPOSALS1
SUMMARY:
VerDate Sep<11>2014
16:47 Aug 04, 2022
Jkt 256001
that has been approved by the
Department of Health and Human
Services (HHS). DOT is required by
statute to amend its regulations to
authorize, to the extent practicable, the
use of electronic signatures or digital
signatures executed to electronic forms
instead of traditional handwritten
signatures executed on paper forms.
This rulemaking also responds to an
April 2, 2020, petition for rulemaking
from DISA Global Solutions, Inc.
(DISA), requesting that part 40 be
amended to allow the use of an
electronic version of the alcohol testing
form (ATF) for DOT-authorized alcohol
testing. The information received in
response to this ANPRM will assist DOT
in the development of proposed
regulatory amendments intended to
provide additional flexibility and
reduced costs for the industry while
maintaining the integrity and
confidentiality requirements of the drug
and alcohol testing regulations.
DATES: Comments on this notice must be
received on or before October 4, 2022.
ADDRESSES: You may submit comments
identified by Docket Number DOT–
OST–2022–0027 using any of the
following methods:
• Federal eRulemaking Portal: Go to
https://www.regulations.gov/docket/
DOT-OST-2022-0027/document. Follow
the online instructions for submitting
comments.
• Mail: Docket Management Facility,
U.S. Department of Transportation, 1200
New Jersey Avenue SE, West Building,
Ground Floor, Room W12–140,
Washington, DC 20590–0001.
• Hand Delivery or Courier: West
Building, Ground Floor, Room W12–
140, 1200 New Jersey Avenue SE,
Washington, DC, between 9 a.m. and 5
p.m. ET, Monday through Friday, except
Federal holidays. To be sure someone is
there to help you, please call (202) 366–
9317 or (202) 366–9826 before visiting
Dockets Operations.
• Fax: 202–493–2251.
To avoid duplication, please use only
one of these methods. See the ‘‘Public
Participation and Request for
Comments’’ portion of the
SUPPLEMENTARY INFORMATION section for
instructions on submitting comments,
including collection of information
comments for the Office of Information
and Regulatory Affairs, Office of
Management and Budget (OMB).
FOR FURTHER INFORMATION CONTACT:
Mike Huntley, Office of Drug and
Alcohol Policy and Compliance, 1200
New Jersey Avenue SE, Washington, DC
20590; telephone number 202–366–
3784; ODAPCwebmail@dot.gov. If you
have questions on viewing or submitting
PO 00000
Frm 00005
Fmt 4702
Sfmt 4702
47951
material to the docket, contact Docket
Services, telephone (202) 366–9826.
SUPPLEMENTARY INFORMATION: This
ANPRM is organized as follows:
I. Public Participation and Request for
Comments
A. Submitting Comments
B. Viewing Comments and Documents
C. Privacy Act
II. Legal Basis for the Rulemaking
III. Purpose of Rulemaking
IV. Adoption of an Electronic CCF
V. General Comments and Questions
VI. Specific Sections of Part 40 that would be
Affected
A. Employee Drug and Alcohol Testing
Record
B. Medical Review Officer (MRO) reporting
of verified results
C. Substance Abuse Professional (SAP)
reports
D. Electronic Alcohol Testing Form
(electronic ATF)
I. Public Participation and Request for
Comments
A. Submitting Comments
If you submit a comment, please
include the docket number for this
ANPRM (Docket No. DOT–OST–2022–
0027), indicate the specific section of
this document to which each comment
applies, and provide a reason for each
suggestion or recommendation. You
may submit your comments and
material online or by fax, mail, or hand
delivery, but please use only one of
these means. OST recommends that you
include your name and a mailing
address, an email address, or a phone
number in a cover letter or an email so
that OST can contact you if there are
questions regarding your submission.
To submit your comment online, go to
https://www.regulations.gov/docket/
DOT-OST-2022-0027/document, click
on this ANPRM, click ‘‘Comment,’’ and
type your comment into the text box on
the following screen.
If you submit your comments by mail
or hand delivery, submit them in an
unbound format, no larger than 81⁄2 by
11 inches, suitable for copying and
electronic filing. If you submit
comments by mail and would like to
know that they reached the facility,
please enclose a stamped, self-addressed
postcard or envelope.
OST will consider all comments and
material received during the comment
period and may initiate a proposed rule
based on the comments received.
B. Viewing Comments and Documents
To view comments, as well as any
documents mentioned in this preamble
as being available in the docket, go to
https://www.regulations.gov. Insert the
docket number, DOT–OST–2022–0027,
in the keyword box, and click ‘‘Search.’’
E:\FR\FM\05AUP1.SGM
05AUP1
47952
Federal Register / Vol. 87, No. 150 / Friday, August 5, 2022 / Proposed Rules
Next, click the ‘‘Open Docket Folder’’
button and choose the document to
review. If you do not have access to the
internet, you may view the docket
online by visiting the Docket
Management Facility in Room W12–140
on the ground floor of the DOT West
Building, 1200 New Jersey Avenue SE,
Washington, DC 20590–0001, between 9
a.m. and 5 p.m. ET, Monday through
Friday, except Federal holidays. To be
sure someone is there to help you,
please call (202) 366–9317 or (202) 366–
9826 before visiting the Docket
Management Facility.
C. Privacy Act
In accordance with 5 U.S.C. 553(c),
DOT solicits comments from the public
to better inform its rulemaking process.
DOT posts these comments, without
edit, including any personal information
the commenter provides, to
www.regulations.gov, as described in
the system of records notice (DOT/ALL–
14 FDMS), which can be reviewed at
www.transportation.gov/privacy.
lotter on DSK11XQN23PROD with PROPOSALS1
II. Legal Basis for the Rulemaking
This rulemaking is promulgated
under the authority enacted in the
Omnibus Transportation Employee
Testing Act (OTETA) of 1991 (Pub. L.
102–143, tit. V, 105 Stat. 952) and
codified at 49 U.S.C. 45102 (aviation
industry testing), 49 U.S.C. 20140 (rail),
49 U.S.C. 31306 (motor carrier), and 49
U.S.C. 5331 (public transportation).
The Secretary of Transportation is
required by law to ‘‘issue a final rule
revising part 40 of title 49, Code of
Federal Regulations, to authorize, to the
extent practicable, the use of electronic
signatures or digital signatures executed
to electronic forms instead of traditional
handwritten signatures executed on
paper forms.’’ (49 U.S.C. 322 note).1 The
deadline for this action is not later than
18 months after HHS establishes a
deadline for a certified laboratory to
request approval for fully electronic
CCFs (Id.) On April 7, 2022, HHS set
that deadline as August 31, 2023 (87 FR
20528). The deadline for DOT’s
regulatory amendments would therefore
be February 28, 2025. DOT is issuing
this ANPRM now to facilitate the timely
proposal and adoption of the necessary
amendments to part 40 to meet the
statutory deadline.
There are two additional Federal
statutes relevant to the implementation
of electronic document and signature
requirements.
1 This
provision was enacted as Section 8108 of
the Fighting Opioids in Transportation Act of 2018,
part of the SUPPORT for Patients and Communities
Act, Public Law 115–271.
VerDate Sep<11>2014
16:47 Aug 04, 2022
Jkt 256001
The Government Paperwork
Elimination Act (GPEA), codified at 44
U.S.C. 3504 note,2 was enacted to
improve customer service and
governmental efficiency through the use
of information technology. The GPEA
defines an electronic signature as a
method of signing an electronic
communication that: (a) identifies and
authenticates a particular person as the
source of the electronic communication;
and (b) indicates such person’s approval
of the information contained in the
electronic communication. Id. It also
requires OMB to ensure Federal
agencies provide: (a) for the option of
maintaining, submitting; or disclosing
information electronically, when
practicable; and (b) for the use and
acceptance of electronic signatures
when practicable. The GPEA states that
electronic records and electronic
signatures shall not be denied legal
effect, validity or enforceability merely
because they are in electronic form. Id.
The Electronic Signatures in Global
and National Commerce Act (E–SIGN),
codified at 15 U.S.C. 7001–7031,3 was
designed to promote the use of
electronic contract formation,
signatures, and recordkeeping in private
commerce by establishing legal
equivalence between traditional paperbased methods and electronic methods.
The E–SIGN Act allows the use of
electronic records to satisfy any statute,
regulation, or rule of law requiring that
such information be provided in
writing, if the consumer has
affirmatively consented to such use and
has not withdrawn such consent.
Specifically, the statute establishes the
legal equivalence of the following types
of documents with respect to any
transaction in or affecting interstate or
foreign commerce, whether in
traditional paper or electronic form: (a)
contracts, (b) signatures, and (c) other
records (15 U.S.C. 7001(a)(1)).
In addition to these Federal statutes,
the Uniform Electronic Transactions Act
(UETA) is a uniform state law that was
finalized by the National Conference of
Commissioners on Uniform State Laws
in 1999, and that has been adopted by
48 States, the District of Columbia,
Puerto Rico, and the U.S. Virgin
Islands.4 It provides States a framework
for determining the legality of an
2 Division C, Title XVII (Sec. 1701–1710) of
Public Law 105–277, 112 Stat. 2681–749, enacted
on October 21, 1998.
3 Public Law 106–229, 114 Stat. 464, enacted on
June 30, 2000.
4 Illinois and New York have not adopted the
UTEA, however similar legislation that governs
how electronic transactions are handled have been
enacted in those States.
PO 00000
Frm 00006
Fmt 4702
Sfmt 4702
electronic signature in both commercial
and government transactions.
III. Purpose of Rulemaking
The Department’s drug and alcohol
testing regulations were promulgated at
a time when the ability to sign and
retain official records electronically—
now commonplace in many business
segments—was not available. Over the
course of several years, we have sought
ways to reduce the paper
documentation associated with the drug
and alcohol testing program without
compromising the integrity and
confidentiality requirements of the
program. In 2000, we permitted greater
use of faxed and scanned computer
images for reporting test results. We also
permitted laboratories to send electronic
reports to MROs.
From June of 2002 through March of
2003, the Department’s Office of Drug
and Alcohol Policy and Compliance
(ODAPC) established the Electronic
Transmission and Storage of Drug
Testing Information Federal Advisory
Committee, in accordance with the
Federal Advisory Committee Act
(FACA).5 The purpose of the Committee
was to ‘‘recommend to the Department
the type and level of electronic security
that should be used for the transmission
and storage of drug testing information
generated [under part 40]. . .
Additionally, the Committee may
examine and provide advice to the DOT
related to the format and methodology
used in transmitting this type of
information as well as the levels and
procedures to use in implementing
electronic signature technology within
the context of the drug and alcohol
program.’’ (67 FR 12077; March 18,
2002). The participants included
representatives from the transportation
industries, trade associations, labor
unions, consortia/third party
administrators (C/TPAs), laboratories
certified by the Department of Health
and Human Services, MROs, and private
computer companies. The group held
three open-session public meetings.
Also in 2003, we standardized the
format for employers to report their
Management Information System (MIS)
aggregate drug and alcohol testing data,
as well as the specific data collected.
Before that time, each DOT Agency
required different data in a different
format. When creating a ONE–DOT MIS
Form, we then authorized employers to
submit the form via a web portal.
5 To view the documents associated with the
Electronic Transmission and Storage of Drug
Testing Information Federal Advisory Committee,
go to https://www.regulations.gov/docket/DOTOST-2002-12148.
E:\FR\FM\05AUP1.SGM
05AUP1
lotter on DSK11XQN23PROD with PROPOSALS1
Federal Register / Vol. 87, No. 150 / Friday, August 5, 2022 / Proposed Rules
In 2015, we issued a final rule to
allow employers, collectors,
laboratories, and MROs to use the
electronic version of the Federal Drug
Testing CCF in the DOT-regulated drug
testing program. That final rule also
incorporated into the regulations the
requirement to establish adequate
confidentiality and security measures to
ensure that confidential employee
records are not available to
unauthorized persons. We also included
language regarding protecting the
physical security of records, access
controls, and computer security
measures to safeguard confidential data
in electronic form.
Consistent with the statutory mandate
in 49 U.S.C. 322 note, we are now
considering additional amendments to
part 40 to permit the use of electronic
signatures, forms, and records storage
for drug and alcohol testing records
throughout the regulations (e.g., drug
and alcohol background checks, MRO
reporting of verified results, SAP
reports, electronic ATF), while at the
same time continuing to allow paper, or
hard-copy use with traditional ’’wet
signatures.’’ These amendments would
establish parity between paper and
electronic collection and submission of
information required under our
regulations (and in keeping with
applicable OMB regulations) by
allowing further use of electronic means
and methods to comply with part 40
requirements. We believe that many
employers and their service agents have
already instituted the use of electronic
signatures, forms, and records storage
for the non-DOT regulated testing that
they conduct. DOT supports this
transition to a paperless system and is
committed to ensure that the movement
to a partially, or fully electronic part 40
is done to maximize program
efficiencies and reduce costs, while
maintaining the integrity and
confidentiality requirements of the
program.
Electronic documents will have a high
degree of forensic defensibility as long
as any changes that are made to the
document are in the document’s
electronic footprint, which shows when
changes were made, and who made
them. The use of electronic forms and
signatures in part 40 will help DOTregulated employers and their service
agents improve their workflow
efficiency through faster turnaround
times for required documents. Cost
savings will result through reduced
printing and delivery/shipping costs.
We believe this will also mitigate the
longstanding problems (e.g., delays in
processing times of test results,
cancelling of test results etc.) associated
VerDate Sep<11>2014
16:47 Aug 04, 2022
Jkt 256001
with illegible and lost copies of paper
documents.
IV. Adoption of an Electronic CCF
As stated earlier in this notice, we
have continually sought ways to reduce
the paperwork burden associated with
drug and alcohol testing without
compromising the integrity and
confidentiality requirements of the
program.
Initially, the CCF was only available
for use in paper form. In accordance
with GPEA, and in an effort to reduce
the Paperwork Reduction Act (PRA)
burden, HHS authorized the use of an
electronic CCF for Federal workplace
drug testing programs. As with the
paper CCF, HHS established standards
and oversight procedures to ensure the
authenticity, integrity, and
confidentiality of drug test information
when a Federal electronic CCF is used.
On May 28, 2014, the Office of
Management and Budget (OMB)
approved the use of both a paper form
CCF and an electronic CCF under the
HHS Mandatory Guidelines. To permit
the use of an electronic CCF in the DOT
drug testing program, the DOT’s April
13, 2015, final rule expanded the
definition of the CCF in part 40 to
include the electronic CCF. (80 FR
19551). The final rule did not require
entities to use an electronic CCF—
rather, it authorized employers to utilize
electronic CCFs if the laboratory they
use was approved by HHS for an
electronic CCF. Thus, the ODAPC final
rule presented another means of
compliance for all entities, as permitted
under the HHS mandatory guidelines.
Similarly, we do not envision
publishing a proposed rulemaking to
require the use of electronic means for
signatures, records, and record
retention. Instead, we anticipate
proposing to allow employers to use
electronic means for signatures, records,
record retention, and other purposes
within the DOT drug testing program,
and an employer could choose not to
utilize electronic means in any or all of
the available categories.
Implementation of the electronic CCF
has improved the efficiency and
accuracy of documenting the urine
specimen collection process. The
accuracy and legibility of the
information recorded on an electronic
CCF is improved over that provided on
the paper CCF, as employers are able to
preprint information and the testing
donor is able to verify the personally
identifiable information (PII) within this
clearly printed information. The
timeframes for the verifications and
reporting of results also improved with
the electronic transmission of the
PO 00000
Frm 00007
Fmt 4702
Sfmt 4702
47953
appropriate copies to the parties. Prior
to use of an electronic CCF, the most
common method of transmitting the
Federal CCF was via fax, but some fax
machines were able to generate better
quality faxes than others, and not all
collection facilities had fax machines.
As a result, Federal CCF copies had to
be mailed, increasing the timeframes for
the testing verification and the reporting
of results to employers. The paper-based
process also increased the risk of lost or
illegible forms.
Another advantage of the electronic
CCF is that the amount of space allotted
for the collector’s ‘‘remarks’’ is greatly
increased. The collector can now enter
more descriptive information for the
benefit of the MRO or employer, and to
document any shy bladder collections,
refusals to test, and other relevant
information.
Just as use of the electronic CCF has
improved the efficiency and accuracy of
documenting the urine specimen
collection process, we expect that
allowing the use of electronic
signatures, records, and record retention
throughout the entirety of part 40 will
be a significant improvement. We
expect advances in workflow efficiency,
cost savings, and a reduction in
longstanding problems associated with
drug and alcohol testing program
documentation and recordkeeping, as
noted above.
V. General Comments and Questions
We are initiating this ANPRM to
gather information from DOT-regulated
employers and their service agents
regarding if and how they are already
handling electronic signatures, records
transmission, and records storage in
their non-DOT testing programs. We
request comments and information on
appropriate performance standards, and
on whether particular methods or
performance standards have been
successful or unsuccessful.
Additionally, we request comments and
information on whether to follow
industry standards, NIST standards, or
something else?
In addition, the ANPRM will allow us
to use the information gathered to
subsequently propose a notice of
proposed rulemaking (NPRM) that
considers current industry standards
and practices to the maximum extent
practicable in developing our own
performance standards for electronic
signatures and records. We anticipate
significant cost savings for employers
and their service agents. We do not want
to cause an unreasonable increase in
costs by requiring inefficient or
expensive systems. Beginning this
E:\FR\FM\05AUP1.SGM
05AUP1
lotter on DSK11XQN23PROD with PROPOSALS1
47954
Federal Register / Vol. 87, No. 150 / Friday, August 5, 2022 / Proposed Rules
rulemaking action as an ANPRM will
help us to achieve these goals.
We want to ensure that we put forth
viable minimum standards for the use of
technology, so that the integrity and
confidentiality requirements of the
program can continue to be met. The
importance of ensuring the
confidentiality, integrity, and
availability of the data, and limiting
access to any data transmission, storage,
and retrieval systems, cannot be
overemphasized. Even as we amend part
40 to permit the use of electronic
methods, we will retain the option for
regulated entities to use a paper-based
system. We recognize that many of our
program participants, such as small
transportation employers, may not be
equipped to participate in a fully
electronic system. Therefore, we seek
comment on the potential, advantages,
risks, ramifications, and required
safeguards associated with use of
electronic forms, signatures, and records
in the DOT drug and alcohol testing
program.
Given the above, we request
information regarding the following
general questions:
(1) What are the practical impacts of
authorizing a fully or partially
electronic system?
(2) What are the economic impacts of
authorizing a fully or partially
electronic system?
(3) How would confidentiality and
system security be maintained to
prevent against data breach and data
loss?
(4) How many levels of authentication
should be utilized to ensure the
reliability and security of the signatures
of program participants?
(5) How is the non-repudiation 6 of a
system ensured?
(6) Are there any lessons learned or
shared best practices available related to
paperless non-DOT regulated testing?
(7) Are there any limitations in either
a paperless or electronic environment
that impact program efficiency?
(8) Would moving to a paperless
system involve the creation of more
labels and bar codes and use of
additional packaging, etc., not required
in a paper-based system. If so, are there
any cost and/or efficiency impacts as a
result?
(9) What additional definitions would
need to be added to part 40 to
accommodate any electronic capabilities
or a fully electronic system?
6 In a general information security context, nonrepudiation is assurance that the sender of
information is provided with proof of delivery, and
the recipient is provided with proof of the sender’s
identity, so neither can later deny having processed
the information.
VerDate Sep<11>2014
16:47 Aug 04, 2022
Jkt 256001
(10) What measures need to be
established to ensure that, when
documents are transmitted to multiple
parties, each party is able to properly
access and use the electronic system?
(11) Part 40 requires urine collectors
and breath alcohol technicians (BAT) to
prepare a memorandum for the record
(MFR) when certain problems are
encountered during the conduct of a
drug or alcohol test under part 40. How
would the MFR be created and
transmitted to MROs, laboratories, and
employers electronically?
(12) Part 40 requires communication
between MROs and the employee’s
physician regarding shy bladder
situations, certain safety concerns, and
opioids evaluations. Could these
communications be handled
electronically? If so, how?
(13) Should third parties (i.e., IT and
security consultants, data management
firms, etc.) play a role in maintaining
electronic systems and transmitting data
for employers? If so, to what degree?
(14) If records are kept electronically,
and the business relationship ends, how
would employers ensure that they have
access to their electronic records if
switching recordkeeping services, or if
the service agent maintaining their
electronic records goes out of business?
Relatedly, how can employers ensure
that records are not deleted, potentially
leaving the DOT program participant
without the records they are required to
maintain under part 40?
VI. Specific Sections of Part 40 That
Would Be Affected
A. Employee Drug and Alcohol Testing
Record
DOT regulations at 49 CFR 40.25
establish requirements for employers to
check on the drug and alcohol testing
record of employees who the employer
intends will perform safety-sensitive
duties. This section requires an
employer, after obtaining an employee’s
written consent, to request certain
information regarding the employee’s
drug and alcohol testing history from
DOT-regulated employers that have
employed the employee during any
period during a minimum of the 2 years
before the date of the employee’s
application or transfer. This section also
requires the previous employer to
maintain a written record of the
information released, including the
date, the party to whom it was released,
and a summary of the information
released. Further, the employer
requesting the information required
under this section must maintain a
written, confidential record of the
information obtained.
PO 00000
Frm 00008
Fmt 4702
Sfmt 4702
We note that the Federal Motor
Carrier Safety Administration (FMCSA)
published a final rule on December 5,
2016 (81 FR 87686) to establish
requirements for the Commercial
Driver’s License Drug and Alcohol
Clearinghouse (Clearinghouse), a
database under the Agency’s
administration that contains
information about violations of
FMCSA’s drug and alcohol testing
program for the holders of commercial
driver’s licenses (CDLs).7 This rule was
mandated by 49 U.S.C. 31306a.8 The
Clearinghouse is a secure online
database that gives employers, FMCSA,
State Driver Licensing Agencies, and
State law enforcement personnel realtime information about CDL driver drug
and alcohol program violations, thereby
enhancing safety on our Nation’s
roadways.
Beginning on January 6, 2020,
employers were required to conduct
both electronic queries and traditional
manual inquiries with previous
employers to meet the 3-year timeframe,
required by FMCSA’s drug and alcohol
use testing program, for checking CDL
driver violation histories. Beginning on
January 6, 2023, once 3 years of
violation data are stored in the
Clearinghouse, FMCSA-regulated
employers must conduct a preemployment query of the Clearinghouse
to comply with the requirements in 49
CFR 40.25 and 49 CFR 391.23(e) with
respect to FMCSA-regulated employers.
An FMCSA-regulated employer must
continue to directly request information
from the driver’s previous employers
regulated by a DOT agency other than
FMCSA.
We seek information regarding how
the requirements in § 40.25, along with
record keeping requirements, can be
satisfied for employers who are not
required to enter data into the FMCSA’s
Clearinghouse. If part 40 is amended to
authorize the use of electronic forms,
signatures, and record retention, how
can DOT structure regulatory provisions
to protect an employee’s personal
information and related drug test
information?
B. MRO Reporting of Verified Results
DOT regulations at 49 CFR 40.163
require MROs to report all drug test
results to the employer using either (1)
7 In a final rule dated October 7, 2021, FMCSA
expanded the scope of the State Driver Licensing
Agencies’ Clearinghouse query requirement to also
include drivers that hold Commercial Learner’s
Permits in addition to drivers that hold CDLs (86
FR 55718).
8 This provision was enacted into law in the
Moving Ahead for Progress in the 21st Century Act
(MAP–21), Public Law 112–141, 126 Stat. 405.
E:\FR\FM\05AUP1.SGM
05AUP1
Federal Register / Vol. 87, No. 150 / Friday, August 5, 2022 / Proposed Rules
lotter on DSK11XQN23PROD with PROPOSALS1
a signed or stamped and dated legible
photocopy of Copy 2 of the CCF, or (2)
a written report that must include, at a
minimum, the information listed in
§ 40.163(c)(1)–(9) (which includes much
of the information provided on Copy 2
of the CCF).9 This section also requires
MROs to maintain reports and records
related to negatives and cancelled
results for one year, and records and
reports related to positives and refusals
for five years, unless otherwise specified
by applicable DOT agency regulations.
In addition, § 40.167 requires MROs
or C/TPAs to transmit the MRO’s
report(s) of verified tests to the
designated employer representative
(DER) so that the DER receives the
report within 2 days of verification by
the MRO. The MRO or C/TPA must fax,
courier, mail, or electronically transmit
a legible image or copy of either the
signed or stamped and dated Copy 2 of
the CCF or the written report as required
by § 40.163. In transmitting the test
results, the MRO or the C/TPA and the
employer must ensure the security of
the transmission and limit access to any
transmission, storage, or retrieval
systems.
We seek information regarding how
the requirements in §§ 40.163 and
40.167 can be satisfied if part 40 is
amended to authorize the use of
electronic forms, signatures, and record
retention.
We also seek information on how
MROs, C/TPAs, and employers
currently ensure the security of the
transmission and limit access to any
transmission, storage, or retrieval
systems when transmitting test results.
Would additional requirements be
needed in any amendments to part 40?
We recognize that many occupational
medical practices, hospitals and other
medical groups conduct collections,
perform MRO and C/TPA functions,
along with their medical practices.
However, the DOT drug and alcohol
testing records of donors must not be
combined with systems with patient
medical records because only those
persons with a need to know about the
DOT drug and alcohol testing programs
can have access to the records. Would
additional requirements be needed to
ensure that separate systems are
maintained?
9 As an exception to the reporting requirements
listed, the regulation permits an MRO to report
negative results using an electronic data file
provided that the report includes, at a minimum,
(1) the information specified in § 40.163(c)(1)–(9),
and (2) the MRO’s name, address, and phone
number, the name of any other person reporting the
results, and the date the electronic results report is
released.
VerDate Sep<11>2014
16:47 Aug 04, 2022
Jkt 256001
C. SAP Reports
DOT regulations at 49 CFR 40.311
require SAPs to provide written reports,
directly to a DER, following the SAP’s
(1) initial evaluation that determines
what level of assistance is needed to
address the employee’s drug and/or
alcohol problems, and (2) follow-on
evaluation that determines whether the
employee has or has not demonstrated
successful compliance with the
conditions outlined as a result of the
initial evaluation. This section requires
that these written reports be on the
SAP’s own letterhead (and not the
letterhead of another service agent), be
signed and dated by the SAP, and
contain the information contained in
§ 40.311(c)–(e) as appropriate. SAPs are
required to maintain copies of reports to
employers for 5 years, and must
maintain employee clinical records in
accordance with Federal, state, and
local laws regarding record
maintenance, confidentiality, and
release of information.
We seek information regarding how
the requirements in § 40.311 can be
satisfied if part 40 is amended to
authorize the use of electronic forms,
signatures, and record retention. As
with all other information relating to
drug and alcohol testing and results,
how can the confidentiality of
information be protected? What
provisions are needed to ensure that the
SAP reports are transmitted only to the
DER?
D. Electronic Alcohol Testing Form
(Electronic ATF)
The ATF has been in use in the DOT
alcohol testing program since 1994 (see
59 FR 7349; Feb. 15, 1994). The ATF
must be used for every DOT alcohol test.
DOT regulations at 49 CFR 40.225 set
forth the implementing regulations, and
49 CFR part 40, Appendix G contains a
facsimile (reference copy) of the form.
The ATF is a three-part carbonless
manifold form used by DOT-regulated
employers to document the testing event
when testing employees subject to DOT
alcohol testing. When the employee is
tested, both the employee and the
Screening Test Technician (STT) and/or
a BAT will complete the ATF in various
sections. The BAT/STT documents the
result(s) by either writing in the
screening result or attaching the
screening and/or confirmation result
printed by the EBT onto the ATF, and
then sends Copy 1 to the employer,
provides Copy 2 to the employee, and
retains Copy 3 for their records.
On April 2, 2020, DISA submitted a
petition for rulemaking to DOT
requesting that part 40 be amended to
PO 00000
Frm 00009
Fmt 4702
Sfmt 4702
47955
allow for the use of an electronic
version of the ATF for DOT-mandated
alcohol testing. In its petition, DISA
states that it has worked collaboratively
with software companies and evidential
breath testing device manufacturers over
the past five years in developing and
deploying the use of an electronic
alcohol testing form for documentation
of alcohol testing conducted under
employers’ policy authority. DISA
believes that its benefits are applicable
and appropriate to DOT-mandated
alcohol testing of safety-sensitive
employees. DISA contends that use of
an electronic ATF will result in (1) an
increase in the efficiency, security, and
accuracy in documenting DOT alcohol
tests, (2) a reduction in paperwork, (3)
an improved process for conducting a
DOT alcohol test in conjunction with a
DOT drug test when an electronic CCF
is used for the drug test, (4) a reduction
of errors and omissions in the
completion of the ATF, (5) an
improvement in the efficiency and
efficacy in the transmission and record
retention of alcohol test results, and (6)
a substantial cost savings by eliminating
the requirement for the printing and
distribution of carbonless three-ply
paper ATFs.
We agree that employers and MROs
have seen the benefits of using the
electronic CCF (e.g., legible information
on all copies, reduced collector error,
expedited reporting), and the
corresponding improvements and
efficiencies in the DOT drug testing
program. Given these benefits, along
with the DISA petition for rulemaking
and the statutory mandate, we believe
that it is feasible, and preferable, to
align the DOT drug and alcohol testing
programs by enabling the use of an
electronic ATF. It should be noted that
in requesting comments on the
implementation of an electronic ATF in
the DOT alcohol testing program, we are
not seeking comments on changes to (1)
the existing alcohol testing procedures,
(2) the existing alcohol testing device
specifications, or (3) the content of the
current approved ATF.
Similar to the steps taken in HHS’s
establishment and adoption of the
electronic CCF, we must consider the
necessary components and processes
associated with an electronic ATF,
including the associated procedures and
systems that would need to be
developed and maintained to
appropriately safeguard stored
information. Additionally, and similar
to what was done in establishing the
electronic CCF, we would not
contemplate making use of the
electronic ATF mandatory, nor would
we seek to make any revisions to the
E:\FR\FM\05AUP1.SGM
05AUP1
47956
Federal Register / Vol. 87, No. 150 / Friday, August 5, 2022 / Proposed Rules
lotter on DSK11XQN23PROD with PROPOSALS1
information collected on the existing
alcohol testing form.
In considering the factors involved
with providing for an electronic ATF in
the alcohol testing program regulations,
we seek specific information from
affected entities and other interested
parties about any impact the potential
use of an electronic ATF might have.
Even though use of the electronic ATF
(like the electronic CCF) would be
voluntary, we are interested in
discerning the cost impact and any and
all factors that would need to be
considered to enable use of an
electronic ATF including, but not
limited to: (1) necessary documentation
VerDate Sep<11>2014
16:47 Aug 04, 2022
Jkt 256001
and procedures needed to establish the
electronic ATF; (2) necessary system
components (hardware and software
requirements); (3) compatibility of the
form and associated systems between
alcohol testing program participants
(such as between an STT and a BAT and
employer); (4) training considerations;
(5) system maintenance; (6) system
security (protection of an employee’s
personal information and related test
result); and (7) and archival and audit
trail considerations.
Conclusion
With this ANPRM, the Department
seeks input on the questions set forth
above. We welcome comments on all
PO 00000
Frm 00010
Fmt 4702
Sfmt 9990
aspects of the ANPRM, and all
interested parties are encouraged to
provide their views.
Delegation
This ANPRM is issued through
authority delegated to the General
Counsel through a memorandum that
has been placed in the docket for the
rulemaking action. (See https://
www.regulations.gov/document/DOTOST-2022-0027-0001.)
John E. Putnam,
General Counsel, U.S. Department of
Transportation.
[FR Doc. 2022–16862 Filed 8–4–22; 8:45 am]
BILLING CODE 4910–9X–P
E:\FR\FM\05AUP1.SGM
05AUP1
Agencies
[Federal Register Volume 87, Number 150 (Friday, August 5, 2022)]
[Proposed Rules]
[Pages 47951-47956]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2022-16862]
=======================================================================
-----------------------------------------------------------------------
DEPARTMENT OF TRANSPORTATION
Office of the Secretary
49 CFR Part 40
[Docket DOT-OST-2022-0027]
RIN 2105-AF01
Electronic Signatures, Forms and Storage for Drug and Alcohol
Testing Records
AGENCY: Office of the Secretary, Department of Transportation (DOT).
ACTION: Advance Notice of Proposed Rulemaking (ANPRM); request for
public comments.
-----------------------------------------------------------------------
SUMMARY: The Department of Transportation (DOT) requests public comment
on how its regulations for conducting workplace drug and alcohol
testing for the federally regulated transportation industry could be
amended to allow electronic signatures on documents required to be
created and utilized under the regulations, to be able to use
electronic versions of forms, and to electronically store forms and
data. The regulatory changes would apply to DOT-regulated employers and
their contractors (``service agents'') who administer their DOT-
regulated drug and alcohol testing programs. Currently, employers and
their service agents must use, sign and store paper documents
exclusively, unless the employer is utilizing a laboratory's electronic
Federal Drug Testing Custody and Control Form (electronic CCF) system
that has been approved by the Department of Health and Human Services
(HHS). DOT is required by statute to amend its regulations to
authorize, to the extent practicable, the use of electronic signatures
or digital signatures executed to electronic forms instead of
traditional handwritten signatures executed on paper forms. This
rulemaking also responds to an April 2, 2020, petition for rulemaking
from DISA Global Solutions, Inc. (DISA), requesting that part 40 be
amended to allow the use of an electronic version of the alcohol
testing form (ATF) for DOT-authorized alcohol testing. The information
received in response to this ANPRM will assist DOT in the development
of proposed regulatory amendments intended to provide additional
flexibility and reduced costs for the industry while maintaining the
integrity and confidentiality requirements of the drug and alcohol
testing regulations.
DATES: Comments on this notice must be received on or before October 4,
2022.
ADDRESSES: You may submit comments identified by Docket Number DOT-OST-
2022-0027 using any of the following methods:
Federal eRulemaking Portal: Go to https://www.regulations.gov/docket/DOT-OST-2022-0027/document. Follow the
online instructions for submitting comments.
Mail: Docket Management Facility, U.S. Department of
Transportation, 1200 New Jersey Avenue SE, West Building, Ground Floor,
Room W12-140, Washington, DC 20590-0001.
Hand Delivery or Courier: West Building, Ground Floor,
Room W12-140, 1200 New Jersey Avenue SE, Washington, DC, between 9 a.m.
and 5 p.m. ET, Monday through Friday, except Federal holidays. To be
sure someone is there to help you, please call (202) 366-9317 or (202)
366-9826 before visiting Dockets Operations.
Fax: 202-493-2251.
To avoid duplication, please use only one of these methods. See the
``Public Participation and Request for Comments'' portion of the
SUPPLEMENTARY INFORMATION section for instructions on submitting
comments, including collection of information comments for the Office
of Information and Regulatory Affairs, Office of Management and Budget
(OMB).
FOR FURTHER INFORMATION CONTACT: Mike Huntley, Office of Drug and
Alcohol Policy and Compliance, 1200 New Jersey Avenue SE, Washington,
DC 20590; telephone number 202-366-3784; [email protected]. If you
have questions on viewing or submitting material to the docket, contact
Docket Services, telephone (202) 366-9826.
SUPPLEMENTARY INFORMATION: This ANPRM is organized as follows:
I. Public Participation and Request for Comments
A. Submitting Comments
B. Viewing Comments and Documents
C. Privacy Act
II. Legal Basis for the Rulemaking
III. Purpose of Rulemaking
IV. Adoption of an Electronic CCF
V. General Comments and Questions
VI. Specific Sections of Part 40 that would be Affected
A. Employee Drug and Alcohol Testing Record
B. Medical Review Officer (MRO) reporting of verified results
C. Substance Abuse Professional (SAP) reports
D. Electronic Alcohol Testing Form (electronic ATF)
I. Public Participation and Request for Comments
A. Submitting Comments
If you submit a comment, please include the docket number for this
ANPRM (Docket No. DOT-OST-2022-0027), indicate the specific section of
this document to which each comment applies, and provide a reason for
each suggestion or recommendation. You may submit your comments and
material online or by fax, mail, or hand delivery, but please use only
one of these means. OST recommends that you include your name and a
mailing address, an email address, or a phone number in a cover letter
or an email so that OST can contact you if there are questions
regarding your submission.
To submit your comment online, go to https://www.regulations.gov/docket/DOT-OST-2022-0027/document, click on this ANPRM, click
``Comment,'' and type your comment into the text box on the following
screen.
If you submit your comments by mail or hand delivery, submit them
in an unbound format, no larger than 8\1/2\ by 11 inches, suitable for
copying and electronic filing. If you submit comments by mail and would
like to know that they reached the facility, please enclose a stamped,
self-addressed postcard or envelope.
OST will consider all comments and material received during the
comment period and may initiate a proposed rule based on the comments
received.
B. Viewing Comments and Documents
To view comments, as well as any documents mentioned in this
preamble as being available in the docket, go to https://www.regulations.gov. Insert the docket number, DOT-OST-2022-0027, in
the keyword box, and click ``Search.''
[[Page 47952]]
Next, click the ``Open Docket Folder'' button and choose the document
to review. If you do not have access to the internet, you may view the
docket online by visiting the Docket Management Facility in Room W12-
140 on the ground floor of the DOT West Building, 1200 New Jersey
Avenue SE, Washington, DC 20590-0001, between 9 a.m. and 5 p.m. ET,
Monday through Friday, except Federal holidays. To be sure someone is
there to help you, please call (202) 366-9317 or (202) 366-9826 before
visiting the Docket Management Facility.
C. Privacy Act
In accordance with 5 U.S.C. 553(c), DOT solicits comments from the
public to better inform its rulemaking process. DOT posts these
comments, without edit, including any personal information the
commenter provides, to www.regulations.gov, as described in the system
of records notice (DOT/ALL-14 FDMS), which can be reviewed at
www.transportation.gov/privacy.
II. Legal Basis for the Rulemaking
This rulemaking is promulgated under the authority enacted in the
Omnibus Transportation Employee Testing Act (OTETA) of 1991 (Pub. L.
102-143, tit. V, 105 Stat. 952) and codified at 49 U.S.C. 45102
(aviation industry testing), 49 U.S.C. 20140 (rail), 49 U.S.C. 31306
(motor carrier), and 49 U.S.C. 5331 (public transportation).
The Secretary of Transportation is required by law to ``issue a
final rule revising part 40 of title 49, Code of Federal Regulations,
to authorize, to the extent practicable, the use of electronic
signatures or digital signatures executed to electronic forms instead
of traditional handwritten signatures executed on paper forms.'' (49
U.S.C. 322 note).\1\ The deadline for this action is not later than 18
months after HHS establishes a deadline for a certified laboratory to
request approval for fully electronic CCFs (Id.) On April 7, 2022, HHS
set that deadline as August 31, 2023 (87 FR 20528). The deadline for
DOT's regulatory amendments would therefore be February 28, 2025. DOT
is issuing this ANPRM now to facilitate the timely proposal and
adoption of the necessary amendments to part 40 to meet the statutory
deadline.
---------------------------------------------------------------------------
\1\ This provision was enacted as Section 8108 of the Fighting
Opioids in Transportation Act of 2018, part of the SUPPORT for
Patients and Communities Act, Public Law 115-271.
---------------------------------------------------------------------------
There are two additional Federal statutes relevant to the
implementation of electronic document and signature requirements.
The Government Paperwork Elimination Act (GPEA), codified at 44
U.S.C. 3504 note,\2\ was enacted to improve customer service and
governmental efficiency through the use of information technology. The
GPEA defines an electronic signature as a method of signing an
electronic communication that: (a) identifies and authenticates a
particular person as the source of the electronic communication; and
(b) indicates such person's approval of the information contained in
the electronic communication. Id. It also requires OMB to ensure
Federal agencies provide: (a) for the option of maintaining,
submitting; or disclosing information electronically, when practicable;
and (b) for the use and acceptance of electronic signatures when
practicable. The GPEA states that electronic records and electronic
signatures shall not be denied legal effect, validity or enforceability
merely because they are in electronic form. Id.
---------------------------------------------------------------------------
\2\ Division C, Title XVII (Sec. 1701-1710) of Public Law 105-
277, 112 Stat. 2681-749, enacted on October 21, 1998.
---------------------------------------------------------------------------
The Electronic Signatures in Global and National Commerce Act (E-
SIGN), codified at 15 U.S.C. 7001-7031,\3\ was designed to promote the
use of electronic contract formation, signatures, and recordkeeping in
private commerce by establishing legal equivalence between traditional
paper-based methods and electronic methods. The E-SIGN Act allows the
use of electronic records to satisfy any statute, regulation, or rule
of law requiring that such information be provided in writing, if the
consumer has affirmatively consented to such use and has not withdrawn
such consent. Specifically, the statute establishes the legal
equivalence of the following types of documents with respect to any
transaction in or affecting interstate or foreign commerce, whether in
traditional paper or electronic form: (a) contracts, (b) signatures,
and (c) other records (15 U.S.C. 7001(a)(1)).
---------------------------------------------------------------------------
\3\ Public Law 106-229, 114 Stat. 464, enacted on June 30, 2000.
---------------------------------------------------------------------------
In addition to these Federal statutes, the Uniform Electronic
Transactions Act (UETA) is a uniform state law that was finalized by
the National Conference of Commissioners on Uniform State Laws in 1999,
and that has been adopted by 48 States, the District of Columbia,
Puerto Rico, and the U.S. Virgin Islands.\4\ It provides States a
framework for determining the legality of an electronic signature in
both commercial and government transactions.
---------------------------------------------------------------------------
\4\ Illinois and New York have not adopted the UTEA, however
similar legislation that governs how electronic transactions are
handled have been enacted in those States.
---------------------------------------------------------------------------
III. Purpose of Rulemaking
The Department's drug and alcohol testing regulations were
promulgated at a time when the ability to sign and retain official
records electronically--now commonplace in many business segments--was
not available. Over the course of several years, we have sought ways to
reduce the paper documentation associated with the drug and alcohol
testing program without compromising the integrity and confidentiality
requirements of the program. In 2000, we permitted greater use of faxed
and scanned computer images for reporting test results. We also
permitted laboratories to send electronic reports to MROs.
From June of 2002 through March of 2003, the Department's Office of
Drug and Alcohol Policy and Compliance (ODAPC) established the
Electronic Transmission and Storage of Drug Testing Information Federal
Advisory Committee, in accordance with the Federal Advisory Committee
Act (FACA).\5\ The purpose of the Committee was to ``recommend to the
Department the type and level of electronic security that should be
used for the transmission and storage of drug testing information
generated [under part 40]. . . Additionally, the Committee may examine
and provide advice to the DOT related to the format and methodology
used in transmitting this type of information as well as the levels and
procedures to use in implementing electronic signature technology
within the context of the drug and alcohol program.'' (67 FR 12077;
March 18, 2002). The participants included representatives from the
transportation industries, trade associations, labor unions, consortia/
third party administrators (C/TPAs), laboratories certified by the
Department of Health and Human Services, MROs, and private computer
companies. The group held three open-session public meetings.
---------------------------------------------------------------------------
\5\ To view the documents associated with the Electronic
Transmission and Storage of Drug Testing Information Federal
Advisory Committee, go to https://www.regulations.gov/docket/DOT-OST-2002-12148.
---------------------------------------------------------------------------
Also in 2003, we standardized the format for employers to report
their Management Information System (MIS) aggregate drug and alcohol
testing data, as well as the specific data collected. Before that time,
each DOT Agency required different data in a different format. When
creating a ONE-DOT MIS Form, we then authorized employers to submit the
form via a web portal.
[[Page 47953]]
In 2015, we issued a final rule to allow employers, collectors,
laboratories, and MROs to use the electronic version of the Federal
Drug Testing CCF in the DOT-regulated drug testing program. That final
rule also incorporated into the regulations the requirement to
establish adequate confidentiality and security measures to ensure that
confidential employee records are not available to unauthorized
persons. We also included language regarding protecting the physical
security of records, access controls, and computer security measures to
safeguard confidential data in electronic form.
Consistent with the statutory mandate in 49 U.S.C. 322 note, we are
now considering additional amendments to part 40 to permit the use of
electronic signatures, forms, and records storage for drug and alcohol
testing records throughout the regulations (e.g., drug and alcohol
background checks, MRO reporting of verified results, SAP reports,
electronic ATF), while at the same time continuing to allow paper, or
hard-copy use with traditional ''wet signatures.'' These amendments
would establish parity between paper and electronic collection and
submission of information required under our regulations (and in
keeping with applicable OMB regulations) by allowing further use of
electronic means and methods to comply with part 40 requirements. We
believe that many employers and their service agents have already
instituted the use of electronic signatures, forms, and records storage
for the non-DOT regulated testing that they conduct. DOT supports this
transition to a paperless system and is committed to ensure that the
movement to a partially, or fully electronic part 40 is done to
maximize program efficiencies and reduce costs, while maintaining the
integrity and confidentiality requirements of the program.
Electronic documents will have a high degree of forensic
defensibility as long as any changes that are made to the document are
in the document's electronic footprint, which shows when changes were
made, and who made them. The use of electronic forms and signatures in
part 40 will help DOT-regulated employers and their service agents
improve their workflow efficiency through faster turnaround times for
required documents. Cost savings will result through reduced printing
and delivery/shipping costs. We believe this will also mitigate the
longstanding problems (e.g., delays in processing times of test
results, cancelling of test results etc.) associated with illegible and
lost copies of paper documents.
IV. Adoption of an Electronic CCF
As stated earlier in this notice, we have continually sought ways
to reduce the paperwork burden associated with drug and alcohol testing
without compromising the integrity and confidentiality requirements of
the program.
Initially, the CCF was only available for use in paper form. In
accordance with GPEA, and in an effort to reduce the Paperwork
Reduction Act (PRA) burden, HHS authorized the use of an electronic CCF
for Federal workplace drug testing programs. As with the paper CCF, HHS
established standards and oversight procedures to ensure the
authenticity, integrity, and confidentiality of drug test information
when a Federal electronic CCF is used. On May 28, 2014, the Office of
Management and Budget (OMB) approved the use of both a paper form CCF
and an electronic CCF under the HHS Mandatory Guidelines. To permit the
use of an electronic CCF in the DOT drug testing program, the DOT's
April 13, 2015, final rule expanded the definition of the CCF in part
40 to include the electronic CCF. (80 FR 19551). The final rule did not
require entities to use an electronic CCF--rather, it authorized
employers to utilize electronic CCFs if the laboratory they use was
approved by HHS for an electronic CCF. Thus, the ODAPC final rule
presented another means of compliance for all entities, as permitted
under the HHS mandatory guidelines.
Similarly, we do not envision publishing a proposed rulemaking to
require the use of electronic means for signatures, records, and record
retention. Instead, we anticipate proposing to allow employers to use
electronic means for signatures, records, record retention, and other
purposes within the DOT drug testing program, and an employer could
choose not to utilize electronic means in any or all of the available
categories.
Implementation of the electronic CCF has improved the efficiency
and accuracy of documenting the urine specimen collection process. The
accuracy and legibility of the information recorded on an electronic
CCF is improved over that provided on the paper CCF, as employers are
able to preprint information and the testing donor is able to verify
the personally identifiable information (PII) within this clearly
printed information. The timeframes for the verifications and reporting
of results also improved with the electronic transmission of the
appropriate copies to the parties. Prior to use of an electronic CCF,
the most common method of transmitting the Federal CCF was via fax, but
some fax machines were able to generate better quality faxes than
others, and not all collection facilities had fax machines. As a
result, Federal CCF copies had to be mailed, increasing the timeframes
for the testing verification and the reporting of results to employers.
The paper-based process also increased the risk of lost or illegible
forms.
Another advantage of the electronic CCF is that the amount of space
allotted for the collector's ``remarks'' is greatly increased. The
collector can now enter more descriptive information for the benefit of
the MRO or employer, and to document any shy bladder collections,
refusals to test, and other relevant information.
Just as use of the electronic CCF has improved the efficiency and
accuracy of documenting the urine specimen collection process, we
expect that allowing the use of electronic signatures, records, and
record retention throughout the entirety of part 40 will be a
significant improvement. We expect advances in workflow efficiency,
cost savings, and a reduction in longstanding problems associated with
drug and alcohol testing program documentation and recordkeeping, as
noted above.
V. General Comments and Questions
We are initiating this ANPRM to gather information from DOT-
regulated employers and their service agents regarding if and how they
are already handling electronic signatures, records transmission, and
records storage in their non-DOT testing programs. We request comments
and information on appropriate performance standards, and on whether
particular methods or performance standards have been successful or
unsuccessful. Additionally, we request comments and information on
whether to follow industry standards, NIST standards, or something
else?
In addition, the ANPRM will allow us to use the information
gathered to subsequently propose a notice of proposed rulemaking (NPRM)
that considers current industry standards and practices to the maximum
extent practicable in developing our own performance standards for
electronic signatures and records. We anticipate significant cost
savings for employers and their service agents. We do not want to cause
an unreasonable increase in costs by requiring inefficient or expensive
systems. Beginning this
[[Page 47954]]
rulemaking action as an ANPRM will help us to achieve these goals.
We want to ensure that we put forth viable minimum standards for
the use of technology, so that the integrity and confidentiality
requirements of the program can continue to be met. The importance of
ensuring the confidentiality, integrity, and availability of the data,
and limiting access to any data transmission, storage, and retrieval
systems, cannot be overemphasized. Even as we amend part 40 to permit
the use of electronic methods, we will retain the option for regulated
entities to use a paper-based system. We recognize that many of our
program participants, such as small transportation employers, may not
be equipped to participate in a fully electronic system. Therefore, we
seek comment on the potential, advantages, risks, ramifications, and
required safeguards associated with use of electronic forms,
signatures, and records in the DOT drug and alcohol testing program.
Given the above, we request information regarding the following
general questions:
(1) What are the practical impacts of authorizing a fully or
partially electronic system?
(2) What are the economic impacts of authorizing a fully or
partially electronic system?
(3) How would confidentiality and system security be maintained to
prevent against data breach and data loss?
(4) How many levels of authentication should be utilized to ensure
the reliability and security of the signatures of program participants?
(5) How is the non-repudiation \6\ of a system ensured?
---------------------------------------------------------------------------
\6\ In a general information security context, non-repudiation
is assurance that the sender of information is provided with proof
of delivery, and the recipient is provided with proof of the
sender's identity, so neither can later deny having processed the
information.
---------------------------------------------------------------------------
(6) Are there any lessons learned or shared best practices
available related to paperless non-DOT regulated testing?
(7) Are there any limitations in either a paperless or electronic
environment that impact program efficiency?
(8) Would moving to a paperless system involve the creation of more
labels and bar codes and use of additional packaging, etc., not
required in a paper-based system. If so, are there any cost and/or
efficiency impacts as a result?
(9) What additional definitions would need to be added to part 40
to accommodate any electronic capabilities or a fully electronic
system?
(10) What measures need to be established to ensure that, when
documents are transmitted to multiple parties, each party is able to
properly access and use the electronic system?
(11) Part 40 requires urine collectors and breath alcohol
technicians (BAT) to prepare a memorandum for the record (MFR) when
certain problems are encountered during the conduct of a drug or
alcohol test under part 40. How would the MFR be created and
transmitted to MROs, laboratories, and employers electronically?
(12) Part 40 requires communication between MROs and the employee's
physician regarding shy bladder situations, certain safety concerns,
and opioids evaluations. Could these communications be handled
electronically? If so, how?
(13) Should third parties (i.e., IT and security consultants, data
management firms, etc.) play a role in maintaining electronic systems
and transmitting data for employers? If so, to what degree?
(14) If records are kept electronically, and the business
relationship ends, how would employers ensure that they have access to
their electronic records if switching recordkeeping services, or if the
service agent maintaining their electronic records goes out of
business? Relatedly, how can employers ensure that records are not
deleted, potentially leaving the DOT program participant without the
records they are required to maintain under part 40?
VI. Specific Sections of Part 40 That Would Be Affected
A. Employee Drug and Alcohol Testing Record
DOT regulations at 49 CFR 40.25 establish requirements for
employers to check on the drug and alcohol testing record of employees
who the employer intends will perform safety-sensitive duties. This
section requires an employer, after obtaining an employee's written
consent, to request certain information regarding the employee's drug
and alcohol testing history from DOT-regulated employers that have
employed the employee during any period during a minimum of the 2 years
before the date of the employee's application or transfer. This section
also requires the previous employer to maintain a written record of the
information released, including the date, the party to whom it was
released, and a summary of the information released. Further, the
employer requesting the information required under this section must
maintain a written, confidential record of the information obtained.
We note that the Federal Motor Carrier Safety Administration
(FMCSA) published a final rule on December 5, 2016 (81 FR 87686) to
establish requirements for the Commercial Driver's License Drug and
Alcohol Clearinghouse (Clearinghouse), a database under the Agency's
administration that contains information about violations of FMCSA's
drug and alcohol testing program for the holders of commercial driver's
licenses (CDLs).\7\ This rule was mandated by 49 U.S.C. 31306a.\8\ The
Clearinghouse is a secure online database that gives employers, FMCSA,
State Driver Licensing Agencies, and State law enforcement personnel
real-time information about CDL driver drug and alcohol program
violations, thereby enhancing safety on our Nation's roadways.
---------------------------------------------------------------------------
\7\ In a final rule dated October 7, 2021, FMCSA expanded the
scope of the State Driver Licensing Agencies' Clearinghouse query
requirement to also include drivers that hold Commercial Learner's
Permits in addition to drivers that hold CDLs (86 FR 55718).
\8\ This provision was enacted into law in the Moving Ahead for
Progress in the 21st Century Act (MAP-21), Public Law 112-141, 126
Stat. 405.
---------------------------------------------------------------------------
Beginning on January 6, 2020, employers were required to conduct
both electronic queries and traditional manual inquiries with previous
employers to meet the 3-year timeframe, required by FMCSA's drug and
alcohol use testing program, for checking CDL driver violation
histories. Beginning on January 6, 2023, once 3 years of violation data
are stored in the Clearinghouse, FMCSA-regulated employers must conduct
a pre-employment query of the Clearinghouse to comply with the
requirements in 49 CFR 40.25 and 49 CFR 391.23(e) with respect to
FMCSA-regulated employers. An FMCSA-regulated employer must continue to
directly request information from the driver's previous employers
regulated by a DOT agency other than FMCSA.
We seek information regarding how the requirements in Sec. 40.25,
along with record keeping requirements, can be satisfied for employers
who are not required to enter data into the FMCSA's Clearinghouse. If
part 40 is amended to authorize the use of electronic forms,
signatures, and record retention, how can DOT structure regulatory
provisions to protect an employee's personal information and related
drug test information?
B. MRO Reporting of Verified Results
DOT regulations at 49 CFR 40.163 require MROs to report all drug
test results to the employer using either (1)
[[Page 47955]]
a signed or stamped and dated legible photocopy of Copy 2 of the CCF,
or (2) a written report that must include, at a minimum, the
information listed in Sec. 40.163(c)(1)-(9) (which includes much of
the information provided on Copy 2 of the CCF).\9\ This section also
requires MROs to maintain reports and records related to negatives and
cancelled results for one year, and records and reports related to
positives and refusals for five years, unless otherwise specified by
applicable DOT agency regulations.
---------------------------------------------------------------------------
\9\ As an exception to the reporting requirements listed, the
regulation permits an MRO to report negative results using an
electronic data file provided that the report includes, at a
minimum, (1) the information specified in Sec. 40.163(c)(1)-(9),
and (2) the MRO's name, address, and phone number, the name of any
other person reporting the results, and the date the electronic
results report is released.
---------------------------------------------------------------------------
In addition, Sec. 40.167 requires MROs or C/TPAs to transmit the
MRO's report(s) of verified tests to the designated employer
representative (DER) so that the DER receives the report within 2 days
of verification by the MRO. The MRO or C/TPA must fax, courier, mail,
or electronically transmit a legible image or copy of either the signed
or stamped and dated Copy 2 of the CCF or the written report as
required by Sec. 40.163. In transmitting the test results, the MRO or
the C/TPA and the employer must ensure the security of the transmission
and limit access to any transmission, storage, or retrieval systems.
We seek information regarding how the requirements in Sec. Sec.
40.163 and 40.167 can be satisfied if part 40 is amended to authorize
the use of electronic forms, signatures, and record retention.
We also seek information on how MROs, C/TPAs, and employers
currently ensure the security of the transmission and limit access to
any transmission, storage, or retrieval systems when transmitting test
results. Would additional requirements be needed in any amendments to
part 40?
We recognize that many occupational medical practices, hospitals
and other medical groups conduct collections, perform MRO and C/TPA
functions, along with their medical practices. However, the DOT drug
and alcohol testing records of donors must not be combined with systems
with patient medical records because only those persons with a need to
know about the DOT drug and alcohol testing programs can have access to
the records. Would additional requirements be needed to ensure that
separate systems are maintained?
C. SAP Reports
DOT regulations at 49 CFR 40.311 require SAPs to provide written
reports, directly to a DER, following the SAP's (1) initial evaluation
that determines what level of assistance is needed to address the
employee's drug and/or alcohol problems, and (2) follow-on evaluation
that determines whether the employee has or has not demonstrated
successful compliance with the conditions outlined as a result of the
initial evaluation. This section requires that these written reports be
on the SAP's own letterhead (and not the letterhead of another service
agent), be signed and dated by the SAP, and contain the information
contained in Sec. 40.311(c)-(e) as appropriate. SAPs are required to
maintain copies of reports to employers for 5 years, and must maintain
employee clinical records in accordance with Federal, state, and local
laws regarding record maintenance, confidentiality, and release of
information.
We seek information regarding how the requirements in Sec. 40.311
can be satisfied if part 40 is amended to authorize the use of
electronic forms, signatures, and record retention. As with all other
information relating to drug and alcohol testing and results, how can
the confidentiality of information be protected? What provisions are
needed to ensure that the SAP reports are transmitted only to the DER?
D. Electronic Alcohol Testing Form (Electronic ATF)
The ATF has been in use in the DOT alcohol testing program since
1994 (see 59 FR 7349; Feb. 15, 1994). The ATF must be used for every
DOT alcohol test. DOT regulations at 49 CFR 40.225 set forth the
implementing regulations, and 49 CFR part 40, Appendix G contains a
facsimile (reference copy) of the form. The ATF is a three-part
carbonless manifold form used by DOT-regulated employers to document
the testing event when testing employees subject to DOT alcohol
testing. When the employee is tested, both the employee and the
Screening Test Technician (STT) and/or a BAT will complete the ATF in
various sections. The BAT/STT documents the result(s) by either writing
in the screening result or attaching the screening and/or confirmation
result printed by the EBT onto the ATF, and then sends Copy 1 to the
employer, provides Copy 2 to the employee, and retains Copy 3 for their
records.
On April 2, 2020, DISA submitted a petition for rulemaking to DOT
requesting that part 40 be amended to allow for the use of an
electronic version of the ATF for DOT-mandated alcohol testing. In its
petition, DISA states that it has worked collaboratively with software
companies and evidential breath testing device manufacturers over the
past five years in developing and deploying the use of an electronic
alcohol testing form for documentation of alcohol testing conducted
under employers' policy authority. DISA believes that its benefits are
applicable and appropriate to DOT-mandated alcohol testing of safety-
sensitive employees. DISA contends that use of an electronic ATF will
result in (1) an increase in the efficiency, security, and accuracy in
documenting DOT alcohol tests, (2) a reduction in paperwork, (3) an
improved process for conducting a DOT alcohol test in conjunction with
a DOT drug test when an electronic CCF is used for the drug test, (4) a
reduction of errors and omissions in the completion of the ATF, (5) an
improvement in the efficiency and efficacy in the transmission and
record retention of alcohol test results, and (6) a substantial cost
savings by eliminating the requirement for the printing and
distribution of carbonless three-ply paper ATFs.
We agree that employers and MROs have seen the benefits of using
the electronic CCF (e.g., legible information on all copies, reduced
collector error, expedited reporting), and the corresponding
improvements and efficiencies in the DOT drug testing program. Given
these benefits, along with the DISA petition for rulemaking and the
statutory mandate, we believe that it is feasible, and preferable, to
align the DOT drug and alcohol testing programs by enabling the use of
an electronic ATF. It should be noted that in requesting comments on
the implementation of an electronic ATF in the DOT alcohol testing
program, we are not seeking comments on changes to (1) the existing
alcohol testing procedures, (2) the existing alcohol testing device
specifications, or (3) the content of the current approved ATF.
Similar to the steps taken in HHS's establishment and adoption of
the electronic CCF, we must consider the necessary components and
processes associated with an electronic ATF, including the associated
procedures and systems that would need to be developed and maintained
to appropriately safeguard stored information. Additionally, and
similar to what was done in establishing the electronic CCF, we would
not contemplate making use of the electronic ATF mandatory, nor would
we seek to make any revisions to the
[[Page 47956]]
information collected on the existing alcohol testing form.
In considering the factors involved with providing for an
electronic ATF in the alcohol testing program regulations, we seek
specific information from affected entities and other interested
parties about any impact the potential use of an electronic ATF might
have.
Even though use of the electronic ATF (like the electronic CCF)
would be voluntary, we are interested in discerning the cost impact and
any and all factors that would need to be considered to enable use of
an electronic ATF including, but not limited to: (1) necessary
documentation and procedures needed to establish the electronic ATF;
(2) necessary system components (hardware and software requirements);
(3) compatibility of the form and associated systems between alcohol
testing program participants (such as between an STT and a BAT and
employer); (4) training considerations; (5) system maintenance; (6)
system security (protection of an employee's personal information and
related test result); and (7) and archival and audit trail
considerations.
Conclusion
With this ANPRM, the Department seeks input on the questions set
forth above. We welcome comments on all aspects of the ANPRM, and all
interested parties are encouraged to provide their views.
Delegation
This ANPRM is issued through authority delegated to the General
Counsel through a memorandum that has been placed in the docket for the
rulemaking action. (See https://www.regulations.gov/document/DOT-OST-2022-0027-0001.)
John E. Putnam,
General Counsel, U.S. Department of Transportation.
[FR Doc. 2022-16862 Filed 8-4-22; 8:45 am]
BILLING CODE 4910-9X-P