Vulnerability Assessment Team (VAT)

The (In)Security of Drug Testing

DRUG INSECURITY: Analyses by the VAT call into question the security of testing for illicit drug use by employees and athletes.

Urine is frequently tested to detect illicit drug use for such things as accident investigations; forensics and law enforcement; screening of employees and potential employees; fitness of duty checks for critical personnel such as those involved in the transportation or nuclear industries; tests of national, international, and scholastic athletes for cheating; and evaluations of whether an individual should receive (or continue to hold) a security clearance. Because the results of drug tests strongly impact person’s career, livelihood, and reputation, and because the results of drug testing have serious implications for government, corporations, and society, good security to prevent tampering would seem to be essential.

In a paper scheduled to appear in the Journal of Drug Issues, researchers with the Vulnerability Assessment Team (VAT) at Argonne National Laboratory question the security used to protect urine samples for drug testing. The VAT analyzed 23 different urine collection products widely used for drug testing and demonstrated how all of them (and their built-in security features) could be easily and quickly tampered with using only low-tech tools and methods available to almost anyone. This makes it possible to create a false positive or a false negative test result.

Security concerns about drug testing have previously focused primarily on the possibility of the test subject trying to swap his/her urine sample for a fake (or chemically altered) sample during sample collection in hopes of hiding illicit drug use. Issues of tampering with the sample collection vial before or after sample collection, however, have been largely ignored, as has the possibility of someone wanting to generate a false positive test result for somebody else. The latter might be done for a variety of reasons including revenge against a disliked co-worker or employee, management scapegoating of an employee after a transportation accident, sabotage directed towards an organization and its key personnel, or attempts to disqualify an athlete or his/her team. (Entire national sports teams can be disqualified from international sporting events if just 2 of their members fail a drug test.)

The paper also questions the security practices, standards, and guidelines for urine drug testing used by government, sports anti-doping organizations, and private companies. There ought to be improved security practices in the handling of urine drug testing samples, and especially better tamper detection.