§40.3
Where the DER is defined
Employee
Must be an actual employee, not a vendor
Immediate
Authority to remove from duty
5 yr
Record retention for positives & refusals
In This Guide
What the DER Is
The Designated Employer Representative is defined in 49 CFR 40.3 as an employee authorized by the employer to take immediate action to remove employees from safety-sensitive duties — or to cause them to be removed — and to make required decisions in the testing and evaluation process. In the same definition, the DER is the person who receives test results and other communications for the employer, consistent with the requirements of Part 40.
In plain terms, the DER is the single human at a carrier who is in the loop on every drug and alcohol testing event and who has the authority to act on it. When the Medical Review Officer verifies a positive, the MRO calls the DER. When a driver needs to come off the road, the DER makes that happen. The role exists so that there is always a named, accountable employee — not a faceless company, not an outside vendor — standing between a positive test and a driver continuing to operate a commercial motor vehicle.
DER is a function, not necessarily a full-time title
Part 40 does not require a person whose entire job is "DER." At a small carrier the owner, the safety manager, or an office manager commonly serves as the DER alongside other duties. What the rule requires is that the person be an employee with the authority to remove drivers and that service agents know exactly who and how to reach them. A carrier can name more than one DER, but each must meet the employee requirement.
The Two Core Powers
Strip away the procedural detail and the DER role comes down to two powers granted by 49 CFR 40.3: the power to receive results and the power to remove from duty. Everything else the DER does flows from these two.
Receive results
The DER is the designated recipient of verified test results from the MRO and reports from the SAP. Under 49 CFR 40.355, these must be sent directly to the DER — not to a third party for forwarding. The DER is the funnel through which every result reaches the employer, which keeps the information accurate, timely, and confidential.
Remove from duty
The DER has the authority to immediately take a driver off safety-sensitive functions — directly, or by directing the driver’s supervisor to effect the removal. After a verified positive, a refusal, or another violation, the driver cannot perform safety-sensitive functions until the return-to-duty process is complete. The DER is the one who makes that stop happen.
A critical companion rule lives in 49 CFR 40.355: the determination that an employee has refused a test is a non-delegable duty of the employer. A C/TPA or collector can report the facts and offer advice, but the actual refusal determination — and the removal that follows — runs through the DER. This is the clearest illustration of why the role cannot be outsourced.
Why Your C/TPA, MRO, or Consultant Cannot Be the DER
This is the single most common DER misconception. Carriers that hand their entire drug and alcohol program to a consortium often assume the consortium is also their DER. It is not — and it legally cannot be. Under 49 CFR 40.355, a service agent must not act as a DER. The rule states it directly: a service agent may transmit information to the employer about results, but must not act on behalf of the employer in actions to remove employees from safety-sensitive duties.
DOT guidance under 49 CFR 40.3 goes further and rejects the "DER-for-hire" concept outright — a person under contract by several companies to serve as their shared DER is not permitted. The DER must be an actual employee of the employer. The logic is straightforward: removing a driver from duty is a personnel decision with real consequences, and DOT keeps that authority with the employer who bears responsibility for the driver, not with a vendor who is paid to administer paperwork.
C/TPA / Consortium
Can: Selects the random pool, schedules tests, transmits results to the DER, advises on procedure.
Cannot: Cannot be your DER, cannot determine a refusal, cannot remove a driver from duty.
Medical Review Officer (MRO)
Can: Verifies test results and reports the verified result directly to the DER.
Cannot: Cannot be your DER and cannot make the employer’s removal decision.
Outside consultant
Can: Helps build your written policy and set up the program, trains supervisors.
Cannot: Cannot serve as a contracted DER-for-hire under 49 CFR 40.3.
Why Every DOT Employer Needs One
The DER requirement is not scaled to fleet size. Any employer subject to DOT drug and alcohol testing — from a 200-truck carrier to a one-truck owner-operator — must have a DER, because the functions the DER performs are triggered by events, not headcount. A single positive test or refusal at a one-driver operation still requires someone with the authority to receive the result and remove the driver. There is no de minimis exception that lets a small carrier skip the role.
For owner-operators, this creates a structural reality worth understanding. Under 49 CFR 382.103, an employer who employs himself or herself as a driver must comply with both the employer requirements and the driver requirements of the rule. The owner-operator is, on paper, both the driver and the DER. But because they cannot manage their own random selection and cannot self-verify a result, the substantive functions still depend on the C/TPA and MRO — and the DER documentation still has to exist.
An undesignated or unreachable DER is an audit finding
Service agents need to know exactly who the DER is and how to reach them around the clock — a verified positive cannot wait. Carriers that never formally named a DER, or whose named DER contact information is stale, create a real gap: the MRO has no one to report to, and a driver may continue operating after a result that should have removed them. In an FMCSA audit, the inability to identify a DER and show the program ran through them is a documentation failure.
The DER in a Positive-Result Workflow
Tracing a verified positive from collection to removal shows exactly where the DER sits and why no one else can occupy that seat. Each step is governed by Part 40, and the DER is the pivot the whole process turns on.
Test is collected and analyzed
The collector and laboratory handle the specimen under Part 40 chain-of-custody rules. The DER is not involved in the science.
MRO verifies the result
The Medical Review Officer reviews the lab result, interviews the driver where required, and verifies the outcome.
MRO reports directly to the DER
Under 49 CFR 40.355, the verified result goes straight to the DER — not to the C/TPA to pass along, not to a forwarding service.
DER removes the driver from duty
On a verified positive or a refusal, the DER immediately removes the driver from safety-sensitive functions, directly or via the supervisor.
SAP process and return-to-duty
The driver completes the SAP evaluation; the SAP’s reports also go to the DER. The driver returns only after a negative return-to-duty test and the follow-up plan is set.
DER files the records
The DER retains the result, removal action, SAP documentation, and follow-up schedule as confidential program records.
The Records the DER Keeps
The DER is the custodian of the employer’s drug and alcohol program records, and those records are both mandatory and confidential. Retention periods are set by 49 CFR 382.401, which the DER administers on the employer’s behalf. Release of these records is restricted — they go only to the people and in the circumstances the rules permit, such as the driver’s own request or an authorized FMCSA representative.
| Record the DER maintains | Regulation | Minimum Retention |
|---|---|---|
| Verified positive results and alcohol results of 0.02+ | §382.401 | 5 years |
| Documentation of refusals to test | §382.401 | 5 years |
| Records of driver violations and removal actions | §382.401 | 5 years |
| Annual calendar-year summary | §382.401 | 5 years |
| Supervisor reasonable-suspicion training records | §382.401 | While performing + 2 years |
| Collection-process records | §382.401 | 2 years |
| Negative and canceled test results | §382.401 | 1 year |
Beyond the regulatory minimums, a well-run DER keeps a clean trail of what happened and when: the date a result was received, the date and method of removal, the SAP referral, and the return-to-duty and follow-up testing schedule. This is the documentation an auditor uses to confirm the program did not just exist on paper but actually functioned when a result came in.
How FileFlo Supports the DER
FileFlo is not your DER, your C/TPA, or your MRO — those are people and service agents that the regulation defines and your business appoints. FileFlo is the records and proof layer the DER uses to keep the program organized: it stores the DER designation, the test results the DER receives, removal and return-to-duty documentation, and the confidential program records 49 CFR 382.401 requires, all with expiration tracking and audit-ready export.
What FileFlo organizes for the DER
- DER designation on file: Store who your designated employer representative is and keep the record current, so you can show an auditor — or a service agent — exactly who holds the role.
- Received results, organized: File the verified results the DER receives from the MRO against the right driver, with the confidentiality the records require.
- Removal and return-to-duty trail: Document when a driver was removed, the SAP referral, the negative return-to-duty result, and the follow-up testing schedule — the proof the program actually functioned.
- Retention windows handled: Keep positives, refusals, and the annual summary for the five-year window, training records and collection records on their own clocks, without manual calendar math.
- Audit-ready export: When FMCSA reviews the program, export the DER’s documentation as one organized package instead of reconstructing it from email and paper.
Key Takeaways
- The DER is an employee defined in 49 CFR 40.3 who receives test results and has the authority to remove drivers from safety-sensitive duty.
- A C/TPA, MRO, or consultant cannot be your DER. 49 CFR 40.355 bars service agents from the role, and DOT rejects DER-for-hire — the DER must be your employee.
- Determining a refusal is a non-delegable employer duty. Service agents advise; the DER decides and removes.
- Every DOT employer needs a DER — including one-truck owner-operators. Under 49 CFR 382.103 a self-employed driver complies with both employer and driver requirements.
- The DER is the records custodian. Positives, refusals, and the annual summary are kept for five years under 49 CFR 382.401, and the records are confidential.
Designated Employer Representative: FAQ
Answers to common questions about the DER role, authority, and record-keeping under 49 CFR Part 40.
Under 49 CFR 40.3, a Designated Employer Representative (DER) is an employee authorized by the employer to take immediate action to remove employees from safety-sensitive duties — or to cause them to be removed — and to make required decisions in the testing and evaluation process. The DER also receives test results and other communications from the employer’s service agents, such as the Medical Review Officer and the collection site. Every employer subject to DOT drug and alcohol testing must designate a DER.
No. Under 49 CFR 40.3 and 40.355, a service agent — including a consortium/third-party administrator (C/TPA), MRO, collector, or outside consultant — must not act as a DER. The DOT does not permit a DER-for-hire arrangement. The DER must be an actual employee of the employer because the role carries the authority to remove a driver from safety-sensitive duty, which is a decision DOT reserves to the employer. A service agent may transmit information to the DER, but cannot make the removal decision on the employer’s behalf.
The DER has the authority to immediately remove a driver from safety-sensitive functions when required — for example, after a verified positive test, a refusal to test, or another violation — and to make the decisions the testing and evaluation process demands. Under 49 CFR 40.355, the determination that an employee has refused a test is a non-delegable duty that belongs to the employer through the DER; a service agent can advise but cannot make that call. The DER can effect the removal directly or by directing the driver’s supervisor to do so.
The DER. Under 49 CFR 40.3 and 40.355, the Medical Review Officer (MRO) and other service agents must send testing results and reports directly to the DER, not to a third party for forwarding. This includes verified test results from the MRO and written reports from the Substance Abuse Professional (SAP). Routing results through the DER ensures the person with removal authority is the one who acts on a positive or a refusal, and keeps the chain of communication compliant and confidential.
Yes. Every employer subject to DOT testing must have a DER, and under 49 CFR 382.103 a person who employs himself or herself as a driver must comply with both the employer and the driver requirements. In a single-driver operation the owner-operator is effectively both the driver and the DER for record-keeping purposes, but the substantive removal and decision functions still run through the C/TPA and MRO framework — and the owner-operator cannot manage their own random testing. The DER role and its records still have to exist on paper even in a one-person operation.
The DER is the custodian of the employer’s drug and alcohol program records. Under 49 CFR 382.401, the DER maintains verified positive results, refusals, and the annual calendar-year summary for at least five years; collection-process records for two years; and negative results for one year. The DER should also keep documentation of removal actions, return-to-duty and follow-up testing tied to the SAP process, and proof that results were received and acted on. These records are confidential and released only as the rules permit.
Give Your DER One Place for Every Result and Record
FileFlo stores your DER designation, the test results the DER receives, removal and return-to-duty documentation, and the confidential records 49 CFR 382.401 requires — with retention tracking and audit-ready export. FileFlo is the records layer; the DER is still your employee, and your C/TPA and MRO still do their jobs.
$89/month or $299/month — No credit card required — 5-day free trial