When Does an MRO Report a Prescription-Medication Safety Concern to the Employer?

A verified negative drug test does not necessarily end the MRO's involvement. During verification, an employee may disclose a prescription or medical condition that affects safe performance of safety-sensitive duties. Section 49 CFR 40.327 tells the MRO when that information goes to the employer or others, and 49 CFR 40.135 sets the warnings and the waiting period.

The warning before medical questions. Before obtaining medical information, the MRO warns an employee with a confirmed positive, adulterated, substituted or invalid result that drug test and medical information affecting safety-sensitive duties may go to third parties without consent (49 CFR 40.135(d)). Medical information here includes medications or other substances the employee reports using and medical conditions the employee reports having.

When the MRO must report. The MRO reports drug test results and medical information learned in verification, without the employee's consent, if in the MRO's reasonable medical judgment (49 CFR 40.327(a)):

• The information is likely to result in the employee being found medically unqualified under a DOT agency rule, or
• The information indicates that continued safety-sensitive work is likely to pose a significant safety risk.

Who may receive it. The third parties are the employer, the physician or health care provider who decides medical qualification under DOT rules, a SAP in the return-to-duty process, a DOT agency, or the NTSB in an accident investigation (49 CFR 40.327(b)).

The five business day window. For a medication taken under a legally valid prescription, the MRO first allows 5 business days from reporting the verified negative for the prescribing physician to contact the MRO. The goal is to see whether the medication can be changed to one that does not create the concern. If the concern remains after that contact or after 5 business days, whichever is shorter, the MRO reports under 40.327. If later information removes the concern, the MRO passes that to anyone it previously told (49 CFR 40.135(e)).

How the report is made. The MRO does not use the CCF for this information. It goes in a separate written communication, such as a letter or secure email, stating the specific safety concern, such as a medication's effects or an underlying condition (49 CFR 40.327(c)). For a verified negative, the CCF result stays negative. A foreign law that bars disclosure to the employer, such as in Canada, may be followed (49 CFR 40.327(d)).

What the employer does next. The employer receives a safety concern, not a positive test. What follows, such as a fitness evaluation or medical examiner review, depends on agency rules and company policy. The privacy context is covered in HIPAA and drug test results, and the effect of medications on results in medications and false positives.