4 ms·

I was. I was told it was because we handled PCI and HIPPA data for various clients, and that a clean drug test was required for compliance with those rules. Whe

by korethr 10y ago

I was. I was told it was because we handled PCI and HIPPA data for various clients, and that a clean drug test was required for compliance with those rules. When I asked if now-legal marijuana coming up on the drug test would be considered a failure of the test and thus cancel my onboarding, I was told it would. Whether or not the reasons I was given were bogus or not, I would be in no way surprised if my scenario happened at other companies as well.

kstrauser 10y ago
> I was told it was because we handled PCI and HIPPA data for various clients, and that a clean drug test was required for compliance with those rules. It seems you were mislead, according to https://www.pcisecuritystandards.org/documents/Card_Prod_Security_Rqrmts_FAQs_30Dec2013.pdf https://www.pcisecuritystandards.org/documents/Card_Prod_Sec...: Q 1 December 2013 – Drug testing is not required in the PCI Card Production Security Requirements. Is this an oversight? A No, PCI does not require drug testing due to the wide variances in country laws governing where or when drug testing is allowed. However, that does not preclude card vendors from requiring drug testing wherever and whenever they deem necessary. I wasn't able to find anything relating to HIPAA, but I've worked around HIPAA since before it was passed and your post is literally the first time I've ever heard that claim. Not saying you're wrong, just that this is a new one to me.
dragonwriter 10y ago
HIPAA absolutely does not require drug testing, though it's (I suppose) possible that your company may have adopted drug testing as part of one of the sets of procedures that HIPAA mandates (it doesn't seem to directly address any HIPAA requirement, but it's at least plausibly tangentially related to some of the workforce-related requirements.)
- kstrauser 10y ago
  I'm highly skeptical that it's related in any way (although I'd be very interested in proof that I'm wrong). If it were, it'd be almost impossible to run a health startup in NorCal. Marijuana use is not universal, but I've never worked in a shop without at least a couple of coworkers who were open about using it in their off hours.

by korethr 10y ago

kstrauser 10y ago

> I was told it was because we handled PCI and HIPPA data for various clients, and that a clean drug test was required for compliance with those rules. It seems you were mislead, according to https://www.pcisecuritystandards.org/documents/Card_Prod_Security_Rqrmts_FAQs_30Dec2013.pdf https://www.pcisecuritystandards.org/documents/Card_Prod_Sec...: Q 1 December 2013 – Drug testing is not required in the PCI Card Production Security Requirements. Is this an oversight? A No, PCI does not require drug testing due to the wide variances in country laws governing where or when drug testing is allowed. However, that does not preclude card vendors from requiring drug testing wherever and whenever they deem necessary. I wasn't able to find anything relating to HIPAA, but I've worked around HIPAA since before it was passed and your post is literally the first time I've ever heard that claim. Not saying you're wrong, just that this is a new one to me.

dragonwriter 10y ago

HIPAA absolutely does not require drug testing, though it's (I suppose) possible that your company may have adopted drug testing as part of one of the sets of procedures that HIPAA mandates (it doesn't seem to directly address any HIPAA requirement, but it's at least plausibly tangentially related to some of the workforce-related requirements.)

kstrauser 10y ago
I'm highly skeptical that it's related in any way (although I'd be very interested in proof that I'm wrong). If it were, it'd be almost impossible to run a health startup in NorCal. Marijuana use is not universal, but I've never worked in a shop without at least a couple of coworkers who were open about using it in their off hours.