A Medical Review Officer, or MRO, is a licensed physician who serves as an independent gatekeeper in workplace drug testing. Their core job is to receive lab results from an employer’s drug testing program and determine whether a positive, adulterated, substituted, or invalid result has a legitimate medical explanation before that result ever reaches the employer. They protect both the integrity of the testing process and the rights of the person being tested.
Why MROs Exist
A lab test can only tell you what substances showed up in a urine sample. It cannot tell you why. Someone taking a legally prescribed pain medication after surgery, for instance, might produce a positive result for opioids. Without a physician reviewing that result, a person could lose their job over a perfectly legitimate prescription. The MRO sits between the lab and the employer specifically to prevent that kind of mistake.
Under Department of Transportation regulations, the MRO must be completely independent and impartial. They are not an advocate for the employer or the employee. They advocate for the accuracy of the process itself. This independence matters because MROs handle sensitive medical information that employers are not entitled to see, and they make judgment calls that carry serious career consequences for the people being tested.
Required Credentials and Certification
An MRO must hold a Doctor of Medicine or Doctor of Osteopathy license. There is no shortcut around this: the role requires someone qualified to evaluate medical records, understand pharmacology, and make clinical judgments about prescriptions and health conditions.
Beyond the medical license, DOT-regulated MROs must pass a certification exam and recertify every five years. Recertification requires completing approved retraining (either a self-study program or an in-person course) and passing the exam again. The Medical Review Officer Certification Council oversees this process and maintains a directory of currently certified MROs. Physicians who let their certification lapse cannot serve as MROs for DOT-regulated testing until they recertify.
What Happens After a Positive Lab Result
When a lab confirms a non-negative result, the MRO reviews the chain-of-custody paperwork first. They check for errors in how the specimen was collected, labeled, and handled. A serious paperwork error can be enough to cancel the test entirely, regardless of what the lab found. Only the MRO can verify or cancel a test; staff working under their supervision can handle the administrative review, but the final call belongs to the physician.
If the paperwork checks out, the MRO conducts a verification interview directly with the employee, either in person or by phone. At the start of this interview, the MRO tells the employee exactly what the lab found: which drugs were detected, or why the specimen was flagged as adulterated or substituted. The MRO then explains that the final decision will be based on what the employee shares during this conversation.
This is the employee’s opportunity to provide a medical explanation. If they have a valid prescription, the MRO doesn’t simply take their word for it. The MRO will call the pharmacy to verify the prescription is real and may also contact the prescribing physician if anything seems questionable. The standard is thorough: the MRO takes “reasonable and necessary steps” to confirm that any medical records or prescriptions the employee presents are authentic.
How the MRO Makes a Final Decision
After the interview and any follow-up verification, the MRO assigns one of three outcomes to the test. They can verify it as negative (meaning there was a legitimate medical explanation), verify it as positive or a refusal to test, or cancel it entirely.
A test verified as positive means the MRO found no acceptable medical explanation. A cancellation means something went wrong with the process itself, such as a fatal paperwork error or a collection that didn’t follow protocol. A refusal to test covers situations where the lab confirmed the specimen was adulterated or substituted and the MRO found no medical reason for the abnormal sample, or where the employee admitted to tampering.
The employee does not have to simply accept a verified positive. Federal rules give the employee 72 hours from the time the MRO notifies them to request a test of the split specimen. This is a second portion of the original sample that was sealed at the time of collection. When an employee makes a timely request, the MRO must immediately direct the original lab to send that second specimen bottle to a different federally certified laboratory for independent testing.
Prescription Medications and Safety Concerns
A valid prescription can turn a positive result into a verified negative, but it doesn’t always end there. If the MRO determines that a legally prescribed medication could make the employee medically unqualified for safety-sensitive work or could pose a significant safety risk, additional steps kick in. The MRO gives the employee five business days from the date of the verified negative result to have their prescribing physician make contact. During that window, the prescribing doctor and the MRO discuss whether the medication can be switched to something that doesn’t create a safety issue.
If a safety concern remains after that conversation, or if the five days pass without contact, the MRO is authorized to report the medical information to relevant parties. This is one of the few situations where an MRO can share medical details without the employee’s written consent.
Confidentiality Rules
MROs handle deeply personal medical information, and strict confidentiality rules govern what they can and cannot share. The default rule is straightforward: individual test results and medical information cannot be released to third parties without the employee’s specific written consent.
There are two exceptions. The MRO can disclose information without consent if, in their reasonable medical judgment, the information would likely result in the employee being found medically unqualified under DOT safety regulations, or if it indicates that the employee continuing in their safety-sensitive role would pose a significant safety risk. Even then, the MRO cannot put medical details on the standard drug test form. Safety-related medical concerns must go in a separate written communication, such as a letter or secure email, that explains the specific nature of the concern.
The people authorized to receive this information are limited: the employer, a physician responsible for the employee’s medical qualification, a substance abuse professional involved in a return-to-duty evaluation, the relevant DOT agency, or the National Transportation Safety Board during an accident investigation. No one outside this list gets access.
Beyond DOT Testing
While federal DOT regulations provide the most detailed framework for MRO duties, MROs also work in non-DOT workplace testing programs. Many private employers use MROs voluntarily to add a layer of medical judgment to their drug testing programs and reduce the risk of wrongful termination claims based on a misinterpreted lab result. The core function remains the same: a physician reviews the science before results reach someone’s personnel file. In non-regulated programs, the specific procedures may vary by company policy or state law, but the MRO’s value comes from the same place: medical expertise applied to lab data that cannot interpret itself.