How to Choose a DOT Consortium (C/TPA) and How to Verify the One You Already Have (2026)

Published September 18, 2026 | TruckerNavi Inc | 11 min read

By the TruckerNavi compliance team, led by Dmitry Borovoy, a New Jersey-licensed insurance producer and author of "Safety Manager: From Zero to Expert".

The short answer: you are in a consortium because you cannot legally build a pool by yourself. Under 49 CFR 382.103(b), an employer who employs only himself or herself as a driver must implement a random testing program of two or more covered employees in the random testing selection pool. One person is not two, so a single-driver carrier joins somebody else's pool. That is the entire mechanical reason the consortium exists.

The part that costs money is the second half, and almost nobody reads it: the provider is not the party that answers for your program. 49 CFR 40.15(c) says you remain responsible for compliance even when you use a service agent, that a DOT agency can sanction you when the service agent has not delivered, and that your good faith use of a service agent is not a defense in an enforcement action. You are paying for administration. You are not buying away liability, and no contract can transfer it to the provider.

This piece is a walk-through of the rules, not legal or medical advice. Everything below is sourced to 49 CFR Part 382, 49 CFR Part 40, and FMCSA's own Clearinghouse guidance.

Why can't an owner-operator run his own drug and alcohol program?

He can run most of it. He cannot run the random part, and random is the piece that never stops.

382.103(b) does two things in one paragraph. First, it says an employer who employs himself or herself as a driver must comply with both the employer requirements and the driver requirements of Part 382. You are the company and the workforce at the same time, and you owe both sets of duties. Second, it says an employer who employs only himself or herself as a driver shall implement a random program of two or more covered employees in the random testing selection pool.

Read that against how random selection actually works. Under 382.305(i), selection must be made by a scientifically valid method such as a random number table or a computer-based random number generator matched to identifying numbers, and each driver selected must have an equal chance of being tested each time selections are made. In a pool of one, that math is meaningless: you are either selected every period or the selection is not random. The rule closes the loop by requiring a pool of at least two, which for a genuinely single-driver operation means joining a pool somebody else runs.

382.305(j)(2) is the permission slip: you may use a service agent such as a C/TPA to perform random selections for you, and your covered drivers may be part of a larger random testing pool of covered employees. The same sentence then hands you a duty that people skip: you must ensure that the service agent is testing at the appropriate percentage established for your industry and that only covered employees are in that pool.

FMCSA has also answered the question directly. Its regulatory guidance to § 382.305, Question 11, issued April 4, 1997, asks whether it is necessary for an owner-operator who is not leased to a motor carrier to belong to a consortium for random testing purposes. The entire published answer is one word: Yes.

And the clock starts earlier than most people expect. 382.115(a) requires domestic-domiciled employers to implement Part 382 on the date the employer begins commercial motor vehicle operations. Not after the first load, not after the first thirty days.

That word "ensure" is why this article exists. It is not "assume". It is not "trust". The regulation puts a verification obligation on the person writing the check.

What exactly is a C/TPA, and how is it different from a consortium?

In DOT language they are the same object. 49 CFR 382.107 defines Consortium/Third-party administrator (C/TPA) as a service agent that provides or coordinates one or more drug and alcohol testing services to DOT-regulated employers, and that typically performs administrative tasks concerning the operation of employers' programs. The definition explicitly includes groups of employers who join together to administer, as a single entity, the DOT programs of its members, for example by having a combined random testing pool.

Then comes the sentence that decides everything else in this article: C/TPAs are not "employers" for purposes of this part, except in the one narrow Clearinghouse situation at 382.705(c). Your provider is a vendor performing tasks. It is not the regulated party. FMCSA does not open an investigation on your consortium when your pool is wrong. It opens one on your USDOT number.

One more definition from the same section that owner-operators routinely get wrong. The designated employer representative (DER) is the individual authorized to receive test results and to take immediate action to remove employees from safety-sensitive duties. The rule says the DER must be an employee of the company, and that service agents cannot serve as DERs. 40.15(d) repeats it from your side: you must not permit a service agent to act as your DER. If you are a one-truck carrier, the DER is you. There is no other candidate.

What does a C/TPA actually do for the money?

Quite a lot, and it is worth knowing so you can tell service from invoice padding. Under 49 CFR Part 40, Subpart Q:

• 40.347(a): it may operate random testing programs and assist with other test types by contracting with laboratories and collection sites and conducting collections.
• 40.347(b): it may combine employees from more than one employer, or more than one transportation industry, in a single random pool. If industries are mixed, the random rate must be at least equal to the highest rate required by each DOT agency involved, and employees not covered by DOT regulations may not be in the same pool as DOT-covered employees.
• 40.349(a) and (b): it may receive and maintain your program records, including custody and control forms, the names of employees in random pools, selection lists and notices, and it does not need employee consent to hold them.
• 40.345: it may act as an intermediary transmitting testing information to you, but only if you choose to have it do so and only in the specific situations listed in appendix H to Part 40. Outside those situations, acting as intermediary is prohibited.
• 382.403(e): it may prepare your Management Information System summary. The certification is still yours, and we come back to that below.

A good provider also schedules collections, keeps sites near your lanes, routes results through a qualified MRO, and tells you when something needs a decision. None of that is the same as owning the decision.

What can a C/TPA never do, no matter what the contract says?

This is the shortest list in the article and the most expensive one to get wrong. 49 CFR 40.355 sets the limits. For refusal determinations it uses the phrase non-delegable duty of the actual employer (40.355(i)); for reasonable suspicion, post-accident, return-to-duty and follow-up decisions it says these are duties the actual employer cannot delegate to a C/TPA (40.355(g)).

The single-truck exception. The rule knows a one-person company cannot make an arm's-length decision about itself, so it carves out a path. Under 40.355(h), a service agent may make decisions to test based on reasonable suspicion, post-accident, return-to-duty and follow-up criteria with respect to an owner-operator or other self-employed individual. Under 40.355(j)(1), it may also determine a refusal when it schedules a required test for an owner-operator and the individual fails to appear without a legitimate reason. And under 40.355(f) it may pass a substance abuse professional report to an owner-operator directly, which it cannot do for a normal employer.

Notice what that means in practice: as a one-truck owner-operator you have handed a vendor the power to declare that you refused a test. A refusal carries the same consequences as a positive, which is the subject of why a refusal counts as a positive. Read your service agreement for how notification is delivered before you find out the hard way that the text message went to an old number.

Who is responsible when the provider fails? The answer is always you

Four sentences, in four different places, all pointing the same direction.

• 40.11(a): as an employer, you are responsible for meeting all applicable requirements and procedures of Part 40.
• 40.11(b): you are responsible for all actions of your officials, representatives and agents, including service agents, in carrying out DOT requirements.
• 40.11(c): every agreement between an employer and a service agent is deemed, as a matter of law, to require compliance with Part 40 and the DOT agency rules, and compliance is a material term of that agreement. You cannot contract around it, and neither can they.
• 40.355(o): from the provider's side, the actual employer remains accountable to DOT, and the service agent's failure to implement any aspect of the program makes the employer subject to enforcement action.
• 40.17: you are responsible for obtaining the information from your service agents, whether or not you use a C/TPA as the intermediary. The rule states it in the bluntest way it states anything: you must not assume that "no news is good news" and let someone perform safety-sensitive duties before the result arrives.

There is exactly one narrow place where the responsibility genuinely shifts, and it is worth knowing because it is the only one. 382.705(c) says any employer may designate a C/TPA to perform its Clearinghouse reporting duties and that the employer retains ultimate responsibility regardless. Then it adds an exception: the employer does not retain responsibility where the C/TPA is designated to comply with employer requirements as described in 382.705(b)(6), which is the owner-operator reporting his or her own violations. That is a sliver of the program, not a shield over it.

Separately, 40.341(b) lets DOT act against a non-compliant service agent through the Public Interest Exclusion procedures in Subpart R. That is DOT's remedy against the vendor. It does not undo the finding on your DOT number.

The table to keep on the wall: duty, who answers, what proves it at an audit

This is the working document. If you can produce the right-hand column for every row, your program survives a review. If you cannot, "my consortium handles that" is not an answer an investigator can write down.

How do I confirm my provider is actually testing my pool at the required rate?

The 2026 FMCSA minimums are unchanged. DOT's Office of Drug and Alcohol Policy and Compliance publishes them on its random testing rates page: 50 percent for controlled substances and 10 percent for alcohol, calculated on the average number of driver positions. That matches the text of 382.305(b)(2) and (b)(1) respectively. Because the rates did not change, FMCSA was not required to publish a Federal Register notice for 2026, and the page notes the rate last changed in 2020.

The mechanics of pool math, selection periods and what "average number of driver positions" means are covered in random testing rates and how the pool is calculated. What belongs here is the verification question: how do you know your provider actually tested at 50 percent? Ask for the count of selections made against your pool for the year and the number of completed collections. If your provider cannot state both numbers, it is not measuring the thing it sells.

The Clearinghouse piece: buying a pool is not designating a C/TPA

This is the most common gap in owner-operator files, and it stays invisible until somebody looks.

382.705(b)(6) requires that an employer who employs himself or herself as a driver must designate a C/TPA to comply with the employer reporting requirements related to his or her own alcohol and controlled substances use. The logic is obvious once stated: an employer reports its drivers' violations, and a one-person company reporting itself is a conflict, so the rule routes that reporting through a third party. FMCSA states the effect plainly: the C/TPA is responsible for reporting violations of the drug and alcohol program incurred by the owner-operator. Note the scope: this designation duty applies to owner-operators registered as employers, meaning those running under their own authority and USDOT number.

FMCSA's Clearinghouse reminders for owner-operators make the trap explicit. Working with a C/TPA to perform random selections under 382.305(j)(2) does not meet the requirement for designating a C/TPA in the Clearinghouse, and FMCSA adds that if a C/TPA performs random selections for you, you still need to talk to that C/TPA, or a different one, about serving as your designated C/TPA in the Clearinghouse. Those are two separate relationships that often, but not always, sit with the same company. Three more mechanics, confirmed in FMCSA's guidance on C/TPA functions and § 382.711(d):

• The C/TPA must already be registered in the Clearinghouse before you can send a designation request (382.711(a) requires every employer and service agent to register before accessing or reporting). And 382.715(a) closes the loop: no C/TPA or other service agent may enter information in the Clearinghouse on your behalf unless you have designated it.
• When you designate, you authorize specific functions: report violations, report return-to-duty information, and conduct queries. An owner-operator must authorize at least one C/TPA to report violations.
• Registration role matters. If you operate under your own authority and USDOT number, register as an employer. If you drive under another carrier's USDOT number, register as a driver. The mechanics of both are in our Clearinghouse registration walkthrough.
• Changing providers is a registration event, not just a billing one. 382.711(b)(3) requires the employer registration to identify the C/TPA and authorize what it may do, and to be updated within 10 days of any change to that information.

Everything else in Subpart G still lands on you: the pre-employment full query before anyone performs a safety-sensitive function under 382.701(a), and the annual query under 382.701(b), which you may satisfy with a limited query, with the catch that if the limited query shows information exists you must run a full query within 24 hours or stop performing safety-sensitive functions. The annual query itself is covered in detail in our Clearinghouse annual query walkthrough.

Which documents must you hold yourself, even with a provider?

382.401(a) says each employer shall maintain records of its program in a secure location with controlled access. Not "each employer or its consortium". Your provider may hold copies under 40.349, and it must be able to get them to you within two business days under 40.349(e), but the file that gets produced at an audit is yours.

The list at 382.401(c) is longer than most owner-operators expect. The ones people are missing when we open a file:

1. The consortium agreement itself. 382.401(c)(6)(i) requires you to keep agreements with collection sites, laboratories, breath alcohol technicians, screening test technicians, medical review officers, consortia and third-party service providers. A verbal arrangement and a monthly card charge is not a record.
2. Names and positions of officials and their role in the program. 382.401(c)(6)(ii). This is where the DER is documented.
3. Your written policy and testing procedures. 382.401(c)(6)(iv) and 382.601. The policy has required content: who answers driver questions, which drivers are covered, what conduct is prohibited, when testing happens, what counts as a refusal and its consequences, and what gets reported to the Clearinghouse.
4. The signed certificate of receipt. 382.601(d) requires each driver to sign a statement certifying receipt of the materials, and the employer to keep it. Owner-operators sign their own.
5. Documents relating to the random selection process. 382.401(c)(1)(ii). The selection lists, not just the negative results.
6. Your copy of every alcohol test form and every custody and control form. 382.401(c)(2)(i) and (ii).
7. Everything the MRO sent you. 382.401(c)(2)(iii).

Two rights worth knowing. 382.405(b) gives a driver the right, on written request, to copies of records about his or her own testing, and says access shall not be contingent upon payment for records other than those specifically requested. And 382.405(d) obliges both the employer and any service agent holding the records to make copies available to DOT or state officials on request. A provider that says "pay the balance first" when a regulator asks is out of compliance on two separate hooks.

How do you verify the provider you already have?

Send one email, ask for five things, and give a deadline of two business days, because that is the standard 40.349(e) holds them to anyway. You are not being difficult by asking: 40.15(b) makes you responsible for ensuring your service agents meet the qualifications in Part 40 and expressly says you may require service agents to show you documentation that they do. A provider running your program properly will answer without drama.

1. The random selection lists for every selection period this calendar year, showing your name or your drivers' names in the pool for each period. This is the single most revealing document. If you have never been selected in three years, either you were never in the pool or the pool is enormous and the paperwork will show that.
2. The pool roster. You are checking two things: that all of your covered drivers are in it, and that it contains only DOT-covered employees. 382.305(j)(1) makes both your responsibility.
3. The random testing rate applied to the pool, in writing, and the count of selections against completed collections for the year. Under 382.305(j)(2) ensuring the rate is correct is your duty, not theirs.
4. Your MIS summary data for the prior calendar year. Under 382.403(a) you must be able to prepare that summary when it is requested. If the provider cannot produce the numbers today, you cannot meet a March 15 deadline in a January where FMCSA does ask.
5. Written confirmation of your Clearinghouse status: that the C/TPA designation is active, accepted, and includes the report-violations permission, and the dates of the pre-employment and most recent annual queries for every driver.

What should you ask before you sign with a new consortium?

Twelve questions. They take ten minutes on the phone and they sort the market fast.

1. What is in the pool? How many covered employees, and are they all DOT-covered?
2. At what rate do you test the pool, and does it match the current FMCSA minimums of 50 percent and 10 percent?
3. How many selection periods per year, and how do you spread them, given the 382.305(k)(2) requirement that testing be spread reasonably through the calendar year?
4. How will you notify me of a selection, by what channel, and what happens if I am 600 miles from home?
5. Which collection site network do you use, and can you name sites on the lanes I actually run?
6. Who is the MRO, and are they independent of you as required by 40.353(b)?
7. Are you registered in the Clearinghouse, and will you accept a designation with the report-violations permission?
8. Who prepares my MIS report, and do you understand that I certify it under 382.403(e)?
9. Will you give me the selection lists and pool roster on request, and how fast?
10. Do you provide the written policy required by 382.601, including the Clearinghouse reporting content, and the certificate of receipt?
11. If I leave, what do you charge to release my records? The correct answer under 40.349(f) is nothing beyond reasonable administrative transfer cost.
12. What is your escalation path when I get a positive or a refusal, and who calls whom, and within what hours?

If a salesperson answers "don't worry, we handle all of it, you're fully covered", that is the answer that should worry you. 40.15(c) already told you nobody can cover you.

How do you leave a provider that is not working?

Cleanly, and the rule is unusually protective here. Under 40.349(f), a service agent must, at any time on the request of an employer, transfer immediately all records pertaining to the employer and its employees to the employer or to any other service agent the employer designates. It must carry out the transfer as soon as you request it. It does not need employee consent. It must not charge more than reasonable administrative costs, and it may not charge a fee for the release of these records.

40.349(g) applies the same duty when the provider is going out of business or being acquired: it must immediately notify all employers and offer the transfer. And 40.355(n) forbids intentionally delaying transmission of testing documents because of a payment dispute.

Practical sequence: sign with the new provider first, get the new pool entry confirmed in writing, then request the record transfer from the old one, then revoke the old C/TPA designation in the Clearinghouse and designate the new one, and only then stop paying. 382.711(b)(3) gives you 10 days to update the C/TPA identification in your registration once it changes. Gaps in pool membership are the thing an investigator notices, because they show up as a period with no selections against your name.

One more thing to check while you are in there: your own Clearinghouse registration. Under 382.713(a) a registration is valid for 5 years unless cancelled or revoked, and under 382.713(b) FMCSA cancels the registration of anyone who has not queried or reported for 2 years. A single-truck carrier who runs one limited annual query and nothing else is exactly the profile that drifts toward that line.

What does an investigator actually ask about the consortium?

Not much about the provider, and a lot about you. Under 382.401(d) the whole file has to be at your principal place of business within two business days of a request, and the questions track the wall table above: the agreement, the selection lists, who your DER is, the signed certificate of receipt, the query records, and the decision documents behind any reasonable suspicion or post-accident test.

Note what is not on that list: nobody asks whether your consortium is good. There is no federal certification, rating or approval list for C/TPAs. DOT works the other way around: under 49 CFR 40.401 it maintains a document called the List of Excluded Drug and Alcohol Service Agents and publishes it on its website, naming providers excluded through the Public Interest Exclusion procedures of Part 40 Subpart R. So you can check that a provider has been thrown out, but there is no roster of approved vendors to shop from. Checking that list before you sign, and once a year after, is free, and it is not optional courtesy: 382.117 states that no employer shall use the services of a service agent who is subject to a public interest exclusion. 40.401(d) means each addition and removal is also published in the Federal Register. The verification steps above are the only other quality control that exists.

FAQ

Related articles

• Random Testing Rates and How the Pool Is Actually Calculated
• Why a Refusal to Test Counts the Same as a Positive
• Post-Accident Testing: When It Is Required and When It Is Not
• Alcohol Testing Thresholds: 0.02 and 0.04 Explained
• Supervisor Drug and Alcohol Training: The 60+60 Rule
• The Clearinghouse Annual Query, Step by Step
• FMCSA Clearinghouse Registration: The Full Walkthrough
• What an FMCSA Drug and Alcohol Program Actually Contains
• TruckerNavi Drug & Alcohol Program, $150 a Year