Labor and Employment

Substance Use Policies and Legal Cannabis: Balancing Compliance and Judgment in a Rapidly Shifting Landscape

April 24, 2026

By Sarah Goodman

Substance Use Policies and Legal Cannabis: Balancing Compliance and Judgment in a Rapidly Shifting Landscape

For years, workplace substance use policies were easy to administer and easy to defend. A positive drug test typically ended the analysis.

That is no longer true.

Legal cannabis has introduced a level of complexity that many employers have not fully absorbed. The issue is not whether employers can maintain drug-free workplaces. They can. The issue is whether their policies reflect the legal distinctions that matter now and whether their decision-making will hold up under scrutiny.

In 2026, the risk is not permissiveness. It is imprecision.

The instinct to rely on federal law is understandable, but often misplaced.

Cannabis remains illegal under the Controlled Substances Act. For certain employers, particularly those subject to the U.S. Department of Transportation, that fact continues to dictate outcomes. Safety-sensitive roles remain tightly regulated, and state law does not override those obligations.

But for most employers, federal law does not answer the questions that actually arise in practice. State law increasingly does.

The critical mistake is treating federal illegality as a blanket justification for broad policies or reflexive discipline. In many jurisdictions, that approach is no longer defensible.

State law has shifted the analysis in a meaningful way.

Across the country, legislatures have moved beyond legalization and into regulation of the employment relationship itself. In practical terms, that means employers are now operating within statutory frameworks that protect lawful, off-duty cannabis use and limit how employers can respond to it.

The implications are significant.

A positive test result, standing alone, is often no longer enough. Hiring decisions based on off-duty use are increasingly restricted. Policies that fail to distinguish between lawful conduct and workplace impairment are becoming harder to defend.

This is not a marginal development. It is a structural change in how substance use issues are evaluated.

The legal question is no longer “did the employee use cannabis.”

Questioning whether an employee used cannabis is no longer valid. It is whether the employee was impaired at work and whether the employer can prove it.

That distinction is where many policies break down.

Traditional testing methods detect past use, not current impairment. As a result, employers who continue to rely exclusively on test results are often relying on evidence that does not answer the legally relevant question.

State guidance is increasingly explicit on this point. Employers are expected to base decisions on observable, contemporaneous indicators of impairment that affect performance or safety. That requires more than suspicion and more than a laboratory result.

It requires judgment, documentation, and consistency.

Employers who have not trained managers to identify and articulate those indicators are, in effect, delegating critical legal decisions to individuals who are not equipped to make them.

These issues rarely exist in isolation.

Substance use questions often intersect with obligations under the Americans with Disabilities Act and parallel state laws.

That is where the analysis becomes more nuanced.

An employee’s conduct may be unprotected. The underlying condition may not be. Treating those as the same issue is a common and costly mistake.

Medical cannabis adds another layer. While federal law does not require accommodation of marijuana use, state law may impose obligations that require a more individualized assessment. Employers who default to categorical rules risk overlooking when the law requires a closer look.

This is an area where rigid policies tend to create, rather than reduce, exposure.

Remote work has made outdated policies harder to defend.

The shift to remote and hybrid work has exposed another weakness in legacy substance use policies.

Rules that were drafted with a physical workplace in mind do not always translate well to a workforce that operates across locations and, in many cases, from home. The relevant inquiry is no longer where the employee is. It is whether the employee is fit for duty during working time.

That sounds like a subtle distinction. It is not.

Policies that focus on presence rather than performance are increasingly out of step with both how work is performed and how the law evaluates these issues.

What a defensible approach actually looks like.

Employers who are managing this well tend to have one thing in common. Their policies are not just updated. They are deliberate.

They distinguish clearly between off-duty conduct and on-duty expectations. They define impairment in terms that can be observed and documented. They use testing in a way that aligns with legal limits rather than as a default response. And they train managers to make decisions that will withstand scrutiny after the fact, not just in the moment.

Just as importantly, they recognize when a situation calls for legal analysis rather than a reflexive policy application.

The takeaway.

This is one of those areas where the law has moved faster than most workplace practices.

Employers who continue to rely on familiar approaches are not necessarily being careless. But they are often operating with assumptions that no longer reflect the legal landscape.

That is where risk accumulates.

A well-drafted policy is part of the solution. It is not the entire solution. Alignment between policy, training, and decision-making is what ultimately determines whether an employer is protected or exposed.

In a landscape that continues to evolve, getting that alignment right is not simply a compliance exercise. It is a strategic one.

Related People

Related Services

  • Overview
  • People
  • Labor and Employment Law Blog
  • Publications & News
  • Events

Firm Highlights

  • Events
    AIA Tri-State Conference
    Princeton will serve as the backdrop for three days of connection, learning, and design leadership. From keynotes to tours to the Tri-State Design Awards, this year’s conference is designed to go far beyond education sessions. Kick off the week with pre-conference intensives and individual state component Design Award celebrations, followed by three days of education, inspiration, networking, and design excellence at the 2026 AIA Tri-State Conference—featuring pre-conference intensives, three keynote speakers, 25 education sessions, curated tours, an expo, spec academies, and the AIA Tri-State Design Awards—bringing together architects and design professionals from New Jersey, New York, and Pennsylvania to connect, learn, and celebrate the best of the profession. G2. Designing Secure Practices: Cybersecurity, Data Privacy, Contractual Provisions, and Insurance Risks for Architects (4:00 PM - 5:30 PM) Architects and design professionals increasingly rely on cloud platforms, BIM software, and digital tools to manage sensitive data, creating cybersecurity and privacy risks. A single incident can trigger liability claims, regulatory obligations, reputational harm, and insurance challenges. Yet many firms underestimate how contracts, insurance, and internal practices intersect during a breach. This program offers legal and insurance perspectives on cyber risk in architecture, examining liability exposure, risky contract provisions, and mitigation strategies. A cyber insurance expert will explain policy responses, coverage gaps, coordination with professional liability, and best practices for aligning insurance with contractual risk and protecting firms from evolving cyber threats. Learning Objectives: Identify key cybersecurity and data privacy risks faced by architecture firms and explain how these risks can impact professional liability and project outcomes. Analyze common contractual provisions to determine which clauses may increase exposure to cyber incidents and propose strategies to mitigate these risks. Evaluate the scope and limitations of cyber insurance policies, including coordination with professional liability coverage, to determine how a policy would respond in a breach scenario. Develop actionable risk management strategies by integrating legal, contractual, and insurance considerations to protect sensitive client and project data.
  • Events
    The 2026 Economic, Tax, and Accounting Updates
    We are looking forward to the Mid-Atlantic CFO Roundtable's next event on November 13, 2026. This is a program with topics built for Finance Executives. We are extremely fortunate to have three excellent speakers: Dr. Daraius Irani, Vice President of Business and Public Engagement at Towson University; Mike Stankus, Tax Office Managing Principal at BDO; and Daniel Wahlberg, Managing Partner of Acclare Solutions. The economy is rapidly changing with various factors driving it. The November 3rd midterm elections may also have an impact. Our three expert presenters will discuss the ramifications of the election, and the current year updates to GAAP financial reporting and Federal and State income taxes. Please join us for what will surely be an informative and timely discussion. Meet Our Speakers: Daraius Irani, Ph.D. • Towson University Vice President, Business & Public Engagement Dr. Daraius Irani serves as Vice President of Business and Public Engagement at Towson University as well as the chief economist for the Regional Economic Studies Institute (RESI) at Towson University, a policy group providing economic, fiscal impact, and policy analysis to public and private entities.  Dr. Irani is often called upon to provide economic presentations to organizations across Maryland. He has appeared on numerous television programs and in local and regional print media. Dr. Irani holds a Ph.D. in economics from University of California, Santa Barbara. Dan Wahlberg • Acclare Solutions Managing Partner With over 28 years of experience, Dan Wahlberg is a recognized leader in audit and assurance for the Mid-Atlantic’s middle market business community. As a licensed CPA in Maryland and Virginia, Dan has led assurance practices at top regional firms, including serving as Baltimore Audit Managing Partner and Assurance Practice Leader at BDO USA in Baltimore and as Partner and member of the Management Committee at Hertzbach & Company P.A which merged into BDO in 2020. His expertise centers on delivering clarity, strategic guidance, and proactive solutions to middle-market businesses across Baltimore and beyond. His entrepreneurial spirit has led him to begin a new CPA firm this year with four other CPAs serving the business community. Dan holds a Bachelor of Science in Accounting from Rutgers University and began his career at PWC in New York. He is also deeply engaged in the community, previously serving as President of ACG Maryland and current Board member and as Audit Committee Member for The Associated: Jewish Federation of Baltimore.  Mike Stankus • BDO USA LLP Tax Office Managing Principal Mike Stankus is the Tax Office Managing Principal for the firm’s Baltimore office. He has more than 16 years of experience providing tax planning and preparation and management advisory services for his clients. Mike focuses on advising privately held businesses and their owners on effective growth and tax strategies. He also performs various engagements for mergers and acquisitions and complex cost accounting projects and projections. In addition, he represents various government contracting clients before the DCAA and assists with FAR compliance. Mike’s areas of concentration include working with government contractors, professional service firms, construction companies, and homebuilders.