What Does “CLIA-Waived” Actually Mean? A Buyer’s Guide for Employers and Clinics
If you’ve shopped for drug test kits, you’ve seen the label “CLIA-waived” on nearly every product. It’s one of the most important terms in this industry — and also one of the most misunderstood. Here’s what it actually means, why it matters for your organization, and what you’re responsible for once you start testing.
CLIA stands for the Clinical Laboratory Improvement Amendments, a federal law that covers any U.S. facility testing human specimens to assess health or diagnose, prevent, or treat disease. That includes drug testing. If your organization tests even one urine sample on-site, CLIA legally considers you a laboratory — regardless of whether you think of yourself as one.
Oversight of CLIA is split between three federal agencies: the FDA determines how complex a given test is, CMS issues the certificates and runs the compliance side, and the CDC provides scientific and technical support to the program.
Not all lab tests are treated equally under CLIA. Tests are sorted into complexity categories — waived, moderate, and high — based on how much skill and risk of error is involved. A test earns “waived” status when the FDA determines it’s simple enough and reliable enough to be performed safely without lab-level oversight, following the manufacturer’s instructions exactly.
Rapid urine drug test cups, cassettes, and dip cards are almost all in this waived category, which is exactly what makes them practical for workplaces, clinics, and treatment programs — no lab technician or on-site laboratory required.
This is the part buyers often miss: CLIA-waived doesn’t mean unregulated. To legally perform waived testing, a facility needs a Certificate of Waiver from CMS. This is the simplest of the certificate types under CLIA, but it’s still a real requirement — not a formality you can skip because the test itself is “waived.”
Holding a Certificate of Waiver means:
If you deviate from the manufacturer’s instructions in any way — testing a sample type the instructions don’t cover, for instance — the test can be reclassified as high-complexity, which brings a much heavier compliance burden. In short: waived status protects you only when you follow the instructions precisely.
A few practical takeaways for anyone purchasing on behalf of an employer, clinic, or program:
CLIA-waived status is what makes rapid on-site drug testing possible without a full clinical laboratory — but it comes with real conditions, not just a green light to test however you like. If you’re building or scaling a testing program, confirm your certificate status first, then choose products that clearly state their regulatory classification.
Browse our CLIA-waived drug test cups and screening supplies, or contact our team if you’re not sure which classification or configuration fits your program.
Understanding DOT drug testing requirements is essential if you employ commercial drivers, pilots, transit operators, pipeline workers, or anyone else in a DOT safety-sensitive position.
If you’ve shopped for drug test kits, you’ve seen the label “CLIA-waived” on nearly every product. It’s one of the most important terms in this
Security at Stripe: Learn how Stripe handles security.
A PCI-certified auditor has audited Stripe. We’re a certified PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry. To accomplish this, we use the best-in-class security tools and practices to maintain a high level of security at Stripe.
Stripe forces HTTPS for all services using TLS (SSL), including our public website and the Dashboard to ensure secure connections:
We regularly audit the details of our implementation, including the certificates we serve, the certificate authorities we use, and the ciphers we support. We use HSTS to ensure that browsers interact with Stripe only over HTTPS. Stripe is also on the HSTS preloaded lists for both Google Chrome and Mozilla Firefox.
All card numbers are encrypted at rest with AES-256. Decryption keys are stored on separate machines. None of Stripe’s internal servers and daemons can obtain plain text card numbers but can request that cards are sent to a service provider on a static allowlist. Stripe’s infrastructure for storing, decrypting, and transmitting card numbers runs in a separate hosting environment, and doesn’t share any credentials with Stripe’s primary services including our API and website.
Why use PayPal?
Your information is secured.
When you pay with PayPal, your financial information is never shared with the seller, and you can pay using only your email address and password.
Security around the clock.
PayPal monitors every transaction 24/7 to help prevent against fraud, email phishing and identity theft. Every transaction is heavily guarded behind their next-level encryption.
If something seems suspicious, their dedicated team of security specialists is immediately on it to help protect you from fraudulent transactions. And remember, PayPal will never ask for any sensitive information from you in an email.
You can be sure that your transaction is protected and secure when you use PayPal at the DrugTestKitUSA checkout.
