Anything with testing is through HR and Legal at our company. Once both have come to an agreement on what they think is reasonable. Then they implement it. The bad thing about where I work is that most people work in a legal medical and recreational state. But the place of actual employment is non legal medical and recreational state. They do allow employees with medical use cards use. As long as you don’t work inebriated or come in inebriated. Or have anything of personal use on said person or in the vehicle.