All articles
Compliance

One Lost Form: The Hidden Compliance Risk in Paper-Based Rail Drug and Alcohol Testing

A missing POCT or BAT form isn't just an admin headache — it's a Network Rail D&A standard breach. Here's what's at stake and how to close the gap.

By FitCheck14 April 20266 min read
One Lost Form: The Hidden Compliance Risk in Paper-Based Rail Drug and Alcohol Testing

A point-of-care test (POCT) form goes missing. Maybe it was left in a van. Maybe it got wet on site. Maybe it was filed in the wrong folder and nobody noticed until an auditor asked for it.

That single missing document can put a RISQS accreditation at risk.

This isn't a hypothetical. It's the kind of scenario that keeps Directors of drug and alcohol testing companies awake - and it happens more often than anyone wants to admit when paper is still the primary record.

What the Network Rail D&A Standard Actually Requires

The Network Rail Drug and Alcohol Standard sets out precise documentation requirements for every test conducted on Network Rail infrastructure. Compliance isn't just about conducting the test correctly - it's about proving you did.

For each test, your records need to capture:

  • POCT results - the point-of-care test form documenting substances tested, results, lot numbers, and expiry dates for each testing device
  • BAT results - the breath alcohol test form, including second-test records where applicable
  • Donor declaration - signed by the donor before testing begins, confirming consent and disclosing any prescribed medications
  • Collection anomalies - any deviations from standard procedure, documented at the time they occur
  • Chain of custody - the unbroken paper trail from sample collection through to laboratory analysis (for non-negative results)

Every one of these documents needs to be retrievable, legible, and attributable to the correct donor and test event. An audit doesn't give you time to reconstruct what happened.

Where Paper Fails

Paper-based testing workflows have a structural problem: the point at which records are created (on site, in the field, often in adverse conditions) is the point at which they're most vulnerable.

Forms get damaged. They get separated from the donor record. They get left in vehicles. They get filed incorrectly - or not filed at all if a tester is running back-to-back jobs with no time between.

Even when forms are completed correctly, the process of returning them to the office, scanning or copying them, and filing them against the correct job introduces delay and opportunity for error. And once a form is lost, it's gone.

The consequence of a missing or incomplete record isn't just an internal admin problem. Under the Network Rail D&A standard, inadequate documentation is itself a non-compliance finding. A testing company that cannot produce complete records for a disputed test - or for any test selected during a Network Rail audit - is exposed.

For RISQS-accredited providers, that exposure extends to accreditation status.

The Audit Trail Problem Is Worse Than You Think

Most testing companies that still use paper believe their records are broadly in order. The issue surfaces when they're asked to retrieve a specific document at short notice.

Network Rail can request records relating to any test conducted on their infrastructure. A Designated Person investigating a positive or non-negative result will want the full documentation set - POCT form, BAT form, donor declaration, chain of custody - and they'll want it quickly.

If your process for retrieving that documentation involves searching physical folders, calling a tester, or asking whether a form was definitely filed - you have a problem.

The audit trail has to be complete before an incident occurs. You can't rebuild it afterwards.

What a Digital Workflow Changes

A digital drug and alcohol testing platform doesn't just replace paper - it enforces the process.

With FitCheck, every test follows the same documented workflow. The POCT form, BAT form, donor declaration, and collection anomalies record are completed in sequence on a tablet or phone, linked to the donor and job record at the point of creation. Nothing gets left in a van. Nothing gets separated.

The complete documentation set is stored in the cloud immediately. It's retrievable in seconds, from anywhere, by the right people - whether that's an internal manager, a Designated Person, or a Network Rail auditor.

There's no scanning. No manual filing. No gap between test completion and record creation.

For a RISQS-accredited D&A testing provider, that's not a nice-to-have. It's the difference between being audit-ready and hoping the audit never comes.

The Cost of Waiting

Switching from paper to digital isn't complicated or disruptive. FitCheck customers have been up and running the same day. The forms are already built to the Network Rail and London Underground standards - you're not starting from scratch.

But every test conducted on paper is another record that sits outside a secure, searchable audit trail. Another form that could go missing. Another risk that compounds quietly.

If a test you conducted last month were called into question today, could you produce the complete documentation set within the hour?

If the honest answer is "probably" or "I think so" - that's the gap worth closing.

Book a free demo of FitCheck to see how the documentation workflow works in practice.


Frequently Asked Questions

What forms are required for a Network Rail drug and alcohol test? Every Network Rail D&A test requires a completed POCT form (for drug testing), a BAT form (for alcohol testing, including a second test where applicable), a signed donor declaration, and a collection anomalies record for any procedural deviations. For non-negative results, a full chain of custody record is also required.

What happens if a POCT form is lost or incomplete? An incomplete or missing POCT form is a documentation failure under the Network Rail D&A standard. This can constitute a non-compliance finding during a Network Rail audit or RISQS assessment, and may affect your ability to defend the result of a disputed test.

How long do drug and alcohol testing records need to be kept? Retention requirements vary by test outcome and client contract, but records relating to positive or non-negative results should be retained for a minimum period consistent with any potential legal or disciplinary proceedings. Digital records make long-term retention significantly easier to manage than paper.

Can FitCheck forms be used for London Underground as well as Network Rail? Yes. FitCheck includes forms built to both the Network Rail D&A standard and the London Underground standard, so providers working across both clients can manage all testing documentation in one place.

How quickly can a testing company get started with FitCheck? FitCheck customers have completed onboarding and conducted their first digital test on the same day. The forms are pre-built - there's no configuration or customisation required to be compliant from day one.

Does FitCheck support the full chain of custody process? FitCheck captures the documentation required to support chain of custody for non-negative results, including POCT form data, BAT records, and donor declaration. Integration with laboratory systems is on the roadmap.

See FitCheck replace your paper forms

A 20-minute demo is the fastest way to understand how FitCheck works for your specific operation.

Book a free demo