Employee Polygraph Protection Act
For each employee required to submit to a polygraph test, a copy of the statement provided to the employee informing him or her of the specific incident under investigation and the basis for the testing; any records identifying the employer's loss that is being investigated; records identifying the nature of the employee's access to the person/property being investigated; a copy of any notice given the examiner identifying the person(s) to be examined; a copy of any reports, questions, lists, and other records given the employer by the examiner.
Three years from the date the polygraph test is administered or, if the employee did not take the test, from the date it was scheduled. Records should be kept in a confidential location at the employee's place of employment. Disclosure of test results should be limited to the examinee, employer, court, or government agency subject to an order of the court.