When your organisation first implemented its drug and alcohol testing program, a spreadsheet probably made perfect sense. A few columns for employee names, test dates, results, and perhaps a notes field for anything unusual. Simple, accessible, and free.

But testing programs do not stay small. As your workforce grows, your locations multiply, and your compliance obligations become more demanding, that spreadsheet quietly transforms from a convenient tool into a significant liability.

If your organisation is still managing drug and alcohol testing records in Excel or Google Sheets, it is worth understanding the risks you may be carrying without realising it.

The Audit Trail Problem

In a Fair Work Commission hearing or a SafeWork investigation, you may be asked to demonstrate that your testing program is genuinely random, consistently applied, and properly documented. Spreadsheets make this exceptionally difficult.

Consider the questions an investigator or commissioner might ask:

• Can you prove that every employee had an equal chance of being selected?
• Who modified this record, and when?
• Was this result entered on the day of testing, or backdated?
• How do you ensure that selection data was not viewed or altered before testing took place?

Spreadsheets have no reliable audit trail. Cells can be edited without any record of the change. Rows can be deleted. Formulas can be overwritten. In a legal proceeding, this lack of integrity can undermine your entire program — regardless of how diligently you have been managing it day to day.

Random Selection That Is Not Random

Many organisations use Excel’s RAND() function or similar methods to conduct random selections. While this may appear random, it presents several issues:

• Reproducibility. RAND() recalculates every time the spreadsheet is opened or edited. The original selection cannot be reproduced or verified after the fact.
• Manipulation risk. There is nothing preventing someone from refreshing the formula until a preferred result appears.
• Incomplete pools. If the employee list is not scrupulously maintained — accounting for new starters, terminations, and leave — the selection pool is inaccurate, and the randomness is compromised.

A selection process that cannot be independently verified is a selection process that may not hold up when challenged.

Data Security and Privacy Compliance

Drug test results are sensitive health information. Under the Privacy Act 1988 and applicable state health records legislation, organisations have strict obligations around how this data is collected, stored, accessed, and eventually destroyed.

Spreadsheets stored on shared drives, emailed between managers, or saved on individual laptops present obvious risks:

• Access control. Who can open the file? In most cases, anyone with access to the shared drive or email thread.
• Version control. Multiple copies of the same spreadsheet, each potentially containing different data, create confusion and increase the risk of a breach.
• Data loss. A deleted file, a corrupted drive, or a lost laptop can mean years of testing records are gone permanently.
• Retention compliance. When records reach their retention limit, can you selectively and verifiably destroy them? With spreadsheets, this is rarely straightforward.

Reporting Becomes a Burden

As your program matures, stakeholders will expect reporting. The board wants a compliance summary. The safety team wants positive result trends by site. The HR director wants to know testing frequency by department. Your insurer wants evidence that the program is active and consistent.

In a spreadsheet, every report is a manual exercise. Pivot tables, filters, and formulas must be rebuilt or maintained. Data from multiple sheets or files must be consolidated. The person who built the original spreadsheet may no longer be with the organisation, and their formulas may not be well understood by anyone else.

This reporting burden grows with every test conducted. What started as a ten-minute task becomes a half-day exercise, repeated monthly or quarterly.

The Human Error Factor

Spreadsheets rely entirely on manual data entry and manual process adherence. Common errors include:

• Transposed digits in employee IDs or dates.
• Results entered against the wrong employee.
• Duplicate entries or missing entries.
• Formulas broken by accidental edits.
• Employees omitted from selection pools due to outdated lists.

Any one of these errors can compromise the integrity of a specific test or an entire selection event. In a compliance-critical program, the cost of even a single error can be significant.

When to Make the Switch

There is no single trigger point, but if any of the following apply to your organisation, your spreadsheet has likely reached its limits:

• You are testing across more than one location.
• You have more than 50 employees in your testing pool.
• Multiple people need to access or update testing records.
• You are required to produce compliance reports for internal or external stakeholders.
• You have had a positive result challenged or disputed.
• You are spending more than an hour per month on testing administration.

What to Look for in a Testing Management Platform

If you are evaluating purpose-built software to replace your spreadsheet, prioritise the following capabilities:

• Automated random selection with a verifiable, auditable algorithm.
• Immutable records — test results that cannot be silently edited or deleted.
• Role-based access control — ensuring only authorised personnel can view sensitive results.
• Integrated reporting — compliance reports, trend analysis, and exports available on demand.
• Employee management — a live, accurate roster that feeds directly into your selection pool.
• Cloud-based storage with encryption, automatic backups, and data sovereignty in Australia.

The Bottom Line

Spreadsheets are not inherently bad tools. They are simply the wrong tool for managing a compliance-critical program with legal, safety, and privacy implications. The risk is not that your spreadsheet will fail dramatically — it is that it will fail quietly, in ways you may not discover until you are in a hearing room or an audit.

If your testing program has outgrown its spreadsheet, FairTest is purpose-built to manage every aspect of workplace drug and alcohol testing — from random selections and test logging through to compliance reporting. Start your free trial and see the difference in your first selection round.