
The DOT Compliance Checklist for Hiring a Driver: Rule, Deadline, Retention
ON THIS PAGE8 sections
- What is actually on the federal hiring checklist?
- What has to be finished before the driver operates a CMV?
- What is on the 30-day clock?
- Where does each record live, and how long do you keep it?
- Which checklist items are not actually required?
- What repeats after the hire?
- What a complete file still cannot tell you
- Frequently asked questions
An auditor asks for the file on a driver you hired in March. You hand over the driver qualification file. He asks for the previous employers’ responses on that driver’s safety performance history, and you point at the same folder.
That is a finding. Safety performance history does not live in the driver qualification file. 49 CFR 391.53 puts it in a separate driver investigation history file, “maintained in a secure location with controlled access,” limited to people “involved in the hiring decision or who control access to the data,” and used “only for the hiring decision” (eCFR).
Most DOT compliance checklists in circulation go wrong the same three ways. They merge files the regulations keep apart. They hang deadlines on the offer date, when the rule counts from the date employment begins. And they still list a document FMCSA deleted in 2022.
What follows is the federal hiring sequence with the rule, the deadline and the retention period on every line, and an honest mark on which lines are required and which are only sensible. Federal only.
What is actually on the federal hiring checklist?
Eleven required checks across two deadlines, plus recurring obligations that start the day the driver is on the payroll. Each row is worked through below.
| Check | Rule | Deadline | Required? |
|---|---|---|---|
| Signed employment application | 391.21 | Before qualification; DQ file item (b)(1) | Required |
| 10-year CMV employment history requested | 383.35(b)-(c) | At the time of application | Required for CDL applicants |
| Written notice of due-process rights | 391.23(i)(1) | Before any hiring decision | Required |
| Consent for previous-employer drug and alcohol history | 391.23(f)(1) | Before the request goes out | Required |
| Pre-employment Clearinghouse full query | 382.701(a) | Before any safety-sensitive function | Required |
| Verified negative pre-employment drug test | 382.301(a) | Before any safety-sensitive function | Required; narrow exception at 382.301(b) |
| Medical qualification verified and filed | 391.23(m) | Before allowing the driver to operate a CMV | Required |
| Road test, or an accepted equivalent | 391.31, 391.33 | Before qualification | Required; the CDL may substitute |
| Drug and alcohol policy issued, receipt signed | 382.601(a)(1), (d) | On hire | Required |
| MVR from each licensing authority, prior 3 years | 391.23(a)(1), (b) | Within 30 days of the date employment begins | Required |
| Safety performance history investigation | 391.23(a)(2), (c), (d) | Within 30 days of the date employment begins | Required |
| Pre-employment alcohol test | 382.301(d) | Only after a contingent offer | Optional |
| PSP report | 49 U.S.C. 31150 | None; pre-employment use only | Optional |
| List of traffic convictions from the driver | Formerly 391.27 | None | Not required since May 9, 2022 |
Two structural notes. “Safety-sensitive function” is broader than driving — the Clearinghouse query and the negative test are keyed to it, not to the moment the truck moves, so a driver doing pre-trip work in the yard is already inside it. And “employment begins” is not “offer accepted”, which is how a carrier starting the 30-day clock at the offer runs late without noticing.
What has to be finished before the driver operates a CMV?
Everything that makes the driver qualified under 49 CFR 391.11(b), plus the two drug and alcohol gates. 391.11(b) requires that the driver is at least 21, can read and speak English sufficiently to converse with the public and understand highway traffic signs, can safely operate the type of CMV he drives, is physically qualified under subpart E, holds a valid CMV licence “issued only by one State or jurisdiction,” is not disqualified under 391.15, and has passed a road test or presented an accepted equivalent.
Take a complete, signed application
What you do: collect the 391.21 application, signed, carrying three years of addresses, accidents, violations and employers. For a CMV driver under part 383 it must also list CMV employers for “the 7-year period preceding the 3 years” — ten years in total. Separately, 383.35(b)-(c) requires you to request those ten years “at the time of application for employment.”
Status: required. It is item (b)(1) of the qualification file.
The gotcha: that is two obligations — 391.21 governs what the form contains, 383.35 governs what you ask for, and a three-year form satisfies neither. See the 391.21 application and the driver application checklist.
Give the written due-process notice, then take the consents
What you do: before any hiring decision, notify the applicant in writing — “via the application form or other written document” — of three rights over what previous employers send you: to review it, to have errors corrected and re-sent, and to attach a rebuttal where he and the previous employer cannot agree (391.23(i)(1)). Then take written consent for the previous-employer alcohol and controlled substances inquiry (391.23(f)(1)) and specific consent for the Clearinghouse query (382.701(a)(2)).
Status: required, all three.
The gotcha: refusal is dispositive. If the driver refuses either consent, 391.23(f)(1)-(2) says you “must not permit the driver to operate a commercial motor vehicle.” And if he later asks to see what came back, you have five business days from the written request to produce it (391.23(i)(2)).
Run the pre-employment Clearinghouse query
What you do: run a full query before employing the driver to perform a safety-sensitive function. A full query releases the information to you and requires the driver’s specific consent (382.701(a)(1)-(2)).
Status: required.
The gotcha: it is a snapshot, not a clearance — under 382.701(c), FMCSA notifies you if reportable information is entered about that driver during the 30 days immediately following your query. Note also what it replaced: since January 6, 2023, employers use the Clearinghouse to satisfy 391.23(e) as to FMCSA-regulated previous employers (382.413(b)). Two exceptions survive — an employee with an incomplete follow-up testing plan, where you request the plan directly, and an applicant covered by a non-FMCSA DOT agency’s programme, where you still ask that employer directly (382.413(c)).
Get a verified negative pre-employment drug test
What you do: obtain a verified negative controlled substances result from the MRO or C/TPA before the driver performs any safety-sensitive function (382.301(a)). Ask the applicant directly, as 49 CFR 40.25(j) requires, whether he tested positive or refused on any pre-employment test in the past two years with an employer he applied to but did not work for.
Status: required. The 382.301(b) exception is narrow: a compliant testing programme within the previous 30 days, and either a test within the past six months or 12 months in that random pool, and your assurance that no prior employer you know of has a violation record within the previous six months. All three prongs, documented.
The gotcha: if he admits a positive or refusal on the 40.25(j) question, you may not use him for safety-sensitive functions “until and unless” he documents completion of the return-to-duty process. That binds you even though it appears on no report you ordered.
Verify medical qualification, and file it
What you do: 391.23(m)(1) is explicit that this happens first — obtain the medical examiner’s certificate and any medical variance, verify National Registry listing where that still applies, and place the records in the qualification file “before allowing the driver to operate a CMV.” For CDL holders, 391.23(m)(2) requires verifying from the CDLIS motor vehicle record the self-certified operation type and valid medical certification, again before he drives.
Status: required.
The gotcha: two provisions ran only through June 22, 2025 and half the checklists online still carry them — the 15-day paper-certificate allowance for CDL holders, and the duty to verify National Registry listing for CDL drivers. Both are written into 391.51(b)(6)(ii) and (b)(8)(ii) with that end date, following FMCSA’s extension of the Medical Examiner’s Certification Integration compliance date to June 23, 2025 (86 FR 32643). On or after that date the examiner issues a paper certificate only to a person who “will not be operating a commercial motor vehicle that requires a commercial driver’s license or a commercial learner’s permit” (391.43(g)(2)(ii)), and where FMCSA’s electronic data conflicts with a paper certificate the electronic record controls (391.23(m)(4)). The DQ file article covers what changed inside the folder.
Road test, or accept the equivalent deliberately
What you do: either give your own road test under 391.31, or accept a valid CDL as equivalent under 391.33(a).
Status: required, but the route is yours. Your own test means both the original signed road test form and the original or a copy of the certificate go in the file (391.31(g)). Accepting the licence means a legible copy of it goes in the file (391.33(b)).
The gotcha: the equivalence excludes “double/triple trailer or tank vehicle endorsements” (391.33(a)(1)) — if the job involves those, the licence does not substitute. And 391.33(c) lets you require your own road test from anyone presenting a licence as equivalent.
Issue the drug and alcohol policy and keep the signed receipt
What you do: distribute the written policy and educational materials required by 382.601 to each newly hired driver and keep the signed receipt (382.401(c)(5)(ii)).
Status: required.
The gotcha: cheap, universally forgotten, and easy to test — an investigator asks for the signed receipt, not for the policy.
What is on the 30-day clock?
Two items, both counted from the date employment begins, both with a documented good-faith fallback when the other side never answers.
| Item | Rule | Where it goes | If nobody responds |
|---|---|---|---|
| MVR from each licensing authority where the driver held a licence in the preceding 3 years | 391.23(a)(1), (b) | Qualification file, item (b)(2) | Document a good-faith effort to obtain it |
| Safety performance history from every employer who used the driver on a CMV in the previous 3 years | 391.23(a)(2), (c), (d) | Investigation history file, 391.53 | Document the failure to contact, or to respond |
Pull the MVR early by all means — a bad record is what you want before an offer, and the MVR check walkthrough covers why a single-state pull is usually incomplete. Just do not write “before hire” into your procedure as though that is the rule. What gets cited is the 30-day file entry.
The investigation covers, at minimum, “general driver identification and employment verification information” plus the accident data elements in 390.15(b)(1) for the three years before the application (391.23(d)). The 391.53 file must hold the driver’s written authorization plus each employer’s response or documented good-faith efforts, and 391.23(c)(2) fixes what that written record has to contain: “the previous employer’s name and address, the date the previous employer was contacted, or the attempts made, and the information received about the driver from the previous employer.”
Three details decide most findings here:
- A driver with no DOT-regulated employment still generates paperwork. 391.23(c)(4) requires “documentation that no investigation was possible” in the file within the same 30 days.
- Due-process time does not eat your 30 days. Time spent letting the driver review, correct or rebut what an employer sent “is separate and apart from this 30-day requirement” (391.23(c)(1)).
- Part 40 sets a harder outer wall. 40.25(d) bars the employee from safety-sensitive functions after 30 days from first performance unless you have the previous-employer testing information or documented good-faith efforts. That lookback is two years (40.25(b)), not three.
When the request comes to you instead, 391.23(g) binds you: respond within 30 days, respond even when there is nothing to report, and keep a record of each request and response for one year.
Where does each record live, and how long do you keep it?
Four locations, four access rules, and a retention clock that is longer than most checklists say.
| Record | Access | Retention | Rule |
|---|---|---|---|
| Driver qualification file | No special restriction; may be combined with the personnel file | Employment plus three years | 391.51(a), (c) |
| Annual MVR, annual review note, medical certificate or CDLIS MVR, medical variance, National Registry note | Same | May be removed three years after the date of execution | 391.51(d) |
| Application, hire-time MVR, road test certificate | Same | Not purgeable at three years | 391.51(c)-(d) |
| Driver investigation history file | Secure location, controlled access; hiring decision only | Employment plus three years | 391.53 |
| Your reply to another carrier’s request | — | One year | 391.23(g)(4) |
| Clearinghouse query records | — | Three years; a valid Clearinghouse registration satisfies the duty | 382.701(e) |
| Driver’s Clearinghouse consent | — | Three years from the date of the last query | 382.703(a) |
| Positive tests, refusals, alcohol results of 0.02 or greater | Secure location, controlled access | Five years | 382.401(b)(1) |
| Collection process records | Same | Two years | 382.401(b)(2) |
| Negative and cancelled controlled substances results | Same | One year | 382.401(b)(3) |
| Part 40 previous-employer information | — | Three years from first performance of safety-sensitive duties | 40.25(i) |
| Accident register | — | Three years after the date of each accident | 390.15(b) |
One access rule is asymmetric and worth memorising: your insurer may see the 391.53 file “except the alcohol and controlled substances data” (391.53(a)(1)), and 391.23(k)(2) states outright that you “may not provide any alcohol or controlled substances information to the prospective motor carrier employer’s insurer.” Production deadlines differ too — drug and alcohol records within two business days of an FMCSA request (382.401(d)); records held at a regional office or driver work-reporting location within 48 hours at the principal place of business, excluding weekends and federal holidays (390.29(b)).
The 391.51(d) row is where audits are won and lost. Only five categories may go at the three-year mark, and the application, the hire-time MVR and the road test certificate are not among them. A carrier that purges “everything older than three years” has just thinned three permanent items out of the file.
Which checklist items are not actually required?
More than you would expect, and every one is on somebody’s laminated wall chart.
The annual list of traffic convictions. 49 CFR 391.27 was rescinded by a final rule effective May 9, 2022, and FMCSA wrote plainly that “there no longer is any document for an employer to place in the driver qualification file” (87 FR 13192). The same rule preserved your right to ask: eliminating 391.27 “does not preclude employers from requiring their drivers to provide a list of their traffic convictions as a condition of employment.” Company policy, not a federal file item.
An ELDT certificate. Entry-level driver training is a precondition to the state skills or knowledge test under 383.71(a)(10) and (b)(11), verified by the licensing agency. It is not in the eight-item list at 391.51(b), and drivers issued the relevant CDL or endorsement before February 7, 2022 are not subject to it at all (380.603(b)).
A photocopy of the CDL as a standalone item. Required only under 391.33(b), and only where you accepted the licence as the equivalent of a road test.
The PSP report. 49 U.S.C. 31150(c) states that use of the programme “shall not be mandatory and may only be used during the preemployment assessment of an operator-applicant,” and 31150(b)(2) bars a screening without written consent. A good input, not a requirement — and not lawfully usable on drivers you already employ. See how to read one.
A pre-employment alcohol test. 382.301(d) opens “An employer may, but is not required to.” If you do it, treat every covered employee the same, test only after a contingent offer, and let nobody start at 0.04 or above.
The DOT physical long form. The Medical Examination Report is retained by the medical examiner for at least three years (391.43(i)). The certificate is your file item; the long form is not.
A one-year hold on rejected applicants’ files. No FMCSA rule creates it — 391.51(a) attaches only to “each driver it employs.” The one-year figure comes from EEOC’s 29 CFR 1602.14. Keep the records; just do not cite DOT as the reason.
What repeats after the hire?
| Recurring item | Frequency | Rule |
|---|---|---|
| MVR inquiry to each licensing authority | At least once every 12 months | 391.25(a) |
| Review of the driving record, with a note | At least once every 12 months | 391.25(b), (c)(2) |
| Clearinghouse query | At least once every 12 months; a limited query is permitted | 382.701(b)(1)-(2) |
| Medical recertification | Maximum 24 months; 12 months for exempt intracity zone, insulin-treated diabetes and vision-alternative certifications | 391.45 |
The annual inquiry and the annual review are two duties, and the note is more specific than people write it: 391.25(c)(2) requires “the name of the person who performed the review… and the date of such review.” The driver’s signature is not what the rule asks for, and the review must give “great weight” to violations such as speeding, reckless driving and operating under the influence (391.25(b)(2)).
The annual Clearinghouse query need not be full. 382.701(b)(2) permits a limited query, and consent to limited queries “may be effective for more than one year” — but if one shows information exists, you have 24 hours to run a full query or pull the driver off safety-sensitive functions (382.701(b)(3)). Two smaller duties belong on the same calendar: a driver whose licence is revoked, suspended or withdrawn must tell you “before the end of the business day following the day the driver received it” (391.15(b)(2)), and reportable information you obtain goes to the Clearinghouse “by the close of the third business day” (382.705(b)(1)).
One number this article will not print: the random testing minimum annual percentage rate. The Administrator can change it by Federal Register notice, effective January 1 of the following calendar year (382.305(c), (f)). Pull the current rate from FMCSA rather than from any checklist, including this one. Same for PSP and Clearinghouse fees and civil penalty amounts — all move.
What a complete file still cannot tell you
Work every line above correctly and you have a file made entirely of reportable events. A conviction that survived a court. A positive test. A crash that met the 390.15(b)(1) threshold. A violation an inspector wrote down. Each exists because somebody was legally required to record it.
The behaviour that decides whether a hire works out sits mostly below that line. A driver who abandoned a loaded trailer at a terminal produces no MVR entry. Three Monday no-shows produce no inspection. The mandated investigation does not reach any of it: 391.23(d) sets the minimum at employment verification plus accident data, and the Clearinghouse carries drug and alcohol violations. Neither asks how the driver actually worked. The first 24 hours of an abandonment and the real cost of a bad hire are both built from events that never became a federal record.
That gap is what a behavioural layer is for. On cdlscan, carriers write reviews of drivers they actually employed, tied to the period they employed them, so observations that never became reportable events still leave a trace — reliability, communication, how equipment came back, whether the contract was finished. Carrier-written driver reviews covers the format.
Be exact about the boundary. This sits on top of the required record and never in place of any part of it — the MVR inquiry, the safety performance history investigation, the Clearinghouse query, the drug test and the qualification file are legally mandatory, and nothing here substitutes for one of them. If you intend to rely on third-party information about a candidate as a factor in a hiring decision, ask the provider which category of information they consider it under the Fair Credit Reporting Act and confirm with counsel which obligations attach. The FTC’s guidance on using consumer reports is where that conversation starts.
Frequently asked questions
Does the MVR have to be in hand before I hire the driver?
No. 391.23(a)(1) requires an inquiry “within 30 days of the date the driver’s employment begins,” to each licensing authority where he held a licence or permit during the preceding three years, and 391.23(b) requires the copy in the qualification file within that same 30 days. Pulling it before an offer is sound practice. If no record comes back from an authority that owed you one, document a good-faith effort.
Where do the previous-employer responses go?
In the driver investigation history file under 391.53, not the qualification file. Secure location, controlled access, readable only by people involved in the hiring decision or who control access to the data, used only for the hiring decision. Your insurer may see it — except the alcohol and controlled substances data.
How long do I keep a qualification file after the driver leaves?
Three years after employment ends, on top of the whole period of employment (391.51(c)). Only the five categories in 391.51(d) may be removed at three years: the annual MVR, the annual review note, the medical certificate or CDLIS MVR, any FMCSA medical variance, and the National Registry verification note. The application, the hire-time MVR and the road test certificate stay.
Do I have to collect a list of traffic convictions from each driver every year?
Not since May 9, 2022. FMCSA rescinded 391.27 and stated there is no longer any such document for an employer to place in the qualification file. You may still require the list as a condition of employment — label it company policy in your procedures, not a federal requirement.
What about drivers furnished by another carrier, or working for several?
Both have their own path. Under 391.65 you may rely on the furnishing carrier’s written certification instead of building the usual file, provided you contact that carrier to verify the certificate and retain a copy for three years; the certificate may not run longer than two years, or the expiry of the driver’s medical certificate if earlier. For multiple-employer drivers, 391.63(a) excuses the application, the 391.23 investigations and both annual driving-record steps, but 391.63(b) still makes you record the driver’s name, social security number and licence details and keep them three years after employment ceases.
General compliance information for motor carrier hiring and safety staff, not legal advice. The regulations cited here were checked against ecfr.gov, federalregister.gov and govinfo.gov in July 2026, and they change. Verify any section on ecfr.gov before building policy on it, and note that this covers federal requirements only. Last reviewed 2026-07.