The Dutch Data Protection Authority has published an article that affirms that testing employees on alcohol, drugs or medicines can only be performed if there is a specific legal basis to carry out such tests. The Dutch DPA states that the risks of a possible breach of privacy must be minimalized and the tests are only permitted under strict conditions. Testing employees at work on alcohol, drugs or medicines is in principle not allowed unless there is a specific legal basis to carry out tests, appropriate measures are taken to protect the fundamental rights of the employees and to minimize the privacy risks; and the strict conditions for the processing of special categories of personal data are met.