DRUG RELEASE

I have an agency employee who has tested positive. The employer is requesting a copy of the chain of custody to submit to the regulatory agency. Can I release that information without some type of release from the employee?
Comments
PORK