How are workplace rules made where a regulating agency (NRC, DOT) is not involved?

Each company will write or adopt its own set of rules/policies that conforms to state law.  Many companies consult with legal counsel specializing in employment law when establishing a company policy regarding drug and alcohol testing.