Yep. I work in an IT department as a .NET developer and was subjected to a drug screening prior to hire. It's a private sector business, but we have access to PII and banking information. Edit: this is in Colorado.