That's the point. Congress didn't make any law requiring private businesses to drug test employees it is legal because there is no law against it.
Never mind.