Colorado MMJ Testing "Opt out"

Got a friend, she got her Colorado MMJ and her company has recently lit a match that they are going to start drug testing using hair follicle tests.

Is anyone protected in any way by health privacy laws or possible "opting" out of THC testing when you are licensed?

And if not , anyone have any good routes for her on the likelyhood of passing a hair test?