DOT requires employers to conduct random testing. Minimum percentages are determined by the regulatory agency overseeing your organization.
For employers not regulated by DOT, state law will determine whether or not they can randomly test. Consult your legal counsel on any restrictions your state may have regarding random testing.