Key takeaways
Colorado's State Auditor released a marijuana consumer safety audit on Oct. 19, 2026 with 14 recommendations. MED and CDPHE agreed with all 14.
Cultivators in the Reduced Testing Allowance program skipped testing on about 41,000 harvest batches from 2023 through 2025, or 26% of the batches in MED's program report. That's a coverage gap, not proof of contamination.
Products later named in a health advisory were on shelves an average of 223 days before the warning went out.
Changes MED is weighing include third-party sampling, longer video retention and tighter reduced-testing rules, with most target dates in 2027.
Colorado's marijuana testing system just got a hard look from the state's own auditor, and the fixes on the table would change how cultivators sample, test and keep records. If you rely on reduced testing or pull your own samples, this audit is a preview of where the rules may go next.
The Office of the State Auditor's performance audit, "Marijuana Consumer Safety" (report 2553P), covers the Department of Revenue's Marijuana Enforcement Division (MED) and the Colorado Department of Public Health and Environment (CDPHE). The Colorado General Assembly lists its release date as Oct. 19, 2026.
What the Colorado marijuana audit found on testing
The auditors used Metrc data on roughly 183,000 harvest batches and 310,000 production batches created from 2023 through 2025. Because of legal exemptions, cultivators didn't test about 68% of harvest batches for pesticides or 61% for microbials. Manufacturers skipped pesticide tests on about 74% of production batches.
The biggest single number comes from the Reduced Testing Allowance (RTA). Under the RTA, a business pays a fee, self-attests that it passed initial tests, then tests one batch every 30 days. The 207 RTA cultivators active at the end of 2025 didn't test about 41,000 harvest batches, 26% of almost 160,000 in MED's RTA report. Auditors also flagged that MED doesn't verify eligibility before businesses start testing less.
“Allowing businesses to select their own samples increases the risk that businesses do not pick samples that are representative of the overall quality of their marijuana products.”
Self-sampling is the other pressure point. MED's own research found that 24 other states rely on lab staff or independent third parties to collect samples, while 15 others use rules similar to Colorado's.
Inspections, records and slow health advisories
Sampling video: businesses only have to keep it for 30 days, while non-video sampling records are kept for 2 years.
Inspection gaps: of businesses active all three years, 93 cultivators (38%) and 97 manufacturers (52%) were inspected once or not at all.
Advisory timing: products named in advisories from 2023 through 2025 (48 safety notices in all) were on the market 223 days on average, improving to 5.7 months in 2025.
Shelf testing: as of May 15, 2026, MED's shelf-surveillance pilot had tested only edibles and hadn't published results.
MED's response notes the audit "did not identify evidence of widespread health and safety issues," and it called the recommendations a way to strengthen the framework.
Key dates in MED's response
Target date | What MED or CDPHE committed to |
|---|---|
January 2027 | Streamline how health and safety advisories are drafted and approved. |
March 2027 | MED and CDPHE rewrite their lab inspection and certification agreement. |
November 2027 | Outreach on recall plans, plus rulemaking to require stores to post advisory flyers and notify opted-in customers. |
December 2027 | Finish evaluating sampling and testing controls, including third-party sampling, RTA approval and video retention. |
What this means for operators
Re-check your RTA paperwork. Confirm you met the initial and ongoing tests you attested to, because the audit points to a formal approval process.
Keep sampling video longer than 30 days. It's cheap insurance if the retention rule changes or an investigator asks.
Tighten sample selection. Train and document who pulls samples, since third-party sampling is on the table.
Test your recall plan. The audit wants downstream businesses to share recall responsibility.
Stores: post MED's advisory QR flyer now. MED plans rulemaking to make posting mandatory.
Watch MED's 2027 work groups and comment when draft rules appear.
What this means for cannabis workers
Auditors visited 20 stores and found none posting advisories. In 11, MED's advisory QR flyer was missing or hard to see, and four store representatives didn't know how to look up an advisory.
If you work the counter, it's reasonable to ask your manager where advisories are checked and who pulls recalled product. The audit's MED response commits to making staff more aware of how to report safety concerns by April 2027.
The bigger picture
MED's 2026 rules take effect Nov. 1. Per Industry Bulletin 26-11, labs must flag test batches missing the minimum sample increments, and R&D pesticide testing on concentrate is banned after MED found cases where those results informed steps that could conceal prohibited pesticides.
Related on The Weekly Joint: Colorado expands craft vape advisories after health reports · More product safety coverage · Browse all issues
Sources
This article is general information, not legal advice. For questions about testing or advisories, contact the Colorado Marijuana Enforcement Division.
Get the week in cannabis business, every Tuesday
The Weekly Joint covers regulation, licensing, money and the cannabis workforce, with every story linked to its source. Free, once a week.
Prefer the scroll? Follow @weeklyjoint on Instagram.
