Colorado Cannabis Testing Requirements: A Complete MED Compliance Guide
Colorado pioneered recreational cannabis legalization in 2012, and over a decade later, it remains one of the most mature and well-regulated cannabis markets in the nation. The state’s Marijuana Enforcement Division (MED), part of the Colorado Department of Revenue, oversees all commercial cannabis activity, including comprehensive testing requirements that every licensee must follow.
For cultivators, manufacturers, and distributors operating in Colorado, understanding MED testing requirements is essential for maintaining compliance, avoiding costly batch failures, and protecting consumers. This guide covers everything you need to know about Colorado’s cannabis testing landscape in 2026, including recent rule changes effective January 5, 2026, and the surveillance testing program launched in 2025.
Colorado requires all regulated marijuana products to undergo testing for potency (including delta-8, delta-10, and exo-THC), microbial contaminants (including Aspergillus), mycotoxins, residual solvents, pesticides, heavy metals, and water activity. Testing must be conducted by MED-licensed, ISO/IEC 17025 accredited laboratories. The MED conducts surveillance testing and has issued multiple Health & Safety Advisories in 2025-2026 for products exceeding contaminant limits.
Colorado’s Cannabis Regulatory Framework
The Marijuana Enforcement Division (MED)
The Marijuana Enforcement Division (MED) is the regulatory body responsible for licensing, regulating, and enforcing Colorado’s cannabis laws. The MED sets testing standards, approves testing laboratories, conducts surveillance testing of products on dispensary shelves, and issues Health & Safety Advisories when products are found to exceed acceptable contaminant limits.
Dual Markets: Medical and Retail
Colorado maintains separate licensing systems for medical marijuana and retail (adult-use) marijuana, though many testing requirements apply to both. The MED regulates:
- Medical marijuana: Licensed under 1 CCR 212-1
- Retail marijuana: Licensed under 1 CCR 212-3
- Testing facilities: Must be licensed by MED and certified by the Colorado Department of Public Health and Environment (CDPHE)
Recent Regulatory Updates (2025-2026)
Colorado’s testing regulations continue to evolve. Key recent changes include:
- January 5, 2026 rule revisions: New permanent rules affecting licensing, recordkeeping, surveillance, testing, and operational procedures went into effect
- December 2025 testing rule updates: Industry Bulletin 25-16 announced new and revised testing rules, aligning some cannabis testing standards with hemp testing requirements
- Surveillance Testing Program (September 2025): Industry Bulletin 25-11 announced the MED’s surveillance testing program to verify product safety on dispensary shelves
- Pesticide Testing Compliance (January 2026): Industry Bulletin 26-01 reinforced pesticide testing compliance requirements
- Production batch concept: Regulations now use “production batch” in many cases where “harvest batch” was previously used, aligning regulatory language with MED’s approach to inventory tracking
What Colorado Tests For: Complete Testing Requirements
Colorado requires all regulated marijuana products to undergo testing at a state-licensed testing facility before sale. Testing laboratories must be licensed by the MED and accredited to ISO/IEC 17025 standards.
Cannabinoid Potency
Test: Delta-9 THC, delta-8 THC, delta-10 THC, exo-THC, CBD, and more
Expanded potency since July 2022
Microbial Contaminants
Test: Total yeast/mold, E. coli, Salmonella, Aspergillus
Aspergillus testing since July 2022
Mycotoxins
Test: Aflatoxins, ochratoxin A
Produced by certain molds
Residual Solvents
Test: Butane, propane, ethanol, toluene, benzene, etc.
Specific PPM limits
Pesticides
Test: Prohibited pesticides list
IB 26-01 reinforced compliance
Heavy Metals
Test: Lead, arsenic, cadmium, mercury
Elemental impurities
Water Activity
Test: Available water for microbial growth
For flower, trim, kief, shake
Cannabinoid Potency Testing in Colorado
Expanded Potency Testing
Since July 2022, Colorado has required expanded potency testing. Testing facilities must now report delta-8 THC, delta-10 THC, and exo-THC in addition to the five cannabinoids previously required. The definition of “Total THC” has been updated to include these additional cannabinoids.
Note: In Metrc, “THC” and “THCa” are now referred to as “delta-9 THC” and “delta-9 THCa” respectively. Businesses should ensure their procedures for calculating and labeling Total THC accurately reflect the current MED Rule definition.
What Must Be Reported
- Flower and trim: Total THC and Total CBD as percentages
- Concentrates: Total THC and Total CBD as percentages
- Infused products: Total milligrams per unit and per package; must state whether content is homogenous
- Homogeneity standard: Products are considered homogenous if results do not vary by more than ±15%
Potency Testing Integrity
The MED and CDPHE take potency accuracy seriously. In 2025, at least one Colorado cannabis testing facility was fined $200,000 and lost its license after investigators concluded the lab was inflating potency data. The MED and CDPHE have co-hosted multiple Science & Policy meetings to address licensee concerns about potency testing and contaminants.
Microbial Contaminant Testing in Colorado
Aspergillus Testing
Since July 2022, Colorado has required specific testing for Aspergillus species (A. fumigatus, A. flavus, A. niger, A. terreus). This pathogenic mold poses serious health risks, particularly to immunocompromised consumers. The CDPHE notes that aspergillus can cause a variety of immune lung disorders, ranging from asthma to allergic bronchopulmonary aspergillosis.
The MED has issued multiple Health & Safety Advisories in 2025 and 2026 for products found to have Total Yeast and Mold and Aspergillus above acceptable limits. These advisories have affected multiple licensees including cultivation facilities and retail stores.
Microbial Limits
Colorado requires testing for microbial contamination on all regulated marijuana products. The following limits apply under MED Rule 4-215:
Total Yeast & Mold
Limit: 10,000 CFU/g
Subject to surveillance testing
E. coli
Limit: <1 CFU/g
Must be below detection
Salmonella
Limit: Not Detected
Zero tolerance
Aspergillus (A. fumigatus, A. flavus, A. niger, A. terreus)
Limit: Not Detected
Required since July 2022; multiple H&S Advisories issued
Residual Solvents, Pesticides, Heavy Metals, and More
Residual Solvent Testing
Products manufactured using solvents must be tested for residual contamination. Colorado tests for multiple solvents including butane, propane, ethanol, toluene, benzene, hexane, and heptanes with specific PPM limits for each.
Pesticide Testing
Colorado requires pesticide testing for regulated marijuana concentrates. The MED maintains a list of prohibited pesticides, and detection results in batch failure. Industry Bulletin 26-01 (January 2026) reinforced pesticide testing compliance requirements, indicating ongoing regulatory focus in this area.
Important: If the MED finds that a licensee is likely using chemically converted THC (such as converting CBD to THC) in the manufacture of regulated marijuana products, the Division will recommend suspension and revocation of the license and imposition of a significant fine.
Heavy Metals Testing
Colorado requires testing for heavy metals including lead, arsenic, cadmium, and mercury. The MED has issued Health & Safety Advisories for products found to contain elemental impurities such as arsenic above acceptable limits.
Water Activity Testing
Batches of regulated trim, flower, kief, and shake (except wet whole plants) must pass water activity testing. Water activity measures the amount of unbound water available for microbial growth. Products must meet the established threshold to reduce mold and bacterial growth risk during storage.
Mycotoxin Testing
Colorado requires testing for mycotoxins, toxic compounds produced by certain molds. This includes aflatoxins and ochratoxin A, which can cause serious health effects even at low concentrations.
How the MED Monitors Compliance
Surveillance Testing Program
In September 2025, the MED announced its surveillance testing program (Industry Bulletin 25-11). The MED conducts random testing of products on dispensary shelves to verify that products continue to meet safety standards after initial compliance testing. This program helps identify issues that may develop post-testing, such as mold growth during storage.
Health & Safety Advisories
When the MED and CDPHE find regulated marijuana with contaminants exceeding acceptable limits, they issue Health & Safety Advisories. In 2025-2026 alone, the MED has issued multiple advisories for products containing excessive mold, aspergillus, pesticides, and elemental impurities.
Recent examples include advisories issued in May 2026, April 2026, December 2025, and November 2025 affecting various licensees. Products subject to advisories must be quarantined and may be subject to recall.
MED Investigation Activity
According to the MED’s 2025 Regulatory and Enforcement Activity report, the 26-person MED field investigations team investigated 2,829 licenses (approximately 235 licenses per month) in 2025. The MED conducted more than 160 product safety investigations and 469 underage compliance checks (with a 99% compliance rate). Approximately 846 licenses were subject to administrative action by the State Licensing Authority.
How to Pass Colorado Cannabis Testing Consistently
Implement Internal Quality Control
Don’t wait for compliance testing or worse, surveillance testing to discover problems. Use rapid in-house testing to catch issues early:
- Pre-screen for potency: Verify THC levels before packaging and labeling
- Test for Aspergillus: Screen batches post-drying to catch microbial contamination before it becomes a Health & Safety Advisory
- Monitor water activity: Track moisture throughout drying and curing to prevent mold development
- Document processes: Maintain detailed records for CAPA and recall preparedness
Stay Current with MED Bulletins
The MED issued 18 Industry Bulletins, three compliance tips, and one position statement in 2025 alone. Make it a practice to:
- Review all Industry Bulletins promptly, they contain time-sensitive compliance information
- Attend MED/CDPHE Science & Policy meetings when relevant to your operations
- Update SOPs when rules change (like the January 5, 2026 revisions)
- Train staff on new requirements before implementation deadlines
Ahead of Colorado Compliance with Rapid Testing
With MED surveillance testing now active and Health & Safety Advisories being issued regularly, Colorado operators can’t afford to rely solely on pre-sale compliance testing. Screen for potency and Aspergillus before batches go to the lab. Monitor product quality throughout storage. Make informed decisions that protect your license and your bottom line.