Colorado Audit Finds Consumers at Risk From Untested Marijuana Products

A performance audit released October 19, 2026, by the Colorado Office of the State Auditor found that nearly 75% of marijuana processed for sale in Colorado between 2023 and 2025 bypassed pesticide testing, leaving consumers vulnerable to unsafe products[5][8][11]. These findings highlight systemic failures within Colorado's Marijuana Enforcement Division (MED) and the State Public Health Laboratory at the Colorado Department of Public Health and Environment (CDPHE)[1][6][11]. Consumers are at increased risk from marijuana products that may contain contaminants or have inaccurate potency labels[2][5][9]. The audit points to inadequate state regulations, inconsistent oversight, lax testing rules, and delayed public warnings as contributing factors[2][5][9]. The identified deficiencies affect one of the country's oldest legal cannabis markets, challenging the assurance of product safety for consumers[9].

What the records show

The audit, dated September 2026, concluded that consumers in Colorado's recreational marijuana market face risks[2][5][6]. The report stated that nearly 75% of marijuana processed for sale between 2023 and 2025 bypassed pesticide testing due to the state's Reduced Testing Allowance program[5][8]. This program allowed approximately 41,000 harvest batches, representing 26% of nearly 160,000 batches, to go untested[11]. The audit indicated that this gap increases the risk of contaminated products and inaccurate potency labels[2][5][9].

The audit also found severe delays in public warnings about unsafe products[2][5]. Some potentially contaminated items remained on dispensary shelves for as long as three years before MED issued a public warning[2][5]. On average, products subject to health and safety advisories from 2023 through 2025 stayed on shelves for more than seven months[2][5]. A review of 2025 advisories showed it took MED an average of three and a half months from the start of an investigation to the advisory issuance, and about one month from the decision to warn to the actual release[2]. Auditors stated that these issues limit MED's ability to identify and respond to product safety risks[5].

Colorado's State Public Health Laboratory at CDPHE lacked the capability to adequately test marijuana products[1][9]. As of May 15, 2026, the lab did not have validated methods or capacity to test for pesticides, residual solvents, and mycotoxins, which are all required for marijuana products[1]. CDPHE attributed this to problems with building condition, HVAC systems, staffing shortages, and complex validation processes[1]. An estimated $13 million is needed for the lab to perform these tests effectively[9].

Oversight of private testing laboratories licensed by the state was also found to be insufficient[9]. While Colorado mandates testing for various contaminants, auditors identified minimal oversight and inconsistent quality checks for these labs[9]. The practice of allowing cannabis companies to select their own samples for private lab testing also raises concerns about the integrity of the results[9][10]. Inspection schedules for cannabis businesses were found to be lacking, with some operations going as long as three years without an inspection[9]. A survey of MED investigators revealed that 35% believe there are widespread marijuana product safety issues, and an additional 24% believe there “may be” widespread issues in the regulated market[5][8].

The timeline

Colorado's regulated cannabis market faced scrutiny over several years leading up to the audit's release. From 2023 through 2025, nearly three-quarters of marijuana processed for sale bypassed pesticide testing[5][8]. During this same period, products subject to health and safety advisories remained on shelves for over seven months on average[2][5]. Earlier investigative reports by The Denver Gazette and ProPublica also highlighted safety concerns[5][8]. In January 2026, reports noted intoxicating hemp entering Colorado's marijuana market due to inadequate safety measures[8]. By May 2026, a MED official acknowledged that chemically converted hemp sold as marijuana exceeded public disclosures[8]. A September 2026 investigation from the same news organizations detailed a 15-month delay in recalling a cannabis sleep aid pill linked to liver damage[5][8]. On October 19, 2026, the Colorado Office of the State Auditor publicly released its performance audit[2][5][6]. That same day, the Marijuana Enforcement Division formally responded to the audit findings[4].

What changed and for whom

The audit represents a strong critique of Colorado's cannabis safety framework, particularly affecting consumers who rely on state assurances for product safety[9]. The findings indicate that current state regulations and oversight practices are not adequately protecting consumers from potentially contaminated cannabis[2][5][9]. The audit directly challenges the reliability of products sold in a market that was among the first in the nation to legalize recreational marijuana[9]. For the Marijuana Enforcement Division, the audit serves as a call for significant changes to its operations and policies[4]. The division now faces pressure to address the identified deficiencies in testing oversight, inspection frequency, and the timeliness of public warnings[4][9]. One recommendation to improve its safety framework has a partial implementation deadline of December 2027[10].

What the subject has said publicly

The Marijuana Enforcement Division formally responded to the audit on October 19, 2026, agreeing with the recommendations[4]. MED stated that the audit findings provide a “valuable roadmap for strengthening product safety controls”[4]. However, MED also emphasized that the auditors found no evidence of “widespread health and safety issues” with regulated marijuana products[8][9]. The division committed to assessing exemptions to tests currently allowed under state laws and regulations[8]. The audit offered multiple recommendations, including five key findings, six recommendations, and one policy consideration, or fourteen recommendations depending on the source[6][9][10]. MED generally agreed to implement these[4][9].

What we could not confirm

We could not confirm the specific details or content of the 2023-2025 health and safety advisories, beyond the average time products remained on shelves[2][3][5]. We also could not confirm the exact number of recommendations MED agreed to implement, as sources cite both six recommendations with one policy consideration, and fourteen recommendations[6][10]. The full cost implications or detailed timeline for implementing all audit recommendations were not specified in the evidence[9].