TL;DR: Three states with major cannabis testing regulatory changes in the past 12 months — Minnesota activated comprehensive microbial, mycotoxin, heavy metals, and pesticide testing requirements in October 2025; New York updated Aspergillus, Salmonella, and STEC pathogen absence requirements in February 2025 (and simultaneously uncovered the Keystone lab fraud scandal that triggered 54+ lot recalls); and Maine's LD 1847 would establish testing requirements for the state's adult-use market that are currently among the most permissive in New England. Each mandate is specific, enforceable, and actively reshaping what processors in those markets must document, test for, and remediate before product reaches retail.
Key Takeaways
- Minnesota's Office of Cannabis Management (MN OCM) activated mandatory testing for microbials, mycotoxins, heavy metals, pesticides, and potency for all adult-use cannabis products in October 2025
- New York's Office of Cannabis Management (NY OCM) updated pathogen absence requirements in February 2025, adding specific Salmonella, STEC, and Aspergillus species absence standards — the same framework implicated in the Keystone lab recall
- Maine's LD 1847 is advancing through the legislature and would mandate testing for all adult-use cannabis products, closing one of the last major gaps in New England's compliance landscape
- The acceleration of state mandates follows a national pattern: states that launched adult-use programs with limited or voluntary testing are systematically tightening to match the standards set by Oregon, California, and Colorado
- Processors operating in multiple states — or planning expansion — need a decontamination and documentation approach that satisfies the highest common denominator, not the most permissive jurisdiction
Minnesota: Comprehensive Testing Goes Live October 2025
Minnesota legalized adult-use cannabis through HF 100 (2023), creating the Office of Cannabis Management to oversee licensing, testing, and compliance. The state's mandatory testing requirements activated in October 2025 following a phased implementation period.
What Minnesota Now Requires
Minnesota's testing framework — codified in Minnesota Rules Chapter 3720 — covers the following categories for adult-use cannabis flower and manufactured products:
Microbial contaminants:
- Total aerobic bacteria (TAMC) — action limits vary by product type
- Total yeast and mold (TYMC) — action limits vary by product type
- Pathogen absence: Salmonella spp. (absent in 1g), E. coli O157:H7 (absent in 1g)
- Aspergillus species: A. flavus, A. fumigatus, A. niger, A. terreus — absent in 1g
Mycotoxins:
- Aflatoxins (B1, B2, G1, G2) — total not to exceed 20 ppb
- Ochratoxin A — not to exceed 20 ppb
Heavy metals:
- Lead, arsenic, cadmium, mercury — action limits aligned with USP <232> elemental impurity standards
Pesticides:
- Minnesota has adopted a 292-compound pesticide screening panel; action limits reference EPA tolerance levels where available
Potency:
- Total THC, total CBD, and other cannabinoids as required for product labeling
The scope of Minnesota's mandate — particularly the mycotoxin and Aspergillus absence requirements — matches or exceeds the standards in Oregon and California. Processors entering the Minnesota market from states with narrower testing requirements will face a wider testing panel than they may currently be operating under.
Remediation Implications for Minnesota
Minnesota's testing rules specify that products failing microbial testing may be remediated using approved sterilization methods — a carve-out similar to Oregon's sterilization remediation pathway. Products failing mycotoxin testing cannot be remediated and must be destroyed.
This mirrors the logic that applies in Oregon: microbial contamination can be treated; mycotoxin contamination cannot. The January 2026 McGill University study on irradiation's failure to eliminate mycotoxigenic fungi and residual toxins is directly relevant to Minnesota processors evaluating decontamination methods — because if the chosen method allows mycotoxigenic spores to persist through treatment, the mycotoxin failure risk persists with them.
New York: Pathogen Absence Requirements and the Keystone Context
New York's adult-use market launched under the Marihuana Regulation and Taxation Act (MRTA, 2021) and has been progressively tightening its testing framework as the market matures.
February 2025 Updates
In February 2025, the NY OCM updated its cannabis testing regulations to specify explicit pathogen absence standards:
Pathogen absence requirements (all product categories):
- Salmonella spp. — absent in 1g
- Shiga toxin-producing E. coli (STEC) — absent in 1g
- Aspergillus flavus, A. fumigatus, A. niger, A. terreus — absent in 1g
Microbial action limits (flower/inhalable products):
- TAMC: ≤ 10⁵ CFU/g (general adult-use); ≤ 10⁴ CFU/g (medical cannabis)
- TYMC: ≤ 10⁴ CFU/g (general adult-use); ≤ 10³ CFU/g (medical cannabis)
The medical cannabis limits are meaningfully stricter than the adult-use limits — a distinction that matters for processors supplying New York's Registered Organizations (ROs) and medical dispensaries.
The Keystone Lab Fraud Intersection
The February 2025 updates were followed within 13 months by the March 2026 Keystone Laboratories recall — 54+ lots pulled from retail after false Aspergillus and heavy metal results were discovered. The timing is not coincidental: as New York's testing requirements became more specific about Aspergillus absence, the value of a fraudulent Aspergillus-clear result increased for processors with contaminated product.
As we detailed in The Cannabis Lab Fraud Crisis, the Keystone case illustrates a direct relationship between tightening testing standards and the incentive for lab fraud. For processors, this means tighter state standards create both a compliance obligation and a heightened exposure to the consequences of a fraudulent COA — because the products most likely to fail the new standards are the products most likely to generate pressure for fraud.
New York's Enforcement Trajectory
The OCM has signaled ongoing tightening. The March 2026 GMP enforcement guidance extended documentation requirements to remediation processes — a development covered in our article on what cGMP ready actually means for cannabis processors. Processors operating in New York should treat the February 2025 testing update as a floor, not a ceiling.
Maine: LD 1847 and the Last Gap in New England
Maine legalized adult-use cannabis through Question 1 (2016) and has operated with a relatively permissive testing framework compared to its New England neighbors. LD 1847, introduced in the 132nd Legislature, would change that.
What LD 1847 Proposes
LD 1847 would mandate testing for all adult-use cannabis products sold in Maine, including:
- Microbial contaminants (TAMC, TYMC, pathogen absence)
- Mycotoxins (aflatoxins, ochratoxin A)
- Heavy metals (lead, arsenic, cadmium, mercury)
- Pesticide residues
- Potency (THC, CBD, terpene profile for labeled products)
The bill would also establish an accreditation framework for Maine testing laboratories and create a remediation pathway for products failing microbial testing — explicitly modeled on the approaches in Oregon and Colorado.
Current Status and Timing
As of April 2026, LD 1847 has passed committee review and is advancing to floor vote. The bill's implementation timeline, if enacted, would provide an 18-month phase-in period for mandatory testing — meaning the earliest mandatory testing could apply would be late 2027 for most product categories.
However, the phase-in period is not a reason to delay preparation. Processors establishing testing and decontamination workflows now — before the mandate activates — will have validation data and operational history that newer entrants will lack. Maine regulators have indicated they will look favorably on operators who have voluntarily tested and documented compliance during the phase-in period when issuing remediation pathway approvals.
How These Mandates Compare to Oregon's Phased-In Approach
Oregon's cannabis testing framework — administered by the OLCC — is the longest-running mandatory testing program in the U.S. and serves as a reference point for states developing their own requirements. A few comparisons are instructive:
| Category | Oregon | Minnesota | New York | Maine (LD 1847) | |---|---|---|---|---| | Total yeast/mold | 10⁴ CFU/g (flower) | Varies by product | 10⁴ CFU/g (adult-use flower) | TBD (aligned with OR/MN) | | Aspergillus absence | Required (1g) | Required (1g) | Required (1g) | Proposed | | Mycotoxins | Required (destruction if fail) | Required (destruction if fail) | Not yet mandated | Proposed | | Pesticides | 59-compound panel | 292-compound panel | State-specific panel | Proposed | | Remediation allowed | Yes (sterilization carve-out) | Yes (approved methods) | Yes | Proposed | | Mycotoxin remediation | No — destruction required | No — destruction required | N/A | Proposed (no) |
Oregon's approach — phased in over 2015–2020 — created a compliance infrastructure that other states have used as a design template. Minnesota's mandate is broader in pesticide scope; New York's medical limits are stricter than Oregon's; Maine's proposed framework is largely Oregon-aligned.
The direction of travel is consistent: toward the Oregon/California standard, not away from it.
What the Acceleration of State Mandates Means for Processors
The pattern across Minnesota, New York, and Maine — three states with major testing changes in 12–18 months — is not a coincidence or a regional phenomenon. It reflects a national trend that is moving faster than most operators anticipated:
States with adult-use programs and minimal testing are the next wave. Multiple states that legalized cannabis in 2020–2023 with limited or voluntary testing requirements are now in the process of implementing mandatory frameworks. The operators in those states who build testing-aligned production workflows now will have a competitive advantage when mandates activate.
Multi-state operators face a highest-common-denominator problem. An MSO operating in Oregon, Minnesota, New York, and Maine simultaneously must satisfy all four frameworks. The most demanding standard in each category becomes the operational floor. A decontamination method that satisfies Oregon's requirements but not Minnesota's 292-compound pesticide panel — or that passes New York's adult-use TYMC limit but not the medical limit — creates compliance gaps that require either separate workflows or a single workflow engineered to the highest standard.
Mycotoxin mandates make decontamination method selection critical. Every state with mandatory mycotoxin testing prohibits remediation — destruction is the only option for a mycotoxin failure. As our analysis of the McGill study shows, irradiation does not eliminate pre-formed mycotoxins or all mycotoxigenic fungal spores. In a state with mandatory mycotoxin testing, a processor relying on irradiation as their decontamination method may be passing CFU-based tests while carrying a mycotoxin exposure that mandated testing will eventually surface.
The FDA Category A designation travels across state lines. One of the structural advantages of VHP's FDA Established Category A status and ISO 22441:2022 validation framework is that they are not state-specific. A processor validating their VHP process to ISO 22441:2022 is building documentation that satisfies Oregon's sterilization carve-out, Minnesota's approved sterilization method pathway, New York's GMP documentation requirements, and Maine's proposed remediation framework — without state-specific modifications to the core validation record.
Frequently Asked Questions
Does Minnesota's October 2025 mandate apply to hemp-derived products sold in the state?
Minnesota's adult-use cannabis testing requirements apply to products sold through licensed adult-use retail channels. Hemp-derived products sold outside the licensed cannabis market may be subject to USDA and FDA requirements rather than the MN OCM framework. Operators selling into both channels should verify which regulatory framework governs each product line.
New York's Keystone recall involved labs that have since been suspended. Does that affect how processors should evaluate their current lab?
Yes. The OCM maintains an accredited testing laboratory list that reflects current accreditation status. Processors should verify their testing lab's current status before submitting samples. Beyond accreditation status, the structural argument for in-process decontamination control — removing contamination before submission — applies regardless of which lab you use.
If Maine's LD 1847 doesn't pass, do Maine processors still need to prepare?
Maine regulators have indicated that even without a statutory mandate, the state's adult-use cannabis oversight program will move toward voluntary testing alignment with neighboring states. Institutional buyers and dispensary chains operating across New England are already requiring testing documentation consistent with Massachusetts and Connecticut standards. Operators waiting for a legal mandate before establishing testing workflows will face a market access problem before they face a regulatory one.
How do these state mandates interact with the federal Schedule III rescheduling timeline?
The state mandates are independent of federal rescheduling — they are enforceable now under state law. However, when federal oversight expands, the gap between states with comprehensive testing frameworks (OR, CA, MN, NY) and states without them will become a regulatory risk factor for operators in less-regulated markets. The acceleration of state mandates is in part a response to anticipated federal oversight — states are building frameworks that will be compatible with FDA requirements before those requirements become binding. See our analysis of Schedule III rescheduling and the FDA oversight wave for the federal dimension.
Primary regulatory sources: Minnesota Office of Cannabis Management — Testing Requirements; Minnesota Rules Chapter 3720; New York OCM Testing Regulations Update (February 2025); New York OCM Keystone Recall Notice (March 2026); Maine LD 1847 (132nd Legislature).