OregoncomplianceremediationOLCCmicrobial testing

Oregon's New Cannabis Remediation Mandate: What Processors Need to Know

Oregon now requires mandatory microbial, heavy metal, and mycotoxin testing for all cannabis batches—with strict remediation protocols for failures. Here's what every processor must understand.

BoxPurify TeamApril 15, 202610 min read

TL;DR: Oregon phased in mandatory microbiological contaminant, heavy metal, and mycotoxin testing for all cannabis batches between 2022 and 2023. Processors whose product fails must remediate or destroy—and pesticide failures cannot be remediated at all. Vaporized hydrogen peroxide (VHP) sterilization is one of the few scientifically validated methods that qualifies as a compliant remediation pathway under Oregon Health Authority rules.


Key Takeaways

  • Oregon requires testing for microbiological contaminants, heavy metals, and mycotoxins under phased-in mandates (2022–2023)
  • Failed batches must be remediated within strict timelines or destroyed
  • Pesticide failures in usable marijuana cannot be remediated—destruction is mandatory
  • VHP sterilization is explicitly recognized as a compliant remediation method
  • Processors must log all remediation activity in Metrc, Oregon's Cannabis Tracking System
  • Reanalysis requests must be submitted within 7 calendar days of a failed result

Why Oregon Matters Now

Oregon was among the first states in the nation to mandate remediation protocols—not just testing—for cannabis products that fail microbial safety standards. While some states still treat testing as a compliance checkbox, Oregon has built a structured retest-and-remediate framework with defined timelines, approved methods, and mandatory state tracking.

For processors operating in Oregon, or those watching the regulatory horizon in other states, understanding how Oregon's system works is both a compliance requirement today and a preview of where the rest of the country is heading.


The Testing Landscape: What Oregon Now Requires

Oregon's cannabis testing is overseen by three agencies: the Oregon Liquor and Cannabis Commission (OLCC), the Oregon Health Authority (OHA), and the Oregon Environmental Laboratory Accreditation Program (ORELAP). All cannabis items intended for consumer sale must pass a battery of state-required tests before they can be transferred or sold.

The testing requirements differ by product type:

Usable Marijuana (Flower)

Usable marijuana intended for retail sale must pass:

  • Potency (THC, THCA, CBD)
  • Pesticides
  • Water activity and moisture content
  • Mycotoxins — phased in for harvests on or after July 1, 2022
  • Heavy metals — phased in for harvests on or after March 1, 2023
  • Microbiological contaminants — phased in for harvests on or after March 1, 2023

Usable marijuana destined for further processing into concentrates or extracts has a different testing matrix. Notably, if the processing method will result in effective sterilization, certain pre-process tests may not apply—a provision that rewards processors who operate validated sterilization infrastructure.

Extracts, Concentrates, and Cannabinoid Products

Extracts and concentrates intended for retail must additionally pass solvent testing. The full microbial, heavy metals, and mycotoxin suite applies to finished inhalable cannabinoid products manufactured on or after the relevant phase-in dates.

Tracking Everything in Metrc

Every test result—pass or fail—must be entered into Metrc, Oregon's state Cannabis Tracking System. Packages cannot be transferred to retail or further processing until their Metrc status reflects a passing result across all required tests. A batch stuck in "TestingInProgress" cannot legally move through the supply chain.


What Happens When a Batch Fails

A failed test is not the end of the road—but it does start a clock.

Step 1: Reanalysis (7-Day Window)

Within 7 calendar days of a failed result, the processor or producer must request that the original lab reanalyze the original sample. At the same time, OLCC must be notified by email at marijuana@oregon.gov with the subject line "Request for Reanalysis," including the license number, the Metrc package tag ID, and the specific tests being reanalyzed.

The reanalysis must be completed within 30 calendar days of the request.

Step 2: Retest by a Second Lab

If the reanalysis passes, the processor then has another 7 calendar days to request a resampling and retest by a second, different lab. OLCC must again be notified.

For the batch to advance, it must pass both the reanalysis and the retest.

Step 3: Remediate or Destroy

If the batch fails at any point in the retest process—or if the processor chooses to skip retesting—the options are:

  1. Remediate the batch using a method permitted under OHA rules, then resubmit for testing
  2. Destroy the batch in accordance with OLCC rules

Remediation is not a blanket option. The specific failure type determines what remediation is allowed.


Remediation Options by Failure Type

Microbiological Contaminants — VHP Is a Compliant Pathway

For usable marijuana that fails microbiological testing, Oregon's rules explicitly recognize sterilization processes as an approved remediation method. This is significant: it means that processors who have access to validated sterilization equipment—such as vaporized hydrogen peroxide systems—have a documented, state-recognized pathway to recover failed product rather than destroying it.

After sterilization, the batch must be retested for microbiological contaminants, solvents (if applicable), pesticides, mycotoxins, and heavy metals. If it fails again after remediation, it must be destroyed.

Concentrates and extracts that fail microbial testing may alternatively be further processed in a way that effectively sterilizes the material.

Pesticides — No Remediation for Usable Marijuana

This is the hardest rule in Oregon's framework: if a batch of usable marijuana fails pesticide testing, the only options are retesting or destruction. Remediation for pesticides is not allowed for flower. The one narrow exception applies only to piperonyl butoxide or pyrethrins, and only with OLCC permission granted on a case-by-case basis.

For extracts and concentrates, pesticide remediation is permitted only if 100% of the usable marijuana used as input was tested and passed for pesticides before processing.

Solvents — Remediation Permitted for Extracts

Extracts that fail solvent testing may be remediated. After remediation, the batch must be retested for pesticides, solvents, potency, mycotoxins, heavy metals, and microbiological contaminants.

Mycotoxins — No Remediation

Batches that fail mycotoxin testing cannot be remediated. Destruction is mandatory.

Heavy Metals — Depends on Product Type

Usable marijuana and finished inhalable products that fail heavy metals testing cannot be remediated—they must be destroyed. Concentrates and extracts may be remediated using procedures that reduce heavy metal concentrations below action limits, followed by full retesting.


How to Log Remediation in Metrc

Once a remediation decision is made, it must be recorded in Metrc by selecting the package and clicking the "Remediate" button in the Packages tab. The processor must select the remediation method, the date, and provide a description of the steps taken.

After logging, the package status changes to "Remediated." The batch must then be resubmitted for testing following the same protocols as an initial submission.


Why VHP Is the Most Defensible Remediation Choice

Not all sterilization methods are equal in the eyes of regulators. When selecting a remediation approach, processors need to consider three things: whether it is explicitly recognized under state rules, whether it can be validated and documented, and whether it preserves the integrity of the product.

Vaporized hydrogen peroxide sterilization satisfies all three:

Regulatory recognition: VHP sterilization falls squarely within Oregon's recognized remediation category of "effective sterilization" for microbiological contamination failures.

Validation pathway: In January 2024, the FDA designated VHP as an Established Category A sterilization method—the same classification as moist heat, dry heat, ethylene oxide, and radiation. It simultaneously recognized ISO 22441:2022 as the governing consensus standard. This means processors using VHP can validate their process against a published, internationally recognized framework rather than building a proprietary protocol from scratch.

Zero residuals: VHP decomposes completely at the end of every cycle into water vapor (H₂O) and oxygen (O₂). No chemical residue remains on the product—an essential property for cannabis remediation, where any contamination of the product with remediation agents would create a new compliance problem.

Material preservation: Unlike heat-based or irradiation methods, VHP operates at low temperatures and does not alter the molecular chemistry of cannabinoids or terpenes. The same product quality is preserved through the sterilization cycle.


Compliance Checklist for Oregon Processors

Use this as a working reference for your operation:

  • Confirm your lab is OLCC-licensed and ORELAP-accredited for all required test categories
  • Verify all packages submitted for testing are correctly created as sample packages in Metrc (not regular packages)
  • Track the 7-day reanalysis request window from any failed result
  • Notify OLCC by email within 7 days of requesting reanalysis or retest
  • For microbiological failures: evaluate sterilization remediation before electing destruction
  • Ensure any remediation method used is logged in Metrc with method, date, and description
  • After remediation, resubmit for the full required battery of tests before transferring product
  • Document all steps—every action connected to a failed batch must be traceable

Frequently Asked Questions

Can I remediate a batch that failed pesticide testing in Oregon?

Not if it is usable marijuana (flower). Oregon rules prohibit pesticide remediation for usable marijuana. If your flower fails pesticides, the only path is retesting—and if the retest fails, destruction is mandatory. There is a narrow OLCC-permission exception for piperonyl butoxide or pyrethrins, but this requires case-by-case approval.

What methods qualify as "effective sterilization" for microbiological remediation?

Oregon's rules refer to sterilization processes generally—they do not limit you to a specific technology. However, the method must be scientifically validated and capable of demonstrating microbial log reduction. VHP is the most defensible choice because it carries FDA Established Category A status and an internationally recognized validation standard (ISO 22441:2022). Methods without validated frameworks are harder to defend in an audit.

How long do I have to request retesting after a reanalysis passes?

Seven calendar days from the date you receive the passing reanalysis result. Missing this window could result in the batch being ineligible for the retest pathway.

Can I remediate a batch without attempting reanalysis first?

Yes. Oregon rules allow remediation after the first failure—you do not have to complete the reanalysis and retest cycle before choosing to remediate. However, if the batch fails again after remediation, it must be destroyed.

Does VHP leave any residue on the cannabis?

No. VHP decomposes completely into water vapor and oxygen at the end of every cycle. This is not a performance claim—it is the known end-state of the chemistry, independently verifiable, and the reason VHP is used in pharmaceutical environments where zero residuals are a regulatory requirement.


The Regulatory Direction of Travel

Oregon's phased-in testing mandates represent the leading edge of a national trend. States that previously required only potency testing are progressively adding microbial, heavy metal, and mycotoxin requirements. And where testing mandates increase, so does the need for a validated remediation infrastructure—not as a reactive tool used when something goes wrong, but as a built-in process control step that protects product before it ever reaches the testing lab.

Processors who build VHP sterilization into their workflow as an in-process control step are operating preventatively. Those who treat remediation as an emergency option after a failed test are operating reactively—and at a significant disadvantage in both compliance posture and operational cost.

Oregon got there first. The rest of the country is following.


Reference: Oregon OLCC Sampling and Testing Metrc Guide v6.1 (Operative 11/9/22). For current OHA testing rules, visit healthoregon.gov/marijuanatesting.

Ready to assess your compliance posture?

TheBOX® is a cannabis process control system built around validated VHP sterilization—designed for operations where regulatory-grade compliance is the standard, not the aspiration.

Pharmaceutical-Grade Process Control for Regulated Cannabis Operations