OR · Adult-use
Oregon cannabis testing requirements
Oregon licenses adult-use cannabis through the OLCC; the Oregon Health Authority (OHA) runs the medical program and writes the testing rules. Every batch must pass testing at an OLCC-licensed lab accredited by ORELAP to the TNI standard, not ISO/IEC 17025. Flower is tested for potency, pesticides, metals, mycotoxins, STEC and Salmonella, water activity and moisture.
The rulesVerified 28 September 2026
What Oregon asks of a testing lab
| Medical program | Yes |
|---|---|
| Adult-use program | Yes |
| State-mandated testing | Required |
| Required tests | 9 test categories |
| ISO/IEC 17025 | Not required |
| Regulator | Oregon Health Authority (testing rules and ORELAP lab accreditation) ↗ |
| Last verified | 28 September 2026 |
Required tests
- Potency
- Pesticides
- Residual solvents
- Heavy metals
- Microbials
- Mycotoxins
- Water activity
- Moisture
- Homogeneity
ISO/IEC 17025 accreditation
Not required. Labs must be accredited by ORELAP (Oregon Health Authority) to the 2016 TNI standard and licensed by the OLCC. The rules do not ask for a separate ISO/IEC 17025 accreditation.
Notes
- Rules: OAR 333-007-0300 to -0600 (testing, OHA) and OAR 333-064 (lab accreditation and sampling, ORELAP).
- The OLCC licenses labs and regulates adult-use cannabis; a lab must hold ORELAP accreditation before the OLCC licenses it.
- Flower: pesticides, potency, water activity (0.65 aw max), moisture (15% max), heavy metals, mycotoxins and microbials.
- Concentrates, extracts and inhalable products: pesticides, solvents, potency, heavy metals, mycotoxins and microbials. Solvent testing is waived for mechanical, water, fat or oil extraction.
- Edibles and other non-inhalable products: potency on every process lot; microbials only when OHA or the OLCC asks in writing.
- Microbials: Shiga toxin-producing E. coli and Salmonella, not detected in 1 g. Aspergillus was dropped from the panel in 2023.
- Heavy metals: arsenic, cadmium, lead and mercury (since 1 March 2023). Mycotoxins: aflatoxins B1, B2, G1, G2 and ochratoxin A (since 1 July 2022).
- Potency: delta-9-THC, THCA, delta-8-THC, CBD and CBDA. A process lot fails if primary and duplicate results differ by more than 10% RPD, a homogeneity check with low-dose exemptions.
- Hemp-derived vapor items sold in Oregon must also pass testing (OAR 333-007-0342).
- From 1 September 2026 the primary lab records every compliance result, including subcontracted tests, under the primary sample in the state tracking system (OLCC bulletin CE2026-01).
- Pending: OHA held advisory committee meetings on 18-19 August 2026 on technical changes to Divisions 7 and 64 (target-potency retests, abamectin and spinosad residue definitions, 1.0 mm homogenization, ISO/IEC 17043 proficiency-testing providers). Not yet adopted.
- OHA merged the medical program with Oregon Psilocybin Services into its Medical Cannabis & Psilocybin Section.
Sources
Official links
- RegulatorOregon Health Authority (testing rules and ORELAP lab accreditation) ↗
- Testing rulessecure.sos.state.or.us/oard/displayDivision… ↗
Sources we checked
- Cannabis Testing Requirements (Oregon Health Authority) ↗
- OAR 333-007, Marijuana and Hemp Testing (Oregon Secretary of State) ↗
- Accreditation for Laboratories Testing Cannabis in Oregon (ORELAP, Oregon Health Authority) ↗
- PH 14-2026, order amending OAR 333-064-0100, January 2026 (Oregon Health Authority) ↗
- Oregon Medical Marijuana Program (Oregon Health Authority) ↗
- OMMP Rules and Statutes, rulemaking (Oregon Health Authority) ↗
- Statement of Need and Fiscal Impact, Divisions 7 and 64, 2026 (Oregon Health Authority) ↗
- Recreational Marijuana program (Oregon Liquor and Cannabis Commission) ↗
- CE2026-01: Changes to OLCC Lab Test Entries Effective September 1 (OLCC) ↗
Verified on .
Nearby
Neighbouring states
- California →Adult-use · Verified 28 September 2026
- Idaho →No program · Verified 28 September 2026
- Nevada →Adult-use · Verified 28 September 2026
- Washington →Adult-use · Verified 28 September 2026
Free 30-minute call
Working to Oregon's testing rules?
Bring the rules and the instrument, dataset or audit that's in the way. We'll tell you what we'd fix first. No pitch deck.
