Colorado Legalized Weed Years Ago. Its Safety Net Still Has Holes

Colorado has spent more than a decade showing the country what a legal cannabis market can become. A new state audit now shows what legalization does not automatically fix. The Colorado Office of the State Auditor found gaps in product testing, inspections and public warnings that could allow unsafe marijuana to remain available longer than consumers would expect from a regulated store.

The performance audit was released October 19 and examined the state’s marijuana safety framework, including work by the Marijuana Enforcement Division and the public health laboratory. Auditors said current testing rules, record-retention requirements and inconsistent monitoring increased the risk that consumers could encounter unsafe products. The problem was not one dramatic failure. It was a system with too many weak connections.

Legal sale does not remove the need for consistent testing, traceable records and warnings that reach consumers quickly. Image: Cannabis Tours / Wikimedia Commons / CC BY-SA 4.0

Colorado requires testing for contaminants and potency, but the audit found that products sold between 2023 and 2025 were not consistently tested in a way that gave regulators complete confidence. Cannabis businesses select private laboratories for required testing. Without strong state verification, that structure can create uneven practices and make it harder to identify a problem across the market.

The state also lacks a fully functional safety laboratory able to perform every oversight role regulators need. Private labs remain essential to the industry, yet an independent public capacity matters when officials must confirm results, investigate unusual patterns or respond quickly to a suspected hazard. A regulator should not depend entirely on the same testing network it is responsible for checking.

Auditors found weaknesses in inspections as well. Inconsistent monitoring and incomplete records can prevent officials from seeing how a product moved from cultivation to a store shelf. That traceability becomes critical when contamination is discovered. Regulators need to know which batches are affected, where they were sold and whether related products share the same risk.

Public communication was another concern. The audit described situations in which potentially harmful products remained available for months before a public advisory. A warning that arrives after most of a batch has been consumed may satisfy a procedure without protecting many people. Speed matters because inhaled and edible products can reach thousands of customers quickly.

The findings do not mean every product in a Colorado dispensary is unsafe. They mean the system does not always produce the level of assurance that consumers reasonably associate with legal sale. A license proves that a business entered the regulated market. It does not replace batch testing, reliable records and enforcement that treats safety as more than paperwork.

For consumers, a legal cannabis label can provide potency, ingredients and testing information, but it cannot show every weakness in the chain behind that label. Shoppers can look for intact packaging, batch details and recall notices. They should also take unusual odor, appearance or effects seriously and report concerns rather than assuming a dispensary shelf makes every product risk-free.

The audit made 14 recommendations aimed at stronger oversight. State agencies agreed with many of the concerns and are expected to work on improvements through December 2027. That timeline gives regulators room to build systems carefully, but it also creates pressure to prioritize the fixes that can reduce immediate risk, including better testing checks and faster public alerts.

Colorado’s experience matters beyond its borders. New York and other states are still building legal markets while trying to move consumers away from unlicensed sellers. They often point to testing as a major advantage of legal cannabis. That argument only works when the testing system is transparent, independent enough to be trusted and backed by enforcement.

Legalization created a market. Regulation must keep earning confidence in it. Colorado’s audit is uncomfortable precisely because the state has been treated as a mature model. The lesson is not that legal cannabis failed. It is that legalization is the beginning of consumer protection, not the finish line. A credible industry should want every gap identified and repaired before a serious safety event exposes it to consumers.