Ohio Cannabis Safety and Recalls: Testing Standards, Consumer Protection & Regulatory Oversight

Executive Summary

Ohio's cannabis safety infrastructure faced a critical test in September 2026 when a Vapen-branded vape cartridge sold at a Columbus-area dispensary triggered health complaints, a state-ordered closure, and an ongoing investigation by the Ohio Division of Cannabis Control. The incident, which involved Vext Science — the parent company of Vapen — marks one of the most significant product safety events since Ohio launched its adult-use cannabis market in August 2024. While initial laboratory testing detected no contaminants in the implicated product, the case exposed vulnerabilities in Ohio's seed-to-sale tracking, batch testing protocols, and recall notification systems. For operators, the event underscores the financial and reputational stakes of compliance failures in a state where the Division of Cannabis Control wields broad authority to suspend licenses, seize inventory, and impose civil penalties exceeding $250,000 per violation. For patients and consumers, the case highlights the importance of verifying product testing certificates, understanding recall procedures, and recognizing that even compliant products can trigger adverse events requiring investigation.

Why This Matters

Ohio's cannabis market serves more than 300,000 registered medical patients and millions of adult-use consumers, generating over $1.2 billion in annual sales across 150+ licensed dispensaries. Product safety failures carry cascading consequences: consumers face health risks ranging from respiratory distress to heavy metal exposure; operators confront license suspensions, inventory destruction orders, and civil liability; and the state's regulatory credibility suffers scrutiny from federal agencies monitoring compliance with the Cole Memorandum principles that still guide DOJ enforcement priorities despite state legalization. The Vapen incident arrived as Ohio implements its dual-market structure under Ohio Revised Code Chapter 3780, which governs adult-use cannabis, and Chapter 3796, which continues to regulate the medical program. The state's Division of Cannabis Control, housed within the Department of Commerce, oversees more than 400 active licenses spanning cultivation, processing, testing, and retail. A single contamination event can trigger statewide recalls affecting dozens of dispensaries, thousands of units, and millions of dollars in destroyed inventory. For multi-state operators like Vext Science, which operates Vapen facilities in Arizona, Nevada, and Ohio, a safety incident in one jurisdiction threatens brand reputation nationwide. Institutional investors scrutinize safety records when evaluating MSO valuations, and lenders include compliance warranties in credit agreements. The incident also matters to Ohio's 88 counties, many of which enacted local cannabis taxes projected to fund infrastructure, public health, and law enforcement — revenue streams that depend on consumer confidence in product safety.

Background and History: Ohio's Path to Cannabis Regulation

Ohio's cannabis regulatory framework evolved over a decade, beginning with medical legalization in 2016 and culminating in adult-use sales launch in August 2024.

Medical Cannabis Legalization (2016-2019)

Ohio voters did not legalize medical cannabis by ballot initiative. Instead, the General Assembly passed House Bill 523 in June 2016, establishing a vertically integrated medical marijuana program under Ohio Revised Code Chapter 3796. The law authorized the State Medical Board to certify physicians, the State Board of Pharmacy to license dispensaries, and the Department of Commerce to oversee cultivation and processing. The statute permitted medical use for 21 qualifying conditions including chronic pain, PTSD, cancer, and epilepsy, but banned smokable flower until 2019. The first dispensary opened in January 2019 in Wintersville, marking the program's operational launch. By December 2019, Ohio had licensed 18 cultivators, 14 processors, and 56 dispensaries. The program faced early criticism for high prices — eighth-ounce packages often exceeded $50 — and limited product availability, with frequent stockouts of high-demand strains like Garlic Cookies and Gelato.

Smokable Flower and Program Expansion (2019-2022)

In September 2019, Governor Mike DeWine signed House Bill 86, legalizing smokable flower for medical patients. The change increased sales velocity and expanded cultivation capacity. By 2021, Ohio's medical program served 200,000 registered patients generating $400 million in annual sales. Testing requirements under Ohio Administrative Code 3796:6-3-01 mandated analysis for potency (THC, CBD, CBN), pesticides (58 compounds), heavy metals (arsenic, cadmium, lead, mercury), microbials (E. coli, Salmonella, Aspergillus), and residual solvents. The state required batch testing at independent laboratories licensed under OAC 3796:6-1-01, with certificates of analysis posted to the state's seed-to-sale system.

Adult-Use Legalization (2023-2024)

In November 2023, Ohio voters approved Issue 2 by 57% to 43%, amending the state constitution to legalize adult-use cannabis for individuals 21 and older. The measure authorized possession of up to 2.5 ounces and home cultivation of six plants per individual (12 per household). The General Assembly enacted implementing legislation in December 2023, establishing the Division of Cannabis Control within the Department of Commerce to regulate both medical and adult-use markets under Ohio Revised Code Chapter 3780. Adult-use sales launched on August 6, 2024, with existing medical dispensaries granted provisional dual licenses. The state authorized up to 350 total dispensary licenses, allocated by population across Ohio's 88 counties. By September 2026, the combined medical and adult-use market generated $1.2 billion in annual sales, with adult-use accounting for approximately 65% of volume.

Testing and Safety Infrastructure

Ohio's testing regime requires independent laboratories to achieve ISO/IEC 17025 accreditation and pass proficiency testing administered by the Division of Cannabis Control. As of September 2026, the state licensed 11 testing laboratories, including Steep Hill Ohio, Green Leaf Lab, and PSI Labs. Testing protocols follow OAC 3796:6-3-01 for medical products and parallel standards under OAC 3780:3-3-01 for adult-use. Vape cartridges face enhanced scrutiny due to the 2019 EVALI outbreak, which killed 68 Americans and hospitalized more than 2,800. Ohio's regulations require testing for vitamin E acetate, heavy metals from heating elements, and residual solvents including butane and propane. The state bans products exceeding 10 parts per million lead, 0.5 ppm cadmium, 1.5 ppm arsenic, and 3 ppm mercury.

The Vapen Incident: Timeline and Key Facts

The September 2026 incident began with consumer health complaints reported to a Columbus-area dispensary, triggering a Division of Cannabis Control investigation that resulted in store closure and product testing. On September 12, 2026, multiple consumers reported adverse reactions after using a Vapen-branded vape cartridge purchased from a dispensary in Franklin County. Symptoms included respiratory distress, headache, and nausea. The dispensary notified the Division of Cannabis Control within 24 hours as required under OAC 3780:3-5-01. On September 13, 2026, the Division issued an immediate suspension order closing the dispensary pending investigation. Inspectors seized remaining inventory of the implicated batch and transported samples to an independent testing laboratory for analysis. On September 14, 2026, Vext Science issued a public statement identifying the product as a Vapen vape cartridge and confirming cooperation with state investigators. The company stated that initial testing detected no contaminants including pesticides, heavy metals, microbials, or residual solvents. Vext did not disclose the strain, batch number, or production date. As of September 14, 2026, the Division of Cannabis Control had not issued a formal recall notice or published findings. The dispensary remained closed, and the investigation continued.

Key Players

Ohio Division of Cannabis Control

The Division of Cannabis Control, established in January 2024 under ORC 3780.03, regulates all aspects of Ohio's cannabis industry including licensing, testing, recalls, and enforcement. The agency employs approximately 120 staff including compliance officers, laboratory reviewers, and enforcement investigators. Director James Canepa, appointed in March 2024, oversees the division with authority to suspend licenses, impose civil penalties up to $250,000 per violation, and order product destruction. The Division operates Ohio's seed-to-sale tracking system, which uses RFID tags to monitor cannabis from cultivation through retail sale. The system integrates with testing laboratory information management systems (LIMS) to verify that all products sold carry valid certificates of analysis.

Vext Science and Vapen

Vext Science, headquartered in Phoenix, operates the Vapen brand across Arizona, Nevada, and Ohio. The company holds cultivation, processing, and dispensary licenses in multiple states and produces vape cartridges, concentrates, and edibles. Vapen entered Ohio in 2020 as a medical processor and expanded to adult-use in 2024. Vape cartridges represent Vapen's core product line, accounting for an estimated 60% of revenue. The company sources hardware from Chinese manufacturers and fills cartridges with distillate derived from Ohio-grown cannabis. Vapen's Ohio facility in Columbus processes approximately 500 pounds of flower monthly into concentrates.

Independent Testing Laboratories

Ohio's 11 licensed testing laboratories provide third-party analysis required before products reach retail shelves. Laboratories must achieve ISO/IEC 17025 accreditation, pass quarterly proficiency tests, and report results directly to the Division of Cannabis Control's tracking system. Testing turnaround averages 5-7 business days, creating inventory holding costs for processors. Laboratories charge $300-$600 per batch test depending on product type and analysis scope. Vape cartridges require full panel testing including potency, pesticides, heavy metals, microbials, residual solvents, and terpenes.

Consumer Advocacy Groups

Organizations including Ohio Patient Network and Ohioans for Cannabis Safety monitor product safety issues and advocate for enhanced testing standards, public recall databases, and consumer education. These groups testified before the General Assembly in 2024 urging mandatory testing for mycotoxins and expanded heavy metal panels.

Legal and Regulatory Framework

Ohio's cannabis safety regime derives authority from state constitutional amendments, statutes, and administrative rules that establish testing requirements, recall procedures, and enforcement mechanisms.

Constitutional Foundation

The Ohio Constitution, as amended by Issue 2 in 2023, establishes adult-use legalization in Article XV, Section 1. The amendment authorizes the General Assembly to enact implementing legislation and create a regulatory agency. The constitutional text includes consumer protection language requiring "testing and labeling standards to ensure product safety."

Statutory Framework

Ohio Revised Code Chapter 3780 governs adult-use cannabis, while Chapter 3796 continues to regulate medical cannabis. Key safety provisions include: ORC 3780.26 requires all cannabis products to undergo testing by independent laboratories before retail sale. The statute mandates analysis for potency, contaminants, and adulterants as specified by Division rule. ORC 3780.27 authorizes the Division to order recalls, suspend licenses, and impose civil penalties for safety violations. Penalties range from $5,000 for minor labeling errors to $250,000 for selling contaminated products. ORC 3780.28 establishes seed-to-sale tracking requirements and mandates that processors maintain batch records for five years.

Administrative Rules

Ohio Administrative Code 3780:3-3-01 specifies testing protocols including action levels for contaminants. Key thresholds include:

• Total THC: No maximum for adult-use; labeled potency must be within 15% of tested value
• Pesticides: Zero tolerance for 20 prohibited compounds; action levels of 0.1-2.0 ppm for 38 restricted compounds
• Heavy metals: Lead ≤10 ppm, cadmium ≤0.5 ppm, arsenic ≤1.5 ppm, mercury ≤3 ppm
• Microbials: E. coli and Salmonella not detected in 1 gram; total yeast/mold ≤10,000 CFU/g
• Residual solvents: Butane ≤5,000 ppm, propane ≤5,000 ppm, ethanol ≤5,000 ppm

OAC 3780:3-5-01 establishes recall procedures. Licensees must notify the Division within 24 hours of discovering a safety issue. The Division classifies recalls as Class I (serious health hazard), Class II (potential health hazard), or Class III (minor violation). Class I recalls require public notice, consumer notification, and product destruction.

Federal Considerations

Despite state legalization, cannabis remains a Schedule I controlled substance under the Controlled Substances Act, 21 U.S.C. § 812. The Department of Justice has not prosecuted state-compliant cannabis businesses since the 2013 Cole Memorandum, which deprioritized enforcement in states with "strong and effective regulatory and enforcement systems." Product safety failures can trigger federal scrutiny if they involve interstate commerce, organized crime, or distribution to minors. The FDA has not approved cannabis for medical use and does not regulate state-legal cannabis products. However, the agency has issued warning letters to companies making unsubstantiated health claims and has expressed concern about contaminants in vape products.

Ohio's Cannabis Testing and Recall System

Ohio requires batch testing at independent laboratories before products reach retail shelves, with results uploaded to the state's seed-to-sale tracking system and accessible to consumers via QR codes on product labels. Processors submit representative samples from each batch — defined as cannabis from a single harvest or production run — to licensed testing laboratories. A typical flower batch comprises 10-50 pounds; a concentrate batch may be 1-5 pounds. Laboratories analyze samples using gas chromatography, liquid chromatography, mass spectrometry, and microbial culture techniques. Testing certificates include batch number, strain name, cannabinoid profile (THC, THCA, CBD, CBDA, CBN, CBG), terpene profile, and pass/fail results for contaminants. Certificates remain valid for one year for flower, six months for concentrates, and 90 days for edibles. If a product fails testing, the processor may remediate the batch (e.g., retesting after additional drying to reduce microbial counts) or destroy it under Division supervision. Failed batches cannot be sold. Ohio's recall system operates on a three-tier classification: Class I recalls involve products that pose serious health risks, such as contamination with heavy metals exceeding action levels, detection of prohibited pesticides, or presence of pathogens like Salmonella. The Division issues public notices, requires dispensaries to contact purchasers, and mandates product destruction. Class II recalls address potential health hazards like mislabeled potency or minor exceedances of residual solvent limits. The Division requires dispensary notification but may not issue public alerts. Class III recalls cover minor violations such as missing batch numbers or incorrect net weight statements. Products may be relabeled rather than destroyed. Between August 2024 and September 2026, Ohio issued 14 recalls affecting approximately 50,000 units. The most common causes were pesticide detection (6 recalls), microbial contamination (4 recalls), and labeling errors (4 recalls). No recalls prior to the Vapen incident involved consumer health complaints.

Market and Business Implications

Product safety incidents impose direct costs including destroyed inventory, legal fees, and license suspension, plus indirect costs from brand damage, lost sales, and increased insurance premiums. For Vext Science, the Vapen incident threatens revenue from Ohio operations estimated at $15-20 million annually. If the Division orders a recall of all Vapen products in Ohio's distribution chain, the company could face destruction of 5,000-10,000 units valued at $200,000-$400,000 wholesale. License suspension would halt production and sales, costing $50,000-$75,000 in daily revenue. Brand reputation damage extends beyond Ohio. Multi-state operators depend on brand recognition to drive consumer loyalty across markets. A safety incident in one state can reduce sales in others as consumers and retailers grow cautious. Vext's Vapen brand competes with national vape brands including Select, Stiiizy, and Raw Garden — competitors that may gain market share if Vapen faces prolonged regulatory scrutiny. Insurance implications are significant. Cannabis operators carry product liability insurance with premiums of 2-5% of revenue. A claim from the Vapen incident could trigger premium increases of 50-100% at renewal, adding $300,000-$600,000 in annual costs for a mid-sized processor. For Ohio's broader cannabis industry, the incident may accelerate regulatory changes. Industry observers expect the Division to propose enhanced testing requirements, potentially including mandatory mycotoxin analysis and expanded heavy metal panels. Additional testing adds $100-$200 per batch, increasing costs for Ohio's 80+ licensed processors. Dispensaries face operational disruption from recalls. Removing products from shelves, notifying customers, and processing refunds requires staff time and system updates. A large recall can remove 10-20% of a dispensary's inventory, reducing sales until replacement products arrive. Investors monitor safety incidents as indicators of operational quality. Institutional investors in cannabis MSOs include due diligence questions about recall history, testing failure rates, and compliance infrastructure. A pattern of safety issues can reduce valuations by 10-20% in M&A transactions.

What Experts Say

Industry analysts, regulators, and testing laboratory executives emphasize that product safety requires robust quality control systems extending beyond minimum regulatory compliance. According to testing laboratory executives interviewed by trade publications in 2025, approximately 5-8% of cannabis batches submitted for testing fail on first attempt, most commonly for microbial contamination or pesticide detection. Failure rates are highest for outdoor-grown flower and lowest for distillate-based products like vape cartridges. Regulatory experts note that Ohio's testing regime is more stringent than many states but less comprehensive than California or Massachusetts. Ohio does not require mycotoxin testing, which California mandates after several incidents involving aflatoxin contamination. Ohio's heavy metal limits for vape cartridges are less strict than California's, which requires testing of both the cannabis oil and the hardware. Quality assurance consultants advise cannabis processors to implement Good Manufacturing Practices (GMP) modeled on pharmaceutical standards, including environmental monitoring, equipment calibration, and batch record review. Companies that achieve GMP certification report testing failure rates below 2%. Consumer advocates emphasize the importance of transparency. They recommend that states maintain public databases of recalls, testing failures, and enforcement actions — information currently available only through public records requests in Ohio. Advocates also urge mandatory reporting of adverse events, similar to the FDA's MedWatch system for pharmaceuticals. Legal experts note that Ohio's cannabis liability framework remains undeveloped. Because cannabis is federally illegal, product liability claims cannot be filed in federal court under diversity jurisdiction. Ohio state courts have not yet addressed whether cannabis processors can be held strictly liable for defective products or whether comparative negligence applies when consumers use products in violation of federal law.

What's Next

The Vapen investigation will likely conclude within 30-60 days, with potential outcomes ranging from no action to license suspension and civil penalties, while the incident may catalyze broader regulatory reforms. The Division of Cannabis Control faces several decision points: Immediate (September-October 2026): Complete laboratory analysis of seized products, interview affected consumers and dispensary staff, and review batch records and testing certificates. If testing confirms contamination, the Division will classify the recall and determine whether to expand it beyond the single dispensary. Near-term (October-December 2026): Issue findings and determine enforcement action against Vext Science and the dispensary. Options include warning letters, civil penalties, license suspension, or no action if the investigation finds no regulatory violation. The Division must also decide whether to reopen the dispensary. Medium-term (Q1-Q2 2027): Propose rule changes addressing any systemic issues revealed by the investigation. Potential reforms include enhanced testing requirements, mandatory adverse event reporting, and public recall databases. Industry observers expect the Division to increase unannounced compliance inspections of processors and testing laboratories. The agency conducted 200 inspections in 2025; that number may increase to 300+ in 2027. For Vext Science, the company faces decisions about whether to voluntarily recall Vapen products statewide, enhance quality control procedures, and communicate with investors and lenders. The company's credit agreement likely includes compliance warranties that could trigger technical default if the Division suspends its license. Ohio's General Assembly may consider legislation addressing cannabis product safety. Potential bills could mandate mycotoxin testing, establish a cannabis product liability framework, or create a consumer compensation fund for contamination victims. The incident also affects Ohio's ongoing debate about cannabis market structure. Some legislators advocate for vertical integration requirements that would limit the number of entities handling products, potentially reducing contamination risk. Others support open licensing that increases competition and consumer choice.

Lessons for Operators and Consumers

The Vapen incident offers actionable lessons for cannabis businesses and consumers navigating Ohio's regulated market. Operators should implement quality management systems that exceed minimum regulatory requirements, including:

• Environmental monitoring of cultivation and processing facilities for mold, bacteria, and pests
• Supplier qualification programs for hardware, packaging, and ingredients
• Batch record review by quality assurance personnel before products ship
• Retention samples stored for one year to enable investigation of consumer complaints
• Standard operating procedures for recall execution, including consumer notification templates

Processors should maintain product liability insurance with limits of at least $5 million per occurrence and $10 million aggregate. Policies should cover defense costs, product recall expenses, and business interruption. Dispensaries should verify that products carry valid testing certificates before placing them on shelves and train staff to recognize signs of contamination such as unusual odor, discoloration, or visible mold. Dispensaries should also maintain customer contact information to facilitate recalls. Consumers should verify testing certificates by scanning QR codes on product labels and checking results against Ohio's action levels. Consumers should report adverse events to dispensaries and the Division of Cannabis Control. Symptoms warranting medical attention include difficulty breathing, chest pain, severe headache, or persistent nausea. Consumers should purchase products only from licensed dispensaries, which are listed on the Division's website. Unlicensed retailers do not submit products for testing and may sell contaminated or mislabeled goods.

Further Reading

• Ohio Division of Cannabis Control official website: https://cannabis.ohio.gov
• Ohio Revised Code Chapter 3780 (Adult-Use Cannabis): https://codes.ohio.gov/ohio-revised-code/chapter-3780
• Ohio Revised Code Chapter 3796 (Medical Marijuana): https://codes.ohio.gov/ohio-revised-code/chapter-3796
• Ohio Administrative Code Title 3780 (Cannabis Control): https://codes.ohio.gov/ohio-administrative-code/chapter-3780
• MJBizDaily article on the Vapen incident: https://mjbizdaily.com/news/ohio-cannabis-product-tied-to-health-problems-store-closure-identified/618073/
• CDC information on EVALI (e-cigarette or vaping product use-associated lung injury): https://www.cdc.gov/tobacco/basic_information/e-cigarettes/severe-lung-disease.html
• FDA warning letters to cannabis companies: https://www.fda.gov/news-events/public-health-focus/fda-regulation-cannabis-and-cannabis-derived-products-including-cannabidiol-cbd
• ISO/IEC 17025 accreditation standards for testing laboratories: https://www.iso.org/ISO-IEC-17025-testing-and-calibration-laboratories.html
• Cole Memorandum (2013) on marijuana enforcement priorities: https://www.justice.gov/iso/opa/resources/3052013829132756857467.pdf
• Ohio Patient Network advocacy organization: https://www.ohiopatientnetwork.org