Who's Responsible for Cannabis Safety in Ohio?

Buy a gram in Columbus and the label tells you which lab tested it, the day the flower was harvested and what the state found in it. Buy a delta-8 gummy at a gas station and, since March 2026, you are buying something Ohio has banned outright. Here is who is responsible for cannabis safety in Ohio, what "tested" really covers, and the few things you can check yourself.

One regulator, two rulebooks

Ohio voters approved adult-use cannabis in November 2023, and sales began on 6 August 2024 at dispensaries that already served medical patients. On 20 March 2026 Senate Bill 56 took effect and folded the medical and adult-use statutes into a single Marijuana Control Program, run, as both already were, by the Division of Cannabis Control (DCC), part of the Ohio Department of Commerce. The Division licenses every cultivator, processor, testing laboratory and dispensary, runs the patient registry, and the law now caps the state at 400 dispensaries. The State Medical Board certifies the physicians who recommend medical cannabis.

The catch is that the rules did not merge as neatly as the agencies. The Division's new rules live in one chapter of the administrative code (OAC 1301:18), but the Division itself says the older medical-program chapters stay in force wherever a new rule has not yet replaced them. As of September 2026 the test panel and the sampling rules are still the older ones, and their replacement is only a draft. The label rules, on the other hand, were adopted on 1 September 2026 and take effect on 11 September, the day this article publishes, with every package required to comply by 1 June 2027. More on that below.

Who checks that it is safe

Cultivators and processors (37 and 45 with certificates of operation in August 2026) grow and make the product and tag every plant and package in Metrc, the state's track-and-trace system.

Independent testing labs pull the sample and run the tests. Seven labs held certificates of operation on the Division's September 2026 list, in Columbus, Toledo, Akron and Streetsboro; one of them, licensed in March 2026, appears on that list under the Division's own name. Labs must be accredited to ISO/IEC 17025 within two years of licensing and pass proficiency testing every two years. Nobody with a stake in a grower or processor may own, invest in or work for a lab.

The Division writes the standards, inspects, issues recalls and can order a batch destroyed. A failed test locks the batch in Metrc so it cannot move to a store.

Dispensaries (227 open plus 50 provisional in August 2026) check ID for 21 and over, keep product in its original tamper-evident package and hand you an itemised receipt.

What "tested" actually means

A flower batch is one variety and at most 15 pounds of dried bud. Ohio is one of the states where the lab comes to the grow: a lab employee travels to the cultivator or processor, selects a random sample of at least half a percent of the batch weight, and carries it back under a Metrc manifest. The grower does not pick what gets tested. The lab then screens for:

Cannabinoids: delta-9 THC, THCA, delta-8 THC, CBD, CBDA, CBN and total THC.

Microbials and mycotoxins (aflatoxins and ochratoxin A).

Heavy metals: arsenic, cadmium, lead and mercury.

Pesticides: any unapproved pesticide is an automatic fail.

Residual solvents in hydrocarbon extracts, moisture and water activity in flower, and foreign matter.

Since April 2025 potency must be reported "as received": labs may no longer correct results to a dry weight, a practice that inflates THC percentages, and they may not print a "total cannabinoids" or "total terpenes" figure at all. Terpenes are not on the required panel; a lab may test them, but does not have to. A batch that fails is destroyed, with one exception: a microbial failure can be sent for solvent extraction instead.

Every certificate of analysis (COA) must carry the lab's name and licence, the batch number, the test dates, a pass/fail grid for every required test, the potency numbers, the lab manager's signature and a photo of the sample as it arrived. It is uploaded to Metrc, and those results decide whether the batch can move forward.

The part you can check yourself: the label and the seal

No Ohio rule requires a QR code to the COA or obliges a dispensary to hand you the lab report, and labs may not release test results to the public at all (the only carve-out is aggregated research data under a Division-approved plan). What the package must carry instead is most of the report in miniature: the name and licence number of the testing lab, the batch or lot number, the harvest date on flower, the manufacture, final-testing and packaging dates, an expiry date no more than a year out, the cannabinoid profile line by line (total THC, delta-9 THC, THCA, delta-8 THC, THCV, CBD and CBDA) and the terpene profile, the dispensary's name and licence, and a statement that use under 21 is both harmful and illegal. Edibles must carry the universal THC symbol on every single serving, at least a quarter inch across.

That is the label you will see on most shelves this autumn. From 11 September 2026 a new format phases in, mandatory by 1 June 2027: flower labels switch to a THC range instead of point values and may no longer print the delta-9, delta-8 or THCA numbers, THCV and the top three terpenes become required, flower loses its expiry date in favour of harvest, packaging and test-submission dates, and a QR code carrying the COA becomes permitted, though still not required.

The Division also tells consumers to look for the DCC seal on the package, its mark that a product met state safety standards, and for the Division's licence seal at the dispensary entrance. You can confirm a store is licensed on the Division's online map.

The twist: the gas station is out of the game

Since 20 March 2026, any product with more than 0.4 milligrams of total THC per container counts as marijuana in Ohio, and marijuana can only be sold at a licensed dispensary. In one stroke that banned the delta-8 gummies, THCA flower and THC drinks that gas stations and smoke shops had been selling untested for years. The Governor even vetoed a temporary carve-out for low-dose hemp drinks in bars and grocery stores. Enforcement of the hemp law sits with the Department of Agriculture and the Ohio Investigative Unit, not the Division.

Tested does not mean infallible, though. In February 2026 the Division recalled a line of gummies because the individual pieces lacked the THC symbol, and in April two recalls covered 80 gummy product codes with undeclared soy. On 4 September 2026 a dispensary in Jackson closed at the Division's request while investigators look into two serious adverse health events possibly linked to products bought there. The company says every item on its shelves had passed state testing, and the Division's own re-tests had found no contamination as of 8 September. The investigation was still open as this was written.

What it means for you

Buying at a dispensary: read the lab name and the test date on the label, look for the DCC seal, and keep the receipt. If a batch number turns up in a recall you can return it for a refund within 30 days of the notice. Daily limit: 2.5 ounces of flower, or products totalling 15,000 mg of THC.

Buying anywhere else: if it has THC in it and the seller is not a licensed dispensary, it has been illegal since March 2026 and it has never been through this chain. The Division's own words for store-shelf delta-8: unregulated, untested, unsafe.

Growing at home: adults may grow six plants, twelve per household. Nothing you grow is tested; the whole lab system attaches only to licensed batches.

Medical patients: the same labs, panel and label rules apply to your product; the registry has sat with the Division, not the Board of Pharmacy, since 2023.

Questions people ask

Is cannabis in Ohio lab-tested? Yes, if it comes from a licensed dispensary. Every batch from a licensed cultivator or processor is sampled by an independent lab and tested for potency and contaminants (microbials, mycotoxins, heavy metals, pesticides, moisture and foreign matter, plus residual solvents in hydrocarbon extracts) before it can be sold. Home-grown cannabis and anything sold outside a dispensary are not tested.

Who regulates cannabis in Ohio? The Division of Cannabis Control, part of the Ohio Department of Commerce, licenses and regulates cultivators, processors, testing labs and dispensaries for both medical and adult-use cannabis, a single program since Senate Bill 56 took effect on 20 March 2026. The State Medical Board certifies recommending physicians, and the Department of Agriculture polices hemp.

Is delta-8 legal in Ohio? Not outside a dispensary. Since 20 March 2026 any product with more than 0.4 mg of total THC per container is treated as marijuana and may only be sold by a licensed dispensary, which ends gas-station and smoke-shop delta-8, THCA flower and THC beverages.

Want to see the whole chain, from harvest batch to labelled package, step by step? Play the interactive walkthrough at weed-central.com/learn/coa/usa-ohio (https://weed-central.com/learn/coa/usa-ohio?utm_source=newsletter.weed-central.com&utm_medium=newsletter&utm_campaign=who-s-responsible-for-cannabis-safety-in-ohio), and compare it with how other US states and countries do it at weed-central.com/learn/coa (https://weed-central.com/learn/coa?utm_source=newsletter.weed-central.com&utm_medium=newsletter&utm_campaign=who-s-responsible-for-cannabis-safety-in-ohio).

This article is general information, not legal or medical advice. Ohio's rules are mid-transition and can change; verify the current requirements before relying on any detail.