Prop 65 Compliance for Chocolate Makers: Lead, Cadmium, and What Actually Gets You Sued

Every craft chocolate maker who ships to California — which in practice means everyone who uses Shopify, Faire, Amazon, or any distributor that covers the US — eventually gets a Prop 65 letter. The first one is terrifying. The second one is expensive. The third one is existential. This post is the working compliance guide we wish every new maker had: what California Proposition 65 actually requires, the specific thresholds for lead and cadmium in chocolate, how the enforcement economy works, and the practical protocol that keeps makers out of the private-litigant pipeline.

What Prop 65 actually is

California's Safe Drinking Water and Toxic Enforcement Act of 1986, universally known as Proposition 65, requires businesses to provide “clear and reasonable” warnings before exposing Californians to any of roughly 900 chemicals the state has identified as causing cancer, birth defects, or reproductive harm. For chocolate, the two chemicals that matter are lead and cadmium. Both are naturally present in cacao — lead primarily through post-harvest surface contamination, cadmium primarily through uptake from the soil where the cacao tree grows.

The law is enforced in two ways. The California Attorney General brings some cases. But the vast majority of enforcement comes from private plaintiffs — lawyers and nonprofits who are entitled to 25% of any settlement they negotiate. This creates a highly organized litigation industry that systematically tests consumer products, files 60-day notices of violation, and settles for $10,000–$60,000 per product line. Craft chocolate has been a focus area for these plaintiffs since 2018.

The exact thresholds that matter

Prop 65 triggers a warning requirement when daily exposure exceeds a chemical-specific threshold called the Maximum Allowable Dose Level (MADL) for reproductive toxicants or the No Significant Risk Level (NSRL) for carcinogens. For chocolate, the operational thresholds most plaintiffs use are:

Two crucial points. First, these are exposure thresholds, not concentration limits. A plaintiff can argue that your bar triggers a warning even at lower concentrations if they claim consumers eat more than one serving per day. Second, the threshold for lead is much more aggressive than for cadmium — most Prop 65 chocolate litigation is actually lead-driven, not cadmium-driven, despite cadmium being the metal that gets more press.

Why your cacao might be over the line

Cadmium: a soil problem

Cadmium in cacao comes primarily from the soil in which the tree grows. Certain cacao-growing regions sit on volcanic or mineral-rich soils with naturally elevated cadmium levels. Ecuador, Peru, Bolivia, and parts of the Caribbean are the historically high-cadmium origins. West African cacao is typically much lower in cadmium. This is genetics-plus-geology — not a farm practice that can be easily changed, and not something you can roast or conche away.

Lead: a post-harvest problem

Lead in cacao, counterintuitively, mostly arrives afterthe beans leave the tree. Freshly fermented and dried beans typically measure very low for lead. The contamination happens during transport, storage, and early processing: metal grain elevators, unsealed concrete drying patios near roads, dusty shipping containers, contaminated water used for cleaning. This means lead is a supply-chain hygiene problem more than a botanical one — and it's something a careful maker can actually influence by choosing suppliers with clean handling protocols.

How craft makers actually get sued

The mechanism is almost industrial in its efficiency. A plaintiff law firm hires a testing lab. The lab buys your product at retail in California. They run ICP-MS testing for lead and cadmium. If either result is above the threshold, the firm sends you a 60-day Notice of Violation (NOV) under California Health & Safety Code 25249.7. You have 60 days to either post a warning and pay a settlement, or litigate and risk civil penalties of up to $2,500 per day per violation.

Typical settlement economics:

For a solo maker running a $200k business, a $30,000 settlement on a single SKU is catastrophic. For the plaintiff, it's a six-figure hourly rate. This asymmetry is the reason Prop 65 is such an effective enforcement mechanism — it works regardless of whether the maker was actually putting consumers at risk.

The testing protocol every maker should run

The defense is testing. Specifically, a regular, documented program of third-party ICP-MS testing of both raw cacao and finished bars, with results retained in a compliance log. Here is the protocol we recommend:

1. Test every new lot of cacao you buy. Request a Certificate of Analysis (CoA) from your importer showing lead and cadmium results in µg/kg or ppm. If the importer doesn't provide one, pay $150–$200 to have your own sample tested before you commit to the lot. You will catch problems before you've made chocolate out of them.
2. Test every production batch of finished bars. For each distinct recipe/lot combination, pull 1–2 bars from the batch and send to an accredited lab. Cost is $150–$250 per sample. Annual cost for a maker running 20 batches a year: roughly $3,000–$5,000 — which is cheap insurance against a $30,000 settlement.
3. Keep the records. Prop 65 defense depends heavily on being able to produce documented test results showing the specific bar in question was under threshold. Records should include: lab name, accreditation, date of test, sample identifier, batch identifier, and the specific µg/kg results for lead and cadmium.
4. Re-test when anything changes. New cacao lot, new supplier, new packaging, new processing equipment — any variable change is a reason to add a confirmatory test.

When a test comes back high

Sooner or later, one will. Here's the decision tree:

Option 1 — Reformulate

The most durable fix. If the cacao is high in cadmium, reduce the cacao percentage in the recipe, blend with a lower-cadmium origin to pull the average down, or switch origins entirely. Many makers keep a stable of two or three “dilution” origins (low-cadmium West African or Dominican cacao) specifically to blend into bars whose primary origin would otherwise exceed threshold.

Option 2 — Warning label

You can legally sell a bar that exceeds threshold if you post a compliant Prop 65 warning. The standard warning text includes specific language: “This product can expose you to lead, which is known to the State of California to cause cancer and birth defects or other reproductive harm,” with a link to the Prop 65 warnings website. The warning must be visible before the point of purchase. For DTC sellers, this means the warning appears on the product page. For wholesale, it must appear on the bar packaging itself or be communicated to the retailer with adequate notice.

Warning labels are operationally straightforward but strategically costly. Specialty grocers sometimes decline to carry warning-labeled chocolate because it signals heavy-metal risk to customers. Consumer-facing warning labels on craft chocolate are still relatively rare and do affect purchase behavior.

Option 3 — Geographic exclusion

Some makers simply decline to ship to California addresses for SKUs that trend near threshold. On Shopify this is a one-line shipping rule. It's an imperfect solution — you lose the California market, which is about 15% of US specialty-chocolate sales — but it's a legitimate strategic choice for a small maker with a single borderline SKU.

What to do if you receive a 60-day notice

1. Do not ignore it. The 60-day clock is statutory. Missing it dramatically increases your liability.
2. Retain counsel immediately. Not your general business lawyer — someone with specific Prop 65 experience. Most California food attorneys know who to refer.
3. Gather your test records. Every CoA, every batch log, every origin document. Your test history is your single best negotiating asset.
4. Stop shipping the specific SKU to California until the matter is resolved. Continued shipments during negotiation can add to the civil penalty calculation.
5. Settle or litigate. Most small-maker cases settle. The negotiated settlement usually requires a future testing and labeling commitment plus a fee. Litigation is rarely economic for settlements under about $75,000.

The annual compliance cadence we recommend

For a maker running $200,000 in revenue, a $5,000 annual compliance budget is 2.5% of top-line — not trivial, but dramatically cheaper than a single Prop 65 settlement. The makers who get into trouble are almost always the ones who skipped the testing line item to save a few hundred dollars per batch.

The cheat sheet

Prop 65 is one of those compliance areas where the time-to-risk curve is almost vertical — a maker can operate for years without a notice, then receive one on a Tuesday and discover the next eight months of their life are about to be consumed by a regulatory fight. The testing and documentation protocol above isn't just risk management. It's the thing that makes a Prop 65 notice into a solvable problem rather than a business-ending one.

For the broader compliance picture — including FSMA 204 traceability and EUDR due-diligence — see our upcoming posts on those topics. For the cost-allocation side of compliance, our true cost-per-bar guide shows how testing and insurance should be allocated into your cost model so you never price a bar below what it actually costs to make compliantly.