Heavy metals in CBD: what limit for flower or hash?
No European text sets a maximum level of heavy metals for CBD flower or resin. Laboratories often borrow the "food supplements" line of Regulation (EU) 2023/915, which covers foodstuffs: 3.0 mg/kg of lead, 1.0 of cadmium, 0.10 of mercury. California sets 0.5 mg/kg of lead for an inhaled product, six times less, so the verdict depends on the reference chosen.

Key takeaways
- Regulation (EU) 2023/915 names hemp only for its seeds, and only for THC; it sets no metal limit for hemp.
- The food supplements line caps lead at 3.0 mg/kg, cadmium at 1.0 mg/kg and mercury at 0.10 mg/kg, with nothing for arsenic.
- California's limits for inhaled cannabis: 0.5 µg/g of lead, 0.2 of cadmium, 0.1 of mercury, 0.2 of arsenic.
- Hemp flowers grown on a contaminated solution reached 66.2 mg/kg of cadmium in a 2023 study.
- Read "< LOQ" as "below the quantifiable level of this laboratory"; it never means "absent".
No European limit covers flower or resin
Commission Regulation (EU) 2023/915 of 25 April 2023 replaced Regulation (EC) No 1881/2006 and sets maximum levels for contaminants in foodstuffs. Section 3, "Metals and other elements", deals with lead (3.1), cadmium (3.2), mercury (3.3), arsenic (3.4) and inorganic tin (3.5).
The only mention of hemp is in section 2.6, on Δ⁹-THC equivalents: 3.0 mg/kg for hemp seeds and processed seeds, 7.5 mg/kg for hemp seed oil. Flower and resin have no line at all, for THC or for metals. This is consistent with French practice, where CBD flower or hash is not sold as food. For these products the applicable value is the French 0.30% Δ⁹-THC threshold, explained in our article on the legal THC level.
With no dedicated line, a laboratory compares its results with the nearest category. The analyst makes that choice, no law imposes it, and the certificate should say which category was used.
The citable values of Regulation 2023/915
| Element | Category in the regulation | Maximum level |
|---|---|---|
| Lead | Cereals (3.1.11) | 0.20 mg/kg |
| Lead | Fruit spices (3.1.12) | 0.60 mg/kg |
| Lead | Root and rhizome spices (3.1.12) | 1.50 mg/kg |
| Lead | Bark spices (3.1.12) | 2.0 mg/kg |
| Lead | Food supplements (3.1.28) | 3.0 mg/kg |
| Cadmium | Spinach, similar leaves and fresh herbs (3.2.6.2) | 0.20 mg/kg |
| Cadmium | Food supplements (3.2.21.1) | 1.0 mg/kg |
| Mercury | Food supplements (3.3.2) | 0.10 mg/kg |
| Inorganic arsenic | Non-parboiled milled rice (3.4.1.1) | 0.15 mg/kg |
For lead, the limits run from 0.20 mg/kg for cereals to 3.0 mg/kg for supplements, a factor of fifteen. A maximum level reflects the quantities consumed, and people eat far more cereals than supplements. It should not be read as a toxicity threshold.
Arsenic is a special case. Inorganic arsenic has a cap only for the products in points 3.4.1 to 3.4.4, namely rice and rice products, infant foods and fruit juices. Total arsenic is capped only in salt, at 0.50 mg/kg (3.4.5). Food supplements have no arsenic line, so a resin certificate claiming arsenic compliance "with the European regulation" cites a line that does not exist.
Health reference values are set by EFSA and expressed per kilo of body weight. In 2009 the agency fixed a tolerable weekly intake of 2.5 µg/kg for cadmium, with the kidney as the target organ. Such values are used to estimate a population's dietary exposure and cannot be applied to judge a single batch.
Inhaled products: a reference six times stricter
People smoke or vaporise CBD flower and hash, so the substance enters through the lungs and bypasses the digestive tract. Europe has no rule for that route in hemp. California wrote one for cannabis: its heavy metal testing regulation, 4 CCR § 15723, sets different action levels for inhaled and non-inhaled products.
| Element | Inhaled cannabis, California | Non-inhaled cannabis, California | Food supplement, EU |
|---|---|---|---|
| Lead | 0.5 µg/g | 0.5 µg/g | 3.0 mg/kg |
| Cadmium | 0.2 µg/g | 0.5 µg/g | 1.0 mg/kg |
| Mercury | 0.1 µg/g | 3.0 µg/g | 0.10 mg/kg |
| Arsenic | 0.2 µg/g | 1.5 µg/g | no limit |
Since one microgram per gram is one milligram per kilo, the columns can be read side by side. The Californian limit for an inhaled product sits six times below the EU "supplements" line for lead and five times below it for cadmium. At 1.2 mg/kg of lead, a batch passes the European reference and fails the Californian one.
Californian law has no force in France. Of the grids we were able to read, though, it is the only one designed for a cannabis product that is breathed in. When a laboratory applies it, you read the certificate against stricter limits.
Why hemp concentrates metals from the soil
Hemp draws elements out of its substrate and stores them, which is why it is used to clean polluted soils. One research team grew hemp in hydroponics at four cadmium inputs: 0, 2.5, 10 and 25 mg/L. The results appeared in 2023 in Frontiers in Plant Science and are open access.
With 2.5 mg/L in the solution, the roots held about 150 times more cadmium than the leaves. The flowers took some up as well: 8.7 and 7.6 mg/kg in the two experiments at 2.5 mg/L, then 66.2 and 25.5 mg/kg at 10 mg/L. According to the authors, hemp can accumulate cadmium in its flowers, and testing consumer products can matter.
The study has two limits. Its inputs were set high on purpose, and hydroponics differs from a field, so the figures cannot be extrapolated to a commercial batch. What it shows is a pathway: cadmium can reach the flower, so the flower itself needs testing as well as the soil. The product pages in the CBD flowers category state the growing method; that is context and no substitute for a measurement.
ICP-MS and the limit of quantification
In ICP-MS (inductively coupled plasma mass spectrometry), the sample goes through an argon plasma and the elements are then sorted by mass. The NF EN 15763 standard describes how arsenic, cadmium, mercury and lead are determined this way in foodstuffs after pressure digestion. Digestion, where the plant material is dissolved in hot acid before injection, matters as much as the measurement.
Regulation (EC) No 333/2007 governs sampling and analysis in official controls. As the Commission's page on sampling notes, it first covered lead, cadmium, mercury, inorganic tin, 3-MCPD and benzo(a)pyrene. It was later extended to inorganic arsenic and nickel.
The limit of quantification (LOQ) is the lowest level a method can quantify with the required precision. Because it depends on the method and matrix together, it varies from one laboratory to the next. In section 2.6, Regulation 2023/915 itself follows a cautious convention and counts any value below the LOQ as zero when calculating levels. A certificate showing "< LOQ" is telling you "below the quantifiable level of this laboratory", and it never means "absent".
Reading the "metals" line on a certificate
Run four checks, in this order.
- Compare batch numbers: the one on the certificate must match the one on the pouch. A document with no batch number proves nothing about your product.
- Look for the method, which should be ICP-MS for metals, with the standard followed. Metal results given without a method cannot be compared with anything.
- Find the limit of quantification, element by element, in mg/kg. If it is missing, a "not detected" has no scale.
- Check that the comparison category is named (food supplements, spices, Californian grid), since it decides the verdict.
You can also check accreditation. ISO/IEC 17025 accreditation, described on the Cofrac page, is granted test by test, so a laboratory accredited for cannabinoids may not be accredited for metals. Our guide to the scope of accreditation shows where to find this, and the article on pesticides applies the same method to the other block of contaminants.
On Phytogrammes, the product pages for resins and flowers give a batch reference and a reference cannabinoid profile. They show no metal results, and as of 18 October 2026 no laboratory certificate is published on them. For a line-by-line reading of a full certificate, see our guide how to read a certificate of analysis. The laboratory page describes the measurement methods.
Frequently asked questions
None specific to CBD flower and resin. The usual laboratory reference is the "food supplements" line of Regulation (EU) 2023/915, with lead at 3.0 mg/kg, cadmium at 1.0 mg/kg and mercury at 0.10 mg/kg. The Californian grid for inhaled products is stricter, at 0.5 mg/kg of lead.
Yes, for seeds, their derived products and hemp seed oil, and only for Δ⁹-THC, calculated as the sum Δ⁹-THC + 0.877 × Δ⁹-THCA. Flower and resin have no entry.
It means the method used cannot quantify a level that low. The value is not zero. The limit differs between laboratories, so it helps to see it printed next to the result.
No. ICP-MS measures elements, that is metals and metalloids. Pesticide residues are organic molecules, screened by chromatography coupled with tandem mass spectrometry. A full certificate therefore has two blocks, each with its own method and its own set of limits of quantification.
Written by the Phytogrammes team
Each journal article draws on cited primary sources: ANSM, EFSA, EUR-Lex and peer-reviewed publications. Product profiles are distinguished from documented laboratory results. Our approach.
Article published on . CBD is not a medicine.