Prop 65 Compliance for Vegan Protein Products (“Plant-Based” ≠ “Contaminant-Free” · Pb · Cd · As · Hg · Naturally-Occurring Defense)

“Plant-Based” ≠ “Contaminant-Free” — The Category’s Core Risk

The vegan protein category’s core positioning — plant-based, organic, clean — correlates with higher Prop 65 exposure, not lower. Heavy metals enter through soil uptake, and organic-certified products tested an average of 3× more lead and 2× more cadmium than non-organic equivalents in Clean Label Project’s 2024–25 study of 160 top-selling protein powders. Nearly 80% of plant-based samples exceeded Prop 65’s 0.5 µg/day lead MADL. The naturally-occurring defense under 27 CCR § 25501 applies — but only when the manufacturer can prove levels are at the lowest currently feasible through sourcing, processing, and reformulation evidence. Assertion is not evidence.

Three Enforcement Regimes — One SKU

A product that meets FDA cGMP and carries NSF certification can still draw a Prop 65 NOV. A product that clears Prop 65 may still face FDA action under Closer to Zero. Vegan protein compliance requires simultaneous alignment across all three.

• Prop 65 (California — 1986): clear and reasonable warnings for listed chemicals; lead MADL 0.5 µg/day — the most stringent heavy-metal threshold in U.S. law, ~25× below FDA’s interim reference level; 27 CCR §§ 25600–25607.49
• Citizen Enforcement: bounty-hunter plaintiffs; supplements are a perennial top-10 target; two plaintiff groups accounted for 83 of 187 Prop 65 settlements in a single year; consent-decree thresholds typically run below Prop 65 statutory safe harbors
• Dietary Supplement Regime: DSHEA + 21 CFR Part 111 cGMP + USP <2232> elemental contaminant limits + FDA Closer to Zero initiative + NSF Certified for Sport® / Informed Sport voluntary certification thresholds

Chemical Inventory — The Four-Metal Panel

Every plant input (pea, rice, hemp, soy, cacao) contributes independently to the metal load. Chocolate-flavored powders test approximately 4× higher in lead and 110× higher in cadmium than vanilla. All four metals are tested by ICP-MS under the same workflow.

• Lead (Pb) — MADL 0.5 µg/day (reproductive + cancer); category headline chemical; taken up from soil by pea, rice, hemp, soy, and cacao; ~25× below FDA interim reference level
• Cadmium (Cd) — MADL 4.1 µg/day (reproductive); NSRL 0.05 µg/day (cancer); accumulates heavily in cacao, hemp, flax, and select pea varietals
• Inorganic Arsenic (As) — MADL 10 µg/day (reproductive); NSRL 10 µg/day (cancer); primary risk vector in rice-based protein; requires inorganic As speciation, not total arsenic only
• Methylmercury (Hg) — MADL 0.3 µg/day; rounds out the four-metal ICP-MS panel; lower prevalence but listed and enforceable

Beyond heavy metals, the OEHHA list contains 900+ chemicals. Protein-relevant categories also include pesticide residues (chlorpyrifos, carbaryl), processing contaminants (acrylamide, PAHs, nitrosamines), mycotoxins (aflatoxin, ochratoxin A, DON on grain inputs), and select flavor/color additives.

The Four-Stage Exposure Pathway

Concentration during ingredient processing is the decisive step. A whole-pea flour that tests compliant can become a concentrated isolate that does not.

• Stage 1 — Soil & Root Uptake: pea, rice, hemp, soy, cacao absorb Pb, Cd, As, Hg from soil; agricultural region and prior land use materially affect metal load
• Stage 2 — Ingredient Processing: protein isolation removes water but concentrates metals; 80% protein isolate ≈ 4–5× the metal load of the starting flour
• Stage 3 — Formulation & Flavor: cacao, spirulina, matcha, and mineral-premix additions add independent metal sources; chocolate ≈ 4× lead, 110× cadmium vs. vanilla
• Stage 4 — Serving Exposure: 30–40 g serving × daily use frequency × body-weight assumptions → reasoned-estimate daily exposure compared against the 0.5 µg/day MADL for lead

Safe Harbor Framework — MADL / NSRL / MoC Banding

• MADL (Maximum Allowable Dose Level): for reproductive toxicants; NOAEL ÷ 1,000 safety factor; Lead 0.5 µg/day · Cadmium 4.1 µg/day · Methylmercury 0.3 µg/day · Inorganic As 10 µg/day
• NSRL (No Significant Risk Level): for carcinogens; daily exposure at which lifetime cancer risk ≤ 1 in 100,000; Cadmium NSRL 0.05 µg/day · Inorganic As NSRL 10 µg/day

Internal Margin of Compliance (MoC) Banding — decision framework:

• GREEN (MoC ≥ 10×): no warning + retain evidence file
• AMBER (1× ≤ MoC < 10×): re-test + monitor; add warning if trending upward
• ORANGE (0.5× ≤ MoC < 1×): apply warning + initiate reformulation review
• RED (MoC < 0.5×): halt shipment + immediate reformulation

MoC banding runs in parallel with the naturally-occurring defense track. Both the internal control layer and the external defense file are required.

The Naturally-Occurring Defense (27 CCR § 25501)

Heavy metals that enter via soil uptake qualify for the naturally-occurring exemption — but only when the manufacturer can demonstrate levels are at the lowest currently feasible through sourcing, processing, and reformulation evidence. The Vega / Danone case demonstrates that a geographic pea-protein origin shift (China → North American sourcing) constitutes exactly this type of evidence. The defense requires a dedicated dossier — not a general assertion.

• Soil-testing data and regional heavy-metal baseline by growing region
• Processing yield and concentration-factor documentation
• Varietal selection evidence (lower-uptake cultivars where available)
• Reformulation history demonstrating continuous improvement

The Vega / Danone Precedent — What It Means for Your Brand

• 2013: Initial Prop 65 NOV over lead and cadmium in plant-based protein powders; consent decree with product-specific heavy-metal thresholds
• 2018: Second enforcement round; additional consent decree; cumulative settlement ~$336K
• 2024: Consumer Reports testing; Vega notes reformulation with North American pea-protein sourcing (shifted from China)
• 2025: CLP study; Vega publishes consent-decree compliance and NSF Certified for Sport® status

Lesson 1 — Consent decrees set the ceiling: once a category leader settles, the product-specific thresholds become de facto benchmarks. Competitors are measured against consent-decree numbers, not Prop 65’s statutory safe harbor alone.
Lesson 2 — Sourcing is a compliance lever: geographic origin shift is a documentable intervention that supports the naturally-occurring defense.
Lesson 3 — Transparency is protective: publishing test results and certification status transforms a potential NOV posture into a marketable trust signal.

Four-Tier Supply-Chain Control System

• Tier 1 — Farms & Co-ops: soil test history; regional heavy-metal baseline; crop rotation records; prior land-use documentation; varietal selection data
• Tier 2 — Ingredient Processors: per-lot ICP-MS on flour and isolate; concentration-factor documentation; residual solvent testing; allergen and GMO status
• Tier 3 — Flavor & Premix Suppliers: cacao, vanilla, botanical, vitamin/mineral premix COAs; cacao carries independent high-metal risk and demands separate qualification
• Tier 4 — Contract Manufacturers: cGMP compliance (21 CFR Part 111); blending and batch testing; finished-product retained sample program; label compliance review

Supplier indemnity clauses must name specific Prop 65 warranty obligations, require ingredient suppliers to bear defense costs in NOV actions, and preserve the brand’s right to terminate on first material non-conformance or heavy-metal excursion.

Exposure Assessment Methodology (27 CCR § 25821)

• Input 1 — Finished-product concentration: measured Pb, Cd, As, Hg (µg/g) in the retail form — flavored, fully formulated, ready-to-ship
• Input 2 — Recommended serving size: grams per scoop per label directions; accounts for single- and multi-scoop protocols
• Input 3 — Daily use frequency: averaging assumption per OEHHA guidance — not worst-case; sourced from category consumption data (NHANES, brand data)
• Input 4 — Population & arithmetic: Exposure = concentration × serving × daily frequency; compared against MADL/NSRL; averaging over a reasonable period is permitted for chronic endpoints

Reasoned estimate ≠ worst-case. “Worst-case daily use” without consumption-frequency data is not a reasoned estimate and typically cannot support a no-warning determination.

Documentation Architecture — Six Required Artifacts

• Heavy Metal Master Register: per-SKU index of Pb, Cd, As, Hg concentrations across finished products, with CAS numbers and Prop 65 status flags
• Ingredient Screening Log: lot-level ICP-MS results for every plant input and flavor component, with regional origin and supplier COA cross-reference
• Naturally Occurring Defense Dossier: evidence file under 27 CCR § 25501 — soil data, processing yields, varietal selection, and reformulation history
• No-Warning Justification File: QI-signed determination record with serving-size exposure calculation, MoC banding, and consent-decree threshold comparison
• Supplier Declaration Archive: signed Prop 65 statements, origin and agronomy attestations, indemnity clauses, re-qualification dates per tier
• Warning Determination & Change Log: dated record of warning decisions, reformulation events, supplier changes, and reassessment triggers — full audit trail

Qualified Individual (QI) Requirements

• Designated in writing with dated, signed document naming specific product scope and authority
• Working knowledge of Cal. H&S Code § 25249.5 et seq. and 27 CCR §§ 25600–25607.49
• Familiarity with OEHHA listed chemicals, MADL, and NSRL safe-harbor levels
• Ability to interpret ICP-MS results, COAs, and supplier chemical disclosures
• Understanding of reasoned-estimate exposure methodology under 27 CCR § 25821
• Authority to halt shipment, require re-testing, or mandate warning application
• Re-certifies on every formulation, supplier, or process change

Reassessment Triggers & Monitoring Frequency

A no-warning determination is a dated snapshot — not a permanent state.

• Quarterly: review of OEHHA list updates and enforcement bulletins
• Per-lot: ICP-MS on finished batches
• Per-harvest: full ingredient re-qualification on new crop cycle COAs
• Annual: supplier audit and on-site verification
• Per-change: QI sign-off on any formulation, sourcing, or serving-size modification
• Event-driven: NOV receipt, consumer complaint alleging heavy-metal exposure, or CR/CLP study release against the category

Multi-State and Federal Landscape

A California-only compliance program is no longer a complete program. Build internal specifications to the most stringent benchmark in scope — typically Prop 65 consent-decree levels or NSF Certified for Sport. One harmonized spec satisfies FDA + Prop 65 + voluntary certifications simultaneously.

• FDA Closer to Zero (Active): heavy-metal action levels in supplement foods; iterative reductions 2024–2028
• California Prop 65 (Active): MADLs + consent-decree thresholds defining category practice
• New York (2024+): AG actions on supplement authenticity and contamination; plant-protein priority
• Washington (2025+): Safer Products for WA — heavy-metal and pesticide priority categories
• Massachusetts (2025+): proposed supplement-labeling bills targeting heavy-metal disclosure
• USP <2232>: elemental contaminants limits for dietary supplements — industry benchmark

Economics of Compliance vs. Non-Compliance

• Testing & screening: proactive $4–10K/yr vs. reactive $20–50K emergency
• Legal & advisory: proactive $2–5K/yr vs. reactive $25–150K defense
• Settlement / penalty: proactive $0 vs. reactive $50K–$400K+ typical
• Channel disruption: proactive none vs. reactive Amazon / retailer delistings
• Brand trust damage: proactive none vs. reactive CR / CLP report inclusion

Reactive response to a Prop 65 NOV typically costs 10–20× a proactive compliance program for the same SKU portfolio — before class-action exposure, Attorney General action, NSF certification loss, and management time diverted.

90-Day Implementation Plan (Three Sprints)

Days 1–30 — Discover

• Four-metal chemical screening across all SKUs and protein sources
• Ingredient origin mapping and tier-by-tier supplier audit
• Serving-size and daily-use frequency documentation
• Initial MoC banding and gap report

Days 31–60 — Build

• Reasoned-estimate exposure calculations per SKU (27 CCR § 25821)
• Naturally-occurring defense dossier (soil data, concentration factors, varietal evidence)
• No-warning justification files with QI sign-off
• Supplier declaration archive and risk-rating matrix

Days 61–90 — Validate

• Mock NOV tabletop exercise
• Warning determination and change log activation
• Consumer complaint SOP training across QI, operations, and customer service
• Ongoing monitoring framework and reassessment trigger matrix locked