Heavy Metal Limits in Dietary Supplements: The Complete Benchmark Guide

This guide collects the heavy metal benchmarks that actually matter for dietary supplements sold in the United States: the USP <2232> daily-dose limits, the USP component option, California Proposition 65 levels, and the EU's concentration-based maximums. It also shows you, with worked math, how to convert a ppb result on a certificate of analysis into the daily exposure number every one of these benchmarks is judged against. It is written for quality leads and founders who need one reliable reference instead of ten conflicting blog posts.

If you have ever tried to answer the question "what is the legal limit for lead in a supplement?", you have discovered the uncomfortable truth: in the United States, for most products, there is not one. What exists instead is a layered set of benchmarks, some voluntary, some state-level, some foreign, each with different numbers, units, and legal consequences. Brands get into trouble not because the numbers are secret but because they mix up the layers. This guide puts every number in one place, in the right units, with the distinctions that keep you out of trouble.

Are there federal limits for heavy metals in supplements?

No. There are no generally applicable federal numeric limits for lead, arsenic, cadmium, or mercury in finished dietary supplements.

What federal law requires is different, and in some ways more demanding. FDA's dietary supplement cGMP rule requires each manufacturer to establish its own specifications, including limits on contamination that may adulterate the product, and to verify that finished batches meet those specifications (21 CFR 111.70, 21 CFR 111.75). Separately, the FD&C Act's adulteration provisions (21 U.S.C. § 342) apply if a product contains a poisonous or deleterious substance that may render it injurious to health.

So the obligation to control heavy metals is federal law. The number is yours to set. That is precisely why the voluntary and state benchmarks below matter: they are what buyers, retailers, plaintiffs' attorneys, and certification programs use to judge whether the number you set is defensible. The direction of regulation is also clearly toward disclosure: California enacted SB 646 in October 2025, requiring heavy-metals testing and disclosure for prenatal vitamins, and pending California legislation (SB 1033) would extend mandatory testing and disclosure to protein products.

What are the Usp <2232> limits for dietary supplements?

USP General Chapter <2232>, Elemental Contaminants in Dietary Supplements, is the most widely used benchmark in the industry. Two things to understand before quoting it.

First, its legal status: <2232> is mandatory only for products labeled as conforming to USP or NF standards. For everyone else it is a voluntary, well-respected reference (USP <2232>).

Second, its structure: the chapter expresses limits in two different ways, and confusing them is the single most common error in supplement quality documents.

Option 1: daily-dose PDE limits (µg/day). These are the primary limits. They cap the total quantity of each element a consumer may ingest per day at the labeled maximum daily serving of the product.

Option 2: the component option (µg/g). For products with a maximum daily intake of 10 g or less, <2232> allows an alternative: demonstrating that each ingredient (or the finished product) stays below concentration limits in micrograms per gram.

The two tables are not interchangeable. The µg/g figures are concentrations; the µg/day figures are exposures. A COA reporting lead at 0.8 µg/g "passes" the component option, but at a 20 g daily serving the exposure is 16 µg/day, which exceeds the 10 µg/day limit, and the component option does not even apply above 10 g/day. Always know which option a specification, COA, or marketing claim references; if a document quotes "USP limits" without units, ask.

Note also which species the limits reference: inorganic arsenic (not total), plus both total mercury and methylmercury. Species matter, and they are covered in our plain-English explainer on ICP-MS testing for supplements.

What are the California Prop 65 levels, and what do Madl and Nsrl mean?

California's Proposition 65 is not a product standard. It is a right-to-know law: businesses must provide a warning before knowingly exposing Californians to listed chemicals above certain levels. It requires a warning, not a ban, and it is enforced largely through private 60-day notices, which is why its numbers function as the de facto strictest benchmark in the US market.

California's OEHHA publishes two kinds of safe-harbor levels, and the distinction matters:

• MADL (Maximum Allowable Dose Level) applies to chemicals listed as reproductive toxicants. Exposures at or below the MADL do not require a warning for reproductive harm.
• NSRL (No Significant Risk Level) applies to chemicals listed as carcinogens. Exposures at or below the NSRL do not require a warning for cancer risk.

Some elements carry both listings, and the lower number controls in practice. The published oral levels most relevant to supplements (OEHHA safe harbor list):

The lead MADL of 0.5 µg/day drives most supplement litigation and most quality programs. It is 20 times stricter than the USP <2232> daily limit of 10 µg/day, so a product can conform to USP <2232> comfortably and still trigger a Prop 65 warning obligation in California. That is not a contradiction; the two benchmarks answer different questions, but your specification needs to know both numbers exist.

Two cautions. First, exceeding a safe-harbor level does not make a product illegal or unsafe; it triggers a warning obligation in one state. Second, OEHHA has not published a comparable oral safe-harbor level for mercury, so be wary of any chart that lists one.

Do EU limits apply to dietary supplements?

Yes, and they work differently from every US benchmark. Commission Regulation (EU) 2023/915, which replaced the long-standing Regulation 1881/2006, sets maximum levels for contaminants in food, and food supplements appear as a regulated category. Key points for US brands selling into or benchmarking against the EU:

• The limits are concentration-based (mg/kg of product as sold), not daily-dose-based. The EU caps what can be in a kilogram of the supplement; USP <2232> caps what a consumer ingests per day.
• Lead: the maximum level for food supplements is 3.0 mg/kg.
• Mercury: the maximum level for food supplements is 0.10 mg/kg.
• Cadmium: maximum levels for food supplements vary by supplement type, with a higher allowance (up to 3.0 mg/kg) for supplements consisting mainly of dried seaweed or products derived from seaweed.
• Arsenic: the regulation sets inorganic arsenic limits for categories like rice products, but it does not set a supplement-specific arsenic maximum.
• The levels apply to the ready-to-use supplement as marketed, not to individual raw materials.

Because these are legally binding concentration limits, a mg/kg result on a COA maps onto them directly. Note that 1 mg/kg equals 1 µg/g equals 1 ppm, which brings us to the math every quality lead should be able to do on a napkin.

How do you convert a Coa result into daily exposure?

Almost every dispute about "does this product pass?" comes down to one conversion. Laboratories report concentrations. Benchmarks like USP <2232> daily limits and Prop 65 levels are exposures. The bridge is your daily serving mass:

Daily exposure (µg/day) = concentration (µg/g) x daily serving mass (g/day)

The unit conversions you need:

• 1 ppm = 1 µg/g = 1 mg/kg = 1,000 ppb
• 1 ppb = 0.001 µg/g = 1 µg/kg

Worked example. Your COA reports lead at 120 ppb in an electrolyte powder. The label directs one 8 g scoop per day.

1. Convert the concentration: 120 ppb = 0.120 µg/g.
2. Multiply by daily serving mass: 0.120 µg/g x 8 g/day = 0.96 µg/day of lead exposure.
3. Compare against benchmarks: 0.96 µg/day is well under the USP <2232> daily limit of 10 µg/day, and under the component option threshold too (0.120 µg/g is far below 1.0 µg/g). But it is above California's Prop 65 lead MADL of 0.5 µg/day, so the product would need either a warning analysis for California or a reformulation and re-sourcing conversation.

Now run the same product at two scoops per day: 0.120 µg/g x 16 g/day = 1.92 µg/day. Same powder, same COA, double the exposure. This is why serious standards are dose-based, and why serving size is a quality decision, not just a marketing one.

The same math exposes the emptiness of detection-based claims. Modern ICP-MS instruments detect elements down to roughly parts per trillion, so detectable results are normal across agriculture-derived and mineral ingredients. Detection is not risk; exposure against a benchmark is what matters, and a brand claiming "zero heavy metals" is making a claim its own laboratory cannot support. For reading the rest of the lab report, see how to read a heavy metal certificate of analysis.

Which benchmark should your brand actually use?

A practical hierarchy for US supplement brands:

1. Set finished-product specifications in µg/day, calculated at your labeled maximum daily serving. Concentration specs alone break the moment serving size changes.
2. Use USP <2232> daily limits as your ceiling. They are the recognized pharmacopeial benchmark, and no credible buyer will accept a looser one.
3. Know your position against the Prop 65 lead MADL (0.5 µg/day). Whether you meet it, or warn, is a decision to make deliberately with counsel, not to discover in a 60-day notice.
4. Check EU concentration limits if you sell or plan to sell into Europe, since those are binding law, not benchmarks.
5. Document the basis of every number. Under cGMP the specification is yours, which means its rationale is yours to defend.

Where you land here is the foundation for everything downstream: what your labs test to, what your COAs must show, and what any certification evaluates. Independent programs exist precisely because self-set specifications are invisible to buyers; a published standard makes your position against these benchmarks legible. That is the role of heavy metal certification for supplements, and the layers are compared in third-party testing vs certification vs FDA compliance. How often you generate the data that proves ongoing conformance is its own question: see how often supplements should be tested for heavy metals.

Faq: Heavy Metal Limits in Dietary Supplements

What is the legal limit for lead in dietary supplements in the US? There is no generally applicable federal numeric limit. FDA's cGMP rule requires manufacturers to set and verify their own contamination specifications. The most-used benchmarks are USP <2232> (10 µg/day) and the Prop 65 lead MADL (0.5 µg/day), which triggers a warning obligation, not a ban.

What is the difference between USP <2232> daily limits and the component option? The daily limits (for example, lead 10 µg/day) cap total exposure at the labeled daily serving. The component option (for example, lead 1.0 µg/g) is an alternative concentration-based route available only for products with daily intakes of 10 g or less. One is µg/day, the other µg/g; they are not interchangeable.

What do MADL and NSRL mean under Prop 65? A MADL (Maximum Allowable Dose Level) is the safe-harbor exposure level for chemicals listed as reproductive toxicants. An NSRL (No Significant Risk Level) is the safe-harbor level for listed carcinogens. Lead has both: a 0.5 µg/day MADL and a 15 µg/day oral NSRL. The stricter number is the one quality programs plan around.

Does the EU set heavy metal limits for supplements? Yes. Regulation (EU) 2023/915 sets concentration-based maximum levels for food supplements as sold, including lead at 3.0 mg/kg and mercury at 0.10 mg/kg, with cadmium allowances that vary by supplement type. It does not set a supplement-specific arsenic maximum.

How do I convert ppb on a COA to µg/day? Divide the ppb value by 1,000 to get µg/g, then multiply by the daily serving mass in grams. Example: 120 ppb = 0.120 µg/g; at 8 g/day that is 0.96 µg/day.

Can a supplement pass USP <2232> and still need a Prop 65 warning? Yes, easily. The USP lead limit is 10 µg/day; the Prop 65 lead MADL is 0.5 µg/day. A product at, say, 2 µg/day of lead conforms to USP <2232> but exceeds the California safe-harbor level, so a warning analysis is needed for California sales.

Do detectable heavy metals mean a product exceeds a limit? No. ICP-MS detects at roughly parts-per-trillion levels, far below every benchmark in this guide. Every benchmark is a quantity threshold, and most detectable results in well-controlled products sit far below all of them. The question is always the dose per daily serving, never bare detection.

Want to know exactly where your products stand against these benchmarks? Request a preliminary certification assessment and we will review your formulations, serving sizes, and current COAs against the published standard. Explore heavy metal testing and certification, see the Heavy Metal Tested certified brands, or apply for certification.