What Just Changed Under California Proposition 65

On October 30, 2026, California's Office of Environmental Health Hazard Assessment (OEHHA) issued Notices of Intent to add three more PFAS to the Proposition 65 list as reproductive toxicants. The three substances are perfluorobutanoic acid (PFBA) and related salts, perfluorodecanoic acid (PFDA) and related salts, and perfluorohexanoic acid (PFHxA) and related salts.

For any company selling consumer products, electronics, textiles, or cosmetics into California, this is a direct expansion of Prop 65 PFAS exposure. These are proposed, not final. OEHHA is accepting public comments through November 30, 2026, after which it decides whether to formally list each substance. You can confirm the current status on the official OEHHA Proposition 65 page.

If your team already tracks PFAS, the first move is simple: know whether these six substances touch any product in your California portfolio. Book a compliance risk assessment to map your PFAS exposure across products and suppliers before a listing converts into a warning obligation.

Which PFAS Are Already Listed, and Which Are Proposed

California has been expanding the PFAS footprint under Proposition 65 for years. Understanding what is already listed clarifies why the new proposals matter.

Three PFAS currently sit on the Prop 65 list:

• PFOA (perfluorooctanoic acid): listed for reproductive toxicity and later for cancer.

• PFOS (perfluorooctane sulfonate): listed for reproductive toxicity and later for cancer.

• PFNA (perfluorononanoic acid): listed for reproductive toxicity.

If the three newly proposed substances are finalized, the number of individually listed PFAS under Proposition 65 would rise to six.

The pattern matters for planning. California does not list the full PFAS class at once. It adds substances individually, which means OEHHA PFAS activity is recurring rather than one-time. For the broader picture across jurisdictions, see Certivo's global PFAS regulations master guide and the overview on the PFAS regulations framework page.

California Proposition 65 PFAS listing expansion with three proposed PFAS additions

Click on image to view full

How the Prop 65 Listing Mechanism Works

Proposition 65 is formally the Safe Drinking Water and Toxic Enforcement Act of 1986. It is a warning and disclosure law, not a product ban. Once a chemical is listed, businesses must provide a "clear and reasonable warning" before knowingly exposing people in California to that chemical, unless the exposure is low enough to qualify for an exemption.

OEHHA uses several listing mechanisms. The three new PFAS are proposed under the Authoritative Bodies mechanism, which applies when a designated authoritative body has formally identified a chemical as causing reproductive toxicity. This mechanism is largely administrative, so once the criteria are met, listing often follows.

After a chemical is formally listed, the warning requirement does not take effect immediately. For these listings, businesses generally have a grace period of about one year before warning obligations apply to significant exposures. That window is the planning runway, and it is shorter than most multi-tier supply chains can resolve reactively.

Why Proposed PFAS Listings Carry Real Exposure

A common mistake is treating "proposed" as "not yet my problem." That framing underestimates how Prop 65 works in practice.

The reason is the private-enforcement model combined with product testing. Enforcers routinely test finished goods sold in California. A listing creates the legal hook, and the one-year runway is the only buffer between listing and liability. Companies that wait until a substance is final often discover the exposure through a notice of violation rather than through their own data.

This is distinct from state PFAS reporting regimes, which create disclosure obligations to agencies. Prop 65 creates a warning-and-labeling obligation enforceable by private plaintiffs. Both can apply to the same product. For how the reporting side is evolving, see Certivo's analysis of state PFAS regulations in 2026.

⚠️ Struggling to confirm whether these PFAS appear anywhere in your BOMs or supplier declarations? Speak with a compliance specialist to pressure-test your current PFAS visibility.

The Safe Harbor Gap and What It Means for Warnings

Proposition 65 lets OEHHA set safe harbor levels that tell businesses when an exposure is low enough to skip a warning. For carcinogens, this is the No Significant Risk Level (NSRL). For reproductive toxicants, it is the Maximum Allowable Dose Level (MADL).

Based on currently available regulatory guidance, OEHHA has not established safe harbor levels for the listed PFAS. This is the detail most operators miss, and it changes the risk calculus.

When no safe harbor level exists:

• The business, not OEHHA, carries the burden of proving an exposure does not require a warning.

• Any detectable exposure can become a point of dispute in enforcement.

• Defending a "no warning needed" position requires exposure assessment and documentation you can produce on demand.

That is why Prop 65 safe harbor status is not an academic point. Without a published threshold, the practical answer for many products is to warn or to generate defensible exposure evidence. Certivo's overview of Prop 65 warning-label changes covers how label obligations keep shifting.

No Prop 65 safe harbor level for listed PFAS places warning burden on manufacturers

Click on image to view full

Who Is Affected: Products and Industries

PFAS appear across a wide range of articles sold in California, often introduced by suppliers rather than by the brand itself. A Prop 65 warning PFAS obligation can attach to the finished product even when the PFAS enters three tiers upstream.

Industries most exposed to the new proposed listings:

The common thread is multi-tier sourcing. A brand selling into California may not manufacture the PFAS-containing component, but it still carries the warning obligation. That makes multi-tier supply chain transparency the real control point. For sector-specific context, see Certivo's pages for consumer goods and electronics manufacturing.

Enforcement: The Private-Litigation Model

Proposition 65 is enforced by the California Attorney General, district attorneys, and private citizens acting in the public interest. Private enforcers issue 60-day notices of violation, and many matters resolve through settlement rather than trial.

Under the statute, civil penalties can reach up to $2,500 per violation per day, and settlements frequently include attorney's fees and reformulation commitments. The California Attorney General publishes annual settlement summaries, which are a reliable way to track enforcement trends over time. You can monitor new notices and listing actions on the OEHHA Proposition 65 notices page.

The operational takeaway is that enforcement is decentralized and testing-driven. It does not depend on an agency inspection. That is why audit-ready documentation and evidence retrieval matter as much as the chemistry itself.

What Manufacturers Should Do Before November 30, 2026

The comment period gives compliance leaders a defined window to act. These steps turn a proposed listing into a managed exposure rather than a surprise.

1. Screen your BOMs for all six PFAS. Include PFOA, PFOS, PFNA, plus the proposed PFBA, PFDA, and PFHxA, including related salts. Start where California revenue is highest.

2. Trace to the supplier tier. Identify which components and suppliers introduce these substances, not just which finished products test positive.

3. Confirm testing coverage. The listed and proposed PFAS are among the analytes covered by EPA Method 1633, so existing PFAS testing programs may already capture them.

4. Assess the warning decision. Without a safe harbor level, decide per product whether to warn or to document a defensible no-significant-exposure position.

5. Centralize the evidence. Keep time-stamped supplier declarations, test reports, and exposure assessments retrievable for enforcement response.

6. Set a horizon-scanning trigger. Track OEHHA actions so the next proposed PFAS does not require a manual re-scan from zero.

These actions map directly to the ability to track compliance at the BOM level and to manage compliance risk proactively rather than reactively.

How AI-Native Compliance Changes the Workload

The hard part of Proposition 65 is not reading the statute. It is answering, at scale and on demand, which of thousands of parts across hundreds of suppliers contain a newly listed substance. Spreadsheets and email cannot keep pace when the list grows several times a year.

This is where Certivo functions as the system of record for product compliance. By connecting supplier declarations, test reports, and BOM data in one place, Certivo supports BOM substance and threshold management so a new listing becomes a query rather than a project. Automated supplier data collection reduces the manual chase for missing disclosures across tiers.

CORA, Certivo's embedded regulatory intelligence, supports the horizon-scanning side. CORA-powered regulatory intelligence helps teams see proposed listings early and understand which products are affected, while AI document parsing extracts and validates substance data from certificates and test reports. The result is a shift from reactive warning decisions to continuous, audit-ready readiness. For the materials dimension, see Certivo's materials and environmental compliance solution.

Certivo does not eliminate compliance obligations or make a company audit-proof. It reduces compliance surprises, improves evidence retrieval, and shortens the time to answer a customer or enforcement request.

Before the Next Listing Lands

The pattern is predictable: OEHHA will keep adding PFAS individually. Companies that can scan their full portfolio against a new substance in hours, not weeks, convert each proposed listing into a routine check. Those still working from spreadsheets absorb the same shock every cycle.

Book a compliance risk assessment to see your current PFAS exposure across products and jurisdictions, and to scan your BOM for these PFAS before a listing triggers a warning obligation.