EU cadmium limits for cocoa and chocolate products are regulated under Commission Regulation (EU) 2023/915. For many importers searching this topic, the figure that matters first is the cocoa powder limit:

0.60 mg/kg cadmium for cocoa powder placed on the market for the final consumer, and for cocoa powder used as an ingredient in sweetened cocoa powder or powdered chocolate intended for drinking by final consumers.

That number is important, but it is not universal. A dark chocolate bar, milk chocolate, retail cocoa powder, drinking chocolate mix, cocoa liquor, and other cocoa-derived ingredients can raise different compliance questions. Chocolate limits depend heavily on cocoa solids content, while B2B ingredients may be governed by buyer specifications designed to keep the finished product safely within the legal limit.

Is there a new EU cadmium limit in 2026?

The core EU cadmium limits for cocoa and chocolate products are not new for 2026. They have been in force since 2019 and are now found under Regulation (EU) 2023/915.

What has changed is the buying environment. EU buyers increasingly expect batch-specific documents, credible lab testing, clearer origin traceability, and supplier declarations that match the actual product being shipped. Cadmium compliance also sits beside other import-readiness issues, especially traceability connected to the EU Deforestation Regulation.

Why compliance matters before shipment

Cadmium is not a label detail that can be corrected after arrival. It is a food safety and market access issue. A non-compliant batch can be rejected by the buyer or importer, blocked from the market, sent into costly retesting and storage, or delayed while a manufacturer considers reformulation. It can also trigger supplier disputes and put private-label or wholesale contracts at risk.

Those consequences are avoidable only if compliance is checked before goods move. Once a container is already in motion, every missing document and every uncertain test result becomes more expensive to solve.

Product classification comes first. Before asking a supplier for “EU cadmium compliance,” confirm what you are importing, how it will be used, and what product will ultimately be placed on the EU market.

A retail cocoa powder is not assessed in the same way as a finished chocolate bar. A private-label drinking chocolate mix is not the same as cocoa butter. A high-cocoa dark chocolate bar carries a different risk profile from milk chocolate with lower cocoa solids.

EU cadmium limits by cocoa product type

This table is useful for screening, but it should not replace a regulatory review of the exact product. The limit often depends on the product placed on the EU market. For chocolate, cocoa-solids percentage is central.

Ingredient specs versus finished-product responsibility

B2B cocoa ingredients do not always map neatly to a retail category. Still, EU buyers often translate finished-product legal limits into ingredient specifications.

For example, a chocolate manufacturer may set a stricter internal cadmium requirement for cocoa liquor or powder because the finished product must stay below the legal limit after formulation. That buyer may also set a buffer below the EU maximum to account for lab variation, supplier changes, or future audits.

Do not apply the cocoa powder limit blindly to every cocoa ingredient. Use it where it legally fits, then check the buyer’s specification for intermediate materials. In practice, the buyer’s requirement may be tighter than the legal maximum because the buyer is managing the risk of the final product, not only the ingredient shipment.

Origin data helps buyers understand risk, but batch testing confirms compliance.

Cadmium is often an origin and soil issue. It occurs naturally in some soils and can be absorbed by cacao trees through their roots. Over time, it can accumulate in the beans.

That is why two suppliers can both offer good-quality cocoa yet show very different cadmium results. The difference may come from country, region, farm location, soil pH, geology, rainfall, drainage, organic matter, cacao variety, agricultural inputs, or how lots are segregated and blended after harvest.

Some regions, including parts of Latin America, are often discussed as higher risk because of soil and geological conditions. But broad country labels are not enough. A high-risk origin does not mean every lot fails. A lower-risk origin does not mean every lot passes.

Batch-level testing is the only practical way to confirm whether the lot in front of you is acceptable.

Why cocoa solids change the risk profile

Cadmium risk tends to receive more attention in cocoa powder and high-cocoa chocolate because these products contain more cocoa solids. A dark chocolate bar with 70% cocoa solids usually creates a different cadmium exposure question from a lower-cocoa milk chocolate.

That does not make dark chocolate “bad” or milk chocolate automatically “safe.” It means procurement teams need to understand the formula, cocoa solids percentage, and ingredient contribution before approving supply. The more concentrated the cocoa component, the more carefully the buyer should read the test result and compare it with both the legal limit and the buyer’s own specification.

The strongest cadmium program is boring in the best way. It is a repeatable document and testing workflow that catches problems before goods move.

Documents to request from the supplier

Before shipment, ask for a product specification sheet, a recent Certificate of Analysis for cadmium, and the batch or lot number tied to that COA. The file should also identify the country and region of origin where available, processing site details, and a supplier declaration of EU contaminant compliance.

For cocoa powder, liquor, butter, finished chocolate, or drinking chocolate mixes, the documents should connect the physical product to its records. Traceability from beans through processing matters, as do the manufacturing date, best-before date, packaging format, and relevant allergen or ingredient declarations.

For higher-risk products, a generic annual COA is weak evidence. A batch-specific COA is much stronger because it speaks to the material actually available for shipment.

Testing and lab credibility

For EU import planning, testing should ideally come from an accredited third-party laboratory. ISO/IEC 17025 accreditation is a common benchmark for lab competence, especially when results may be challenged by a buyer, authority, or insurer.

Check the details, not just the headline result. The test should be reported in the correct unit, usually mg/kg, and the sample description should match the product being shipped. A COA for natural cocoa powder should not be used to clear alkalized powder from a different lot. A finished chocolate test should not be treated as proof for a separate ingredient shipment.

Build in a safety buffer

Do not treat the legal maximum as your purchasing target. If the EU limit is 0.60 mg/kg, a result of 0.599 mg/kg may still make buyers nervous because of analytical uncertainty and internal policies.

Many importers set an internal acceptance threshold below the legal maximum. The size of that buffer depends on the product, lab method, supplier history, and buyer tolerance. The point is not to invent a new legal limit; it is to avoid building a supply chain that only works when every variable goes perfectly.

Check other contaminants too

Cadmium is not the only possible testing requirement. Depending on the product and buyer, you may also need checks for lead, arsenic, mercury, pesticide residues, ochratoxin A, Salmonella, moisture, microbiology, and foreign matter.

A strong cocoa compliance file covers the full product safety picture, not cadmium alone. Buyers rarely evaluate one contaminant in isolation when they are approving a supplier for repeat orders or private-label production.

Failed batches should be quarantined and investigated before shipment decisions are made.

An out-of-spec cadmium result is a commercial problem, but it should be handled calmly and systematically.

First, quarantine the lot. Do not ship it to the EU or place it on the market while the result is unresolved. Then verify the basics: sample identity, batch number, test method, lab credibility, and chain of custody.

If retesting is justified, use a credible lab and a controlled sampling process. Retesting should clarify uncertainty, not shop around for a friendlier number.

Can you blend or reformulate?

Sometimes a supplier or manufacturer may consider reformulation, diversion to a different product, or controlled blending with lower-cadmium material. This needs careful handling.

Blending must never be used to hide unsafe or non-compliant material. It must be legal, documented, technically controlled, and acceptable under the buyer contract. The final product must meet the applicable EU maximum level and any buyer specification.

In some cases, the better decision is supplier replacement or diversion to a market with different requirements. That may be costly, but it is usually less costly than a blocked EU shipment.

Supplier clauses that reduce future risk

Cadmium responsibility should be written into commercial terms, not argued after a failure.

Useful clauses can cover the accuracy of COAs and declarations, batch traceability requirements, responsibility for non-compliant goods, replacement stock, refund or credit terms, retesting process, testing cost allocation, audit rights, supporting records, and notice requirements if origin or sourcing changes.

For private-label and wholesale buyers, these clauses are not paperwork for its own sake. They protect the launch calendar, customer relationship, and margin. They also make expectations clear before either side is under pressure.

Cadmium limits and EUDR obligations are separate compliance regimes.

Cadmium rules concern maximum contaminant levels in food. EUDR concerns whether relevant commodities, including cocoa, are deforestation-free and legally produced under the regulation’s requirements.

Still, the operational overlap is real. Both require better supplier data, reliable origin information, batch identity, and disciplined record keeping. If your cocoa lot cannot be connected to origin records, supplier declarations, test results, and product specifications, you will struggle with more than one kind of EU compliance review.

A practical cocoa compliance file should connect supplier identity, lot or batch code, origin information, product specification, cadmium COA, other relevant test results, traceability documents, import and customs documents, buyer approval records, and corrective actions if any were needed.

You do not need two disconnected systems if one well-managed traceability process can support both food safety and due diligence records.

Before requesting samples or wholesale pricing, ask direct questions. Good suppliers should be able to answer clearly.

1. Which EU product category does this cocoa or chocolate product fit?
2. What cadmium limit are you using for this product and intended use?
3. Can you provide a recent batch-specific COA for cadmium?
4. Which laboratory performed the test, and is it accredited?
5. Is the COA tied to the exact lot available for shipment?
6. What is the country, region, and processing site for this batch?
7. Do you segregate lots by origin or cadmium risk profile?
8. Have any recent batches failed EU buyer requirements?
9. What other contaminant and microbiology tests are available?
10. What happens contractually if the batch fails buyer or EU requirements?
11. Can you support EUDR-related traceability records where required?
12. Will you notify buyers if origin, blend, recipe, or processing site changes?

The goal is not to interrogate suppliers aggressively. It is to find out whether they have a real compliance system or only a sales answer. A supplier who can explain product classification, lot identity, testing history, and origin controls is usually easier to work with than one who responds with a broad promise that the product is “EU compliant.”

For importers, the cleanest workflow starts with product classification. Confirm the intended EU market use, identify the applicable cadmium limit and buyer specification, then request batch-specific documents from the supplier.

Next, review the COA, lab credibility, lot identity, and origin data together. Compare the cadmium result against your internal acceptance threshold, not only the legal maximum. Then check related contaminants and microbiological requirements, confirm traceability documents for EUDR and buyer records, and approve shipment only when the file is complete.

After the shipment is approved, keep records in a lot-level compliance file. Supplier performance should be reviewed over time, not only once at onboarding. A supplier that passes one batch may still need monitoring if origin, formulation, processing site, or blending practice changes.

This workflow is especially important for private-label buyers. When your brand name is on the pack, the supplier’s missing document becomes your problem quickly.

What is the EU cadmium limit for cocoa powder in 2026?

The key EU limit for cocoa powder is 0.60 mg/kg when the cocoa powder is placed on the market for final consumers, or used as an ingredient in sweetened cocoa powder or powdered drinking chocolate intended for final consumers.

Are the EU cadmium limits new in 2026?

No. The core cocoa and chocolate cadmium limits have applied since 1 January 2019 and are now consolidated under Commission Regulation (EU) 2023/915. In 2026, the pressure is more about enforcement, buyer documentation, traceability, and import readiness.

Do cocoa beans have the same EU cadmium limit as cocoa powder?

Do not assume that. Cocoa beans, cocoa powder, cocoa liquor, chocolate, and drinking chocolate can raise different legal and commercial questions. For beans and intermediate products, buyers may set ingredient specifications to make sure the finished product meets EU limits.

Is origin enough to judge cadmium risk?

No. Origin is useful for risk assessment, but it is not proof of compliance. Cadmium varies by region, farm, soil, processing, and lot. Batch-level testing is the practical proof buyers need.

Can a supplier fix cadmium compliance with blending?

Only if it is legal, controlled, documented, and produces a compliant final product. Blending must not be used to disguise unsafe material. Importers should require clear records and buyer approval where blending or reformulation affects compliance.

Cadmium compliance is easier when the supplier already understands EU buyer expectations. Look for clear product classification, batch-specific testing, traceability records, and honest communication about origin risk.

For wholesale buyers looking at Vietnamese chocolate, MR.VIET can be a useful conversation to start. We produce our own Vietnamese chocolate range, including products made with New Zealand milk, and can discuss EU-ready documentation, wholesale formats, and product options for your market.

If you are planning a cocoa or chocolate import program, contact MR.VIET with your target product type, destination market, and expected volume. The next practical step is to review the product specification and compliance documents before sampling or wholesale pricing.