Risk Alert

EPR Penalties by State: What's the Risk?

Most brands focus on the headline fine. The more important question is how non-compliance becomes visible — and how quickly the enforcement sequence escalates once it does.

12 min read · May 2026

The most common question brands ask about packaging EPR enforcement is: "What's the maximum fine?" It is the wrong starting point. The relevant question is not what a regulator can do at the limit of statutory authority. The relevant question is how non-compliance becomes visible — and how quickly the enforcement sequence accelerates once it does.

State pages:California · Oregon · Colorado · Washington · Minnesota · Maryland · Maine

In practice, most EPR enforcement does not begin with a fine. It begins when a producer becomes visible to the system: through a PRO's registry reconciliation, a state agency's public non-compliant list, a retailer's vendor onboarding questionnaire, or a cross-state registry comparison that flags implausibly low reported tonnage. By that point, the brand is already inside an enforcement pipeline — often without realizing it.

The highest-risk companies in packaging EPR may not be the ones intentionally avoiding compliance. They may be the ones incorrectly assuming that another party in their supply chain — a contract manufacturer, a distributor, a marketplace — is handling the registration obligation that belongs to them.

The Right Question

Not: "How do I avoid the $50,000/day fine?"

But: "How do I determine whether I am already visible to the enforcement system — and what obligations that visibility implies?"

Why Maximum Penalties Are Not the Full Story

Published maximum penalties across active EPR states are substantial. California's statute authorizes up to $50,000 per day per violation. Minnesota's escalating structure reaches $100,000 per day for third and subsequent violations within a five-year window. Oregon can seek court-ordered sales prohibitions alongside its $25,000/day cap. These figures are real, and they represent the ceiling of what non-cooperation can ultimately cost.

But they are not the starting point. Every active EPR program structures enforcement with significant agency discretion — accounting for severity, intent, economic benefit, and cooperation. Early enforcement actions in Oregon and Washington have shown partial suspension of penalties and negotiated corrective action plans for companies that respond once identified. The maximum statutory penalty is what happens at the end of a sequence — after a company has ignored multiple outreach attempts, after cure periods have elapsed, after formal notices have gone unanswered.

The practical exposure for most brands is not "$50,000/day starting tomorrow." It is: becoming visible to a compliance system that already has you in scope, then having to remediate registration gaps and producer status determinations under regulatory scrutiny rather than on your own terms.

How Non-Compliance Actually Becomes Visible

This is the section most EPR penalty articles do not address. The mechanism by which brands surface as non-compliant is not a government audit team arriving unannounced. It is a data reconciliation process — systematic, increasingly cross-state, and already operational in several active programs.

PRO Registry Reconciliation

The Circular Action Alliance, serving as PRO across six states, maintains producer registries and actively cross-references who should be registered against who has registered. CAA is explicitly tasked with notifying state agencies of non-compliance — meaning it functions as the front-end detection layer for state enforcement pipelines. A brand with material sales in an active EPR state and no PRO registration is visible to CAA before it is visible to itself as a compliance problem.

Public non-compliant lists: Oregon DEQ published its first list of approximately 250 non-compliant producers — major brands included. That list is publicly accessible, and other state agencies and PROs use it as targeting intelligence. One state's registration gap becomes a lead for every other state's enforcement pipeline.

Retailer and Distributor Pressure

Large retailers are moving toward standardized vendor EPR questionnaires that require proof of PRO membership and state registration before a brand can be listed or restocked. This is not formal government enforcement — but it is a market-access mechanism that can result in product delisting before any regulatory notice arrives. For FBA and DTC brands, this channel is expanding independent of state penalty structures and may be the first signal of exposure a brand actually receives.

Tonnage anomalies: State agencies have broad audit authority and have stated publicly they will use it. A national brand reporting implausibly low covered material tonnage for a state where its retail presence is significant is an audit flag — especially where the discrepancy spans multiple reporting periods.

Cross-State Data Integration

CAA's role across multiple states means producer IDs, registration status, and tonnage data are compared across jurisdictions as a matter of program operation. Inconsistent reporting between states — a brand reporting materially different volumes for the same product line in Oregon and California — creates anomalies that are increasingly visible as cross-state data integration matures. What appears to be a single-state gap can trigger multi-state inquiry simultaneously.

The Highest-Risk Scenario

The highest-risk situation in packaging EPR is not willful non-compliance. It is a brand that has never formally assessed its producer status, assumed a supply chain partner was handling the obligation, and has been accumulating unreported obligations while active enforcement infrastructure was being built around it.

State-by-State Enforcement Breakdown

What follows is an operational breakdown of enforcement posture by state — focused on how enforcement actually works, not simply on statutory maximums.

California — SB 54 / CalRecycle Up to $50,000/day per violation

Enforcement posture: Data-driven, audit-backed. CalRecycle has authority to audit producers and charge audit costs back to the entity. Enforcement will likely begin with non-compliance notices and data requests before escalating. The law contemplates cure periods before penalties accrue.

Operational trigger: Selling packaged goods in California without CAA registration; failing to submit required baseline data or fee payments. Each day of continued non-compliance can constitute a separate violation.

Key risk: Brand-owner ambiguity. The producer hierarchy can push responsibility to importers or retailers when a brand owner has no U.S. entity. Multiple parties may appear in CalRecycle's scope simultaneously if supply chain contracts do not clearly allocate responsibility.

Oregon — RMA / Oregon DEQ Up to $25,000/day + sales prohibition

Enforcement posture: The most operationally active program in the U.S. Oregon uses a phased ladder — CAA outreach → 90-day cure window → DEQ formal warning → 30-day additional cure → public non-compliant list → penalties and potential sales prohibition. Approximately 250 producers have already been publicly listed.

Operational trigger: Never registering despite clear in-state sales; ignoring repeated outreach from CAA and DEQ. Late-reporting by already-registered producers is more likely to see negotiated resolutions than maximum penalties.

Key risk: The sales prohibition authority is significant — DEQ can seek court orders blocking product sales independent of the daily fine structure. For brands dependent on Oregon retail or DTC, market access risk may arrive before financial penalties.

Colorado — HB 22-1355 / CDPHE Tiered: $5K–$20K first-day + daily continuation

Enforcement posture: Colorado's program rollout has been subject to litigation challenging CDPHE's delegation of authority to the PRO. This may delay aggressive formal enforcement and push initial posture toward a compliance-oriented, collaborative first phase while legal questions are resolved.

Operational trigger: Shipping covered plastic packaging into Colorado without CAA registration. Colorado's tiered structure means repeat violations — where a company receives a first notice and continues non-compliance — carry substantially higher per-day exposure.

Key risk: Colorado's near-term risk is exclusion from program design and procurement processes for brands that fail to register; once enforcement is fully active, repeat-violation penalties escalate quickly.

Minnesota — PWCRA / MPCA 1st: $25K/day · 2nd: $50K/day · 3rd+: $100K/day

Enforcement posture: Minnesota's explicitly escalating penalty structure is the steepest of any active EPR state — clearly designed to deter systemic non-compliance. MPCA factors in severity, intent, economic benefit, and cooperation. Companies that self-correct after initial notices face materially lower effective exposure than those that accumulate multiple violation determinations.

Operational trigger: Missing CAA registration after the program deadline; ignoring MPCA outreach. Near-term risk concentrates around failure to register and non-participation in plan development — full program enforcement is expected in the later 2020s.

Key risk: Importer and private-label exposure. Minnesota mirrors other states' producer hierarchy, meaning importers and distributors can become the obligated producer by default when U.S. brand owners are absent or unregistered.

Washington — Recycling Reform Act / Ecology Up to $1,000/day · Up to $10,000/day (repeat)

Enforcement posture: Washington Department of Ecology has already fined dozens of plastic producers under existing recycled-content law — total fines in the hundreds of thousands of dollars — and has stated publicly it will conduct audits and registry sweeps to identify unregistered packaging EPR producers.

Operational trigger: The July 1, 2026 registration deadline is the nearest-term enforcement trigger for brands not yet engaged. Ecology cross-checks trade data, retail shelf presence, and third-party databases to surface missing producers. Key risk: Penalties are likely to be scaled to product volume and compliance shortfall rather than flat daily caps — meaning high-volume brands face proportionally larger aggregate exposure.

Maine — LD 1541 / Maine DEP Sales prohibition authority · No current monetary fines

Maine was an early EPR adopter operating a phased, collaborative enforcement posture — focused first on registration and data quality, with calibrated rather than automatic penalties. Key risk: DEP has explicit sales prohibition authority; once a producer is identified as non-compliant, market access exposure is real even if financial penalties are modest. Operational trigger: selling packaged products without joining Maine's Stewardship Organization.

Maryland — SB 901 / MDE 1st: $5,000 · 2nd: $10,000 · 3rd+: $20,000 per violation

Maryland's penalty structure is codified — $5,000 for a first violation, $10,000 for a second, $20,000 for third and subsequent — but near-term enforcement risk remains lower than other active states as the program completes implementation. The primary operational risk is internal: teams that classify Maryland as "not yet active" may delay readiness work and face the same registration and enforcement ladder as other states when obligations crystallize. Brands already engaged with CAA elsewhere will onboard faster when Maryland activates.

The Enforcement Sequence

Understanding how enforcement actually unfolds is more operationally useful than knowing the statutory ceiling. Every active EPR state follows a version of the same escalating sequence — and each stage of that sequence creates its own exposure independent of the final financial penalty.

1
PRO Detection. CAA reconciles producer registries against known market presence. Brands with material in-state sales and no registration are flagged.
2
Outreach and Cure Window. PRO contacts the brand directly. States typically provide 30–90-day cure windows before formal agency referral. Most companies that engage at this stage resolve without escalation.
3
Agency Referral and Formal Notice. Non-responsive brands are referred to the state agency, which issues a formal notice and may request data submissions, registration documentation, or an explanation of producer status.
4
Public Listing. States publish non-compliant producer lists. This creates reputational exposure, retailer pressure, and cross-state visibility — independent of whether a penalty has been assessed.
5
Administrative Penalty. Formal penalty is assessed, calculated from the date of violation using the applicable daily rate. Penalties compound per day and per violation; a brand that continues selling after receiving notice is generating escalating exposure.
6
Market Access Restriction. States including Oregon and Maine have explicit authority to prohibit the sale of non-compliant products. This is the endpoint of the sequence for companies that remain unresponsive — and it is an outcome that occurs independent of whether maximum financial penalties have been assessed.

Being placed on a public non-compliant list is an enforcement consequence before any penalty is issued. Receiving a formal data request from a state agency exposes reporting accuracy to regulatory scrutiny under adversarial rather than self-managed conditions. A retailer blocking a vendor's onboarding because of missing PRO registration is a market-access consequence that does not appear in any statutory penalty table — and that can arrive before step three of the above sequence.

Why Multi-State Exposure Compounds

For brands selling into multiple active EPR states, enforcement risk does not accumulate independently by state. It compounds. CAA's role as PRO across six states means producer IDs, registration status, and tonnage data are compared across jurisdictions as a matter of program operation. A brand registered in Oregon but absent from California's producer records is a registry anomaly. A brand reporting materially different tonnage volumes for the same product line across two states creates an inconsistency that becomes increasingly visible as the cross-state enforcement infrastructure matures.

Oregon's public non-compliant list demonstrated the cascading dynamic directly. Approximately 250 producers were publicly listed — and that list is available for other states' enforcement teams and PROs to use as targeting intelligence. One state's registration gap becomes a lead for every other state's enforcement pipeline. A company that believed it had a single-state compliance issue may find itself inside multiple enforcement sequences simultaneously.

False or incomplete reporting carries compounding risk in a different dimension. Once inaccurate data is submitted to a PRO or state agency, subsequent reporting that contradicts it creates audit flags across multiple filing periods. A brand that under-reported covered material tonnage in year one — whether intentionally or due to missing SKU coverage — cannot simply correct the following year's report without creating a discrepancy that may trigger inquiry into prior periods. Systematic data failure is one of the scenarios most likely to attract higher-tier penalties over time, because it signals a structural reporting problem rather than a registration delay.

In packaging EPR, enforcement risk does not begin with a lawsuit. It begins when a producer becomes visible to the system — through a PRO registry gap, a public non-compliant list, a retailer questionnaire, or a cross-state data reconciliation that flags implausible tonnage.

What This Means Operationally

Core Insight

Modern packaging EPR enforcement is fundamentally a compliance visibility system. Regulators are building enforcement infrastructure — through PRO reconciliation, public registries, audit authority, and cross-state registry integration — that makes non-compliance visible before it becomes formally actionable.

By the time a penalty notice arrives, the enforcement sequence has typically been running for months. The brand was visible before it was notified. The exposure compounded before it was recognized.

The companies at highest operational risk are often not intentionally non-compliant. They are the ones without a clear assessment of their producer status across active states — operating on incorrect assumptions about whether their import structure, brand ownership, or distribution relationships create obligations they have not yet recognized. Those assumptions do not appear in a penalty notice until after the exposure has already accumulated.

EPR enforcement exposure cannot be managed reactively. Brands that engage before they become visible to the compliance infrastructure have access to cure periods, cooperative resolution, and the ability to structure registration and reporting on their own terms. Waiting for a formal notice means managing remediation under regulatory scrutiny — materially more expensive and disruptive than the compliance work that was deferred.

Already behind on a filing? Coming forward on your own terms — before you surface to the system — is materially cheaper than remediating under scrutiny. Backfill closes past-due reports state-by-state and gets your brand current: see how EPR backfill remediation works →.

Not sure whether your company is already in scope?

Run a free EPR Status Check to determine whether your brand qualifies as an obligated producer in any active state — before regulators, PROs, or retailers make that determination for you.

Get Free EPR Compliance Check
Applies To
CACOORMNMDMEWA
Applies To
CA CO OR MN MD ME WA

This article is for informational purposes only and does not constitute legal advice. Penalty structures and enforcement postures are subject to change as programs develop; verify current requirements with the applicable state agency and qualified legal counsel. Orbitlex is not a law firm.