Prop 65 Pulled $101 Million in Settlements in 2024. In 16 Months, Every Short Warning Has to Name the Chemical.
California's private-enforcer bar served thousands of 60-day notices last year and settled more than 1,300 cases for over $101 million. On January 1, 2028, the old short-form warning dies: every product label and every online listing must name at least one of the roughly 1,000 listed chemicals. The e-commerce sellers about to comply mostly do not know which chemical is in their products, because the law let them not know for eight years. That era ends now.
The Problem
A Shopify seller in Austin ships ceramic mugs, tote bags, and printed t-shirts to customers in California. She has never set foot in California, never hired a lawyer there, and never tested her products for anything. Last year she received a letter from a law firm she had never heard of, on behalf of a person she had never met, alleging her mugs expose consumers to lead and demanding a settlement. The letter came with a 60-day deadline. She paid. She did not have a better option.
This is Proposition 65, the 1986 Safe Drinking Water and Toxic Enforcement Act, and it is the most unusual enforcement regime in American consumer law. Businesses must warn Californians before exposing them to any of the roughly 1,000 chemicals the state lists as causing cancer or reproductive harm. The law authorizes penalties of $2,500 per day per violation, and critically, it deputizes private enforcement: any individual acting in the public interest can sue, after serving a 60-day notice, and can collect attorney's fees plus a share of penalties. The state built a bounty system and the bar built an industry on top of it.
The industry is large, growing fast, and aimed squarely at sellers like her. According to the California Chamber of Commerce's analysis of Attorney General data, Prop 65 settlements reached more than 1,300 settlements totaling just over $101 million in 2024, up from 890 settlements and $26 million in 2022. The 60-day notice filings that feed that pipeline grew from 908 in 2012 to 3,170 in 2022, a 250% increase, and exceeded that total in 2023, according to trial-lawyer watchdog data compiled by ATRA. Intertek's monthly tracking shows the current run rate: 337 notices in January 2025, 443 in March 2024, and 506 in June 2024. Annualize the midpoint and you get roughly 4,000 to 5,000 notices a year, every one of them a demand letter with a 60-day clock attached.
And the plaintiffs never have to leave their desks. Since the internet-warning rules took effect, warnings must appear on the product display page or within one click of it, which means a plaintiff's firm can screenshot an Amazon, Shopify, or Etsy listing, check the OEHHA chemical list against the product category, and file a notice without visiting a store or buying a sample. As IndustryWeek put it, plaintiffs can run an enforcement practice against internet sellers without ever visiting a defendant's location. The friction of suing is near zero, so the volume has no natural ceiling.
The settlement economics explain why. Penalties are only part of the story: a review of 797 settlements through October 2023 found more than $18.9 million in total, with $16.68 million, or 88%, going to attorneys' fees and costs. The plaintiffs' business model is the fees, not the penalties. One analysis notes settlements run $50,000 to $100,000 even for products with limited manufacture and distribution. For a plaintiff's firm, a small e-commerce seller is not a marginal target. It is the target: no legal department, no testing data, strong incentive to settle fast.
The Enforcement Map
Enforcement is not evenly distributed. It concentrates on a small set of chemicals and a small set of product categories, which is exactly what makes it modellable:
| Chemical | Share of notices/settlements | Typical product targets |
|---|---|---|
| Lead | 42-58% of 60-day notices (Jan 2025: 42%, Mar 2024: 58%) | Externally decorated glass and ceramics, jewelry, brass fittings, cables, candles |
| Phthalates (DEHP, DINP, DBP) | 11-34% of notices/settlements | Bags, cases, totes, backpacks; vinyl footwear; apparel; pet carriers |
| Acrylamide, cadmium, arsenic | Acrylamide 87 notices, cadmium 92, arsenic 48 (Jan-Apr 2025) | Food and beverage, dietary supplements, cosmetics, clay products |
| PFAS (PFOA, PFOS) | Early but rising: 2-3 settlements per quarter | Babies' bibs, children's lunch bags, cooling hats, seat pads |
| Hexavalent chromium, BPA, diethanolamine | Steady specialty targets | Leather gloves and footwear, athletic shirts, leggings, beauty products |
On the category side, food and dietary supplements draw 19-29% of settlements, bags and cases 13-17%, and beauty and personal care generates enormous notice volume (57 notices in January 2025 alone, driven by diethanolamine and nitrous oxide in creams, cleansers, and mascara). A Perkins Coie analysis found food and beverage companies faced 1,034 Prop 65 cases in 2023, with food and beverage settlements alone reaching $40.3 million. Concrete recent targets illustrate how ordinary the products are: BPA in athletic shirts, BPA in leggings, hexavalent chromium in leather goods, PFOS in babies' bibs and children's lunch bags, PFOA in cooling hats and seat pads, all from Bureau Veritas' Q1 2024 settlement summary.
The January 2028 Deadline
The enforcement machine above is the present. The deadline below is the accelerant.
In December 2024, OEHHA finalized amendments to the safe-harbor warning regulations, effective January 1, 2025, with a three-year transition period. The headline change: the short-form warning, the one-line warning businesses have used since 2018, must now identify at least one listed chemical by name. The old short-form could say "WARNING: Cancer and Reproductive Harm - www.P65Warnings.ca.gov" and stop there. The new one must say which chemical. Products manufactured and labeled before January 1, 2028 can keep the old short-form with unlimited sell-through. Products manufactured on or after that date must use the new language to keep safe-harbor protection. Retailers get a 60-day window to update online short-form warnings after a manufacturer notifies them, during the transition period. OEHHA also formalized explicit short-form warnings for food products and tailored warnings for vehicle parts and marine vessel parts.
Why did OEHHA do this? The agency said the quiet part out loud: businesses were using the short-form "prophylactically, because it protects from potential litigation and does not require identification of a specific chemical exposure for which the warning is being given." The nameless warning was a legal shield that required no knowledge. Companies slapped it on everything and never had to learn what was actually in their products. That was the equilibrium: warn generically, know nothing, stay safe.
The new rule destroys the equilibrium. To write a compliant warning, you now must know which chemical the product contains. That means testing your products, demanding composition data from your suppliers, or both. As one law firm warned its clients, the new requirements "will require an assessment of the specific Prop 65 chemicals present in products," and enforcement actions will increase against businesses that fail to comply after the transition period. As of today, the grace period has 16 months left to run. Every product line that ships into California on old short-form labels and old website warnings is on a countdown.
The Gap in the Market
The existing vendor stack for Prop 65 serves two ends and nothing in the middle:
| Company | What They Do | What's Missing |
|---|---|---|
| SGS / Intertek / Bureau Veritas | Testing labs and enterprise compliance consulting; monthly notice and settlement bulletins | Enterprise-priced testing engagements and advisory retainers. The bulletins are intelligence products for people who already have compliance teams. No self-serve workflow for a seller with 200 SKUs. |
| Perkins Coie and other defense firms | Track enforcement trends, defend companies, negotiate settlements | Lawyers, not software. They publish the trend data, then bill by the hour to act on it. Their clients are the companies big enough to retain them. |
| Amazon / marketplace compliance programs | Amazon requires Prop 65 warnings on listings and will suspend non-compliant ASINs | A marketplace enforces against the seller; it does not help the seller comply. The warning the seller pastes is only as good as the chemical knowledge behind it, which the marketplace never supplies. |
| Chemical management platforms (Assent-style) | Supply-chain substance data collection for enterprise manufacturers | Built for $500M+ supply chains with compliance departments. The data-collection workflow assumes the supplier relationship of a Fortune 500, not a Shopify store buying from a Shenzhen trading company on Alibaba. |
The vacuum is the long tail: the e-commerce seller, the Amazon private-label brand, the Etsy ceramics shop, the DTC supplement company. These are exactly the companies the plaintiffs' bar prefers, because they settle quickly and cannot fight. They have no product-chemistry data, no supplier leverage, and no in-house regulatory expertise. When the January 2028 deadline hits, their two options are (a) test every SKU and rewrite every label and listing, or (b) get noticed. There is no third option, and there is currently no product built to deliver the first one at their price point.
The Solution
A Prop 65 compliance platform for e-commerce sellers with four layers:
1. SKU chemical profiler: the seller uploads a product catalog (Shopify/Amazon/WooCommerce import) and the platform returns a chemical exposure profile per SKU. The profile is built from three inputs: the product category's enforcement history (which chemicals get noticed in mugs, which in phone cases, which in hair dye), material and ingredient declarations collected from the seller's suppliers through a structured request flow, and targeted lab testing for the SKUs where category risk is high and data is thin. The output is not a test report. It is an answer to one question: which listed chemical, if any, must you name on this product's warning?
2. Warning generator and listing sync: given the chemical profile, the platform generates compliant warning text in the new short-form format (triangle symbol, WARNING prefix, named chemical, P65Warnings URL) and pushes it to every online listing: the Shopify product page, the Amazon detail page, the Etsy listing. It also generates print-ready label copy for packaging. When the seller adds a SKU or changes a supplier, the warning regenerates. The 60-day retailer update rule means warnings on marketplace listings are a live obligation, not a one-time paste.
3. 60-day notice radar: every 60-day notice is served on the California Attorney General, which publishes the filings, but nobody has turned that public database into a risk product. The platform ingests it continuously and maintains a plaintiff-by-plaintiff, category-by-category enforcement map: which firms are active, which chemicals they hunt, which product types they are currently noticing. A seller gets a risk score per SKU, updated monthly, plus an early-warning alert when a plaintiff active in their category files new notices. This is the dataset the defense bar reads manually, turned into software.
4. Settlement intelligence and reformulation economics: Prop 65 settlements are public and frequently include reformulation commitments: the defendant agrees to keep the chemical below a specified level. The platform builds a database of accepted reformulation levels by chemical and product type, which turns the platform's biggest decision into math. Warning costs nothing but labels the product with a scarlet letter; reformulation costs money but removes the exposure. When the database shows that plaintiffs consistently accept 90 ppm lead in ceramicware, the seller can see exactly what testing to order and what reformulation target to hit. Compliance becomes an engineering spec, not a legal negotiation.
Revenue Model
| Revenue Stream | Amount | Notes |
|---|---|---|
| Monthly SaaS per seller | $149-$749/mo | Tiered by SKU count and marketplace count. Etsy shop with 40 SKUs: $149. Amazon private-label brand with 500 SKUs across three marketplaces: $749. |
| Chemical profiling onboarding | $500-$4,000 per seller | One-time catalog intake, supplier outreach campaign, and category-risk baseline. Priced by SKU count. |
| Lab testing pass-through + margin | $150-$400 per test, 20-30% margin | Platform-integrated lab testing for SKUs flagged high-risk with no supplier data. The testing is fulfilled by partner labs; the platform keeps a referral margin and owns the data asset. |
| Notice-radar alerts (premium) | $99-$299/mo | Plaintiff-activity monitoring and early-warning for sellers in high-enforcement categories: supplements, beauty, bags, ceramics. |
| Reformulation consulting | $2,500-$10,000 per engagement | For sellers who choose to reformulate instead of warn: spec writing against the settlement database, supplier sourcing, verification testing coordination. |
Unit economics at $449/month average SaaS (estimated, not benchmarked): CAC via Shopify App Store placement, Amazon seller forums and communities, marketplace seller conferences (Prosper Show, ASD Market Week), and partnerships with e-commerce accountants and listing-optimization agencies who already serve sellers. Estimated CAC: ~$1,400. LTV at 30-month average retention (compliance SaaS is sticky: the chemical profiles become the seller's system of record, and the warning sync is load-bearing infrastructure; no category retention benchmark exists yet): $13,470. LTV:CAC ratio of 9.6x. Gross margin estimate: 82% (cloud-hosted SaaS; testing is pass-through with margin, not cost of goods).
Market Size
TAM: The addressable universe is US-based sellers of physical consumer products who sell into California online. Amazon alone has roughly half a million active US selling partners, plus millions on Shopify, Etsy, eBay, and Walmart Marketplace. Conservatively, 250,000 of these sellers ship physical consumer goods with genuine Prop 65 exposure (excluding pure digital, services, and used goods). At $449/month SaaS plus ~$1,200/year in testing and ancillary revenue per seller: ($449 x 12 + $1,200) x 250,000 = ~$1.65B. Discount heavily for sellers too small to pay and sellers in low-risk categories: 40% reachable and willing, yielding a working TAM of ~$660M. The plaintiffs' bar has already priced the fear: $101 million in settlements in 2024 alone, growing. This TAM is computed from the seller side; the enforcement side suggests the willingness to pay is real.
SAM: Sellers in the five highest-enforcement categories (beauty and personal care, bags and cases, ceramics and glassware, dietary supplements, apparel and accessories) with 50+ SKUs, where the notice risk is concentrated and the warning work is heaviest. Conservatively 30,000 sellers x $449/month x 12 = ~$162M.
SOM (year 3): 4,000 sellers at $449/month average + testing margin and alert revenue = ~$19M ARR. Achievable through the Shopify App Store, seller-community partnerships, and the wave of sellers that will discover the 2028 deadline in 2027 and need profiling done in weeks, not quarters.
Why Now
The deadline is 16 months away and the work cannot be deferred. Identifying the chemicals in a product line takes time: supplier outreach, testing lab turnaround, label redesign, listing updates across every marketplace. Sellers who start in 2027 will be competing for lab capacity and label-design bandwidth with every other seller who waited. The companies that sell chemical-knowledge services to this market will have their best year in 2027, which is next year.
The enforcement machine is accelerating into the deadline. Settlements went from $26 million in 2022 to $101 million in 2024. Notices run at 4,000-5,000 a year. Plaintiff firms are rational actors: they know the transition period is ending, and a seller running old short-form warnings in 2028 is a softer target than one running them today, because the safe harbor expires and the chemical-knowledge gap is documented in OEHHA's own rulemaking. Enforcement after January 2028 will be aimed at exactly the sellers who never learned what was in their products.
The internet-warning rule made the long tail targetable at scale. A plaintiff's firm does not need to buy a mug in Fresno anymore. It needs a crawler, the OEHHA list, and a list of SKUs. The marginal cost of noticing one more seller approaches zero, which means the equilibrium notice volume is far above today's 5,000 a year. Every e-commerce seller with a California customer is in the searchable surface. The compliance product that serves them is not early. It is catching up to an enforcement technology that already scaled.
Startup Costs
| Category | Cost | Notes |
|---|---|---|
| Engineering (3 developers, 10 months) | $600K | Catalog importers, chemical profiler, warning generator, marketplace listing sync (Shopify, Amazon SP-API, Etsy), supplier data-collection portal. |
| Regulatory and legal review | $120K | Prop 65 warning-content validation against Title 27 regulations, AG notice filing formats, safe-harbor language review. The product's outputs are legal-adjacent; the review is not optional. |
| 60-day notice database build | $80K | Ingestion pipeline for the AG's notice filings, entity resolution across plaintiffs and defendants, category and chemical tagging. Ongoing, not one-time. |
| Settlement and reformulation database | $60K | Parsing public settlement documents for reformulation commitments and accepted chemical levels by product type. |
| Lab partnership integration | $40K | API integrations with testing labs, sample-kit logistics workflow, results ingestion. |
| Seller-community marketing | $100K | Shopify App Store listing, Prosper Show and ASD Market Week presence, seller-community content and partnerships. |
| Operating buffer (10 months) | $100K | Infrastructure, tooling, insurance, miscellaneous. |
| Total | $1.1M |
Original Analysis: The Prophylactic Equilibrium Is the Whole Business
Here is what the Prop 65 commentary keeps missing about the short-form amendments: the old short-form was not a warning system. It was a don't-ask-don't-tell treaty between sellers and the plaintiffs' bar. The seller printed a generic warning without knowing its chemicals; the plaintiff's bar collected settlements from sellers who warned incorrectly or not at all. Both sides were optimized around the same fact: nobody knew what was in the products. OEHHA's own rulemaking record says businesses used the short-form prophylactically precisely to avoid naming a chemical.
The named-chemical rule breaks the treaty, and the breakage runs in one direction. To comply, the seller must acquire chemical knowledge. Chemical knowledge is exactly the asset the plaintiffs' bar has been extracting settlements in lieu of. A seller who knows her SKUs can warn correctly, reformulate precisely, or contest a notice with data. A seller who does not know them can do none of these. The platform's product is not warning text. Warning text is trivially generatable. The product is the chemical knowledge the new rule made mandatory and the plaintiffs' bar made expensive.
There is a second structural point: the 60-day notice database is public and unclaimed as a product. Every notice is filed with the Attorney General, and the AG maintains them. Defense firms read them manually. Intertek and Bureau Veritas summarize them quarterly for enterprise clients. Nobody has turned them into a risk API for the sellers being noticed. The moat is not the database itself, which is public. The moat is the entity resolution: knowing that five notices from three plaintiff names are one firm's campaign against ceramic drinkware, and that the campaign's chemical is lead, and that your SKU is ceramic drinkware. Public data plus entity resolution plus category risk scoring is a product the plaintiffs' bar built for itself and never sold to the other side.
And there is a third, quieter advantage: the settlement documents contain the prices at which the war ends. Every reformulation commitment is a number: 90 ppm here, 0.5 micrograms per day there. Those numbers are the settlement market's clearing prices, and they are published. The platform that aggregates them turns every enforcement action into a pricing signal for the next defendant. The plaintiffs' bar has been trading on asymmetric information for four decades. This product is the other side's Bloomberg terminal.
Risks and Challenges
Prop 65 reform could shrink the market. Reform bills surface in nearly every legislative session, and a serious overhaul of private enforcement, fee-shifting, or the bounty structure would reduce both the fear and the willingness to pay. Mitigation: the current product's revenue engine runs on the 2028 deadline and today's enforcement volume, both of which predate any reform. Reform efforts have failed for decades precisely because the law is popular with voters. Build for the law as it is.
Platform-generated warnings carry liability exposure. If the profiler names the wrong chemical, the seller loses safe harbor and gets noticed anyway, and the platform is adjacent to the failure. Mitigation: the product's terms position it as a decision-support tool with legal-review requirements, every warning carries a confidence level tied to data provenance (supplier disclosure versus lab test versus category estimate), and high-risk SKUs are routed to lab testing rather than estimation. The confidence labeling is a feature, not a disclaimer.
Enterprise labs and consultancies could launch self-serve tiers. SGS, Intertek, and Bureau Veritas already publish the notice bulletins and have the regulatory databases. Mitigation: their DNA is enterprise testing and advisory. Self-serve seller SaaS requires a different acquisition motion, support model, and price point, and enterprise compliance firms have a consistent record of failing to execute downmarket.
The smallest sellers are judgment-proof or foreign. A meaningful share of the long tail is overseas sellers with no US presence and no collectible assets, who will ignore notices regardless of compliance tooling. Mitigation: the SAM is explicitly US-based sellers in high-enforcement categories, where Amazon and the marketplaces themselves enforce through listing suspensions. The marketplace is the collection mechanism the plaintiffs never had.
Amazon could build this natively. Amazon already polices Prop 65 listings and has the catalog data to profile chemicals at scale. Mitigation: Amazon's compliance program is enforcement, not enablement, and it applies only to Amazon listings. Sellers are multi-channel. The platform's value is the cross-marketplace warning sync and the notice radar, neither of which Amazon would sell to sellers operating on Walmart, Shopify, and Etsy.
Strongest Counterargument
The most serious objection: this is a business built on a pathology, and pathologies get treated. Prop 65's private-enforcement regime is widely regarded, including by the business community and much of the press, as a shakedown mechanism that extracts $100 million a year while changing very few products. If the political consensus ever tips, through a ballot initiative or a serious reform bill, the enforcement volume that justifies this product's existence could collapse. The 2028 deadline still exists under any plausible reform, but a reform that capped fees or ended the bounty structure would turn a $449/month fear purchase into a $49/month forms product.
This is a real risk, and the honest base case for the company's first three years is that the pathology persists, because it has persisted for forty years through every reform attempt. The deeper answer is that the product's core asset, SKU-level chemical knowledge, has value independent of the enforcement regime. A seller who knows her products' chemistry can sell into the EU's REACH regime, California's textile EPR fiber reporting, and the PFAS product bans spreading across states. Prop 65 is the wedge. The chemical profile is the platform. Even in the world where Sacramento fixes Prop 65, the database appreciates.
Limitations
The seller universe estimate (250,000 US-based sellers with genuine Prop 65 exposure) is an extrapolation, not a census. It is built from Amazon selling-partner counts and marketplace seller totals, discounted for digital goods, services, and used-goods sellers. The actual number could be substantially higher or lower, and the TAM math is sensitive to it. The SAM's 30,000 sellers in high-enforcement categories is similarly estimated from enforcement concentration, not a registry. These numbers should be re-run against marketplace seller data when available.
The enforcement trend is extrapolated from 2024 settlement totals and monthly notice run rates. The $101 million figure comes from the CalChamber's analysis of AG data; the AG's own summaries use different counting conventions, and settlement totals include attorney's fees, which flow to the plaintiffs' bar rather than the state. The direction is unambiguous. The exact totals are convention-dependent.
No prediction is made about individual plaintiff behavior. The notice radar assumes the AG's notice database remains public and machine-readable in its current form. If filing formats change or access is restricted, the ingestion pipeline needs rebuilding. The category-risk scoring assumes enforcement patterns persist; a plaintiff campaign can pivot to a new chemical or category in a quarter.
The Bottom Line
Proposition 65 extracted more than $101 million in settlements in 2024 through a private-enforcement machine that files thousands of 60-day notices a year, aimed increasingly at e-commerce sellers who cannot fight back. On January 1, 2028, the old short-form warning expires, and every product manufactured after that date must name at least one listed chemical on its label and its online listings. The sellers about to comply do not know which chemical is in their products, because for eight years the law let them not know. The company that builds the SKU-level chemical profiler, the cross-marketplace warning sync, and the notice-radar that turns the Attorney General's public filings into a risk API will own the compliance layer for the most litigated consumer regulation in America. The deadline is 16 months out. The lab capacity, the label redesigns, and the listing updates cannot start in December 2027.
What You Can Do
If you sell physical consumer products into California online: pull your five best-selling SKUs and ask your suppliers, in writing, for the material composition and any listed-chemical content. If they cannot answer, you have just discovered your 2028 problem. Get those SKUs tested before the lab queue forms in 2027.
Check your current warnings. If you are using the old short-form warning ("WARNING: Cancer and Reproductive Harm" with no chemical named), start planning the transition now: the new format requires naming at least one chemical, which means you need to know which one before you can write the label. Products manufactured on or after January 1, 2028 must carry the new language.
Search the Attorney General's 60-day notice database for your product category and your top chemicals. If a plaintiff's firm is running a campaign in your category, you will see the pattern in the filings before you see it in your inbox. That is the cheapest market intelligence in this entire regulatory regime, and it is free.
If you are building this company, start with the notice database, not the profiler. The entity-resolved enforcement map is the asset that compounds: every notice filed makes the risk scoring better and the sales pitch sharper. The chemical profiler is the product you sell. The radar is the reason nobody can catch you.