Heavy metal testing in packaging

I am fairly new to the flexible packaging industry and in doing research I discovered that a lot of states  are requiring testing on packaging for heavy metals. What I find strange is that nobody I have spoken to seems to be aware of this. My company is in converting so we have not done it and the company we purchase from does not send us results of any testing just a LOG. The laws say a LOG is not good enough and on top of that our company should be doing random testing as well. I'm new to the industry but nobody here knew about any of these state laws so I am trying to get us up to speed. Does anybody have any experience with doing this testing? if so, how often and do you have an SOP or policy you are willing to share? I feel like I need to know more but packaging regulations are scattered all over the place and it makes me crazy.

Thank you in advance.