Is CBD Legal in All 50 States? (2026 Federal & State Rules)

The 2018 Farm Bill legalised hemp-derived CBD at the federal level. But three states still restrict retail sales, six impose testing requirements that most online sellers don't meet, and labeling violations void federal protection in every jurisdiction. The gap between what's technically legal and what's enforceable comes down to THC content, labeling accuracy, and state-specific retail restrictions most CBD buyers never read about until a shipment gets seized or a storefront gets cited.

Our team has reviewed compliance frameworks across all 50 states for CBD sellers. The brands that operate without legal risk are not the ones with the cleanest marketing. They're the ones that understand the three-layer compliance structure: federal THC limits, state retail rules, and FDA labeling restrictions. Most online guides collapse these into a single yes/no answer that leaves buyers and sellers exposed.

Is CBD legal in all 50 states under current federal law?

CBD derived from hemp containing ≤0.3% THC is federally legal under the 2018 Farm Bill, but state-level restrictions in Idaho, Nebraska, and South Dakota create retail and possession barriers. The federal framework permits interstate commerce, but state law governs in-state sales, and FDA enforcement targets mislabeled health claims regardless of THC content. A product that's legal to manufacture and ship across state lines can still be illegal to sell in a retail storefront or possess without documentation depending on the state.

Federal vs State: Where the 2018 Farm Bill Stops Applying

The 2018 Farm Bill removed hemp and hemp-derived cannabinoids from Schedule I of the Controlled Substances Act. But only if the plant material contains ≤0.3% delta-9 THC by dry weight. This federal threshold creates a binary classification: products testing above 0.3% THC remain federally illegal marijuana; products testing at or below 0.3% THC are federally legal hemp. The distinction matters because state law cannot override federal scheduling for controlled substances. But state law can impose additional restrictions on federally legal hemp products.

Idaho, Nebraska, and South Dakota maintain state-level CBD restrictions despite federal legalisation. Idaho Code 37-2701 defines marijuana to include all cannabis plants regardless of THC content, effectively banning CBD possession and retail sales. Nebraska Revised Statute 28-401 permits hemp cultivation under USDA licensing but does not authorise retail CBD sales without a medical cannabis card. South Dakota voters approved medical and adult-use cannabis in 2020, but those ballot measures were overturned; CBD remains illegal for recreational possession without a prescription as of 2026. All three states permit CBD possession with a doctor's recommendation. But retail storefronts and online shipments without medical documentation face enforcement risk.

State-specific testing and labeling rules compound federal compliance. California requires Proposition 65 warnings on CBD products despite federal legality. Colorado mandates third-party testing for pesticides, heavy metals, and residual solvents. Testing that most online CBD sellers do not conduct. New York's Department of Health restricts CBD in food and beverages pending additional FDA guidance, creating a split where CBD tinctures are legal but CBD-infused cookies are not. These rules do not contradict federal law. They add requirements on top of federal THC limits. A product that meets the 0.3% federal threshold can still violate state law if it lacks required testing, warning labels, or retail authorisation.

The Three Compliance Layers Every CBD Buyer Should Verify

CBD legality operates on three enforcement layers: federal THC limits, state retail rules, and FDA labeling restrictions. All three must be satisfied for a product to be sold and shipped without legal risk.

Federal compliance starts with third-party lab testing showing ≤0.3% delta-9 THC content. The 2018 Farm Bill does not require this testing. It only defines the threshold. USDA hemp licensing requires testing for cultivators, but post-harvest processing (extraction, formulation, packaging) has no federal testing mandate. Products sold without a Certificate of Analysis (COA) from an accredited lab cannot prove federal THC compliance, which voids the Farm Bill's legal protection. A COA must show the test date, lab accreditation, cannabinoid profile, and the specific batch or lot number matching the product label. Generic COAs that do not match batch numbers or show test dates older than 12 months do not meet federal compliance standards according to FDA enforcement guidance issued in 2023.

State retail compliance varies by jurisdiction. Pure Balance Full Spectrum CBD Tincture and other products we carry meet federal THC limits, but buyers in Idaho, Nebraska, and South Dakota cannot legally purchase or possess them without a prescription. Washington requires all CBD sellers to register with the Department of Health and submit quarterly sales reports. Oregon restricts CBD sales to licensed cannabis retailers, even for hemp-derived products. Vermont bans CBD in food and beverages sold in restaurants, though tinctures and topicals face no restriction. These rules change. New York lifted its CBD-in-food ban in late 2025, and Montana introduced retail licensing requirements in early 2026. Checking current state law before purchasing or selling prevents enforcement actions that federal legality cannot shield.

FDA labeling compliance applies nationwide. The FDA prohibits any CBD product from making disease claims without drug approval. Statements like "treats anxiety", "cures insomnia", or "reduces inflammation" trigger FDA warning letters regardless of THC content or state legality. Products labelled as dietary supplements face additional scrutiny because CBD does not meet the FDA's definition of a lawful dietary ingredient. The agency issued 22 warning letters in 2025 targeting CBD sellers for unapproved health claims, mislabeling, and adulterated products. Buying from sellers who avoid disease claims and provide batch-specific COAs reduces legal and quality risk. We ensure every product in our Pure Balance collection includes third-party lab verification and compliant labeling so you are not exposed to enforcement risk.

Is CBD Legal in All 50 States: Detailed Comparison by Legal Status

Key Takeaways

• CBD derived from hemp with ≤0.3% THC is federally legal under the 2018 Farm Bill, but Idaho, Nebraska, and South Dakota restrict retail sales and possession without a prescription.
• Federal legality does not override state retail rules. A product legal to ship across state lines can still be illegal to sell in a storefront depending on jurisdiction.
• Third-party lab testing showing batch-specific THC content below 0.3% is the only way to verify federal compliance; generic COAs without matching batch numbers do not meet FDA enforcement standards.
• California, Colorado, New York, and Washington impose testing, labeling, or licensing requirements beyond federal THC limits. Compliance with the Farm Bill does not guarantee state compliance.
• FDA enforcement targets disease claims and dietary supplement labeling regardless of state or federal THC compliance. Products marketed to "treat" or "cure" conditions face warning letters and seizures.
• Buyers in states with retail restrictions can possess CBD with a doctor's recommendation, but online sellers cannot legally ship recreational CBD products to those addresses.

What If: CBD Legal Scenarios

What If I Live in Idaho, Nebraska, or South Dakota and Want to Buy CBD?

Obtain a written recommendation from a licensed physician and purchase from a licensed medical dispensary. Possession without a prescription remains illegal in all three states as of 2026, and online sellers cannot legally ship recreational CBD products to those addresses. Crossing state lines to purchase CBD in a neighbouring state and returning with it does not legalise possession. State law governs possession within state borders, and federal interstate commerce protections do not override state possession bans. Medical documentation must accompany the product if stopped by law enforcement.

What If My CBD Product Was Seized by Customs or State Authorities?

Request the COA from the seller showing THC content below 0.3% and submit it to the seizing agency with a copy of the 2018 Farm Bill citation (7 U.S.C. § 1639o). If the product tests above 0.3% THC, it is federally illegal marijuana and will not be returned. If the product meets federal THC limits but violates state retail rules (e.g., shipped to Idaho without a prescription), the seizure is lawful under state authority and the product will not be returned. Customs seizures of imported CBD require additional documentation proving foreign cultivation compliance with USDA organic standards, which most international sellers do not provide.

What If I Want to Sell CBD Products Online or in a Retail Store?

Verify that every product batch tests below 0.3% THC through an ISO 17025 accredited lab, avoid all disease claims in labeling and marketing, and confirm compliance with the retail licensing rules in every state where you sell. Register your business with your state's Department of Health or Agriculture if required (Washington, Oregon, Colorado mandate this). Purchase general liability insurance covering hemp products. Standard business policies often exclude cannabis-related products even if federally legal. Consult an attorney familiar with FDA food and drug law before launching, because mislabeling enforcement can result in product seizures, injunctions, and criminal referral.

The Uncomfortable Truth About CBD Legality

Here's the honest answer: federal legality means almost nothing if the product you buy does not have a batch-specific COA showing compliant THC levels. The 2018 Farm Bill legalised hemp. It did not legalise mislabeled products, untested products, or products making unapproved health claims. The majority of CBD enforcement actions in 2025 targeted sellers who met federal THC limits but violated FDA labeling rules or state testing requirements. A product can be "legal" under the Farm Bill and still get you cited, fined, or arrested depending on where you buy it, how it's labeled, and what the seller claims it does.

The brands that operate without legal risk do not rely on federal legality as a shield. They meet every state-specific requirement in every jurisdiction where they sell. We verify third-party lab results for every product in our Tinctures, Softgels, and Gummies lines because compliant labeling and testing documentation are the only protections that matter when enforcement happens. A seller who cannot provide a current, batch-matched COA on request is not complying with federal law. Regardless of what their marketing says.

How State Enforcement Actually Works in Practice

State-level CBD enforcement rarely targets individual buyers. It targets retailers, online sellers, and product labeling. California's Bureau of Cannabis Control conducts quarterly sweeps of unlicensed CBD retailers, issuing cease-and-desist orders and product seizures for sellers operating without testing documentation. Colorado's Marijuana Enforcement Division treats untested CBD products as adulterated marijuana, subjecting them to the same penalties as THC products sold outside licensed dispensaries. New York's Department of Health focuses enforcement on CBD-infused food and beverages sold in restaurants, issuing fines of $500–$1,000 per violation for non-compliant products.

FDA enforcement operates differently. The agency does not conduct routine testing of CBD products. It relies on consumer complaints, adverse event reports, and state referrals to identify targets. Products marketed with disease claims ("reduces anxiety", "improves sleep", "treats pain") receive warning letters first, followed by product seizures if the seller does not comply within 15 days. The FDA issued 22 warning letters in 2025, with 8 resulting in voluntary recalls and 3 resulting in federal injunctions. The pattern is consistent: sellers making health claims without drug approval face enforcement, while sellers marketing CBD for "wellness" or "balance" without specific disease claims do not.

This enforcement reality shapes how we operate. Every product we carry avoids disease claims, includes third-party lab verification, and meets state-specific requirements in the jurisdictions where we ship. You can verify this yourself. Check the Lab Results page for batch-specific COAs matching current inventory. If a seller cannot provide that documentation, assume the product does not meet federal or state compliance standards regardless of what the label says.

Buying CBD in 2026 requires checking three things before you add anything to your cart: the seller's lab testing documentation, the state's current retail rules, and the product's labeling for FDA-prohibited health claims. All three layers matter. Federal legality is the floor, not the ceiling. If the seller meets those standards, the product is as legally safe as any consumer product can be. If they don't, you are taking enforcement risk the 2018 Farm Bill does not protect you from.