Three federal answers to whether CBD is legal, all true
Three statements from the United States federal government. All three are current, all three are official, and all three are true at the same time.
- The 2018 Farm Bill made hemp — Cannabis sativa containing less than 0.3 % THC by dry weight — federally lawful to grow and sell.
- The FDA states that “it is currently illegal to market CBD by adding it to a food or labeling it as a dietary supplement.”
- The Department of Defense states that “CBD products of any kind are prohibited for Service Members”, regardless of THC content, with one exception for a prescribed medicine.
Read together, they produce a conclusion nobody puts on a product page: the plant is legal, and nearly every gummy made from it is, by the FDA’s own words, illegally marketed.
That is not a loophole story or a scandal. It is what happens when three agencies answer three different questions, and understanding which question you are actually asking is the only way to get a useful answer.
The question behind the question
“Legal” is not one thing
When someone asks whether CBD is legal, they usually mean one of five different things: can I buy it, can I be arrested for it, can it be sold as food, can I lose my job over it, or can I take it across a border.
Those have different answers, and the answers do not move together.
Why the SERP for this search is so odd
The results for this exact query include a Department of Defense supplement-safety programme and a US Customs and Border Protection page written for its own employees. Two federal bodies rank for this question, and both are addressing their own staff rather than the public.
That tells you where the practical risk actually sits, and it is not in a courtroom.
What the 2018 Farm Bill did
The definition it created
The Agriculture Improvement Act of December 2018 defined hemp as Cannabis sativa containing less than 0.3 % delta-9 THC by dry weight, and removed it from the Controlled Substances Act.
That is the entire basis for the legal hemp industry in the United States. Below the line it is an agricultural commodity; above it, it is a controlled substance.
What it did not do
It did not authorise selling cannabidiol as a food ingredient, and it did not authorise selling it as a dietary supplement. The Farm Bill is agriculture legislation and food marketing is not its subject.
This is the gap that everything else falls into.
The measurement it specifies
Note what the threshold measures: delta-9 THC, by dry weight, in the plant material. Not total cannabinoids, not the acid precursor, and not the finished product’s psychoactivity.
Every subsequent argument in this market turns on that specification, and there is a whole industry now built inside it.
What the FDA says
The statement
The FDA’s position is direct: it is currently illegal to market cannabidiol by adding it to a food or by labelling it a dietary supplement.
That covers gummies, drinks, chocolate, honey, capsules sold as supplements, and most of what is visible in an American shop.
The drug exclusion rule
The reason is structural rather than hostile. US law excludes from the dietary supplement category any substance that was first approved as a drug, or first investigated as a drug in public clinical trials, before being marketed as a food or supplement.
Cannabidiol is the approved active ingredient of a prescription medicine. Under that rule, it cannot subsequently become a supplement ingredient — the sequence went the wrong way round.
And the FDA has said the framework does not work
In January 2023 the agency announced that a new regulatory pathway for CBD was needed, which is an unusual public admission: the regulator saying its own existing rules do not fit what is being sold.
What enforcement looks like in practice
Warning letters, mostly, and mostly to companies making health claims rather than to companies merely selling. The result is a market where the rule is clear, the enforcement is selective, and everyone has adapted to the gap between them.
That gap is why a product can be openly on a shelf and simultaneously outside the rules.
The employees who are told not to
This is the part of the answer with actual consequences for individuals, and it is why two federal employee pages rank for this search.
Service members
The Department of Defense position is unambiguous: cannabidiol products of any kind are prohibited for service members. The prohibition does not depend on the THC content of the product, and it does not depend on state law.
The single exception is the FDA-approved prescription medicine, where prescribed.
Federal law enforcement and border staff
US Customs and Border Protection publishes guidance to its own workforce on this topic, filed under substance abuse prevention. An agency does not write an internal explainer about a product it considers unremarkable.
Why the bans exist
Not because cannabidiol is intoxicating — it is not. Because a workplace drug screen looks for THC metabolites, because full-spectrum products contain trace THC by design, and because testing has repeatedly found products whose contents do not match their labels.
A career is a poor thing to stake on a label.
If you are screened at work
The screen tests for THC-COOH, a metabolite of THC. Cannabidiol is not on the panel and does not trigger it. The risk is entirely the THC that comes along with it, and it accumulates with daily use in a body that stores it in fat.
Broad-spectrum or isolate with a batch certificate showing non-detectable THC is the only version of this worth considering under those circumstances, and even then the honest answer to “is it safe for my job?” is that it depends on a document you did not write.
States are a separate layer
Federal legality does not settle it
A substance can be federally lawful and restricted by a state, and the reverse. State rules on cannabinoid products vary in what they permit, at what concentrations, in what product categories, and to whom.
Some states regulate hemp-derived cannabinoid products through their own cannabis authorities, which is why a state cannabis regulator ranks on this search.
The categories states differ on most
Smokable hemp flower, edibles, drinks, and any cannabinoid produced by chemical conversion. Those four are where state rules diverge most sharply, and they are also the fastest-changing.
What that means practically
Any page claiming to list the rules for all fifty states is out of date on the day it is published. The reliable move is to check the current position of the specific state you are in, from that state’s own regulator, and to accept that the answer has a shelf life.
The 0.3 % line, and what grew inside it
What the threshold does not capture
The federal definition measures delta-9 THC in the raw material. THCA — the acid form the living plant produces — is not delta-9 THC until heat converts it, and heat is what happens when anyone smokes or bakes it.
A product can therefore comply on paper in the jar and become something else in a pipe.
The correction some jurisdictions applied
The fix is a total-THC calculation using the standard decarboxylation factor:
Total THC = delta-9 + (THCA × 0.877)
Where that calculation applies, high-THCA flower is not hemp. Where it does not, it is. Same plant, same laboratory numbers, different answer.
Why this matters to a buyer
Because the answer to “is this legal” can depend on which formula the relevant authority uses, and because a person buying a product marketed as non-intoxicating may receive one that is not.
Reading the THCA line on a certificate, not only the delta-9 line, is the check that resolves it in about ten seconds.
What the same sentence accidentally permitted
The most consequential thing about the Farm Bill’s definition is not what it legalised on purpose.
One word did the work
The threshold names delta-9 THC. Cannabis produces other intoxicating cannabinoids, and more can be made from legal hemp-derived cannabidiol through chemical conversion.
Delta-8 THC, delta-10, HHC and several others are intoxicating compounds that are not delta-9, and that can be manufactured from a plant which is federally lawful. A statute written to describe a crop ended up describing a chemistry set.
Why this is not a hypothetical
An entire retail category now exists on this basis, sold in petrol stations and vape shops in states where cannabis itself is prohibited. It is the largest unintended consequence in the history of US hemp policy, and it is why several states have legislated separately against converted cannabinoids while leaving cannabidiol alone.
What it means for someone shopping
The word “hemp-derived” on a package does not mean non-intoxicating. It describes where the starting material came from, not what the finished molecule does.
If a product promises an effect, and the effect it promises sounds like being high, the compound inside it is probably not cannabidiol — and the drug test consequences are those of THC.
The check
Read the cannabinoid list on the package and on the certificate. Cannabidiol, CBDA, CBG, CBN and CBC are non-intoxicating. Anything named delta-8, delta-10, THCP, THCO or HHC is not, whatever the front of the box implies.
How to check the current answer yourself
Every statement on this page has a shelf life, and the honest thing to do is hand over the sources rather than ask anyone to trust a page.
For the American federal position
The FDA publishes its own consumer page on cannabidiol, and it is the primary source for what may and may not be marketed. It changes, and it is free.
For your state
Go to the state’s own regulator rather than to any national summary. A state cannabis or agriculture authority publishes its current position; a listicle republishes someone’s reading of it from two years ago.
For employment risk
If you work for a federal agency or serve in the military, the guidance written for you is public. The Department of Defense’s supplement safety programme and the agency employee pages are addressed to your situation specifically, which no consumer page is.
For Europe
EFSA’s statement on cannabidiol as a novel food, the EU Register of nutrition and health claims, and EUR-Lex for the regulations themselves. All three are searchable and none costs anything.
How to spot a stale page
Three tells. It cites the 2018 Farm Bill without mentioning the FDA’s position. It gives a fifty-state table with no date. Or it uses the phrase “legal in all 50 states”, which was never accurate and is now a reliable marker that nobody has checked since.
On this site every page carries the date it was last updated, in the open, for exactly this reason.
Taking it across a border
The general rule
Legality does not travel. A product lawfully bought in one country can be a controlled substance in the next, and the fact that it was legal where you bought it is not a defence anywhere else.
Where the risk concentrates
Airports, international post, and countries with zero-tolerance narcotics laws. Several jurisdictions in Asia and the Middle East make no distinction between cannabidiol and cannabis, and the consequences there are severe.
The practical advice
Do not carry it across a border you have not checked, and do not rely on a shop’s assurance. Check the destination country’s own rules, and when in doubt, buy on arrival or go without.
Europe runs on a different system entirely
The Kanavape principle
The Court of Justice of the European Union has held that cannabidiol lawfully produced in one member state is not a narcotic and cannot simply be banned by another. That ruling is the backbone of the European market and has no American equivalent.
Novel food, not dietary supplement
In the EU, cannabidiol for ingestion falls under the novel food regime, which requires an authorisation dossier per product. That is a different mechanism from the American drug exclusion rule, and it produces a different kind of limbo — applications pending rather than a category foreclosed.
The quantity Europe now names
On 9 February 2026 EFSA published a provisional safe intake level for cannabidiol as a novel food: 0.0275 mg per kilogram of body weight per day, about 2 mg a day for a 70 kg adult, excluding anyone under 25, pregnant, breastfeeding or taking medication.
And no authorised claim anywhere
There is not a single authorised health claim for cannabidiol in the EU register, for any purpose. Under Regulation (EC) No 1924/2006, an unauthorised claim on a food may not be used at all, whether or not it happens to be true.
What “legal” cannot promise you
It does not mean tested
A 2024 review in The Journal of Pain examined products sold in North America and Europe and found cannabidiol content ranging from none to much more than advertised, with other potentially harmful chemicals often present.
Legality describes a category. It says nothing about what is in the bottle in front of you.
It does not mean effective
There is no authorised health claim in Europe and no supplement approval in the United States. A product being lawful to sell is not evidence that it does anything.
It does not mean safe for you
Cannabidiol inhibits CYP3A4 and CYP2C19, and interactions with prescribed medicines are documented in the European assessment file for the one approved cannabidiol medicine. Legal status has no bearing on that.
What actually protects you
A batch certificate that matches the bottle, an ingredients panel you have read, and a pharmacist who has seen your medication list. Those three do more than any statute, and all three are available in about five minutes.
The short version
In the United States
Hemp under 0.3 % delta-9 THC by dry weight is federally lawful. The FDA says adding cannabidiol to food or labelling it a supplement is illegal. Both are true, and the gap between them is where the entire retail market sits.
If you work for the government
The Department of Defense prohibits it for service members outright, whatever the product contains. Other federal agencies publish similar internal guidance. If you are screened at work, the risk is real and it comes from trace THC, not from cannabidiol.
If you cross a border
Assume nothing transfers. Check the destination, not the origin.
And the question worth asking instead
Not “is this legal” but “what is in it, and what does it do to what I already take”. Those two have answers you can verify, which is more than legality offers on its own.
Why we did not simplify this
The version of this page that converts best is one sentence long: yes, CBD is legal, here is where to buy it. We could have written it, and it would not have been a lie — hemp is federally lawful and products are on shelves everywhere.
It would also have been useless to the reader who serves in the military, misleading for the reader holding a delta-8 gummy, and irrelevant to the reader crossing a border. Those three are not edge cases; they are a large share of the people who type this question, and they are the ones for whom the answer actually carries a cost.
Handing over the three federal statements and the sources to check them is worth more than a reassuring sentence, even when the reassuring sentence is technically true.