Is CBD legal in the UK? The 2026 rules, explained properly

Short answer: CBD is legal to buy and sell in the UK, but almost nothing about how that works matches what people assume. There is no authorised CBD food product on the market. What exists instead is a public list of products allowed to stay on sale while their applications are assessed — and a product that is not on it should not be there.

Two more things the shops rarely mention. The Food Standards Agency advises healthy adults not to exceed 10 mg of CBD a day. And CBD flower is illegal, whatever the THC content and whatever the seller calls it.

What you can and cannot buy

The recurring theme is that the UK regulates CBD through three separate systems that were not designed to work together: food law, drugs law and medicines law. A product can satisfy one and fail another.

The FSA public list, and what being on it means

This is the single most misunderstood thing about the UK market, including by people selling into it.

Why the list exists

CBD extracts are a novel food: they were not consumed to a significant degree in the UK before 15 May 1997, so they need authorisation before being sold. Rather than clearing the shelves overnight, the FSA created a transitional route for products already on sale.

What the statuses mean

Products on the list are marked Validated or Awaiting evidence. Both may remain on the market in England and Wales pending further consideration. It is a permission to keep trading during assessment — not a safety endorsement, and not an authorisation.

What it does not mean

It does not mean the product has been assessed and passed. It does not mean the FSA has checked what is in the bottle. And it does not transfer to a reformulated product: the listing attaches to a specific product linked to a specific application.

How to use it as a buyer

The register is public and searchable. If a product you are considering is not on it, that is not a technicality — it is a product being sold outside the mechanism that makes the rest of the category lawful. It costs a minute to check and it is the strongest single filter available in this market.

The 10 mg a day advice

The number surprises people, and it surprises them in the wrong direction.

Where it comes from

In October 2023 the FSA published a provisional acceptable daily intake of 10 mg a day for healthy adults, following advice from the Committee on Novel Foods and Processes. It replaced an earlier figure of 70 mg — a downward revision of a factor of seven.

What it applies to

The provisional ADI is recognised for CBD in pure form, at 98 % purity or above. It is advice for the general adult population; the FSA also advises that CBD should be avoided by people who are pregnant, breastfeeding or taking medication.

How it compares with the rest of Europe

The European Food Safety Authority’s February 2026 update sets a provisionally safe level of 0.0275 mg per kilogram of body weight per day — roughly 2 mg a day for a 70 kg adult. Two serious authorities, two methods, a factor of five between them.

Some perspective on the scale: a 10 % oil delivers roughly 5 mg per drop. The FSA figure is about two drops a day. The EFSA figure is less than one.

Where the authorisation process has actually reached

This is the part that has moved recently, and it matters more than any of the marketing around it.

September 2026: the first recommendations to Ministers

On 16 September 2026, meeting in Swansea, the FSA board backed recommendations to Ministers in England and Wales to authorise three CBD novel foods — the first time the agency has recommended any CBD product for authorisation.

The scale of the filter is the most useful number in the whole process. Of roughly 800 applications that entered it, 15 passed the safety assessment, and three now stand recommended:

• RP7 — synthetic CBD
• RP350 and RP427 — CBD isolates

All three are at at least 98 % purity. None of them is a full-spectrum extract, which is not an accident: a single, fully characterised substance is far easier to assess than a mixture.

Around 3,000 individual products on the public list are linked to these three applications, so an authorisation would move a large share of the existing market into full compliance at once.

The conditions attached

The three were found safe for adults consuming no more than 10 mg of CBD a day, with tight specifications for Δ9-THC and the other controlled cannabinoids. The safety warnings are wider than many product pages suggest: under-18s, pregnant or breastfeeding women, people trying to conceive, people taking medication, and people who are immunosuppressed.

What happens next

Authorisation is a ministerial decision, not an automatic consequence of the board’s recommendation. Scotland runs its own process through Food Standards Scotland, and applications move on a four-nation basis, which is why dates in this area have repeatedly slipped.

The complication nobody expected: the UK–EU agreement

There is a second clock running. Under the proposed UK–EU sanitary and phytosanitary agreement, dynamic alignment could make EU novel food authorisations the relevant route again for products sold in Great Britain. The FSA has itself noted that a substantial number of applications are unlikely to reach a ministerial decision before that agreement is implemented.

If that happens, British authorisations granted in the meantime could prove transitional rather than permanent — and the EU has not authorised any CBD food at all, with its own provisional safety figure of around 2 mg a day against Britain’s 10. The first authorisations in six years may arrive just as the framework that produced them is being replaced.

The contrast with Brussels is sharper than a difference in numbers. Through 2026 the European Commission has been closing CBD applications rather than approving them: implementing decisions of 20 February and 13 March 2026 terminated the procedures for cannabidiol, a cannabidiol tincture and a hemp extract, and further applications were rejected in April. No CBD application has completed EFSA’s evaluation. London is opening the door in the same year that Brussels is shutting it — and an agreement between the two could decide which of them wins.

What is still true today

Until Ministers decide, there are still no authorised CBD extracts or isolates on the market. Everything currently on sale is on sale under the transitional arrangement. That distinction is the whole legal position of the UK CBD market in one sentence — for now.

Why CBD flower is illegal in the UK

The UK is stricter here than France, Germany, Switzerland or Greece, and the reason is structural rather than a matter of degree.

Cannabis is controlled, hemp is an exception

Cannabis is a Class B controlled drug under the Misuse of Drugs Act 1971. Industrial hemp is handled by a Home Office licence — and that licence covers the stalk and the seed. The flower and the leaf are not part of the permitted harvest and must be destroyed.

There is no low-THC threshold for flower

The 0.2 % figure that circulates relates to the varieties a licensed grower may cultivate. It does not create a category of lawful low-THC flower for sale. A flower under 0.2 % THC is still cannabis in law.

What that means for what is on sale

Shops selling “CBD flower”, “hemp buds” or “legal bud” in the UK are selling a controlled drug, whatever the packaging says and whatever a lab report shows. We do not list flower for the UK market.

The 1 mg exempt product rule

This is the rule that decides whether a legitimate CBD oil is lawful, and it is almost never explained on the products it governs.

What the regulations say

An “exempt product” under the Misuse of Drugs Regulations 2001 must satisfy three conditions together: it is not designed for the administration of a controlled drug; the controlled drug it contains cannot be readily recovered in a quantity that poses a risk to health; and it contains no more than one milligram of any controlled drug per container.

Why one milligram per container is strict

Because it is a limit on the whole container, not a concentration. A 30 ml full-spectrum oil at a THC level that would be perfectly lawful in France can exceed 1 mg of THC in total and fail the UK test — while showing a THC percentage that looks reassuringly small.

What sellers do about it

The serious ones use broad-spectrum or isolate for the UK, and they can show you the total THC in milligrams per container rather than only a percentage. If a seller cannot tell you the milligram figure, they have not done the calculation that the rule turns on.

England, Wales, Scotland and Northern Ireland

“UK law” is a convenient shorthand that hides three real differences.

England and Wales

The FSA public list applies here. This is the market most descriptions of “UK rules” are actually describing.

Scotland

Food policy is handled by Food Standards Scotland, which works alongside the FSA on the CBD assessments. The novel food position is aligned, but the responsible body is different, and so are some enforcement arrangements.

Northern Ireland

Under the Windsor Framework, Northern Ireland continues to follow EU food law. That means the EU novel food regime applies there rather than the GB one — and since no CBD product is on the EU Union list, the position in Northern Ireland is not the same as in England.

Why this matters when you order

Because a product lawfully on sale in England is not automatically in the same position in Belfast, and because a seller that does not know this is a seller who has not read the rules they trade under.

CBD as a medicine

Two products, and a bright line.

The licensed medicines

Epidyolex and Sativex are licensed medicines containing cannabidiol, available on prescription. They went through clinical trials and a marketing authorisation. That is what a medicine is.

The line a shop must not cross

A consumer CBD product becomes a medicine by presentation: the moment it is offered for a medical purpose, it needs a marketing authorisation it does not have. The MHRA has been explicit about this, and it is why responsible sellers describe what is in the bottle and stop there.

Advertising and claims

The rules here are enforced more actively in the UK than in most of Europe, and by more than one body.

What is not allowed

Health claims for CBD are not authorised, so any statement connecting a product to sleep, anxiety, pain or recovery is a problem — including in testimonials, influencer content and customer-service replies.

Who enforces it

The Advertising Standards Authority acts on marketing claims, Trading Standards on product compliance, and the MHRA where a product strays into medicinal presentation. Three bodies, three angles, one product.

Driving: the 2 µg/L limit

The road traffic rules answer a different question from food law.

The limit

England and Wales set a specified limit of 2 micrograms of THC per litre of blood, with equivalent limits applying in Scotland. It is a low threshold by European standards, though not the lowest.

What is tested

THC, not CBD. A roadside saliva screen looks for THC, and a positive screen leads to a blood test that decides the case. No analysis distinguishes THC from a lawful CBD product from THC from anything else.

How the UK compares

The law that applies is the law of the place you are stopped in, not the place you bought the bottle.

Growing hemp in the UK

The question comes up often, and the answer is narrower than the size of the retail market suggests.

The Home Office licence

Cultivating Cannabis sativa, including low-THC industrial hemp, requires a licence from the Home Office. The application names the varieties, the fields and the intended use, and the licence is granted for that use.

What the licence covers

Stalk and seed. Fibre for textiles and construction, seed for food and oil. The licence does not extend to the flower or the leaf, and a licensed grower is required to destroy them.

Why UK farmers cannot supply the UK CBD market

Because CBD sits overwhelmingly in the part of the plant they are not allowed to harvest. The practical consequence is that nearly all CBD sold in Britain is extracted abroad and imported — which puts the entire quality question onto documentation rather than onto a domestic supply chain anybody here can inspect.

The reform argument

Growers’ organisations have argued for years that the flower restriction makes British hemp uncompetitive while doing nothing for public health, since the same extract is imported anyway. Nothing has changed at the time of writing, and we do not assume it will.

How the public list came to look the way it does

The list is not a register of approved products. It is the residue of a deadline.

The 2020 announcement and the 2021 cut-off

In February 2020 the FSA confirmed that CBD extracts are novel foods and set a deadline of 31 March 2021 for products already on sale to be linked to a validated application. Products that missed it were not eligible for the transitional route.

What that means for a product launched later

A CBD food product created after the cut-off cannot join the list retrospectively. It needs its own authorisation — which nobody has yet obtained. This is the reason a shelf can hold a long-standing brand lawfully and a newer one unlawfully, with no visible difference between them.

Why the list keeps changing

Products are added and removed as applications progress, are withdrawn or fail validation. A screenshot from a year ago is not evidence about today, and neither is a seller’s claim to be “FSA approved” — a phrase that describes something that does not exist.

What testing has found in the UK market

The regulatory story would matter less if labels were reliable. They are not, and Britain has some of the clearest evidence of it.

The recurring finding

Independent market studies of CBD products sold in the UK have repeatedly found products containing substantially less CBD than the label claims, some containing none that could be measured, and some containing controlled cannabinoids above the level permitted by the exempt product rule.

What that changes about how to buy

It moves the decision away from the brand and onto the paperwork. A batch certificate with a matching lot number, a stated method and a stated limit of quantification is not a nice extra: it is the only thing standing between a label and a measurement.

Reading a certificate of analysis

The certificate is the only document in this industry that turns a claim into a measurement.

Laboratory, date and method

An accredited laboratory states its accreditation, the date of analysis and the method — usually HPLC for cannabinoids and GC-MS for residual solvents. A report with no method is not checkable, and checkability is the entire point.

The batch number

It has to match the container. A clean certificate belonging to a different batch tells you nothing about your bottle. This is the most common gap, and the easiest to spot.

Total THC in milligrams, not just percent

For the UK this is the number that decides lawfulness, because of the 1 mg per container rule. A percentage alone does not let you check it.

The limit of quantification

“Not detected” does not mean zero. It means below what this method can measure. Without a stated limit of quantification, 0.001 % and 0.05 % look identical on the page.

What to check before buying

Four checks, and together they take less time than reading the reviews.

Is it on the FSA public list

First, because in the UK it is the question that determines whether the product should be on sale at all.

The certificate, with the batch

Second, because it is what turns the label into evidence. Look for the batch match, the method and the limit of quantification.

Price per milligram

The percentage on a label is a concentration, not a quantity and not a price. Divide the price by the total milligrams of CBD: a 10 ml bottle at 10 % contains 1,000 mg. Two bottles at the same shelf price can differ by a factor of two.

The seller’s address

A UK-established seller is covered by UK consumer law. A parcel from outside makes you the importer, and a CBD product crossing the border can raise questions that a domestic purchase never does.

Travelling with CBD

The lawfulness of a product stops at the border of the country that granted it.

Leaving the UK

A broad-spectrum oil lawful here may exceed another country’s rules, or fall foul of a regime that classifies oral CBD differently — Italy has spent two years in litigation over exactly that.

Coming back

Flower is the category that causes real trouble. Buds bought lawfully in Germany, Switzerland or Greece are cannabis on arrival in the UK, and the place of purchase is not a defence.

Full spectrum, broad spectrum and isolate in a UK context

Elsewhere these are a matter of preference. Under the 1 mg rule they are a matter of law.

Full spectrum

Contains the plant’s whole cannabinoid and terpene profile, including trace THC. That is the definition rather than a flaw — but in a large container those traces add up, and 1 mg of total THC per container is a low ceiling.

Broad spectrum

THC removed after extraction, the rest of the profile retained. Whether the removal was complete is answered by the certificate and its limit of quantification, not by a “0 % THC” line on the box.

Isolate

Pure cannabidiol with nothing else. It is also the form that has just received the UK’s first positive safety assessments, at 98 % purity and above — which makes it, for now, the category with the clearest regulatory path.

Frequently asked questions

Is CBD legal in the UK? Yes, subject to the rules for its category. CBD oils and edibles need to be on the FSA public list; cosmetics follow cosmetics law; CBD flower is illegal.

What is the FSA public list? A register of CBD products linked to novel food applications, marked Validated or Awaiting evidence, which may remain on sale in England and Wales while the applications are assessed. It is not an authorisation.

Has any CBD product been authorised in the UK? Not yet. Three applications for CBD isolate above 98 % purity have received positive safety assessments and entered risk management, after which Ministers decide.

How much CBD a day does the FSA advise? No more than 10 mg a day for healthy adults, a provisional figure published in October 2023. EFSA’s February 2026 figure is around 2 mg a day.

Is CBD flower legal in the UK? No. Cannabis flower is a controlled drug regardless of THC content, and the industrial hemp licence covers only stalk and seed.

What is the 1 mg rule? An exempt product may contain no more than 1 mg of a controlled drug per container, must not be designed for its administration, and the controlled drug must not be readily recoverable.

Can I drive after taking CBD? The test looks for THC, and a full-spectrum product contains traces of it lawfully. The specified limit is 2 µg/L of blood in England and Wales.

Are the rules the same in Northern Ireland? No. Under the Windsor Framework, Northern Ireland follows EU food law, so the EU novel food regime applies there rather than the GB public list.

Can hemp be grown for CBD in the UK? Cultivation needs a Home Office licence, and the licence covers stalk and seed. The flower and leaf must be destroyed, which is why almost all CBD sold here is extracted abroad and imported.

What does “FSA approved” mean on a product page? Nothing. There is no such status. A product can be on the public list of products linked to novel food applications, which is a permission to trade during assessment, not an approval.

Why do some products disappear from the list? Because applications are withdrawn, fail validation or are consolidated. The register changes, which is why a screenshot from last year proves nothing about today.

Is there a legal minimum age to buy CBD? There is no statutory age limit for non-medicinal CBD products. Most retailers apply an 18+ rule of their own; that is trade practice, not law.

Sources

• Cannabidiol (CBD) guidance — Food Standards Agency
• CBD products linked to novel food applications — Food Standards Agency
• Register of CBD products linked to novel food applications — Food Standards Agency
• Drug licensing factsheet: cannabis, CBD and other cannabinoids — Home Office
• EFSA — update of the statement on the safety of cannabidiol as a novel food (9 February 2026) — EFSA Journal
• EFSA — 2022 statement on data gaps — EFSA Journal
• UNODC — entry into force of international control of hexahydrocannabinol — UNODC

This page describes the state of the law and is not legal advice. The date it was last verified is at the top.