Welcome to Assurentry! New FDA compliance features available.
Skip to main content
CBD & Hemp

FDA Compliance for CBD & Hemp Products

The CBD regulatory landscape is complex and evolving. Navigate federal and state requirements, avoid FDA enforcement actions, and protect your business with proper compliance strategies.

Trusted by 2,800+ companies in 160+ countries

$5.3B
US CBD Market (2025)
200+
FDA Warning Letters to CBD Cos.
50
States with Varying CBD Laws
0
FDA-Approved CBD Foods/Supps

The CBD Regulatory Landscape

The regulatory environment for CBD products in the United States is uniquely complex. While the 2018 Farm Bill legalized the cultivation and sale of hemp (cannabis containing less than 0.3% THC by dry weight), it did not change FDA's authority to regulate products containing cannabis or cannabis-derived compounds, including CBD.

FDA's current position is that CBD cannot be legally added to food or marketed as a dietary supplement. This is because CBD is the active ingredient in Epidiolex, an FDA-approved prescription drug, and under the FD&C Act, an active drug ingredient cannot be marketed as a food additive or dietary supplement without FDA approval.

Despite this legal framework, the CBD market has grown rapidly, and FDA has exercised enforcement discretion. The agency has primarily focused enforcement on companies making egregious health claims, while working to develop a regulatory pathway for CBD in food and supplements. Companies operating in this space must navigate both federal and state regulations carefully.

Key Regulatory Facts

  • 2018 Farm Bill - Legalized hemp (cannabis with <0.3% THC) but did not change FDA's authority over CBD in food and supplements
  • FD&C Act - CBD in food and dietary supplements remains technically illegal because CBD is an active ingredient in an approved drug (Epidiolex)
  • Not GRAS - CBD is not Generally Recognized as Safe (GRAS) for use in food or supplements per FDA's current position
  • State Variance - Over 30 states have enacted their own CBD regulations, creating a complex patchwork of compliance requirements
  • FDA Enforcement Discretion - FDA has exercised discretion on enforcement but actively targets companies making unapproved health claims
  • Regulatory Warning

    CBD regulations are evolving rapidly. Get expert guidance to avoid costly FDA enforcement actions.

    What CBD Companies Need

    Even in the absence of a clear federal framework, CBD companies must meet these fundamental requirements to minimize regulatory risk.

    Facility Registration

    If manufacturing food or supplements containing CBD/hemp, facilities must register with FDA

    Before operations begin; renew Oct 1 - Dec 31 even years

    Labeling Compliance

    No disease claims, proper ingredient listing, accurate CBD/hemp content declarations

    Before product enters commerce

    cGMP Compliance

    Manufacturing facilities must follow current Good Manufacturing Practices for product category

    Ongoing compliance required

    Third-Party Testing

    Certificates of Analysis (CoA) for potency, contaminants, pesticides, and heavy metals

    Each production batch

    State Licensing

    State-level CBD regulations vary significantly and may require additional licenses and permits

    Varies by state

    Adverse Event Reporting

    Serious adverse events must be reported to FDA within 15 business days

    15 business days of receiving report

    Common FDA Actions Against CBD Companies

    Understanding how FDA has enforced against CBD companies helps you avoid the same mistakes. These are the most common enforcement actions.

    FDA Action

    Warning Letters for Health Claims

    FDA has issued hundreds of warning letters to CBD companies marketing products with claims to treat, cure, or prevent diseases such as cancer, Alzheimer's, anxiety, and pain

    Consequence

    Product seizure, injunction, criminal prosecution

    Prevention

    Remove all disease/drug claims from labels, websites, and social media

    FDA Action

    Import Refusals

    CBD products imported into the US may be refused entry if they appear to be unapproved new drugs or adulterated food/supplements

    Consequence

    Products detained at port, returned to shipper, or destroyed

    Prevention

    Ensure proper documentation, labeling, and avoid prohibited claims before import

    FDA Action

    Seizure of Products Making Drug Claims

    Products marketed with therapeutic claims (e.g., 'treats epilepsy,' 'cures inflammation') are considered unapproved drugs subject to seizure

    Consequence

    Product loss, legal costs, potential criminal charges

    Prevention

    Limit claims to structure/function statements with proper disclaimers

    FDA Action

    Contamination and Adulteration Actions

    Products containing undeclared THC levels above 0.3%, pesticides, heavy metals, or other contaminants

    Consequence

    Recall, warning letter, import alert

    Prevention

    Implement comprehensive third-party testing with CoA for every batch

    How to Stay Compliant

    Follow these steps to minimize regulatory risk and protect your CBD business from FDA enforcement actions.

    1

    Avoid Disease and Drug Claims

    Never claim your CBD product treats, cures, mitigates, or prevents any disease. Stick to structure/function claims like 'supports calm' or 'promotes relaxation' with proper disclaimers.

    2

    Register Your Facilities

    If manufacturing food or supplements, register all facilities with FDA. Foreign facilities must designate a US Agent. Renew biennially during October-December of even years.

    3

    Maintain Proper Labeling

    Include accurate ingredient lists, net quantity, manufacturer information, and appropriate disclaimers. Never overstate CBD content or make unsubstantiated potency claims.

    4

    Implement Third-Party Testing

    Test every batch for CBD/THC potency, pesticides, heavy metals (arsenic, cadmium, lead, mercury), residual solvents, and microbial contaminants. Maintain Certificates of Analysis.

    5

    Follow cGMP Practices

    Maintain comprehensive manufacturing controls including personnel training, equipment calibration, batch records, quality control testing, and CAPA procedures.

    6

    Monitor State Regulations

    Track and comply with state-specific CBD laws, which vary dramatically. Some states ban CBD in food entirely; others have specific licensing and testing requirements.

    Frequently Asked Questions

    Get answers to the most common questions about CBD and hemp FDA compliance.

    Is CBD legal to sell in the United States?

    Hemp-derived CBD (from cannabis with less than 0.3% THC) was legalized under the 2018 Farm Bill, but FDA's position is that CBD cannot legally be added to food or marketed as a dietary supplement because it is an active ingredient in the approved drug Epidiolex. Despite this, FDA has exercised enforcement discretion while it develops a regulatory pathway. Companies must still comply with labeling laws, avoid health claims, and follow state regulations.

    Can I market CBD as a dietary supplement?

    Technically, no. Under the FD&C Act, an article that has been approved or authorized for investigation as a new drug cannot be marketed as a dietary supplement if it was not previously marketed as a supplement. Since CBD is the active ingredient in Epidiolex (approved in 2018), it cannot legally be a dietary supplement. However, many companies sell CBD products in supplement-like formats, and FDA has not broadly enforced this prohibition.

    What claims can I make about my CBD product?

    You must avoid any claims that your CBD product treats, cures, mitigates, or prevents any disease (drug claims). You may make limited structure/function claims such as 'supports relaxation' or 'promotes a sense of calm' but these must be truthful and not misleading. If making structure/function claims on a supplement, you must include the standard FDA disclaimer and notify FDA within 30 days.

    Do I need to register my facility with FDA?

    If your facility manufactures, processes, packs, or holds food products (including those containing CBD/hemp), you must register with FDA under the Food Safety Modernization Act. Registration must be renewed biennially during October 1 through December 31 of even-numbered years. Foreign facilities must also designate a US Agent.

    What testing is required for CBD products?

    While FDA has not issued specific testing requirements for CBD products, industry best practices and many state regulations require third-party testing for: CBD and THC potency (to verify label claims and ensure <0.3% THC), pesticide residues, heavy metals (arsenic, cadmium, lead, mercury), residual solvents, and microbial contaminants. Certificates of Analysis (CoA) should be available for every batch.

    How do state CBD regulations differ from federal rules?

    State regulations vary dramatically. Some states (like California and Colorado) have established comprehensive CBD regulatory frameworks with specific testing, labeling, and licensing requirements. Others have banned CBD in food products or dietary supplements entirely. Some states require specific licenses to manufacture or sell CBD products. Companies selling in multiple states must comply with each state's requirements, which may be more restrictive than federal regulations.

    Ready to Protect Your CBD Business?

    Get personalized guidance from our regulatory experts. We'll help you navigate the complex CBD compliance landscape and avoid costly FDA enforcement actions.