CBD itself is not a federally controlled substance, as long as it comes from hemp containing no more than 0.3% delta-9 THC on a dry weight basis. That distinction, established by the 2018 Farm Bill, is the single most important line in CBD law. Cross it, and the product falls under the Controlled Substances Act as a marijuana derivative. Stay under it, and CBD is federally legal to possess. The reality, though, is more layered than that simple threshold suggests.
The 0.3% THC Line
The 2018 Farm Bill redefined hemp as cannabis containing no more than 0.3% delta-9 THC on a dry weight basis. That definition covers the whole plant and all of its derivatives, extracts, and cannabinoids, including CBD. Any cannabis-derived product that stays at or below that threshold is classified as hemp, not marijuana, and falls outside the Controlled Substances Act.
CBD extracted from marijuana plants (those above 0.3% THC) remains a Schedule I controlled substance under federal law, regardless of whether the CBD molecule itself is identical. The source plant’s THC content is what determines legality, not the chemical structure of the CBD.
A Key Change Coming in 2026
In November 2025, Congress passed a law (P.L. 119-37) that changes the hemp definition in a significant way. Starting November 12, 2026, the 0.3% limit will apply to total THC rather than just delta-9 THC. This closes a loophole that allowed products with high levels of other THC variants, like delta-8, to qualify as hemp. The Senate Appropriations Committee stated the change was made to prevent “the unregulated sale of intoxicating” hemp products. If you currently buy hemp-derived products containing delta-8 THC or similar compounds, this law will likely affect what’s available to you.
The One CBD Product That Is Scheduled
There is one specific CBD product the DEA has formally scheduled: Epidiolex, the FDA-approved prescription medication for certain types of epilepsy. In 2018, the DEA placed it in Schedule V, the least restrictive category of controlled substances. This means Epidiolex requires a prescription and is tracked like other scheduled medications, but it’s treated far less strictly than Schedule I or II drugs.
This is a narrow classification. It applies to the specific pharmaceutical product, not to CBD as a compound. Over-the-counter CBD oils and gummies derived from hemp are not Schedule V substances.
Legal to Possess, Complicated to Sell
Here’s where many people get confused: hemp-derived CBD is not a controlled substance, but the FDA still doesn’t allow it to be sold as a food ingredient or dietary supplement. The reason is that CBD is the active ingredient in an FDA-approved drug (Epidiolex). Federal law prohibits adding a substance to food or marketing it as a supplement once it’s been approved as a drug or authorized for substantial clinical investigation, unless it was sold that way first. The FDA has concluded CBD doesn’t meet that exception.
In practice, this creates a strange situation. You can legally possess hemp-derived CBD, and thousands of companies sell CBD products openly. But technically, marketing CBD as a dietary supplement or adding it to food violates federal food and drug law. The FDA has largely focused enforcement on companies making specific health claims rather than pursuing every CBD seller, which is why the market continues to thrive in a legal gray zone.
State Laws Add Another Layer
Federal legality doesn’t guarantee legality in your state. Most states have aligned their laws with the 2018 Farm Bill, but some maintain tighter restrictions. A handful of states allow only low-THC, high-CBD products for medical use under limited circumstances, and at least one (Kansas) permits concentrated CBD products but doesn’t regulate their production or sale. Your state’s hemp and cannabis laws may impose additional requirements on THC content, product types, labeling, or who can sell CBD.
Traveling With CBD
The TSA allows passengers to fly with CBD products that contain no more than 0.3% THC on a dry weight basis, consistent with the Farm Bill’s hemp definition. TSA officers aren’t actively searching for marijuana or CBD, but if they discover a product that appears to violate federal law during routine screening, they’re required to refer it to law enforcement. If you fly with CBD, carrying a product with clear labeling showing its THC content and hemp origin reduces the chance of complications. Keep in mind that international travel is a different matter entirely, as other countries may classify CBD as a controlled substance regardless of its THC content.
How Hemp THC Levels Are Verified
The USDA’s Domestic Hemp Production Program requires laboratory testing to confirm that hemp stays within the 0.3% THC limit. Labs must measure total delta-9 THC concentration using methods that account for the plant’s potential to convert its raw acidic form of THC (THCA) into active THC. Samples are ground to ensure the plant material is evenly mixed before testing, and results are reported on a dry weight basis along with a measurement of uncertainty to account for normal lab variability.
These tests apply to hemp crops, not finished consumer products. As of December 31, 2024, all approved hemp testing labs must also be registered with the DEA to handle controlled substances, and they’re required to retain test results for three years. All results, whether passing or failing, must be reported to the USDA’s Hemp eManagement Platform. This testing infrastructure exists at the agricultural level, but there’s no equivalent federal system ensuring the CBD oil on a store shelf actually contains what its label claims.