CBD itself is not universally illegal, but its legal status is surprisingly complicated. Whether a specific CBD product is legal depends on where it comes from, how much THC it contains, and how it’s being sold. The short answer: CBD derived from hemp with no more than 0.3% THC is federally legal, but CBD derived from marijuana remains a Schedule I controlled substance. And even legal CBD runs into major regulatory barriers when companies try to sell it in food, supplements, or with health claims.
The Controlled Substances Act Started It All
When Congress passed the Controlled Substances Act in 1970, marijuana and all its derivatives were placed in Schedule I, the most restrictive category. Schedule I substances are defined as having a high potential for abuse and no currently accepted medical use. That classification swept up every compound in the cannabis plant, including CBD, even though CBD doesn’t produce a high. For nearly 50 years, federal law made no distinction between THC (the compound that gets you high) and CBD (the compound that doesn’t).
This blanket classification is the root of CBD’s legal troubles. The law targeted the cannabis plant as a whole rather than individual compounds, so CBD was guilty by association. Even as scientists began studying CBD’s potential therapeutic effects, the Schedule I status made research difficult and commercial sale flatly illegal.
The 2018 Farm Bill Changed the Rules
The 2018 Farm Bill created the first major legal distinction between hemp and marijuana. It defines hemp as any part of the cannabis plant, or its derivatives, containing no more than 0.3% delta-9 THC on a dry-weight basis. Anything above that threshold is still classified as marijuana and remains a Schedule I substance.
This means CBD extracted from hemp that meets the 0.3% THC limit is no longer a controlled substance under federal law. That single change opened the door to the massive CBD market you see today, with oils, gummies, creams, and tinctures sold in gas stations, pharmacies, and online retailers across the country. But the 0.3% line is razor-thin, and products that test above it are federally illegal regardless of how they’re labeled.
Why CBD Still Can’t Be Sold as Food or Supplements
Here’s where things get confusing. Even though hemp-derived CBD is no longer a controlled substance, the FDA has never approved it as a food additive or dietary supplement. The agency’s position is that because CBD was first studied and approved as an active ingredient in a pharmaceutical drug, it cannot simply be added to food or marketed as a supplement without going through a formal regulatory process. That process hasn’t been completed.
This puts the entire consumer CBD industry in a gray zone. Thousands of companies sell CBD products, but technically none of them have FDA approval to do so. The FDA has largely used enforcement discretion rather than shutting down the market entirely, but it has taken action against companies making specific health claims. The Federal Trade Commission has gone after CBD sellers for claiming their products can treat or cure conditions like cancer, multiple sclerosis, Parkinson’s disease, Alzheimer’s disease, hypertension, chronic pain, anxiety, depression, acne, and psoriasis. These enforcement actions don’t target CBD itself but rather the unproven medical claims attached to it.
The Pharmaceutical Exception
In a notable twist, one CBD product does have full federal approval. In September 2018, the DEA placed Epidiolex, a purified CBD extract used to treat certain forms of epilepsy, in Schedule V of the Controlled Substances Act. Schedule V is the least restrictive category. Epidiolex was the first FDA-approved drug containing a purified extract from the cannabis plant.
This created an odd situation: a pharmaceutical company could legally sell CBD as a prescription drug, but other companies couldn’t legally sell it as a supplement or food ingredient. The DEA was explicit at the time that “marijuana and CBD derived from marijuana remain against the law, except for the limited circumstances that it has been determined there is a medically approved benefit.”
State Laws Add Another Layer
Federal law sets the floor, but individual states can be more or less restrictive. Some states have embraced hemp-derived CBD with minimal regulation. Others have banned certain CBD products, restricted where they can be sold, or imposed their own testing and labeling requirements. A CBD product that’s perfectly legal in one state might get you in trouble in another, even if it meets the federal 0.3% THC threshold.
This patchwork creates real problems for travelers. The TSA’s official policy states that marijuana and certain cannabis-infused products, including some CBD oil, remain illegal under federal law except for products containing no more than 0.3% THC or those approved by the FDA. TSA officers don’t actively search for CBD or marijuana, but if they discover a product that appears to violate the law during routine screening, they’re required to refer it to law enforcement.
Why the Legal Confusion Persists
CBD’s messy legal status comes down to a few colliding forces. The Controlled Substances Act was written to target marijuana as a drug of abuse, and it lumped every cannabis compound together without considering their individual effects. The 2018 Farm Bill partially untangled that, but it only legalized hemp-derived CBD at the plant level. It didn’t address how CBD could be sold to consumers, leaving the FDA to figure that out separately.
Meanwhile, the CBD market grew far faster than regulators could keep up. Companies started selling products before any clear framework existed, and the FDA has been slow to create one. The result is a product that millions of Americans buy and use daily, sitting in a legal limbo where it’s not exactly illegal but not fully legal either. If you’re buying hemp-derived CBD with less than 0.3% THC from a reputable source and not crossing into a state that bans it, you’re almost certainly fine. But the lack of clear federal regulation means quality, labeling accuracy, and THC content vary wildly from product to product, and no federal agency is systematically checking.