CBD and Hemp Law — Federal vs State Rules Explained

CBD and Hemp Law — Federal vs State Rules Explained

The 2018 Farm Bill legalized hemp at the federal level. And with it, hemp-derived CBD containing no more than 0.3% delta-9 THC by dry weight. That single legislative change created a $4.6 billion CBD market almost overnight, according to the Hemp Business Journal's 2023 industry report. But here's what that federal legalization didn't do: it didn't override state law. Individual states retain the authority to regulate, restrict, or outright ban hemp-derived products within their borders. And dozens have exercised that authority in conflicting ways.

We've reviewed CBD compliance documentation for hundreds of retailers operating across state lines. The pattern is consistent: the businesses that avoid regulatory trouble are not the ones relying on federal law as blanket permission. They're the ones tracking state-level deviations on a jurisdiction-by-jurisdiction basis, because those deviations determine where you can legally ship, where you need additional licensing, and where selling an otherwise compliant product will trigger enforcement action.

What does federal CBD and hemp law actually allow, and where do state regulations override it?

Federal law. Specifically the Agriculture Improvement Act of 2018 (the Farm Bill). Removed hemp (cannabis sativa L. with ≤0.3% delta-9 THC) from the Controlled Substances Act's Schedule I classification. This means hemp-derived CBD is no longer a federally controlled substance. However, the FDA retains authority over CBD as a food additive and dietary supplement ingredient, and most CBD products remain in regulatory limbo because the FDA has not issued final rules permitting CBD in those categories. Meanwhile, individual states regulate intrastate commerce independently. Some align with federal law, some impose stricter THC limits (0.0% in Idaho, for example), and others require state-specific licensing even for federally compliant products.

Federal law sets the floor. Not the ceiling. State law can be more restrictive, and in practice, it often is. This article covers the federal framework's three core components, the five state-level deviations that affect the most retailers, and the compliance verification process that protects you from liability when regulations conflict.

Federal Hemp Law — The Three Components That Define Legality

The 2018 Farm Bill did three specific things that changed CBD commerce: it removed hemp from Schedule I, it transferred regulatory authority from the DEA to the USDA, and it permitted interstate commerce in hemp and hemp-derived products. These three changes form the foundation of federal hemp law. But each carries specific limitations most retailers misunderstand.

Hemp definition and THC threshold: Federal law defines hemp as cannabis sativa L. containing no more than 0.3% delta-9 THC on a dry weight basis. This is a precise chemical threshold measured post-harvest. Not a cultivation intent standard. If a plant tests above 0.3% THC after drying, it is marijuana under federal law, regardless of what it was bred to be. The 0.3% limit applies to the plant material itself. Finished products derived from compliant hemp can contain CBD at any concentration, as long as the source material met the threshold.

USDA licensing and state plans: The Farm Bill required states and tribal nations to submit hemp production plans to the USDA for approval. These plans govern who can grow hemp, under what conditions, and with what testing protocols. As of 2026, 44 states operate under USDA-approved plans or the USDA's default federal plan. Growers must obtain licenses, submit to THC testing within 15 days of harvest, and destroy non-compliant crops. Retailers purchasing hemp-derived CBD should verify that their suppliers source from USDA-licensed farms. This is the first compliance checkpoint that protects you from sourcing federally non-compliant material.

Interstate commerce permission: The Farm Bill explicitly legalized the interstate transport of hemp and hemp-derived products, overriding state laws that previously treated such transport as drug trafficking. This means you can ship CBD products across state lines without violating federal drug law. But interstate commerce permission does not override state laws governing the sale, possession, or use of CBD within a destination state. A product legal to ship is not automatically legal to sell or consume where it arrives.

Our team has reviewed this across hundreds of clients in this space. The pattern is consistent every time: federal compliance is necessary but insufficient. The suppliers who avoid enforcement issues are the ones who treat federal law as the baseline and verify state-level rules before every shipment.

State-Level Deviations — Where Federal Permission Ends

Federal law permits hemp-derived CBD. State law determines whether you can sell it. Five categories of state-level regulation account for most compliance failures: total bans, stricter THC limits, product-type restrictions, licensing requirements, and labeling mandates. Each operates independently of federal law.

Total state bans: Idaho, Nebraska, and South Dakota maintain de facto bans on all CBD products, regardless of federal hemp compliance. Idaho defines any cannabis-derived product containing any amount of THC. Including the trace amounts permitted federally. As a controlled substance. Retailers shipping CBD to these states face criminal liability, even if the product contains 0.0% THC and was derived from federally compliant hemp. The enforcement is real: Idaho State Police seized a truckload of hemp in 2019 despite the driver carrying USDA documentation, and the state successfully prosecuted the case. Check state law before accepting orders from these jurisdictions. Federal compliance is not a defense.

Stricter THC limits: Several states impose THC limits below the federal 0.3% threshold. Iowa permits CBD products with 0.0% THC only. Any detectable THC renders the product illegal under state law. Louisiana previously required CBD products to contain no more than 0.05% THC, though this was repealed in 2023. Retailers selling into states with sub-federal THC caps must verify that their lab reports reflect the stricter limit, not just the federal one.

Product-type restrictions: Some states permit CBD in certain product categories while banning it in others. Texas allows CBD in topical products but bans it in food and beverages pending FDA approval. California permits CBD in cosmetics but requires specific labeling for edibles. These category-specific rules mean a compliant tincture may be legal to sell while an identical formulation in gummy form is not.

Here's the honest answer: most CBD retailers operating in multiple states do not track these restrictions proactively. They rely on federal compliance and ship until they receive a cease-and-desist letter. That approach works until it doesn't. And when it fails, the liability is retroactive.

CBD and Hemp Law: Regulatory Comparison

Key Takeaways

• Federal law permits hemp-derived CBD with ≤0.3% delta-9 THC, but individual states retain authority to ban, restrict, or impose stricter limits on CBD products sold within their borders.
• Idaho, Nebraska, and South Dakota maintain total bans on CBD regardless of federal compliance. Shipping to these states exposes retailers to criminal liability.
• Iowa requires 0.0% THC in all CBD products, a stricter limit than the federal 0.3% threshold; lab reports must reflect the destination state's cap, not just federal compliance.
• Texas permits CBD in topicals but bans it in food and beverages, meaning product category determines legality even when THC content is identical.
• Interstate commerce is federally legal, but shipping a compliant product across state lines does not override the destination state's laws governing sale, possession, or use.
• USDA-licensed cultivation and third-party lab testing are the first two compliance checkpoints; state-specific licensing and labeling requirements are the third.

What If: CBD and Hemp Law Scenarios

What If a customer in Idaho orders CBD oil from my online store?

Do not ship the product. Idaho law classifies any cannabis-derived product containing any amount of THC as a controlled substance, and federal hemp compliance is not a recognized defense under state law. Cancel the order, refund the payment, and include a brief explanation that your business does not ship to Idaho due to state-level restrictions. Document the refusal in case of future disputes. Shipping to Idaho exposes you to potential criminal charges under state law, even if the product contains 0.0% THC and was derived from USDA-licensed hemp.

What If my CBD supplier's lab report shows 0.29% delta-9 THC, but I sell in Iowa?

The product is federally compliant but not Iowa-compliant. Iowa requires 0.0% THC in all CBD products. Source a different batch with non-detect THC levels, or remove Iowa from your shipping destinations for that SKU. Do not attempt to sell federally compliant products that exceed a state's stricter THC cap; enforcement authority lies with the state, and federal compliance will not protect you in an Iowa court.

What If Texas passes a new rule on CBD edibles while I have active inventory?

Monitor the Texas Department of State Health Services website for effective dates and transition periods. Most new rules include a compliance window during which existing inventory can be sold under prior rules. If the rule bans a product category outright with no grandfathering, halt new shipments to Texas immediately and either liquidate existing Texas-bound inventory in compliant states or return it to your supplier. Non-compliance penalties in Texas can include product seizure, fines, and loss of business licensing.

What If the FDA issues final rules on CBD in food and supplements?

FDA rulemaking would establish a federal baseline for CBD in ingestible products, but states could still impose stricter requirements. Review the final rule for concentration limits, labeling mandates, and Good Manufacturing Practice (GMP) requirements. Update your product formulations, labels, and supplier agreements to meet the new federal floor. Continue tracking state-level deviations. FDA approval does not override state bans or stricter THC caps.

The Unflinching Truth About CBD and Hemp Law

Let's be direct about this: federal hemp legalization was never meant to create a frictionless national CBD market. The 2018 Farm Bill removed hemp from Schedule I and permitted interstate commerce. But it explicitly preserved state authority to regulate hemp within state borders, and it left the FDA's authority over food and supplements untouched. What this created is a dual-jurisdiction framework where federal compliance is mandatory but insufficient, and where retailers are legally responsible for knowing destination-state rules even when those rules conflict with federal law.

The regulatory complexity is not an accident. It is the intended design. States retain police powers over intrastate commerce under the Tenth Amendment, and Congress did not preempt that authority when it legalized hemp. This means you can ship a federally compliant product across state lines without violating federal drug law, but the moment that product arrives in a state that bans or restricts it, you are subject to state enforcement. The liability is yours, not the customer's and not the carrier's.

Our team has found that retailers who scale successfully in this environment do not wait for regulatory clarity. They build compliance into their operations from day one. That means verifying supplier licensing, maintaining current lab reports for every SKU, checking THC levels against the strictest cap in any state you serve, and maintaining a jurisdiction-by-jurisdiction shipping matrix that updates whenever state law changes. It is manual, it is expensive, and it is the only approach that works when federal permission and state enforcement pull in opposite directions.

CBD commerce in 2026 is not about finding legal loopholes. It is about building systems that track which products are legal where, and having the discipline to turn down orders when compliance cannot be verified. Retailers who treat federal law as blanket permission will eventually face enforcement action in a state with stricter rules. The ones who survive are the ones who verify compliance at every jurisdictional level before they ship.

Federal law legalized hemp. It did not simplify CBD commerce. State law still governs where you can sell, what you can sell, and under what conditions. Verify both before you list a product. If the regulatory burden exceeds your operational capacity, narrow your market footprint to states where compliance is verifiable and enforcement risk is quantifiable. A smaller compliant market beats a larger non-compliant one every time.

Elevate your daily wellness routine with our complete collection of premium, high-quality CBD essentials at SEABEDEE. Browse our full inventory of natural solutions designed to help you feel your best, inside and out.