CBD / Hemp

FDA Cannabis and CBD Product Framework What Ecommerce Can and Cannot Claim

E-commerce 4 Internet Marketers Editorial

Ecommerce operator reviewing FDA CBD product claim rules on a storefront workstation
Illustration of an ecommerce operator comparing CBD product claims on a storefront screen against official FDA cannabis guidance pages.

By E-commerce 4 Internet Marketers Editorial

Explainer. Website owners and developers who sell cannabidiol (CBD) and other cannabis-derived goods online still operate under a U.S. Food and Drug Administration (FDA) framework that generally excludes CBD from the dietary supplement and conventional food pathways. This article restates that longstanding FDA position, points to official FDA pages, and maps what ecommerce catalogs can and cannot claim without inventing approvals or Dietary Supplement Health and Education Act (DSHEA) safe harbors. It is not legal advice. Prefer FDA primary materials over secondary summaries.

The core FDA position in one paragraph

FDA’s public Q&A on cannabis and CBD states that legality depends on intended use, labeling, and marketing, and that meeting the 2018 Farm Bill definition of hemp does not remove FD&C Act duties. Separately, FDA has concluded that THC and CBD products are excluded from the dietary supplement definition under section 201(ff)(3)(B) of the Federal Food, Drug, and Cosmetic Act (FD&C Act), and that introducing into interstate commerce a food (including animal food or feed) to which THC or CBD has been added is a prohibited act under section 301(ll). Those conclusions sit on FDA’s cannabis and CBD regulation page and in FDA’s short dietary supplement and conventional food fact sheet.

Farm Bill hemp status is not an FDA free pass

The Agriculture Improvement Act of 2018 (the 2018 Farm Bill) removed hemp (cannabis and derivatives with not more than 0.3 percent delta-9 tetrahydrocannabinol on a dry weight basis, as defined in that statute) from the Controlled Substances Act. FDA’s Q&A stresses that the same Farm Bill explicitly preserved FDA authority under the FD&C Act and section 351 of the Public Health Service Act. FDA-regulated products that contain CBD remain subject to the same product-type rules as other foods, drugs, cosmetics, and related categories. Ecommerce operators should not treat “hemp-derived” or “Farm Bill compliant” language on a product page as proof that FDA food or dietary-supplement marketing is lawful.

CBD as a dietary supplement (generally excluded)

FDA’s answer to “Can THC or CBD products be sold as dietary supplements?” is “No,” based on available evidence. Under section 201(ff)(3)(B) of the FD&C Act (21 U.S.C. § 321(ff)(3)(B)), if a substance is an active ingredient in a drug approved under section 505, or has been authorized for investigation as a new drug for which substantial clinical investigations have been instituted and made public, products containing that substance are excluded from the dietary supplement definition. FDA states that an exception exists if the substance was marketed as a dietary supplement or conventional food before the relevant drug approval or investigation authorization, and that based on available evidence this exception does not apply to THC or CBD.

FDA also states that when the exclusion applies, it continues unless FDA issues a regulation, after notice and comment, finding the article would be lawful under the FD&C Act. FDA says no such regulation has been issued for any substance. Catalog copy that labels CBD oil, gummies, or softgels as “dietary supplements,” ships them with Supplement Facts panels as if DSHEA fully covers CBD, or cites a nonexistent FDA CBD supplement approval invents a pathway FDA has not opened.

CBD in conventional food and beverages (generally prohibited)

FDA’s answer to whether it is legal in interstate commerce to sell a food (including animal food or feed) to which THC or CBD has been added is also “No.” Section 301(ll) of the FD&C Act (21 U.S.C. § 331(ll)) prohibits introducing into interstate commerce food to which an approved drug active ingredient, or a publicly investigated drug substance meeting the statutory criteria, has been added, subject to listed exceptions. FDA has concluded those exceptions do not apply to THC or CBD.

FDA’s fact sheet adds an independent food-additive problem. FDA is not aware of a basis to conclude CBD is generally recognized as safe (GRAS) for human or animal food, and there is no food additive regulation authorizing CBD in food. FDA therefore describes CBD as an unapproved food additive whose use in human or animal food violates the FD&C Act for reasons independent of drug-ingredient status. Ecommerce menus that add CBD to coffee, sparkling water, candy, pet chews, or “functional beverages” for interstate sale sit inside that FDA analysis, regardless of hemp sourcing claims.

January 2023 statement and citizen petitions (no supplement/food rulemaking)

On January 26, 2023, FDA announced that after internal review it concluded existing foods and dietary supplement authorities are not appropriate for CBD, that a new regulatory pathway is needed, and that the agency is prepared to work with Congress. The same day, FDA denied three citizen petitions (from the Consumer Healthcare Products Association, the Council for Responsible Nutrition, and the Natural Products Association) that had asked FDA to issue a regulation allowing CBD products to be marketed as dietary supplements. FDA’s constituent update explains that such a regulation would be needed for a lawful supplement pathway because of the statutory drug-ingredient exclusion, and that FDA does not intend to initiate that rulemaking because, given available scientific evidence, it is not apparent how CBD products could meet the applicable dietary supplement safety standard.

The January 26, 2023 FDA statement cites safety concerns discussed by the agency (including potential liver harm, drug interactions, and male reproductive system concerns in the materials FDA reviewed) and states FDA has not found adequate evidence to determine how much CBD can be consumed, and for how long, before causing harm. FDA said it does not intend to pursue rulemaking allowing CBD in dietary supplements or conventional foods, including animal food. For ecommerce teams, the operational meaning is direct. Do not market as if FDA opened a DSHEA or food-additive pathway in 2023. FDA said the opposite and pointed to Congress for a new framework.

What FDA has approved (and what storefronts often misstate)

FDA’s Q&A states that FDA has not approved a marketing application for cannabis for the treatment of any disease or condition. FDA has approved one cannabis-derived drug product, Epidiolex (purified CBD), for certain seizure indications described on FDA’s pages, and three cannabis-related drug products (Marinol, Syndros, and Cesamet) that involve synthetic THC-related active ingredients. Aside from Epidiolex, FDA says there are no other FDA-approved drug products that contain CBD.

Under the FD&C Act, products intended for therapeutic or medical use, and products (other than food) intended to affect the structure or function of the body, are drugs and generally need premarket approval or an applicable OTC monograph pathway. FDA states CBD was not an ingredient considered under the OTC drug review. Unapproved new drugs cannot be distributed or sold in interstate commerce. Storefront and ad claims that CBD treats, cures, prevents, or mitigates cancer, Alzheimer’s disease, COVID-19, opioid addiction, autism, pain disease claims, or similar conditions track the exact claim patterns FDA has repeatedly warned against.

Cosmetics are a different box, not a disease-claim escape hatch

FDA’s Q&A explains that cosmetics generally are not subject to premarket approval (except most color additives), and that cannabis or cannabis-derived ingredients are not currently prohibited or restricted by cosmetic ingredient regulation in the way some other ingredients are. Ingredients still must not adulterate or misbrand the cosmetic. If a product is intended to affect the structure or function of the body, or to diagnose, cure, mitigate, treat, or prevent disease, it is a drug (or possibly both a cosmetic and a drug), even if it also affects appearance. Topical CBD pages that promise disease treatment or drug-like structure/function effects do not become lawful merely because the SKU is filed under “beauty.”

Limited April 2026 enforcement discretion is not a general ecommerce green light

On April 1, 2026, FDA Commissioner Martin A. Makary issued an internal letter on hemp-derived CBD products in medical research models (FDA media file 191782). The letter reiterates that FDA-regulated CBD products remain subject to the same legal requirements as other FDA-regulated products. It then states a narrow enforcement posture. FDA does not intend to enforce sections 502(f)(1) or 505 of the FD&C Act with respect to an orally administered, hemp-derived CBD product solely on the basis that it contains CBD, provided all of the following are true:

  1. The product is manufactured, marketed, and labeled in a manner consistent with the dietary supplement framework, including a Supplement Facts panel and structure/function claims.
  2. The product is not contaminated.
  3. The product is not packaged or labeled in a manner attractive to or marketed for children.
  4. The product is provided to a beneficiary through a program of medical items or services payable under Title XVIII of the Social Security Act, under the direction of the patient’s treating physician, in a manner ancillary to covered items or services under that program.

That fourth condition confines the stated discretion to a Medicare-linked, physician-directed channel. It is not a public statement that ordinary DTC CBD gummies, tinctures, or beverages may now be marketed nationwide as lawful dietary supplements. The letter also does not create an FDA approval, does not rewrite section 201(ff)(3)(B) or section 301(ll), and does not authorize disease claims. Ecommerce operators should not paste “FDA enforcement discretion” into product descriptions as if the April 1, 2026 letter legalized open-market CBD supplements.

Hemp seed ingredients are not the same as CBD

FDA evaluated three GRAS notices for hulled hemp seed, hemp seed protein powder, and hemp seed oil for certain human food uses and had no questions regarding the notifiers’ safety conclusions for the uses described. Those GRAS conclusions relate to hemp seed-derived ingredients that naturally contain little or no CBD or THC (trace amounts may appear from processing contact). FDA expressly states those GRAS conclusions do not affect FDA’s position on adding CBD or THC to food. Developers should keep hemp-seed SKUs and CBD SKUs on separate compliance tracks in catalog, PDP templates, and claim libraries.

Warning letters and claim risk for online catalogs

FDA maintains a hub of warning letters for cannabis-derived products, covering CBD, delta-8 THC, and related marketing. FDA’s Q&A notes prior letters to firms selling CBD products that claimed to prevent, diagnose, treat, or cure serious diseases, and notes additional violations when products were marketed as dietary supplements or when CBD was added to food. FDA says it considers many factors before enforcement, including resources and public-health threat, and may consult federal and state partners.

For website owners and developers, the practical claim controls are mechanical:

  • Do not code PDP, cart, email, or ad templates that promise disease treatment, cure, prevention, or diagnosis for CBD SKUs.
  • Do not auto-apply a generic “dietary supplement” schema, Supplement Facts block, or DSHEA disclaimer set to CBD SKUs as if FDA recognized CBD under that framework.
  • Do not market CBD-added foods or beverages for interstate sale as ordinary conventional foods.
  • Keep claim libraries versioned and reviewable so paid media and marketplace feeds cannot reintroduce disease language after a legal review.
  • Link internal compliance docs to FDA’s cannabis hub and warning-letter list rather than to informal blog interpretations.

Payment processors and high-risk acquirers often underwrite CBD catalogs using similar claim and category screens. Accurate FDA-facing product classification reduces both regulatory and merchant-account friction.

Implementation checklist for ecommerce teams

  1. Classify every SKU. Separate CBD isolates/full-spectrum oils, CBD foods/beverages, hemp-seed-only foods, topicals, and any prescription-only discussion. Do not collapse them into one “hemp wellness” template.
  2. Strip disease claims. Remove treatment, cure, prevention, and diagnosis language from titles, bullets, FAQs, blogs, reviews you republish, and retargeting ads.
  3. Do not invent a DSHEA CBD pathway. Avoid “FDA registered dietary supplement,” “DSHEA compliant CBD,” or similar phrases that imply FDA cleared CBD as a supplement.
  4. Watch food and beverage merchandising. CBD coffee, gummies sold as candy, and pet treats with CBD trigger FDA’s food and 301(ll) analysis in official materials.
  5. Treat cosmetics carefully. Appearance claims are not a license for drug claims.
  6. Bookmark primary sources. Use FDA’s cannabis/CBD page, January 26, 2023 statement, citizen-petition update, dietary-supplement/food fact sheet, and cannabis warning-letter hub as the source of truth for storefront policy.
  7. Do not overread the April 1, 2026 letter. Unless counsel confirms a product is actually furnished in the Medicare ancillary channel described there, do not market as if that letter covers DTC ecommerce.
  8. Coordinate state and platform rules separately. This article covers verified FDA federal framing only.

What this article deliberately omits

  • Any claim that FDA has approved CBD dietary supplements or conventional CBD foods for general marketing.
  • Invented DSHEA safe harbors for CBD dietary supplements.
  • Any allowance for disease claims on non-approved CBD products.
  • A conclusion that the April 1, 2026 Makary letter legalizes open-market oral CBD supplements for ordinary ecommerce.
  • A 50-state hemp/CBD legality matrix, DEA scheduling analysis beyond FDA’s Farm Bill notes, or payment-network rule inventories.
  • Legal advice on whether a specific SKU, label, or ad complies.

Those omissions keep the North Star clear. High-risk ecommerce operators need an accurate FDA map of what CBD catalogs cannot claim and which official pages to monitor, without filling gaps with approvals FDA has not issued.

Sources

  1. FDA, FDA Regulation of Cannabis and Cannabis-Derived Products, Including Cannabidiol (CBD) (Questions and Answers on dietary supplements, foods, cosmetics, Farm Bill, approvals, and enforcement).
  2. FDA, FDA Regulation of Dietary Supplement & Conventional Food Products Containing Cannabis and Cannabis-Derived Compounds (fact sheet on 201(ff)(3)(B), 301(ll), GRAS/food additive points, hemp seed GRAS).
  3. FDA, FDA Concludes that Existing Regulatory Frameworks for Foods and Supplements are Not Appropriate for Cannabidiol, Will Work with Congress on a New Way Forward (January 26, 2023 statement).
  4. FDA, FDA Issues Response to Three Citizen Petitions Related to CBD and Dietary Supplements (January 26, 2023 constituent update).
  5. FDA, Warning Letters for Cannabis-Derived Products.
  1. FDA, Letter from Commissioner Martin A. Makary on hemp-derived CBD products in medical research models (April 1, 2026; limited enforcement discretion conditions).