CBD gummies aren’t just about great flavors and premium ingredients anymore. In 2026, staying compliant with state regulations is what separates legitimate manufacturers from the ones getting shut down.
I’ve been making CBD gummies in Louisville since 2016, and I’ve watched this industry evolve from the Wild West to a highly regulated landscape. The rules keep changing, and frankly, it’s getting more complex every year. But here’s the thing — if you’re serious about this business, compliance isn’t optional.
Let me break down what you need to know about CBD gummy compliance in 2026, state by state.
The Federal Foundation Still Matters
Before we dive into state rules, remember the baseline: the 2018 Farm Bill made hemp-derived CBD with less than 0.3% THC federally legal. That’s your starting point, but it’s not your finish line.
The FDA still hasn’t created a regulatory pathway for CBD in food and supplements. They’re still sending warning letters to companies making medical claims. So no matter what state you’re in, don’t say your gummies “cure” or “treat” anything.
The 2026 Shake-Up
This year brought some major changes that caught a lot of manufacturers off guard:
Tennessee dropped the hammer on January 1st with tougher requirements for everyone in the supply chain. If you’re selling there, you need to know the new rules.
Oregon started calculating THC differently, combining THC and THCa. That means some products that were compliant last year aren’t anymore.
Missouri followed Oregon’s lead with the combined THC calculations.
Alabama now caps THC at 10mg per serving and requires licensing through their Alcoholic Beverage Control Board. Yes, the same people who regulate liquor now regulate your gummies.
Testing: The Non-Negotiable Foundation
Here’s where most companies get it wrong — they think any COA will do. It won’t.
You need third-party testing from an accredited lab. Not your cousin’s lab, not the cheapest bidder you found online. An ISO/IEC 17025 accredited facility that tests for:
- Potency: CBD, THC, THCa, and any other cannabinoids
- Pesticides: The full panel, not just the basics
- Heavy metals: Lead, cadmium, mercury, arsenic
- Residual solvents: Leftover chemicals from extraction
- Microbials: Bacteria, yeast, mold, E. coli
Every batch needs its own COA. Not every production run — every batch. And those batch numbers better match your product labels exactly.
The smart money is on QR codes that link directly to COAs. More states are requiring them, and customers expect instant access to test results.
State-by-State Breakdown: Know Before You Ship
The Zero-Tolerance States
Idaho, Kansas, and Arkansas want 0.0% THC. Not “non-detect.” Not “under 0.3%.” Zero. You need CBD isolate, period.
If you’re shipping there, make sure your supplier can guarantee true isolate products. I’ve seen too many companies get burned by “broad spectrum” that still showed trace THC.
The Dispensary-Only States
California, New York, North Dakota, and Montana basically treat CBD gummies like cannabis products. You need to sell through licensed dispensaries only.
This creates an interesting opportunity if you’re already in the regulated cannabis space, but it’s a non-starter for traditional retail.
The Serving Size Limiters
States like Louisiana, Minnesota, and Pennsylvania cap THC at 5mg per serving. Nevada allows just 1mg. New Jersey and Massachusetts allow only 0.5mg.
Here’s what this means for manufacturing: you need different formulations for different states. A one-size-fits-all approach doesn’t work anymore.
The Location Restrictors
Tennessee’s new 2026 rules ban online sales and delivery. You can’t ship there anymore — it’s brick-and-mortar only.
Several other states restrict where CBD can be sold. Convenience stores and gas stations are often prohibited. Some require retailer licensing through cannabis control boards.
Labeling: More Than Just Pretty Packaging
Your label is your legal protection. Get it wrong, and you’re liable for everything from fines to product recalls.
Required elements for most states:
- Batch number that matches your COA
- Manufacturing and expiration dates
- Complete ingredient list with allergen warnings
- “Keep away from children” warning
- Age restriction notice
- Serving size and total cannabinoid content
The trending requirements:
- QR codes linking to COAs
- Standardized disclaimers about impairment
- Nutritional panels (even though FDA doesn’t require them yet)
- Batch traceability information
I put QR codes on everything now. Customers scan them at the store, see the COA, and buy with confidence. It’s becoming table stakes.
Business Registration: The Paperwork Nobody Wants
This is where it gets expensive and time-consuming. Many states now require:
- Cannabis control board registration
- Product liability insurance
- Retailer licensing for anyone selling CBD
- Age verification systems
- Banking compliance documentation
In Louisville, I’m lucky to be in a hemp-friendly state with reasonable requirements. But I ship nationwide, so I have to meet the most restrictive standards of any state I ship to.
The Biggest Risks to Avoid
Cross-border complications: A product legal in Kentucky might be illegal in Idaho. Know before you ship.
Synthetic cannabinoid confusion: Delta-8 and Delta-10 bans are creating compliance nightmares. Stick to CBD if you want to avoid headaches.
Testing inconsistencies: Different states accept different testing methods. Work with labs that understand multi-state compliance.
Enforcement variations: Some states actively enforce regulations, others are hands-off. But that can change overnight.
Why Steve’s Goods Stays Ahead of Compliance
We’ve built our entire operation around exceeding compliance requirements:
- Small-batch production means better batch tracking and quality control
- Organic tapioca syrup and distilled water meet the strictest purity requirements
- Since 2016 track record of staying compliant through every regulatory change
- Louisville manufacturing in a hemp-friendly state with stable regulations
When regulations change, we’re ready. When new testing requirements emerge, we already exceed them.
Making Compliance Work for Your Business
Here’s my advice after eight years in this industry:
-
Pick your battles: Don’t try to be compliant in every state. Focus on the states where you can win.
-
Over-test everything: Test more than required, test more often than required. It’s cheaper than a recall.
-
Build relationships with compliance-focused suppliers: Work with ingredient suppliers and co-packers who understand regulations.
-
Stay ahead of changes: Subscribe to regulatory updates, join industry associations, hire consultants if needed.
-
Document everything: Keep detailed records of every decision, every batch, every change.
The Future of CBD Compliance
Regulations will keep getting stricter, not looser. The companies that survive will be the ones that treat compliance as a competitive advantage, not a necessary evil.
Federal regulations are coming eventually. When they do, the companies already following the strictest state standards will have a huge head start.
Ready to work with a manufacturer that takes compliance seriously? Steve’s Goods has been navigating CBD regulations since 2016. We handle the compliance headaches so you can focus on building your brand.