Latest Cannabis & Hemp Regulations & Compliance updates

The April 2026 order created a two-tier federal cannabis market — Schedule III for medical, Schedule I for recreational. Here is what it means and what comes next.

How the April 2026 rescheduling changes 280E for medical operators — the Treasury transition rule, the retroactive refund question, and a CFO playbook for FY2026.

What the Trump administration's April 22, 2026 final order actually rescheduled, what stayed in Schedule I, and what operators and advisors should do next.

How cannabis and hemp operators handle credit cards, ACH, banking, and payment workarounds in 2026 amid persistent federal restrictions on financial services.

Cannabis SOP templates for 2026 cover cultivation, processing, and retail, providing the documented procedures regulators require for licensing and inspections.

Delta-8 sits in a grey zone in Oklahoma in 2026, with OMMA actions complicating retail sales of hemp-derived cannabinoids under state and federal rules.

CBD is illegal in Saudi Arabia and the United Arab Emirates as of 2026, with severe penalties for travelers and brands across the broader Middle East region.

Google, Meta, and TikTok each set distinct 2026 rules for hemp and CBD ads, with LegitScript certification governing what runs and what bans accounts.

THCA remains legal in Wyoming in 2026, while Delta-8 was partially banned in 2025 with a narrow beverage exception affecting consumers and retailers.

CBD is legal in Italy in 2026, but a 2025 emergency ban created confusion; here is the current legal status for travelers and brands shipping to the EU.

THCA sits in legal grey territory in Missouri after attorney general enforcement actions; 2026 status and compliance steps for retailers facing the crackdown.

The World Anti-Doping Agency's in-competition THC threshold remains 150 ng/mL urinary in 2026, shaping rules for athletes, CBD brands, and sports organizations.

CBD legal status in 2026 differs sharply across Asia-Pacific, with distinct rules in China, Hong Kong, Japan, South Korea, and India for travelers and brands.

THCA is legal in North Carolina under Chapter 18D, but retailers need a license; 2026 requirements for selling THCA and what consumers can legally buy.

New Jersey's S4509 banned intoxicating hemp products including THCA in 2026, leaving only narrow legal categories and forcing retailers to act immediately.

Delta-8 is legal in Arkansas in 2026 following the Eighth Circuit ruling, with distinct treatment for delta-9, CBD, and THCA under state hemp law.

HHC is banned in the UK, Germany, France, and Austria in 2026; the full European country-by-country legal status map for HHC and hemp brands.

THCA, delta-8, and delta-9 hemp products carry different legal status in Alabama in 2026, with retail and consumer rules diverging by cannabinoid form.

Most hemp-derived delta 9 beverages like Cann, Wims, and Nowadays comply with federal TSA rules, though state laws and airline policies vary at the gate.

Michigan treats hemp-derived THCA differently than most states, with specific rules on retail sale, cannabis-licensed channels, and consumer access in 2026.

California bans all flavored vapes in 2026 under SB 793 + AB 3218. Only Unflavored Tobacco List (UTL) products are legal. Penalties up to $4,000 per violation.

USPS, UPS, and FedEx each apply different rules to hemp, CBD, delta 8, and THC shipments under the federal PACT Act and 2026 carrier policies.

Yes — CBD is legal in France in 2026 below 0.3% THC. CBD flower, oils, and gummies allowed. HHC, THCP, and H4CBD are banned by ANSM. Travel rules inside.

France caps CBD products at 0.30% total THC under 2022 rules, with neo-cannabinoid bans and import certificates driving the 2025 brand compliance checklist.

Switzerland runs a CBD-only framework with 2025 cannabis club pilots; Denmark, Sweden, and Norway laws compared for European hemp brands and travelers.

What hemp compliance software should track in 2025: state-law changes, COA validation, label rules, multi-state ops, and where AI replaces manual work.

NFPA 420 sets fire safety requirements for cannabis extraction, storage, and retail facilities; how it pairs with UL 8139, local fire codes, and operators.

Hemp edibles under 0.3% delta-9 THC are TSA-permissible on planes in 2025; full guide to airport hemp rules, what TSA looks for, and travel risks.

Delta-8 is legal in Pennsylvania under Act 92's hemp framework; 2025 guide to PDA oversight, retail licensing, THCA status, and online sales rules.

Cannabis in Puerto Rico is medical-only in 2025; complete guide to possession limits, Delta-8 status, the THCA gray area, and hemp retail compliance.

Cannabis receivership diligence must start with license transferability, lease continuity, and track-and-trace integrity before any valuation work begins.

Assignment restrictions, change-of-control defaults, and discretionary landlord-consent clauses are the lease terms most likely to kill cannabis deals in 2026.

Cannabis brands using pain, sleep, anxiety, or naturally derived claims need a substantiation matrix tied to evidence thresholds and pre-publication signoff.

Cannabis license renewals fail when public health permits, local clearances, and open inspection items remain unresolved months before the filing window opens.

Cannabis site selection in 2026 requires zoning, buffer, and municipal notice review as a connected workflow before any lease commitment is executed.

Cannabis license change-of-control rules in 2026 reach SAFEs, convertible notes, voting agreements, and management contracts, not just headline equity moves.

Section 781 of H.R. 5371, signed November 12, 2025, narrows the federal hemp definition and sets a compliance deadline expiring November 12, 2026.

Executive Order 14370, signed December 18, 2025, directs the Attorney General to expedite federal cannabis rescheduling from Schedule I to Schedule III.

Spring 2026 hemp legislation in Georgia, Indiana, Kentucky, Minnesota, Missouri, Virginia, and Washington is creating a fragmented multi-state compliance map.

Cannabis lab testing standards in 2026 are tightening through potency audits, lab shopping crackdowns, and broader ISO 17025 accreditation expectations.

Schedule III rescheduling removes Schedule I criminal risk but does not automatically unlock cannabis banking, payments, lending, or public listings in 2026.

Connecticut introduced a 173-page bill in February 2026 rewriting marijuana and hemp licensing, THC limits, and infused beverage rules in the state code.

Texas hemp operators face TABC rule finalization, a March 31 smokable product ban, and HB 46 medical cannabis expansion reshaping the 2026 market.

Executive Order 14370, signed December 18, 2025, requires cannabis operators to build a Schedule III operational readiness checklist before DEA rules finalize.

In March 2026 the FDA sent its first CBD compliance and enforcement policy to White House OIRA review, signaling new federal expectations for hemp brands.

The Continuing Appropriations and Extensions Act, signed November 12, 2025, replaces the 0.3 percent THC standard with a 0.4 milligram per-container limit.

A 72-hour incident response playbook helps cannabis operators preserve seed-to-sale records and meet clock-based obligations during compliance SaaS outages.

Hemp-THC operators in 2026 need AML programs documenting licensing posture, product profile, lab controls, ownership, and geography to retain banking access.

Vape hardware sourcing now requires conflict minerals diligence on smelters, refiners, battery components, and contract manufacturers across global electronics.

Dispensaries in 2026 must align ID scan and loyalty data retention with state privacy laws covering data minimization, purpose limits, and deletion triggers.

Cannabis ecommerce sites face WCAG litigation risk across age gates, menus, and checkout flows, with remediation tied to ADA and DOJ accessibility guidance.

THC beverage distributor agreements need defined indemnity events, recall cost allocation, and communication control to manage product holds and withdrawals.

ERP and Metrc inventory drift comes from unit mismatches, timing lag, returns, destructions, and split-merge events that month-end controls can detect early.

Cannabis board compliance dashboards in 2026 should track leading indicators of control drift, not just lagging incident counts, audits, and policy logs.

Cannabis wholesale SAR escalation rules should translate FinCEN red flags into observable scenarios like cash-to-wire mismatches for frontline review teams.

Medical cannabis clinics collecting real-world data must distinguish care improvement, observational evidence, and human-subject research to avoid IRB missteps.

Cannabis recall insurance underwriters in 2026 require documented product risk profiles, supplier controls, traceability evidence, and response readiness.

Cannabis supply chain contracts need defined incident response duties, record reconstruction obligations, and notice mechanics to prevent ransomware disputes.

Multi-state dispensary wage-and-hour risk concentrates in scheduling, overtime calculation, off-the-clock work, and inconsistent meal and rest documentation.

Cannabis delivery contractor classification risk depends on operational control, state legal tests, and regulated procedure requirements that vary by state.

Hemp brands using licensing, private label, and partner-operated models risk inadvertent franchise classification when manuals, IP, and oversight diverge.

Cannabinoid input HTS classification errors trigger customs detentions and seizures when product taxonomy, broker data, and CBP documentation are inconsistent.

Hemp and CBD importers facing US Customs detentions can resolve holds faster with a coherent evidence packet covering classification and lab data.

Hemp DTC brands can stabilize processing relationships by treating chargebacks, friendly fraud, and high-risk MCC controls as a payments compliance system.

Cannabis retailers deploying biometric age verification must align consent language, posted notice, and vendor contracts with biometric privacy obligations.

Cannabis CFOs can defend IRC 280E positions at year-end by hardening chart of accounts, inventory costing, intercompany flows, and document retention.

NIST SP 800-63-4 reshapes what reasonable age-gating looks like for hemp-THC and cannabis e-commerce in 2026, even though it is not a cannabis rulebook.

GS1 US Sunrise 2027 pushes cannabinoid and hemp brands to adopt 2D barcodes and Digital Link QR codes for POS scanning, COA delivery, and recall readiness.

USPS still allows hemp CBD shipping in 2026 under Pub 52 § 453.37 with documentation. UPS needs a dedicated account. International mail is prohibited.

Germany's Pillar 2 pilot retail projects remain unsettled for 2026, but medical-grade compliance controls now will position operators for any approved program.

EFSA's provisional 2 mg per day safe intake level for CBD is reshaping EU 2026 labels, novel food dossiers, and enforcement against legacy ingestible doses.

New Jersey's S4509, signed January 2026, ends the intoxicating-hemp grey market with a licensing regime, age gates, and a fundamental compliance reset.

TSA doesn't search for cannabis but refers it to police. CBP seizes THC at the border. Hemp CBD under 0.3% is OK. Edibles, vapes, international inside.

How hemp operators build a 2026 ship-block-by-law engine as federal definitions tighten, states get aggressive, and carriers enforce prohibited-goods policies.

Why 2026 enforcement treats many hemp products as synthetic or artificially derived, and what evidence proves cannabinoids are naturally derived from hemp.

Medical cannabis telehealth in 2026 faces tighter remote-prescribing oversight, scrutiny of patient acquisition, and enforcement on kickback referrals.

California's OSHA indoor heat illness rule applies year-round to cannabis cultivation and extraction — engineering controls and records inspectors want.

After Loper Bright and Corner Post, hemp operators face new 2026 litigation openings against FDA, DEA, and state rules where statutory text controls outcomes.

Canada signaled a shift from 13 province-specific cannabis excise stamps toward a unified national stamp, with packaging and co-pack implications for beverages.

Oregon OLCC bulletin CE2025-06 stopped requiring Labor Peace Agreements as a licensing gate for affected Measure 119 license types in May 2025.

A GAO report urging FDA to strengthen its Food Contact Substances program raises packaging migration and audit risk for THC and CBD beverage brands.

Belgium FAMHP and FASFC are tightening CBD classification controls in 2025 while the EU novel food bar for ingestible cannabidiol products remains high.

Massachusetts CCC social consumption regulations took effect in early 2026, setting dual-track planning for on-premise adult-use service and hemp THC drinks.

Canada signaled 2025-2026 cannabis excise reform on the dollar-per-gram or 10 percent minimum duty and a move toward a single national excise stamp.

The UK Digital Markets, Competition and Consumers Act took effect 6 April 2025, exposing CBD e-commerce to CMA enforcement on drip pricing and reviews.

Italy Decree-Law No. 48 of 11 April 2025 sharply restricted hemp inflorescences and CBD derivatives, raising EU infringement risk for cross-border sellers.

Ontario Blue Box EPR transition under O. Reg. 391/21 is adding 2025 cost pressure and labeling scrutiny for THC and CBD beverage producers in the province.

Canada 2025 Extended Producer Responsibility rules pull battery-powered cannabis vape devices into PRO enrollment, take-back, and SKU-level battery reporting.

Wisconsin gave hemp vape devices a directory carveout delaying the sell prohibition to July 1, 2026 and dollar-per-day forfeitures to September 1, 2026.

Quebec Bill 96 became fully operational on 1 June 2025, requiring French-predominant labels and trademark translation review for THC drinks and vape products.