February 24, 2026
As the EU heads into 2026, the ingestible CBD market is being forced into a much narrower compliance lane. The driver is EFSA’s updated safety posture for CBD as a Novel Food, including a widely cited provisional safe intake level that works out to roughly ~2 mg/day for a 70 kg adult. Even though EFSA’s number is “provisional” and scoped to specific product characteristics, it is already influencing how national authorities, border controls, retailers, and online marketplaces evaluate risk.
This article translates what the EFSA 2 mg CBD safe level 2026 narrative means in practice for brands selling CBD foods, drinks, and supplements across EU Member States—especially when many “legacy” products still deliver 10–50 mg (or more) per daily serving.
Important: This post is informational only and not legal advice. Requirements can vary by Member State and product category.
In its updated communications and statement work on CBD as a Novel Food, EFSA’s Panel on Nutrition, Novel Foods and Food Allergens (NDA) has maintained that safety cannot be established for CBD foods/supplements at commonly marketed doses because of persistent data gaps.
EFSA also published a provisional safe intake level for adults of 0.0275 mg/kg body weight/day (approximately 2 mg/day for a 70 kg adult). EFSA explicitly frames this as provisional and subject to review when stronger toxicology and/or human data become available.
External reference (official): EFSA’s news release on the provisional safe level is here: https://www.efsa.europa.eu/en/news/provisional-safe-level-cannabidiol-novel-food
EFSA’s CBD dossier work has repeatedly highlighted uncertainties and potential hazards that are hard to “explain away” with small, heterogeneous studies. The themes that keep reappearing:
Official reference (EFSA statement background): EFSA’s 2022 statement on CBD safety data gaps remains a foundational document for how regulators talk about CBD risk: https://www.efsa.europa.eu/en/efsajournal/pub/7322
Two different issues often get conflated:
Novel Food authorisation status: Under Regulation (EU) 2015/2283, CBD extracts and isolates used in foods/supplements are generally treated as Novel Foods and require authorisation before being placed on the market (unless a narrow, defensible pre-1997 consumption history applies—which is difficult for most CBD ingestibles).
EFSA’s risk assessment threshold: EFSA’s ~2 mg/day provisional safe intake influences what an acceptable exposure might look like in a successful authorisation.
Even if a company voluntarily caps intake at ~2 mg/day, that does not automatically make the product authorised. But the converse is also important: products delivering far above ~2 mg/day can become an easy enforcement target because authorities can cite both (a) lack of authorisation and (b) heightened safety concern.
Official reference (EU Novel Food framework): https://food.ec.europa.eu/food-safety/novel-food_en
Most enforcement actions do not begin with a toxicology debate. They begin with what your label implies—daily dose, suggested use, and claims.
Here’s how the EFSA ~2 mg/day benchmark reshapes label strategy.
If you want your product positioning to be defensible in an “EFSA-aware” environment, you should be able to demonstrate that:
Practical example:
Gummies, capsules, and shots create a predictable compliance problem: brands often set per unit CBD too high.
If your unit dose is 10 mg, the only way to label ~2 mg/day is to recommend “1/5 gummy” or “open capsule and take partial powder,” which is not realistic. In 2026, expect more pressure to reformulate unit-dose products if you want a credible EU strategy.
Even where Novel Food enforcement is inconsistent across Member States, claims enforcement is a recurring entry point for regulators.
Under EU rules on nutrition and health claims, health claims are only permitted if authorised and used under conditions of use. CBD products frequently drift into implied health claims (“stress relief,” “sleep,” “pain,” “anti-inflammatory”), which can trigger enforcement regardless of Novel Food status.
Official reference: European Commission page on nutrition and health claims (Regulation (EC) No 1924/2006): https://food.ec.europa.eu/food-safety/labelling-and-nutrition/nutrition-and-health-claims_en
EFSA has publicly stated it could not complete CBD Novel Food evaluations due to data gaps. That creates a hard reality: in 2026, a “light” dossier is not a competitive dossier. If you plan to stay in EU ingestibles long-term, you should assume the bar is closer to pharmaceutical-style discipline than traditional supplement-era minimalism.
Official reference: EFSA’s notice that evaluations were on hold pending new data: https://www.efsa.europa.eu/en/news/cannabidiol-novel-food-evaluations-hold-pending-new-data
While each application is unique, the direction of travel is clear. A defensible dossier typically needs a coherent story across:
Authorities will look beyond “CBD content” and focus on what else is in the material:
From a compliance standpoint, this is where many brands fail operationally: they can show a COA for one batch, but not a consistent control strategy across suppliers and time.
You should expect scrutiny on:
EFSA’s repeated point is not “no study exists,” but “the studies do not resolve the safety questions at realistic exposures.” In 2026, dossiers that rely on short-term, underpowered human studies or non-GLP animal studies may not carry the weight applicants want.
EU enforcement is rarely one single “ban.” It is a layered set of friction points that can make a product commercially non-viable.
Importers should plan for increased documentary demands and stops where authorities suspect an unauthorised Novel Food.
Even if a shipment is not destroyed, time-to-release risk becomes a major cost driver (storage, demurrage, missed promotions).
Large retailers often apply a stricter internal standard than regulators, especially when the regulatory narrative shifts toward “safety concerns.” In 2026, it is reasonable to expect:
Enforcement increasingly occurs through platforms rather than inspectors. If a marketplace decides ingestible CBD listings are “illegal content” because Novel Food authorisation is missing—or because claims are non-compliant—you may see:
If you sell cross-border online, you should also track platform governance obligations under the Digital Services Act and broader product safety expectations.
The EU’s Rapid Alert System for Food and Feed (RASFF) routinely records notifications that cite unauthorised Novel Food ingredient cannabidiol in supplements and other products, sometimes alongside other hazards.
Practical takeaway: if your product category starts showing up in RASFF notifications, retailers and national authorities often become more aggressive—even in jurisdictions that previously tolerated “grey market” products.
RASFF portal (public access): https://webgate.ec.europa.eu/rasff-window
Many brands have legacy SKUs that do 10–100 mg/day based on historic consumer expectations. In 2026, the strategic decision is not just “keep selling or stop.” It’s “what is the least painful path that keeps the company viable?”
If you remain committed to ingestibles in the EU, reformulation is the most straightforward risk reduction:
This is operationally heavy, but it gives you a clearer story when distributors or authorities ask, “Why is this product safe?”
Some companies shift focus toward categories with different regulatory frameworks (for example, cosmetics), but this is not a “safe harbor.” Cosmetics bring their own compliance stack (CPNP notification, ingredient safety substantiation, claims substantiation, etc.), and Member State positions can still be volatile.
For cross-border sellers, geo-fencing is no longer just a marketing tactic—it is a compliance tool.
Operational tip: your product page is effectively part of your label. If your website encourages higher daily intake than your pack, you have created an enforcement vulnerability.
When a national authority or platform challenges a product, speed matters. Maintain a single folder (per SKU) containing:
If challenged, your first response should be structured, calm, and documentary:
Avoid emotional arguments (“everyone sells this”). Authorities care about documentation, not market prevalence.
Even if you are not a medicine, consumer complaints about adverse effects can rapidly escalate risk. Implement:
This is also useful for dossier support over time because it creates real-world post-market monitoring signals.
Heading into 2026, expect three pressures to intensify at once:
For brands, that means the winners won’t be the loudest marketers. They will be the operators who can document supply chain control, support a coherent safety narrative, and ship compliant labels across borders.
EU CBD regulation is changing fast, and the gap between “market norms” and “regulatory expectations” is widening. For ongoing monitoring, label and claims risk checks, dossier-readiness support, and enforcement intelligence across Member States, use https://www.cannabisregulations.ai/ to keep your compliance program current.
