Cannabis infused products — edibles, drinks, tinctures, and topicals that deliver cannabinoids without smoking — are legal to make and sell in states that license them, but they sit under a federal framework that still treats marijuana as a controlled substance and, as of 2026, treats most intoxicating hemp products the same way. If you are buying, selling, or manufacturing these products, the rules that matter are the state potency and labeling caps, the testing and licensing requirements, and two recent federal changes: a narrowed definition of hemp that took effect May 5, 2026, and the move of medical cannabis to Schedule III.
What Counts as a Cannabis Infused Product
Infused products are made for ingestion or skin absorption rather than smoking. The main formats are edibles (gummies, chocolates, baked goods, and beverages such as sparkling waters and teas), topicals (lotions, balms, and salves applied to the skin for localized relief), and tinctures or sublingual sprays (liquid concentrates placed under the tongue so cannabinoids enter the bloodstream through thin tissue faster than digestion allows).
The format matters for regulation because potency limits, labeling rules, and testing standards all apply to the finished consumer product, not the raw plant.
Federal Status: Still a Controlled Substance
The Controlled Substances Act lists marijuana and tetrahydrocannabinols as Schedule I, with a carve-out only for THC in hemp as defined by federal agricultural law.1Office of the Law Revision Counsel. 21 USC 812 – Schedules of Controlled Substances Any cannabis product above the legal hemp threshold is a Schedule I controlled substance under federal law, no matter what the state says.
The FDA adds a second federal layer. The agency has concluded that both THC and CBD are excluded from the definition of dietary supplements, and that adding either compound to food is a prohibited act under federal food safety law.2U.S. Food and Drug Administration. FDA Regulation of Cannabis and Cannabis-Derived Products, Including Cannabidiol (CBD) The CBD gummies and THC beverages sold in dispensaries therefore technically violate federal food safety rules even where state law allows them. The FDA has issued warning letters to companies making health claims about CBD products and continues to monitor the market, exercising enforcement discretion case by case.3U.S. Food and Drug Administration. Warning Letters for Cannabis-Derived Products
One boundary worth stating plainly: moving marijuana-derived products across a state line is a federal crime, even between two states where cannabis is fully legal. The DEA has affirmed that marijuana growth, possession, and distribution remain federal offenses regardless of state law, and penalties for distribution under 21 U.S.C. § 841 are severe.4Office of the Law Revision Counsel. 21 USC 841 – Prohibited Acts A That rule covers driving across a border with purchased edibles and mailing or shipping products through a delivery service. Every state-legal market operates as an island.
The 2026 Hemp Definition and Why It Changed What You Can Buy
The 2018 Farm Bill defined hemp by delta-9 THC concentration alone, capped at 0.3 percent on a dry weight basis.5Federal Register. Implementation of the Agriculture Improvement Act of 2018 Because the definition only mentioned delta-9, manufacturers filled gas stations, convenience stores, and online retailers with products loaded with delta-8 THC, delta-10, and other intoxicating cannabinoids derived from hemp with minimal oversight.
That gap closed on May 5, 2026. An amendment to 7 U.S.C. § 1639o replaced “delta-9 tetrahydrocannabinol” with “total tetrahydrocannabinols concentration (including tetrahydrocannabinolic acid),” capturing the full spectrum of intoxicating THC variants. The new law also excludes from the definition of hemp any finished consumer product containing cannabinoids synthesized outside the plant, or any product with more than 0.4 milligrams combined total of THC and similar intoxicating cannabinoids per container.6Office of the Law Revision Counsel. 7 USC 1639o – Definitions
The 0.4-milligram per container ceiling is extremely low. A hemp-derived gummy that previously contained 10 or 25 milligrams of delta-8 falls outside the legal definition of hemp entirely. For buyers, that means intoxicating products you could pick up at a convenience store last year may no longer be legal to buy or sell. For manufacturers, products made with synthesized cannabinoids or meaningful amounts of any intoxicating THC variant now have to run through the state-licensed cannabis system rather than the lighter-touch hemp market.
Medical Cannabis Is Now Schedule III
The Department of Justice issued an order placing FDA-approved marijuana products and marijuana products regulated under state medical licenses into Schedule III of the Controlled Substances Act, and announced a new administrative hearing beginning June 29, 2026, to consider reclassifying all marijuana from Schedule I to Schedule III.7U.S. Department of Justice. Justice Department Places FDA-Approved Marijuana Products and Products Containing Marijuana Regulated by State Medical Marijuana Licenses in Schedule III
The direct consequence for medical operators is tax. Internal Revenue Code Section 280E blocks businesses trafficking in Schedule I or II controlled substances from deducting ordinary business expenses.8Office of the Law Revision Counsel. 26 USC 280E – Expenditures in Connection with the Illegal Sale of Drugs Schedule III removes that bar for medical cannabis licensees, who can now deduct rent, payroll, marketing, and other normal operating costs. The relief applies to the full taxable year that includes the effective date of the order; retroactive relief for prior years remains subject to Treasury Department guidance.
Adult-use businesses do not get this benefit yet. Recreational marijuana remains Schedule I at the federal level until the broader rescheduling process concludes, and the effective federal tax rate under 280E can reach 70 percent or more of gross profit for some retail operators. If you are modeling an adult-use business, a financial projection that ignores 280E will mislead you.
Potency and Serving Limits for Edibles
Most states that regulate adult-use cannabis cap potency at 10 milligrams of THC per serving and 100 milligrams per package. A handful set lower limits of 5 milligrams per serving or 50 milligrams per package, and a few allow higher package totals for certain product types.
The serving limit is the number consumers should pay attention to. A 100-milligram gummy package typically holds 10 pieces at 10 milligrams each, and products must be scored, individually wrapped, or otherwise separated so a single serving is clearly identifiable. Edibles take 30 minutes to two hours to produce effects, and overconsumption during that delay is one of the most common cannabis-related reasons people end up in emergency departments.
Labeling and Child-Resistant Packaging
State regulators generally require infused products to carry a THC warning symbol — most commonly a yellow triangle containing a cannabis leaf, based on international caution sign standards, though the specific symbol varies. Labels must disclose milligrams of THC per serving and per package, list ingredients in descending order of predominance, and in many states include a disclaimer that the product has not been evaluated by the FDA.
Child-resistant packaging is mandatory in every state with a regulated market. Containers typically have to meet certified testing protocols that evaluate whether children under five can open them within a specified time. Push-and-turn caps, squeeze-and-pull pouches, and resealable child-resistant exit bags are standard. Products that resemble conventional food face especially strict scrutiny because of the risk that a child mistakes a cannabis gummy for ordinary candy.
What You Can and Cannot Put on the Package
Advertising rules across states share one goal: keep infused products away from children and underage buyers. Virtually every regulated state prohibits packaging that uses cartoons, characters resembling toys or children’s media, or imagery that mimics popular candy brands. Products shaped like animals, fruits, or human figures are banned in multiple jurisdictions. Packaging generally cannot show an image of what the edible inside looks like, and terms like “candy” are frequently prohibited on labels.
Placement rules add geographic and demographic limits. Several states prohibit cannabis advertising within 1,000 feet of schools, playgrounds, and child care centers. Digital and broadcast ads commonly must meet audience composition requirements, often that at least 71 percent of the expected audience is 21 or older. Websites selling cannabis products are generally required to use age-verification gates, though research has found many sites rely on a simple click-to-confirm button with no identity check.
Lab Testing and the Certificate of Analysis
No infused product reaches a retail shelf without passing testing by an independent, state-licensed laboratory. The lab issues a Certificate of Analysis confirming the product meets safety standards and matches its label. The lab must be a third party with no financial relationship to the manufacturer, and untested product cannot be sold.
Testing covers three main categories:
- Potency, which confirms actual THC and CBD content matches the label. A mislabeled edible can deliver a dose far beyond what a consumer expected.
- Homogeneity, which checks that cannabinoids are evenly distributed. A typical standard allows no more than 15 percent variance from the stated dose per serving. An edible that concentrates all its THC in one corner fails.
- Contaminants, which screens for pesticides, heavy metals like lead and mercury, residual solvents from extraction (butane, ethanol), and microbial contamination including mold and bacteria.
Failed batches cannot be sold and typically have to be destroyed under documented procedures. In most states the material must be ground up and mixed with non-cannabis waste so it becomes unusable, and destruction must occur on camera. Testing costs vary by lab and market, with published estimates ranging from roughly $300 to $800 per sample depending on the scope. For small manufacturers running many small batches, testing is a meaningful line item.
Manufacturing Licenses, Tracking, and Compliance
Producing infused products requires a manufacturing or processing license separate from any cultivation or retail permit. Application and annual fees run from a few hundred dollars in some states to six figures in others, and many jurisdictions require performance bonds or proof of substantial capital reserves before issuing a license.
Facilities face security standards well beyond what a conventional food manufacturer faces. Common requirements include 24-hour video surveillance of all production areas, entry points, and storage rooms, with recordings retained for a minimum period (often 90 days). Alarms monitored by a licensed security company are standard, and cannabis storage areas must be restricted to authorized personnel. Some operations have to use reinforced vaults or anchored safes for finished controlled-substance products.
Every licensed state requires seed-to-sale tracking: a digital inventory system logging every movement of cannabis material from cultivation through final retail sale. Metrc is the most widely used platform, operating in roughly 28 jurisdictions, though some states use competing systems. Every transfer, batch, sale, and disposal event has to be recorded so the state can verify product is not being diverted and inventory reconciles at every stage.
Background Checks for Employees
Most states require background checks for anyone working in a cannabis manufacturing facility, not just owners and managers. Common bars include felony convictions involving violence or controlled substances and fraud-related offenses; some states also disqualify applicants with outstanding tax delinquencies or child support noncompliance. Lookback windows run from three to ten years for certain offenses, while some violent felonies or drug trafficking convictions are permanent bars. A growing number of states carve out exceptions for prior cannabis-specific convictions, reflecting the equity goals of legalization, though the details differ sharply by jurisdiction.
Record Retention
Cannabis businesses must keep detailed records of production, inventory, testing, sales, and waste disposal for a minimum period set by state regulation. Federal food safety regulations require records to be retained for at least two years after preparation and available for official review within 24 hours if stored offsite.9eCFR. 21 CFR 117.315 – Requirements for Record Retention Some states impose longer periods. These records matter during audits, enforcement actions, and recalls.
Recalls
When a safety problem surfaces after products have reached consumers — contamination, testing irregularities, or labeling errors — states can order a mandatory recall. Manufacturers and retailers have to pull affected products and notify consumers, typically through the state regulatory agency’s public recall database. Returned recalled product cannot be resold or reintroduced into inventory. Dispensaries are expected to have recall procedures in place before a problem occurs, including a way to identify which customers bought affected lot numbers and how to reach them. For a manufacturer, a recall can be financially devastating, which is why rigorous upfront quality control is the cheaper investment.