CBD is legal in the United Kingdom in 2026 — but the regulatory framework surrounding it is neither simple nor settled. The shelves of Boots, Holland & Barrett and countless independent health shops carry products that are, strictly speaking, not yet fully authorised for sale. They remain legal because of an interim arrangement administered by the Food Standards Agency (FSA) while a multi-year safety assessment process works its way to conclusion. That conclusion is now expected in Autumn 2026.

For buyers, the practical question is not whether CBD is legal in the abstract — it is. The practical question is whether the specific product in your hand is one that a UK court, trading standards officer, or FSA inspector would consider to be on the right side of the rules. This guide will give you the framework to answer that question for any CBD product before you buy it.

The four numbers that matter

Before we get into the detail, these are the figures every UK CBD buyer should know. They govern what is legal, what is advised, and where the hard lines sit.

What is the Novel Foods list?

"Novel food" is a regulatory category under UK law (retained from EU Regulation 2015/2283) covering foods without a significant history of consumption in Britain before May 1997. The definition captures a broad range of ingredients, from specific mushroom species to insect proteins to — as of 2019 — CBD extracts and isolates. Anything classed as a novel food must pass a formal safety assessment and receive ministerial authorisation before it can legally be placed on the market.

When the FSA formally classified CBD as a novel food in February 2020, the UK market contained several hundred brands selling CBD products without any such authorisation. Rather than remove all of them from sale overnight, the FSA created a pragmatic interim measure: the public list. Brands that had been selling CBD products before 13 February 2020 were given a deadline of 31 March 2021 to submit formal novel food applications. Those applications that were validated — or judged to be credibly progressing towards validation — would be catalogued on the list, and the associated products could continue to be sold while the safety assessment process worked through to completion.

Six years later, that "interim" arrangement is still in place. The FSA is now on track to issue the first formal recommendations to ministers for full authorisation in Autumn 2026, after which only explicitly authorised products will be permitted to remain on the UK market. Until then, the public list is the single most important reference for anyone checking whether a CBD product is legal to sell.

The three possible statuses

Every product on the FSA's public list carries one of three status labels, and the distinction matters more than many buyers realise.

Validated

The application has passed the FSA's initial validation checks — the dossier is complete, the product specification is clear, and the applicant has provided sufficient information for the safety assessment process to proceed. "Validated" is the strongest status a product can carry short of full authorisation, and it indicates the brand has met a meaningful evidential threshold.

Awaiting evidence

The application is in progress but the FSA has requested additional data — typically on stability, toxicology, or manufacturing controls — before it can be formally validated. Products with this status may stay on sale pending the applicant supplying the requested evidence. If the evidence is not provided within the agreed timeframe, the product is removed from the list.

Removed

The product has been struck from the list, either because the associated application was withdrawn, invalidated, or failed to progress. Products marked "Removed" should no longer be on sale. If you find one still being sold, either the retailer has not updated their inventory or the brand is operating outside the regulatory framework entirely. Either is a reason not to buy.

As of early 2026, the FSA has removed over a hundred products from the list. More removals are expected as the safety assessment process tightens its criteria in the run-up to full authorisations. For buyers, this is a moving target — a brand that was compliant last year may not be this year.

How to check a specific product

Verifying a CBD product's regulatory status takes about sixty seconds and is the single most useful due-diligence step any UK buyer can perform. The process:

1. Visit the FSA's public register at data.food.gov.uk/cbd-products. The register is maintained directly by the FSA and updated roughly every four months.
2. Search by brand name or product name. The brand you are considering should return matches for its various SKUs. Each entry will show the product name, applicant company, and current status.
3. Check the status column. Look for "Validated" or "Awaiting evidence". Either of these means the product is legally on sale in England and Wales.
4. If the product is not listed, or is marked "Removed", do not buy. The FSA has explicitly recommended that local authorities withdraw such products from sale. Buying them is not itself a criminal act for the consumer, but it is purchasing a product that should not be on the market.

Many brands now display their FSA public list reference number on their website, often on the product page itself or in a dedicated compliance section. The better operators make this easy to verify. Brands that obscure or omit their status are telling you something useful through that omission.

The 10mg daily intake, explained

In October 2023, the FSA substantially revised its consumer guidance on CBD. The previous advisory Acceptable Daily Intake (ADI) had been 70mg per day — a figure originally derived from medical studies where CBD was administered therapeutically under physician supervision. The revised figure, based on fresh evidence from the Joint Advisory Committee on Novel Foods and Processes and the Committee on Toxicity, is substantially lower: 10mg of CBD per day for a healthy adult, equivalent to 0.15mg per kilogram of body weight for a 70kg adult.

To put that figure in practical terms: a typical 5% CBD oil contains roughly 2.5mg of CBD per drop. Ten milligrams a day therefore corresponds to approximately four or five drops. A typical 10% oil contains closer to 5mg per drop, which puts the daily limit at just two drops.

The FSA is explicit that exceeding 10mg daily is not an acute safety risk — but has "evidence of some adverse impacts on the liver and thyroid" with sustained consumption above that level.

It is worth being precise about what this figure is and is not. The 10mg ADI is advisory guidance, not a legal limit. There is no penalty under UK law for a product containing or a consumer consuming more than 10mg of CBD in a day. The FSA has explicitly stated that products exceeding the provisional ADI can remain on the public list, though it expects businesses to "move to meet our standards as best practice." In 2025 the FSA introduced a reformulation pathway encouraging brands to bring their products within the 10mg per serving guidance without losing their place on the list.

Many UK CBD brands currently sell products delivering 20mg, 30mg, or more per serving. These products remain legal. But an informed buyer should understand that the regulator's own advice is to consume substantially less than these labels suggest.

The THC limits, explained

Two separate thresholds govern THC in UK CBD products. Understanding the difference between them is essential.

The 1mg-per-container hard limit

This is the law. Under the Misuse of Drugs Act 1971, any CBD product containing more than 1mg of Δ9-THC per container — that is, the entire bottle, jar, or packet, not per serving — is classified as a controlled Class B substance. Supplying such a product is a criminal offence carrying penalties of up to fourteen years in prison. This threshold applies irrespective of the product's Novel Foods status.

It is important to note how tight this limit is. One milligram per container is stricter than most US state CBD regulations, which typically allow 0.3% THC by weight (potentially equating to tens or hundreds of milligrams in a bottle). Products legally sold in American stores are frequently illegal to import into the UK. Even products marketed as "full-spectrum" in European jurisdictions with higher permitted THC levels may fail the UK container limit.

The 70 microgram daily advisory limit

Separately from the legal limit, the FSA introduced an advisory safe upper daily limit for Δ9-THC consumption of 70 micrograms (0.07mg) per day in 2025. This figure — equivalent to one microgram per kilogram of body weight for a 70kg adult — is paired with the 10mg CBD ADI as the FSA's recommended maximum daily exposure. It is not a legal limit but sits alongside the advisory framework that shapes how the FSA expects compliant products to be formulated.

Which products are outside Novel Foods?

The Novel Foods framework applies only to ingested CBD products intended for human consumption: oils, capsules, gummies, drinks, infused foods. Several adjacent categories fall outside the framework entirely and are regulated through different pathways.

• Topical CBD products — creams, balms, muscle rubs, skincare — are regulated as cosmetics under the UK Cosmetics Regulation. This is a separate, generally less strict framework with no requirement for Novel Foods authorisation.
• Hemp seed oil products containing no extracted CBD are excluded entirely. Cold-pressed hemp seed oil has a history of consumption pre-1997 and therefore doesn't meet the definition of a novel food.
• CBD vaping products fall under the Tobacco and Related Products Regulations alongside any Novel Foods status. The regulatory picture is particularly confused. Proceed carefully.
• CBD flower and hemp bud remain in a different category altogether — formally illegal under the Misuse of Drugs Act, with a 2023 Court of Appeal ruling having nuanced but not changed the legal position. The FSA's Novel Foods framework does not extend to flower.
• Licensed medicines containing CBD (such as Epidyolex, used in specific epilepsy conditions) are regulated by the MHRA, not the FSA, and fall outside both food and supplement frameworks.

What happens after Autumn 2026?

The current interim framework is explicitly a bridge to full product-specific authorisation. The FSA is on track to make its first recommendations to ministers in Autumn 2026, at which point a small number of CBD products will receive formal Novel Foods authorisation. As of April 2026, three applications have cleared the safety assessment stage and entered risk management: two CBD isolate dossiers from Pureis and Cannaray, plus a consortium application submitted by the European Industrial Hemp Association (EIHA). Further applications from Brains Bioceutical, Mile High Labs, cbdMD, TTS Pharma and Bridge Farm Group received positive safety assessments in 2025.

The expected post-2026 picture: only explicitly authorised products may remain on sale. Products currently on the public list that have not yet received full authorisation by the time the new regime takes effect may face withdrawal. Many brands will need to reformulate to match the precise specifications of a successful application, submit switching applications to transfer between dossiers, or prepare to exit the market. The FSA introduced a switching applications policy in February 2026 specifically to ease this transition for brands whose original applications stalled.

For consumers, the practical change should be modest: the brands you can trust today are, by and large, the brands best positioned to receive authorisation tomorrow. The brands most likely to disappear are those already operating at the edge of the current framework — thin dossiers, unclear sourcing, products that never made it onto the public list in the first place.

What to avoid

• No entry on the FSA public register. The brand or product cannot be found. The first and most important red flag.
• Imported US brands sold without UK-specific compliance. Products acceptable under American state law frequently breach the 1mg UK THC container limit.
• No batch-specific Certificate of Analysis. A generic product-range COA, or one from two years ago, is not sufficient evidence of quality.
• Marketing language using medical claims. "Cures", "treats", "reduces anxiety", "relieves pain" — any brand using this language on its own website is in breach of the Advertising Standards Authority's CAP Code. The same brand's dossier integrity should be assumed compromised.
• Products marketed to children or pregnant women. The FSA explicitly advises both groups not to consume CBD. Brands marketing to them are ignoring the regulator.
• "CBD for pets" sold without separate veterinary medicine authorisation. These products exist in a significant regulatory grey area.
• Pricing substantially below market norms. Novel Foods compliance, proper lab testing and UK-sourced hemp all add cost. Products priced significantly below the market norm have generally cut at least one of these corners.

Our recommendation, in one paragraph

Buy only from brands whose products appear on the FSA Novel Foods public register with "Validated" or "Awaiting evidence" status. Before your first purchase from any new brand, spend the sixty seconds required to verify this on the register directly. Prioritise brands that publish batch-specific Certificates of Analysis. Be wary of any product claiming medicinal benefit, and avoid entirely any CBD flower, imported US brand, or product sold at pricing that suggests corners have been cut. And if you take prescription medication — or if you are pregnant, breastfeeding, trying to conceive, or aged under 18 — do not consume CBD without speaking to your GP first.

A list of UK brands that currently meet these criteria is available here: The Best CBD Oils in the UK, 2026 →

Frequently asked questions

Is CBD legal in the UK in 2026?

Yes. CBD is legal in the UK in 2026 when the product contains less than 1mg of THC per container, meets the definition of a food supplement rather than a medicine, and appears on the FSA's public register of Novel Foods applications with a status of "Validated" or "Awaiting evidence". Products not on the register cannot be lawfully sold as food supplements in England and Wales.

Can I legally bring CBD into the UK from abroad?

Products purchased abroad for personal use exist in a grey area. UK customs generally permit small quantities for personal use, but if the product exceeds 1mg of THC per container it is, strictly speaking, a controlled substance. The risk sits with the importer. In practice, enforcement against personal-use imports is rare — but the risk is not zero, and customs officers have discretion.

Why do some high street shops sell products that aren't on the Novel Foods list?

Enforcement by local Trading Standards departments is patchy. Non-compliant products do appear on shelves, particularly in smaller independent health shops, vape stores, and imported-goods retailers. Retailer presence does not guarantee a product's legal status. Verify on the FSA register before buying.

Are CBD cosmetics and skincare legal?

Yes, and under a different framework. Topical CBD products are regulated as cosmetics under the UK Cosmetics Regulation rather than through Novel Foods. This is a separate and generally less strict pathway. A topical CBD cream does not need to appear on the FSA public register to be legally sold.

What about CBD vapes?

CBD vape products fall under the Tobacco and Related Products Regulations alongside any Novel Foods considerations. The regulatory picture for vape products is particularly confused and enforcement is inconsistent. Proceed carefully and buy only from brands with clearly documented dual compliance.

Are Novel Foods-approved products actually safer?

The FSA process reviews safety data but does not conduct independent testing of each product batch. Being on the list tells you the brand has submitted credible safety evidence and that the product specification has been validated. It does not guarantee the specific bottle on your kitchen counter is contaminant-free. Always check for a recent, batch-specific, third-party Certificate of Analysis alongside verifying the Novel Foods status.

What is the difference between the public list and full authorisation?

The public list is the FSA's interim register of products linked to credible authorisation applications. It permits continued sale during the safety assessment process but is not itself an authorisation. Full authorisation — a formal decision by ministers, expected from Autumn 2026 — is the end state of the Novel Foods process. Post-2026, only fully authorised products will be permitted to remain on the UK market.

Does the Novel Foods list apply in Scotland and Northern Ireland?

No, not directly. Scotland operates under Food Standards Scotland (FSS) using broadly mirrored guidance. Northern Ireland follows EU Novel Foods rules under the Windsor Framework, which differ in specifics. If you are buying from or selling into Scotland or NI, verify the specific rules that apply there.

Can I take CBD with prescription medication?

Possibly not — CBD interacts with the CYP450 enzyme system that metabolises many prescription medications, including blood thinners, anti-epileptics, some antidepressants, and certain heart medications. The FSA explicitly advises anyone taking prescription medication not to consume CBD without first speaking to a qualified healthcare professional. This applies regardless of the product's Novel Foods status.

Further reading

The FSA maintains the definitive reference materials for UK CBD regulation. The sources below are the authoritative starting points:

• FSA Cannabidiol Guidance — food.gov.uk/business-guidance/cannabidiol-cbd. The main business-facing reference document.
• FSA Public Register of CBD Products — data.food.gov.uk/cbd-products. The searchable list of products linked to Novel Foods applications.
• FSA Consumer Advice on CBD — published October 2023 and subsequently updated, setting out the 10mg ADI and associated vulnerable-group guidance.
• Food Standards Scotland — foodstandards.gov.scot. The Scottish regulatory framework.