Are CBD Gummies and CBD Vapes Legal in the UK? The 2026 Rulebook, Format by Format

CBD gummies are legal to sell and buy in the UK as of October 2026, provided the product contains no more than 1mg of any controlled cannabinoid per container and is linked to a validated novel food application on the Food Standards Agency’s public list. CBD vapes are legal too, on different terms: they sit outside the novel foods regime entirely, must meet the 1mg test, cannot be single-use since the disposable ban of 1 June 2025, and from 29 October 2026 cannot be sold to anyone under 18 by force of statute. The two formats share one law and answer to two different regulators, which is why “is CBD legal in the UK” is the wrong question and “is this CBD product, in this format, legal” is the one that actually gets answered.

What follows is that answer, format by format, for the state of play in October 2026. It is written for people who sell, advise or regulate rather than for first-time buyers, so it names the instruments and dates and skips the reassurance. Nothing here is legal advice, and the Scottish and Northern Irish positions diverge in places flagged below.

The Rule That Applies to Every Format: 1mg per Container

The foundation is the Misuse of Drugs Act 1971 and the Misuse of Drugs Regulations 2001. Cannabidiol itself is not a controlled drug. Delta-9-THC, THCA, CBN and the newer semi-synthetics (HHC, THCP, THC-O, H4CBD among them) are. A CBD consumer product is lawful only if it qualifies as an “exempt product” under regulation 2 of the 2001 Regulations, which requires three things at once: no more than 1mg of any controlled drug in the whole container, a product not designed for administering the controlled drug, and a controlled drug that cannot readily be recovered from it.

Three consequences follow, and the trade gets each of them wrong in turn. The limit is per container, not per gram, per serving or per percentage. The 0.2 per cent figure that haunts product listings is a hemp-cultivation licence threshold from the Home Office’s industrial hemp regime and has never been a consumer-product rule. And a full-spectrum product that is lawful in a 10ml bottle can be unlawful in a 30ml bottle of the same oil, because the milligrams scale with volume. A certificate of analysis showing total controlled cannabinoids below 1mg for the specific pack size is the only document that settles it.

The limit may tighten. In December 2021 the Advisory Council on the Misuse of Drugs recommended that each controlled phytocannabinoid be capped at 50 micrograms per unit of consumption, a far lower figure than 1mg per container for most products. On 24 October 2023 the Home Office accepted that recommendation and said it intended to legislate, subject to Parliament. As of October 2026 the exempt-product test in the 2001 Regulations is unchanged, so 1mg per container remains the operative line, with 50 micrograms per serving the direction of travel that any product reformulation should already be designed around.

Flower and bud sit outside all of this. Hemp flower is cannabis for the purposes of the 1971 Act regardless of its THC content, the Home Office hemp licence prohibits use of the flowering parts, and “CBD flower” sold to consumers is a controlled drug supply however it is labelled. It is the one CBD format with no lawful consumer route in the UK, and the one most often found on the same shelf as the two formats this article is about.

CBD Gummies: Legal, Through Three Gates

A gummy is a food, so after the 1mg test it meets the retained Novel Foods Regulation (EU) 2015/2283, administered in England and Wales by the Food Standards Agency and in Scotland by Food Standards Scotland. CBD extracts and isolates were confirmed as novel foods in January 2019. The FSA set a deadline of 31 March 2021 for validated applications and then published its public list of products linked to those applications. Since then the FSA’s position has been that CBD foods not on the list should not be on sale, and local authority trading standards and environmental health teams enforce on that basis.

Being on the list is not an authorisation. The FSA’s own words are that listed products “are not formally authorised for sale”, “have not yet been fully assessed for safety”, and that inclusion “is no guarantee that they will be authorised”. Until September 2026 that was the whole story: a market of thousands of products trading on a tolerance.

The story changed on the FSA Board’s September 2026 agenda. Having published fourteen positive safety assessments for CBD novel foods of over 97 per cent purity, the Board agreed that recommendations on three applications were fit to go to ministers in England and Wales for the first authorisations: RP7, a synthetic CBD; RP350, a CBD isolate whose conditions of use extend to beverages and confectionery; and RP427, a second CBD isolate. All three are at least 98 per cent pure CBD, for adults, at a maximum of 10mg a day, with mandatory warnings for under-18s, anyone pregnant, breastfeeding or trying to conceive, people on medication and the immunosuppressed, and with strict specifications for delta-9-THC and other controlled cannabinoids kept as low as reasonably achievable. Roughly 3,000 individual products on the public list are linked to those three applications. Ministers decide; the FSA has said it will finalise the advice package as soon as possible, and no decision date has been given.

For gummies specifically, RP350 is the application to watch, because confectionery is inside its conditions of use. A gummy linked to a different application remains on the list under the same tolerance it has traded under since 2021.

Two more gates, both outside the FSA. The Committee of Advertising Practice treats CBD foods as foods: no health, medicinal or therapeutic claims, no implied benefit, and the Advertising Standards Authority has upheld complaints on exactly that basis. A gummy that promises sleep, calm or pain relief is either an unlawful food claim or an unlicensed medicine, depending on how far it goes. And the FSA’s consumer guidance, revised in October 2023, recommends healthy adults take no more than 10mg of CBD a day, about four or five drops of a 5 per cent oil, and that children, anyone pregnant or breastfeeding or trying to conceive, and anyone on medication avoid CBD unless under medical direction. There is no statutory minimum age for CBD food; responsible retailers apply 18 and over as policy, and the FSA’s guidance supports it.

Put together, the compliant gummy in October 2026 is linked to a public-list application, below 1mg of controlled cannabinoids in the pot as sold, labelled with a serving that keeps a user inside 10mg a day, free of health claims, and backed by a batch certificate the retailer can produce. The public-facing version of that checklist is visible on any serious UK retailer’s range of CBD gummies: lab reports per batch, the application linkage stated, adult-only sale, and the FSA’s daily figure shown rather than hidden.

CBD Vapes: Legal, Under a Different Regulator Entirely

A CBD vape is not a food, so the novel foods regime does not apply. It is also, in almost every case, nicotine-free, so the notification scheme under the Tobacco and Related Products Regulations 2016 does not apply either. That leaves a vape liquid or cartridge governed by the 1mg exempt-product test, by general product safety law, by consumer-protection and labelling rules, and since 2025 and 2026 by three new instruments aimed at vaping generally that make no exception for CBD.

The first is the Environmental Protection (Single-use Vapes) Regulations 2024, in force from 1 June 2025. Single-use vapes are banned from sale and supply in England, with parallel regulations in Scotland, Wales and Northern Ireland, and “single-use” turns on whether the device is both rechargeable and refillable or re-podable. A CBD disposable is as banned as a nicotine one. The lawful format is a rechargeable battery with a replaceable pod or a 510-thread cartridge, which is what the UK CBD vape market has reorganised itself around.

The second is the Tobacco and Vapes Act 2026, which received Royal Assent on 29 April 2026. From 29 October 2026 it is an offence across the UK to sell any vaping product, expressly including zero-nicotine vapes, to anyone under 18, to buy one on behalf of an under-18, to sell through a consumer-facing vending machine, or to supply free samples or token-price promotions. Fixed penalties of £200 apply in England, Wales and Scotland. Until that date the age restriction on nicotine-free vapes rested on retailer policy; from that date it is statute, and a CBD pod kit is squarely inside it. The Act also gives ministers powers over flavours, packaging, appearance and retail display, to be exercised through regulations and consultation still to come. There is no CBD carve-out.

The third is fiscal. HM Revenue & Customs’ Vaping Products Duty took effect on 1 October 2026 at £2.20 per 10ml of vaping liquid, and HMRC’s scope is liquid intended for vaping regardless of nicotine content. On that definition CBD e-liquid and the liquid in a CBD pod or cartridge are inside the duty, with duty stamps required on all stock outside duty suspension from 1 April 2027. Businesses importing or manufacturing CBD vape liquid should treat themselves as within scope unless HMRC confirms otherwise for their specific product.

Then the usual overlay: no medicinal claims (CAP, and the MHRA if a product strays into treating a condition), a certificate of analysis per batch showing controlled cannabinoids under 1mg for the container as sold, and the same COA to evidence that no HHC, THCP or similar has been added to a “full-spectrum” cartridge, which is where the enforcement cases in this format tend to start. A retailer’s own listing shows what compliance looks like in practice: the rechargeable pod kits, prefilled pods and 510 cartridges on a UK range of CBD vapes are presented with batch reports, the 1mg-per-container limit stated plainly, and adult-only sale applied ahead of the statutory date.

The Formats Side by Side

Scotland: Food Standards Scotland runs its own novel foods process and takes its own ministerial decisions; the public list and the 1mg test apply as above. Northern Ireland: EU food law, including the EU novel foods regime, applies under the Windsor Framework, and the European Food Safety Authority has not yet published a positive safety assessment for any CBD novel food.

The Numbers That Are About to Collide

Two regulators have now put a figure on a safe daily CBD intake and the figures are five times apart. The FSA’s provisional acceptable daily intake is 10mg. In February 2026 EFSA published an updated statement setting a safe dose of 0.0275mg per kilogram of body weight a day, roughly 2mg for a 70kg adult, while concluding that safety had not been established for people under 25, in pregnancy or breastfeeding, or on medication. In March 2026 the European Chemicals Agency recommended classifying CBD as a Category 1B reproductive and lactation toxicant.

That divergence matters in Britain because of the proposed UK-EU sanitary and phytosanitary agreement. The Cannabis Trades Association has set out the risk plainly: dynamic alignment with EU food law could make EU novel food authorisations the relevant route again, which would leave the first GB authorisations, when ministers grant them, looking provisional. Nothing has been agreed that changes the law today. Anyone building a five-year product plan on a 10mg serving should know that the EU’s figure is 2mg and the mechanism for importing it exists on paper.

What Is Not Legal, Whatever the Label Says

Any consumer product with more than 1mg of controlled cannabinoids in the container. Anything containing HHC, THCP, THC-O, H4CBD or another controlled cannabinoid, which are not grey areas but Class B controlled drugs. CBD flower or bud. Single-use CBD vapes. CBD foods making health claims. CBD foods not linked to a public-list application. And from 29 October 2026, any CBD vape sold to a person under 18, or through a vending machine, or given away.

Are CBD Gummies and Vapes Legal in the UK? Questions People Ask

Are CBD gummies legal in the UK?

Yes, as of October 2026, if the pot contains no more than 1mg of controlled cannabinoids, the product is linked to a validated novel food application on the FSA’s public list, and no health claims are made. The first formal authorisations, covering about 3,000 listed products, are with ministers following the FSA Board’s September 2026 recommendation.

Are CBD vapes legal in the UK?

Yes, in rechargeable formats with replaceable pods or cartridges. Single-use CBD vapes have been banned since 1 June 2025, and from 29 October 2026 sale to under-18s is a criminal offence under the Tobacco and Vapes Act 2026.

Is CBD e-liquid a novel food?

No. Novel foods law applies to things that are eaten or drunk. A vape liquid is governed by the Misuse of Drugs Regulations’ 1mg test, product safety law, the disposable ban, the Tobacco and Vapes Act and, from October 2026, the Vaping Products Duty.

How much THC is legal in a CBD product in the UK?

No more than 1mg of THC, and of each other controlled cannabinoid, in the whole container as sold. The figure is not a percentage. The Home Office accepted a future limit of 50 micrograms per serving in October 2023 but has not yet legislated it.

Has the FSA authorised any CBD products?

Not yet, as of October 2026. In September 2026 the FSA Board recommended three applications (RP7, RP350, RP427) to ministers in England and Wales for the first authorisations, at 10mg a day for adults. Ministers make the final decision.

What is the FSA’s recommended daily CBD limit?

10mg a day for healthy adults, set in October 2023, with advice that children, pregnant or breastfeeding women, anyone trying to conceive and anyone on medication should not take CBD unless medically directed.

Is there a legal age for buying CBD in the UK?

For CBD vapes, 18, by statute from 29 October 2026. For CBD foods there is no statutory age; the FSA advises against CBD for under-18s and reputable retailers sell to adults only.

Is CBD flower legal in the UK?

No. Hemp flower is cannabis under the Misuse of Drugs Act 1971 regardless of its THC content, and the Home Office hemp licence excludes the flowering parts. It has no lawful consumer route.

Does the UK vape tax apply to CBD vapes?

On HMRC’s published scope, yes: the Vaping Products Duty covers liquid intended for vaping regardless of nicotine content, at £2.20 per 10ml from 1 October 2026, with stamps mandatory on all stock from 1 April 2027. Businesses should confirm their own position with HMRC.

This article describes the law of England and Wales as of October 2026, with the Scottish and Northern Irish divergences noted. It is general information, not legal advice. CBD is sold to adults aged 18 and over.