Cannabis & CBD Regulatory Risk Dashboard — Federal + California
Regulatory Risk Dashboard

Cannabis & CBD Compliance — Federal + California

Every rule currently governing how retailers, pharmacies, dispensaries, and manufacturers may sell, produce, market, and handle cannabis and cannabinoid products in California — with risk ratings and penalty exposure.

Current as of August 5, 2026  ·  37 regulatory obligations tracked  ·  Informational only — not legal advice

⚠ Three changes are actively reshaping this landscape right now

1. Federal hemp redefinition takes effect November 12, 2026 (P.L. 119-37 § 781). Any finished hemp product with more than 0.4 mg total THC per container, or any cannabinoid synthesized outside the plant, stops being "hemp" and becomes a Schedule I controlled substance. This is roughly 99 days away and captures most of the hemp-derived market.

2. California AB 8 Phase 1 is already in force (since January 1, 2026). Inhalable hemp is banned outright; hemp extract in food, beverage, or supplements must be >99% pure isolate with zero detectable THC. Full-spectrum CBD is gone from general retail.

3. Partial federal rescheduling landed April 28, 2026. FDA-approved marijuana drug products and state-licensed medical marijuana moved to Schedule III. Adult-use marijuana remains Schedule I. This changes the 280E tax picture for medical operators but not the criminal-law picture for adult-use.

Critical risk
High risk
Medium risk
In flux / changing
$53,088
Max FTC penalty / violation
$30,000
Max CA penalty / day
Compliance timeline
Sept 24, 2024
CDPH emergency THC ban
Hemp food, beverage, and dietary products with any detectable THC barred from general retail; 21+ age minimum imposed.
Jan 1, 2026 — in force
AB 8 Phase 1
Inhalable/smokable hemp banned. Hemp extract must be >99% CBD or CBN isolate with zero detectable THC. Tobacco retailers barred from possessing THC products.
Apr 28, 2026
Partial rescheduling to Schedule III
DOJ/DEA order moves FDA-approved marijuana products and state-licensed medical marijuana to Schedule III. Adult-use stays Schedule I. Broader rescheduling hearing concluded July 2026 — outcome pending.
Nov 12, 2026 — 99 days
Federal hemp ban effective
New hemp definition excludes synthetic cannabinoids, >0.3% total THC (incl. THCA), and finished products >0.4 mg total THC per container.
Jan 1, 2028
AB 8 full implementation
All intoxicating cannabinoid products move into the DCC licensed channel: licensing, METRC track-and-trace, 15% excise tax, dispensary-only sales.
Risk exposure by business type
Business typeOverall riskDominant exposureRealistic worst case
General retailer
(grocery, convenience, wellness, smoke shop)
CRITICAL Selling non-compliant hemp inventory post-AB 8; federal contraband exposure after Nov 12, 2026; unsubstantiated health claims on shelf talkers and social. Inventory seizure and embargo, civil penalties stacking daily, tobacco-license revocation, and — after Nov 12 — possession of a Schedule I controlled substance.
Pharmacy HIGH Professional-license exposure is the asymmetric risk: a $500 product decision can jeopardize a PharmD license and DEA registration. Health claims from a licensed professional draw far more FDA/FTC scrutiny. Board of Pharmacy discipline, DEA registration action, FDA warning letter naming the pharmacist, FTC penalties, plus loss of professional liability coverage.
Licensed dispensary
(DCC retail / microbusiness)
HIGH Track-and-trace reconciliation, advertising audience-composition proof, packaging/labeling, local permit conditions, excise-tax remittance. DCC fines up to $30,000/day stacked per violation, license suspension or revocation, CDTFA tax assessment, local permit loss.
Manufacturer / producer CRITICAL Product formulation legality under the new federal definition, extract purity mandate, CDPH registration, testing and COA integrity, packaging compliance. Entire product line becomes federally illegal on Nov 12, 2026; recall, seizure, injunction, criminal referral, and total loss of finished-goods inventory.
Distributor / wholesaler HIGH Interstate shipment of products that lose hemp status; track-and-trace custody; testing gatekeeping obligations. Federal trafficking exposure on interstate shipments, DCC discipline, cargo seizure.
Marketer / affiliate / content HIGH FTC substantiation and disclosure, FDA disease-claim exposure, CA audience-composition rules, testimonial rules. $53,088 per violation FTC civil penalties, FDA warning letter, state UCL/FAL action, platform deplatforming.
Regulation register
Business
Activity
Jurisdiction
Risk
Search

Scope & method. This dashboard covers federal law (Controlled Substances Act, Agricultural Marketing Act as amended by P.L. 119-37, FDCA/DSHEA, FTC Act, IRC § 280E) and California law (MAUCRSA, AB 8, AB 45, CDPH industrial hemp regulations, DCC regulations at 4 CCR Div. 19, Proposition 65, Sherman Law). Local city and county ordinances add a further layer that varies by jurisdiction and is not captured here — most California cannabis retail requires a local permit in addition to state licensure, and many jurisdictions ban commercial cannabis activity entirely.

Risk ratings reflect a blend of penalty severity, likelihood of enforcement given observed agency activity, and reversibility of the harm. A rule with a modest fine but a license-revocation tail is rated higher than one with a large fine and no collateral consequence.

Penalty figures are statutory maxima or published guideline ranges, not expected outcomes. Actual assessments are usually negotiated downward and depend on scienter, prior history, and cooperation. Federal civil penalty inflation adjustments for 2026 were cancelled by OMB Memorandum M-26-11, so 2025 amounts remain in effect.

This is not legal advice. Cannabis and hemp law is changing faster than any static reference can track, and several items below are actively contested in litigation or pending agency guidance. Confirm current status with qualified counsel before making any product, marketing, or licensing decision.