Important: This article is general educational information, not legal advice. CBD labeling rules are set by the FDA, FTC, and individual states, they vary by product type, and they change frequently. Always verify your current obligations with your state regulator and qualified compliance counsel before finalizing label copy or artwork.
Your CBD label is the single most legally scrutinized part of your packaging. It’s where compliance is most detailed; regulators care not just about what information appears, but how it’s worded, how large it is, and even what you link to from it. Getting a required element wrong can mean relabeling a run; making a prohibited claim can invite FDA or FTC action. And unlike a design preference, none of it is optional.
This guide walks through what must legally appear on a CBD label, the claims you cannot make, the disclaimers you may need, and the formatting rules that trip brands up. It’s part of our complete guide to custom CBD and cannabis packaging, and it builds on our CBD packaging compliance guide, which covers child-resistance and state rules.
Required Label Elements
Exact requirements vary by state and product type, but across most CBD and cannabis markets, a compliant label is expected to include the following core elements:
- Product identity and net weight or contents
- Cannabinoid content in milligrams of CBD and THC, including total THC where required
- Full ingredient list, with allergens identified, for ingestibles
- Batch or lot number for traceability
- Manufacturer or distributor name and contact information
- Suggested use or serving size, where applicable
- Required warning statements and, in adult-use cannabis markets, the state’s universal cannabis symbol
- A scannable QR code linking to the product’s Certificate of Analysis (COA), increasingly required or expected
Because a single missing element can make a label non-compliant, most experienced brands build a label checklist for each product and each state they sell in, and confirm it against current regulations before approving artwork.
THC Content Disclosure and the 2026 Container Cap
Time-sensitive: This is an active change with implementation details still being finalized by the FDA, and repeal or delay efforts under discussion. Verify current status before relying on it.
Disclosing THC content accurately has always mattered, but it became more consequential in 2026. Under Public Law 119-37, enacted in November 2025, the federal definition of hemp shifted to a total-THC standard and imposed a cap of 0.4 milligrams of total THC per container measured across the entire package, not per serving. This federal change takes effect November 12, 2026.
For labeling, the practical takeaway is twofold. First, full-spectrum products should disclose total THC clearly, since that figure is now the compliance-relevant number. Second, because the cap is per container, package size interacts with your labeling and formulation something to confirm with counsel as the FDA finalizes how “container” is defined. Monitor this closely before committing to labels for full-spectrum products.
What You Cannot Say: Prohibited Health Claims
This is the highest-risk area on any CBD label. The FDA and FTC strictly limit what a CBD product can claim, and enforcement is real. The FDA has issued warning letters over non-compliant claims, and the FTC polices deceptive advertising.
The Disease-Claim Line
A CBD product may not claim to diagnose, treat, cure, or prevent any disease. Doing so causes regulators to treat the product as an unapproved drug. This applies to explicit claims (“cures anxiety”) and to implied ones (imagery, testimonials, or symptom references that suggest a medical benefit). The line between a permitted “structure/function” statement and a prohibited disease claim is exactly where many brands get into trouble.
| Likely non-compliant (disease claim) | More defensible (structure/function*) |
|---|---|
|
“Treats anxiety” |
“Supports a sense of calm”* |
|
“Cures insomnia” |
“Supports healthy sleep”* |
|
“Relieves chronic pain” |
“Supports post-exercise comfort”* |
|
“Reduces inflammation / arthritis” |
“Supports normal recovery”* |
*Structure/function-style claims are only defensible if truthful, substantiated, and accompanied by the required disclaimer. Even the right-hand examples above can create risk without substantiation. Always confirm specific wording with compliance counsel.
The FTC Dimension — Including Your QR Code
The FTC’s authority over deceptive advertising extends beyond the box itself to the digital content you link from it. That means the COA landing page reached through your QR code, and any marketing linked from packaging, must also avoid prohibited claims. A compliant label paired with a claim-heavy landing page still creates exposure.
The DSHEA Disclaimer
If your product is marketed as a dietary supplement and carries a structure/function claim, federal law generally requires a specific disclaimer, commonly called the DSHEA disclaimer. The standard wording is:
“This statement has not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.”
Formatting The Disclaimer
The disclaimer isn’t just about wording; formatting matters too. Regulations require it to be prominent: displayed in boldface type, at least as large as the surrounding text, and set off from other printed matter (a spacing rule of at least one-sixteenth of an inch from the closest printed material is a commonly cited standard).
One recent nuance worth knowing: historically, the disclaimer had to appear on every panel of a label carrying a structure/function claim. In late 2025, the FDA signaled it would exercise enforcement discretion on that specific “every panel” requirement and consider amending the rule so the disclaimer need only appear once, to reduce label clutter. The disclaimer itself is still required; only its placement is under review, so confirm the current expectation before finalizing your layout.
Font Sizes, Symbols, and Legibility
Regulators care about whether a consumer can actually read required information, so legibility rules are common.
Minimum Text Sizes
As a general rule across many programs, required text should not fall below roughly 6pt on primary panels, and warning statements often carry their own minimum height (for example, a 1/16-inch minimum letter height in some states). The DSHEA disclaimer, as noted above, must be at least as large as the surrounding text and in boldface.
Universal Symbols and Dose Markings
Adult-use cannabis markets typically require the state’s universal cannabis warning symbol at a specified minimum size. New York, for example, sets minimum dimensions depending on the symbol’s orientation. Edible products increasingly require individual dose marking, such as each gummy embossed with a symbol or milligram amount, in states including California, Oregon, and Washington. These are design constraints to plan around from the first artwork draft, not details to squeeze in at the end.
COAs and QR Codes
A Certificate of Analysis (COA) is the third-party lab report verifying a product’s cannabinoid content and screening for contaminants. Linking to a current COA via a scannable QR code has become best practice, and several states now require QR-linked COA access by law. It’s one of the strongest trust signals available to a CBD brand but only if the linked page is live, current, and claim-free. For how to implement this well, see our guide to QR codes and COAs on CBD packaging.
Need CBD packaging designed to fit every required label element?
Common CBD Labeling Mistakes
- Making a disease claim. “Treats,” “cures,” or “prevents” language turns your product into an unapproved drug in regulators’ eyes.
- Forgetting the DSHEA disclaimer. Structure/function claims without the required disclaimer are a common violation.
- Ignoring the linked COA page. FTC enforcement covers digital content; a claim-heavy landing page creates exposure even with a clean label.
- Undersized or buried required text. Legibility and minimum-size rules apply to warnings, symbols, and disclaimers.
- Treating one state’s label as universal. Required symbols, warnings, and dose marking differ by state.
Final Thoughts
A compliant CBD label is a balance of completeness, accuracy, and restraint: include every required element, disclose THC correctly, format warnings and disclaimers to spec, and above all, never make a health claim the product can’t legally support, on the box or on anything it links to. Because these rules span the FDA, FTC, and individual states, and because several are changing in 2026, verifying against current regulations before you print is the step that protects your brand.
To keep building your packaging strategy, head back to our main CBD packaging guide, or explore compliant custom CBD boxes from Make A Boxes.
Ready to order CBD packaging built for compliant labeling?
Frequently Asked Questions
Common required elements include product identity and net contents, cannabinoid content (CBD and THC in mg), a full ingredient list with allergens for ingestibles, batch/lot number, manufacturer information, required warnings and the state cannabis symbol, and increasingly a QR code linking to the COA. Exact requirements vary by state and product type.
No. The FDA and FTC prohibit claims that a product diagnoses, treats, cures, or prevents any disease, and this includes implied claims and content linked from your packaging. Only truthful, substantiated structure/function statements with the required disclaimer are potentially permissible; confirm specific wording with compliance counsel.
It's the statement: “This statement has not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.” It's generally required when a supplement-marketed product carries a structure/function claim, must be prominent and boldface, and at least as large as surrounding text.
Yes, particularly for full-spectrum products, and it matters more under the 2026 total-THC standard and the 0.4mg-per-container cap taking effect in November 2026. Disclose total THC clearly and verify current requirements, since implementation details are still being finalized.
Yes. The FTC's authority over deceptive advertising extends to digital content linked from packaging, so the COA page reached via your QR code must be current and free of prohibited health claims, just like the label itself.