Medical cannabis regulations in the US split into two layers: federal law and state law. The federal government still treats cannabis as a Schedule I drug, while states set their own rules for patients, doctors, products, and dispensaries. That split means a product can be legal in one state, illegal in another, and still against federal law in both.
How do federal and state medical cannabis rules differ?
Federal law does not recognize medical cannabis as a legal medicine. The Controlled Substances Act lists cannabis as Schedule I, a category for drugs with no accepted medical use and a high potential for abuse. The FDA has not approved cannabis flower or most cannabis products for any medical condition.
The one exception is Epidiolex, a CBD drug the FDA approved for rare seizure disorders. That approval covers a specific prescription product, not CBD sold in stores or state medical cannabis programs.
States take a different approach. Most states run medical cannabis programs that define qualifying conditions, issue patient cards, license growers and dispensaries, and set possession limits. State rules do not erase federal law, but they control how patients and businesses operate inside that state.
Who writes and enforces medical cannabis regulations?
Federal agencies
The DEA enforces the Controlled Substances Act. The FDA oversees drug approval and makes rules for CBD products that make medical claims. The USDA sets hemp rules, including the 0.3% THC limit for hemp under the 2018 Farm Bill.
State health and agriculture agencies
State health departments review patient applications and certify qualifying conditions. State agriculture or cannabis agencies license cultivators, test labs, and dispensaries. Local governments add zoning rules that decide where a dispensary can open.
What rules apply to medical cannabis patients?
Patient rules change by state, but most programs cover the same core items. Check your state program page before you apply or buy.
- Qualifying condition: A doctor must certify that you have a condition listed in state law. Common examples include cancer, epilepsy, chronic pain, and PTSD, but each state writes its own list.
- Registration: Many states issue a medical cannabis card or a digital certificate. Some states require a fee, a photo, and a renewal each year.
- Purchase limits: State law sets how much you can buy in one transaction or over a set period. Limits often differ for flower, concentrates, and edibles.
- Possession limits: A card does not allow unlimited supply. Keep the amount within your state cap and carry your card when you carry the product.
- Home grow: Some states allow a set number of plants for patients. Others ban home grow even for cardholders.
- Reciprocity: A card from another state may not work where you travel. Some states accept out-of-state cards, and many do not.
How do testing and product labels fit into medical cannabis rules?
State medical cannabis programs often require lab tests for potency, pesticides, heavy metals, mold, and bacteria. Labels must show THC and CBD content, batch numbers, and expiration dates. Testing rules for hemp CBD sit outside most state medical programs, so a CBD product on a store shelf may face less review than a dispensary product.
For CBD buyers, a certificate of analysis (COA) from an independent lab is the main proof of what is in the bottle. A COA should list cannabinoid levels and pass results for contaminants. If a seller cannot provide one, treat the product as unknown.
How does hemp-derived CBD fit into medical cannabis regulations?
Hemp CBD is legal under federal law when the plant and product stay at or below 0.3% THC on a dry weight basis. That threshold comes from the 2018 Farm Bill, which removed hemp from the CSA definition of marijuana. The change opened a national market for CBD lotions, tinctures, and gummies.
Hemp rules do not make CBD a medicine. A company cannot claim that its CBD cures, treats, or prevents a disease without FDA drug approval. States can also add limits on CBD sales, age minimums, and lab testing, so a product legal in one state may face restrictions in another.
Medical cannabis programs and hemp CBD markets are separate. A state-licensed dispensary sells cannabis under medical rules. A CBD store sells hemp products under consumer product rules. Mixing the two can create legal risk for a seller and confusion for a buyer.
What should you check before you buy?
- Confirm your state's medical cannabis status and whether it accepts your condition.
- Check the THC content on the label, not just the CBD number.
- Ask for a batch-specific COA and read the contaminant results.
- Buy from a licensed dispensary if you need medical cannabis under state law.
- Keep products away from children and follow the label dose.
Common questions about medical cannabis regulations
Is medical cannabis legal under federal law?
No. Cannabis remains Schedule I under the Controlled Substances Act. Federal prosecutors and agencies can enforce federal law, though Congress has added budget limits that affect some enforcement. State medical programs do not change the federal schedule.
Do I need a medical card to buy cannabis?
It depends on your state. States with adult-use programs let adults buy cannabis without a medical card. A medical card can still lower taxes, raise possession limits, or protect access in states that only run a medical program.
Can a CBD store sell medical cannabis?
In most cases, no. Medical cannabis sales require a state dispensary license. A CBD store can sell hemp-derived products that meet the 0.3% THC limit and state rules, but it cannot call those products medicine.
Are medical cannabis products tested?
Yes in states with medical programs that require testing. Rules cover potency, pesticides, heavy metals, and microbials. Hemp CBD testing varies by state and by producer, so check the COA.