There is no minimum age to buy CBD in NC. North Carolina law does not set an age floor for hemp-derived CBD products, does not require retailers to check ID, and imposes no penalty for selling to a minor. Some stores card buyers on their own, and lawmakers have repeatedly tried to set a purchase age of 21, but as of early 2026 no such law has passed.
Why No Age Law Applies
North Carolina’s controlled substance schedule exempts tetrahydrocannabinols in products with a delta-9 THC concentration of 0.3% or less on a dry weight basis.1North Carolina General Assembly. North Carolina General Statutes 90-94 – Schedule VI Controlled Substances That exemption is what makes hemp-derived CBD legal to sell, but the statute says nothing about who can buy it. There is no licensing system for hemp retailers, no age-verification requirement, and no penalty attached to a sale made to a minor.
The gap surprises people because tobacco and alcohol have clear age floors. CBD landed in a different regulatory space: legal enough to sell freely, unregulated enough that basic consumer protections never made it into the code. A product containing more than 0.3% delta-9 THC by dry weight is still classified as marijuana and remains illegal in the state for any purpose, but anything at or under that threshold sits outside the state’s age-restriction framework entirely.
What Stores May Ask For Anyway
No state rule does not mean no rule at the counter. Retailers set their own policies, and those policies vary widely.
Vape shops that also sell hemp products often apply their existing tobacco-related age checks to CBD, which means carding for 21 because that is the federal minimum for tobacco and nicotine vaping products. Specialty CBD stores and health food shops may card for 18 or 21 as internal policy, or they may not card at all. Chains and franchises are the most likely to impose an age floor voluntarily, both to reduce liability and to align with the regulation they expect is coming.
None of these policies carry the force of law. A retailer who sells CBD gummies to a 16-year-old has not violated any North Carolina statute. It is the shop’s rule, not the state’s.
Buying CBD Online
The verification gap is widest online. Research published in the Journal of Adolescent Health found that only about 38% of CBD websites required buyers to confirm their age at checkout, and none of the products delivered required identification or a signature at arrival. The age checks that did exist were self-reported click-throughs.
Vape products are the exception. The federal PACT Act requires shippers of vape products to verify the buyer’s age, obtain an adult signature with government ID at delivery, and keep records of the transaction.2Bureau of Alcohol, Tobacco, Firearms and Explosives. Vapes and E-Cigarettes Whether those requirements apply to hemp-derived vape cartridges is a gray area still being sorted out by carriers and regulators, but major shipping companies have broadly restricted vape shipments regardless of whether the cartridge contains nicotine or hemp cannabinoids. Ordering CBD online to a North Carolina address can mean anything from zero verification to a full ID check at your door.
Bills That Would Set an Age of 21
Lawmakers have tried repeatedly to close the gap, and the direction is clearly toward a minimum age of 21.
- HB 563 (2023–2024 session) proposed a purchase age of 21 for hemp-derived consumables, mandatory proof-of-age checks, child-resistant packaging, and restrictions on marketing that resembled candy. It did not pass.
- HB 328 (2025–2026 session) would make it illegal to sell hemp-derived consumables to anyone under 21, require retailers to ask for ID from anyone who appears under 30, create a licensing system for sellers, and impose criminal penalties for violations. Online sellers would have to verify age and require an adult signature at delivery. If enacted, it would apply to products sold on or after July 1, 2026. As of June 2025, the bill was re-referred to the House Rules Committee.
- A separate Senate measure in 2025 banned sales of hemp-derived edibles and drinks to anyone under 21 and prohibited use on school grounds. It passed the Senate and died in the House Rules Committee.
Both chambers broadly support a 21-year-old floor. Disagreement over licensing, THC concentration limits, and enforcement has kept anything from becoming law. If you are reading this later in 2026 or after, check whether HB 328 or a similar bill has since been enacted.
The Federal THC Cap Arriving in November 2026
Even without a state age law, a federal change will reshape what CBD looks like on North Carolina shelves. The Continuing Appropriations and Extensions Act of 2026 caps finished hemp-derived products at 0.4 milligrams of total THC (including THCA) per container, effective November 12, 2026. A “container” is the innermost retail packaging: a bottle, jar, bag, or cartridge.
This is a sharp tightening. Under current law, a large bottle of CBD oil can legally hold a meaningful amount of THC as long as it stays under 0.3% by dry weight. The new rule caps the whole package at 0.4 milligrams regardless of size, which effectively removes most intoxicating hemp-derived THC products from the legal market. Many gummies, beverages, and vape cartridges now sold in North Carolina shops will no longer comply. Raw hemp plant material will still be measured by the existing 0.3% dry-weight standard; finished consumer products face the new per-container cap. A standard CBD oil with very low THC may still fall under the cap. Anything marketed for its THC content almost certainly will not.
Drug Testing Is Still a Real Risk
A legal CBD product can still cause a positive THC drug test. Hemp-derived products are allowed to contain up to 0.3% delta-9 THC, and small amounts can accumulate with regular use.
The stakes are highest for safety-sensitive jobs regulated by the U.S. Department of Transportation. The DOT’s Office of Drug and Alcohol Policy and Compliance has stated plainly that CBD use is not a legitimate medical explanation for a positive THC result.3U.S. Department of Transportation. DOT CBD Notice A commercial driver who tests positive will be verified positive by the Medical Review Officer, removed from safety-sensitive duties, and placed in “Prohibited” status in the FMCSA Clearinghouse.
Private employers in North Carolina can also test for THC and enforce their own drug-free workplace rules. The state has no law protecting workers who test positive because of hemp-derived CBD. If your job tests, the safest approach is CBD isolate products that should contain zero THC, and check the third-party certificate of analysis before using anything.
What to Do at the Register
- Expect no state-required ID check, but bring ID anyway because many stores card voluntarily, often at 21.
- Watch for changes. HB 328 and similar bills would set 21 as the purchase age; the federal per-container THC cap arrives November 12, 2026.
- Ask to see a certificate of analysis from an independent lab. With no state licensing or inspection, that document is the only reliable check on what the product actually contains.
- If you are subject to workplace drug testing, treat any hemp-derived product as a risk regardless of the label’s legal claims.