Yes, CBD oil is legal in Ohio, but the rules got much tighter in 2026. Hemp-derived CBD with no more than 0.3% total THC is legal to buy at ordinary retailers, provided the finished container holds no more than 0.4 milligrams of total THC. Anything above that limit, along with marijuana-derived CBD, is only sold through state-licensed dispensaries to adults 21 and older or to registered medical patients.
What Ohio Counts as Legal Hemp CBD
Ohio legalized hemp in July 2019 under Senate Bill 57, now codified in Chapter 928 of the Ohio Revised Code. Ohio’s definition of hemp already uses a total THC standard rather than measuring only delta-9. Under Ohio Revised Code 928.01, hemp means the cannabis plant and its derivatives with a total THC concentration (including THCA) of no more than 0.3% on a dry weight basis.1Ohio Legislative Service Commission. Ohio Code 928.01 – Definitions
A CBD oil that meets that definition, and the per-container limit described below, is legal to buy in Ohio without a medical card or any special permit on the consumer’s end.
The 2026 Change That Reshaped the Shelf
Governor DeWine signed Senate Bill 56 in December 2025, and the changes took effect in March 2026. The law rewrote the definition of hemp in Chapter 928 to exclude intoxicating hemp products from legal sale outside licensed dispensaries.
Under the updated law, a finished hemp product is no longer treated as “hemp” if it contains either of the following:1Ohio Legislative Service Commission. Ohio Code 928.01 – Definitions
- Any synthetic cannabinoid, meaning any cannabinoid that cannot be naturally produced by a cannabis plant or that was synthesized outside the plant. This covers lab-created compounds like THC-O.
- More than 0.4 milligrams of total THC per container, measured as packaged and sold, including THCA and other cannabinoids with similar intoxicating effects.
The 0.4-milligram per-container cap is the detail most likely to catch a shopper off guard. A standard 30-milliliter bottle of full-spectrum CBD oil with even a small percentage of THC can easily push past 0.4 mg of total THC across the whole container. Products like that can no longer be sold at gas stations, health food stores, or by online retailers shipping into Ohio. They have to move through a licensed dispensary.
The same law pulled delta-8 THC, THCA flower, and other intoxicating hemp-derived cannabinoids off general retail shelves. If a cannabinoid produces effects similar to THC and the finished container exceeds 0.4 mg, Ohio no longer treats it as hemp.1Ohio Legislative Service Commission. Ohio Code 928.01 – Definitions
CBD isolate products and genuinely THC-free broad-spectrum products should still fall under the legal limit. The burden is on the buyer to confirm that by checking labels and lab reports.
Where You Can Legally Buy CBD Oil in Ohio
What’s legal to buy depends on how much THC the finished product contains.
- CBD isolate and genuinely THC-free products at or below 0.4 mg total THC per container: available at health food stores, pharmacies, vape shops, and online retailers. No medical card is needed.
- Full-spectrum CBD and any product exceeding the 0.4 mg per-container limit: only through a state-licensed cannabis dispensary. You must be at least 21 for a recreational purchase or hold a valid medical marijuana card.
- Marijuana-derived CBD: dispensary only, through the recreational or medical program.
Buying online is still legal for products that meet Ohio’s hemp definition. Be careful, though. A product shipped from another state may comply with that state’s law while breaking Ohio’s stricter per-container rule. Verify the certificate of analysis before you buy.
Higher-THC CBD Through Ohio Dispensaries
Ohio voters legalized recreational marijuana in November 2023 through Issue 2, and dispensary sales to adults 21 and older began on August 6, 2024. There’s no medical card requirement for adult-use sales. Adults may possess up to 2.5 ounces of marijuana or 15 grams of concentrates, and may grow up to six plants at home.2Ballotpedia. Ohio Issue 2 – Marijuana Legalization Initiative (2023) Recreational sales carry a 10% state tax.
Ohio’s Medical Marijuana Control Program under Chapter 3796 of the Revised Code remains a separate track. Patients with a qualifying condition, including cancer, epilepsy, chronic severe pain, PTSD, Crohn’s disease, and fibromyalgia among others, can get a physician recommendation and register for a medical card.3Ohio Legislative Service Commission. Ohio Code 3796.01 – Definitions Medical patients are exempt from the 10% recreational tax and may have access to different product formulations. The Ohio Division of Cannabis Control licenses and regulates cultivators, processors, testing labs, and dispensaries for both programs.4Ohio Department of Commerce. Division of Cannabis Control
How to Read a Certificate of Analysis
Ohio requires hemp processors to test every batch before offering products for sale. Under Ohio Administrative Code 901:14-2-13, mandatory testing covers cannabinoid potency (delta-9 THC, THCA, CBD, CBDA, and any other cannabinoids listed on the label), microbial contaminants, mycotoxins, heavy metals including arsenic, cadmium, lead, and mercury, and residual solvents where applicable. Processors must obtain a certificate of analysis from an approved laboratory for every batch.5Legal Information Institute. Ohio Admin Code 901-14-2-13 – Laboratory Testing
When you look at a certificate, check three things. First, do the math on total THC: multiply the reported concentration by the total product volume and confirm the container total is at or below 0.4 mg. Second, verify the CBD content matches the label. A product advertised as 1,000 mg CBD should test in that range. Third, look for a pass result on contaminants. A product sold without a certificate of analysis, or with a report from an unaccredited lab, is worth walking away from.
CBD and Workplace Drug Testing
Legal doesn’t mean risk-free for your job. Standard workplace drug tests screen for THC metabolites, not CBD. If a CBD product contains any THC and you use it regularly, those metabolites can accumulate and trigger a positive result. The 0.3% threshold in legal hemp is not zero, and products labeled “THC-free” have been mislabeled at times because the industry lacks comprehensive federal oversight.
A single use of a low-THC CBD product is unlikely to fail a test. Daily use over weeks or months raises the risk substantially. THC metabolites can stay detectable in urine for days after a single exposure, and two to three weeks with regular use. No federal law protects an employee who tests positive because they were using a hemp-derived CBD product. If your workplace tests, treat any CBD product that isn’t verified as THC-free by an independent lab as a real risk.
What the FDA Still Restricts
Even where Ohio law allows a hemp-derived CBD product on the shelf, the FDA has separate limits on what manufacturers can claim. The FDA treats CBD as an active ingredient in an approved drug (Epidiolex), which under federal food and drug law means CBD cannot be legally added to food or marketed as a dietary supplement.6U.S. Food and Drug Administration. FDA Regulation of Cannabis and Cannabis-Derived Products, Including Cannabidiol (CBD)
Enforcement has been selective. The agency has focused warning letters on companies making therapeutic claims, especially claims that a product treats cancer or other serious diseases. In January 2023 the FDA said existing regulatory frameworks for food and supplements are “not appropriate” for CBD and asked Congress to create a new pathway. Congress has not acted on that request.6U.S. Food and Drug Administration. FDA Regulation of Cannabis and Cannabis-Derived Products, Including Cannabidiol (CBD) You can legally buy CBD oil in Ohio. A product making health claims about it is still violating federal law, whatever the label says.