What Meta permits on CBD/Hemp, and what is not currently eligible
Before the enforcement pattern, the product-type filter. Product type and authorization determine whether a CBD advertiser can access Meta's eligible advertising pathway in the first place. Three buckets define what can and cannot run.
<div class="aac-vgrid"><article class="aac-vcard"><span class="aac-vpill">Permitted · US only</span><h4 class="aac-vtitle">Non-ingestible CBD topicals</h4><div class="aac-vbody"><p>Permitted on Meta in the US only, with <strong>LegitScript Product + Website Certification</strong> plus <strong>per-account Meta authorization</strong>.</p><p>Eligible products: lotions, creams, patches, salves, soaps, candles, cosmetics.</p></div></article><article class="aac-vcard aac-vcard--teal"><span class="aac-vpill">Permitted · US, Canada, Mexico</span><h4 class="aac-vtitle">Hemp products with no CBD content</h4><div class="aac-vbody"><p>Hemp products without CBD content and within applicable THC limits may fall under a separate advertising pathway. Confirm current Meta and jurisdictional requirements before launching.</p></div></article><article class="aac-vcard aac-vcard--teal"><span class="aac-vpill">Not currently eligible</span><h4 class="aac-vtitle">Products outside the eligible CBD pathway</h4><div class="aac-vbody"><p>Ingestible CBD of any form, including oils, tinctures, gummies, capsules, and sublingual products; CBD supplements; CBD vapes; pet CBD products; and products exceeding applicable THC limits are generally outside the current LegitScript-based CBD advertising pathway.</p></div></article></div><p style="color:#334055;font-size:15px;line-height:1.7;margin:24px 0 10px">This scope is shaped by external certification requirements as well as Meta's own authorization rules. LegitScript, the third-party certification provider recognized by Meta for eligible CBD advertising, currently excludes ingestible, dietary supplement, vape, pet, and certain THC products from its CBD Certification Program. Without LegitScript, Meta CBD authorization is not available. A brand whose primary line is ingestible CBD does not have a compliance issue on Meta so much as a channel-fit issue.</p><p style="color:#334055;font-size:15px;line-height:1.7;margin:0 0 10px">For ingestible CBD, pet CBD, and vape operators, the practical answer is that Meta paid social is not currently an available channel for eligible CBD advertising. Other channels, including retail, organic content, email, and influencer marketing, may remain available subject to their own platform, disclosure, and jurisdictional requirements.</p><p style="color:#334055;font-size:15px;line-height:1.7;margin:0">Product and ad content matter alongside account context. A hemp-line advertiser with CBD language in legacy copy can still face review based on what the creative and destination actually promote, regardless of what is set in the Business Manager industry tag.</p>
Two authorizations you need before an ad can run
Eligibility tells you what you can sell. Authorization is the two-step chain that turns an eligible product into an ad that can actually run. Both authorizations are required, in order. Skipping one or assuming they are the same step is the most common reason CBD launches stall before they spend a dollar.
<div class="aac-vgrid aac-vgrid--2"><article class="aac-vcard"><span class="aac-vpill">Authorization 01</span><h4 class="aac-vtitle">LegitScript certification</h4><div class="aac-vbody"><p>LegitScript is an outside company that certifies businesses selling regulated products. For CBD, it issues two certs together: a Product Certification for each SKU (sample-tested by LegitScript), plus a Website Certification.</p><p>The Website Certification requires the CBD products offered on the site to meet the applicable product-certification requirements. Both certs require annual retesting and continuous monitoring. Treat LegitScript as an ongoing operational state, not a one-time application.</p></div></article><article class="aac-vcard aac-vcard--teal"><span class="aac-vpill">Authorization 02</span><h4 class="aac-vtitle">Per-ad-account Meta authorization</h4><div class="aac-vbody"><p>LegitScript is not a Meta approval. It is a prerequisite for one. Once you have LegitScript, you request Meta authorization through Meta Business Suite under “Authorizations and verifications” for eligible CBD advertising in supported markets. Both are required for eligible CBD advertising, although they serve different purposes. The LegitScript Website Certification is part of the information used in the Meta authorization process.</p></div></article></div><div class="aac-vcallout"><strong>Two authorizations, two different roles.</strong> LegitScript certifies the business and the domain. Meta authorization is granted per ad account. If you have five ad accounts, each one needs its own Meta authorization; the LegitScript cert applies to the domain once. Advertisers who treat LegitScript and Meta authorization as the same step may find that certification alone does not complete the Meta authorization process.</div>
Meta's CBD, Hemp, and THC advertising policy
The rules below map directly to Meta's Drugs and Pharmaceuticals policy and the federal Farm Bill hemp classification. These are the exact policy inputs advertisers should build ad creative and landing pages against.
<div class="aac-vgrid aac-vgrid--2"><article class="aac-vcard"><span class="aac-vpill">Hemp advertising</span><h4 class="aac-vtitle">Rules for hemp ads</h4><div class="aac-vbody"><ul><li>Video and image creators should reference hemp, not CBD, in ad copy.</li><li>Non-ingestible and ingestible hemp may be promoted in ads, targeted to permitted countries: United States, Canada, and Mexico.</li><li>Hemp products being promoted must not contain more than 0.3% THC content and must have no presence of CBD. If products contain THC, the disclaimer “Less than 0.3% THC” or “<0.3% THC” must appear in the product description on the website or product page.</li><li>Ads for hemp products may not carry claims that expressly state or imply that the featured products can treat, cure, prevent, mitigate, or diagnose a disease or medical condition in humans or animals.</li><li>Hemp ads must comply with all other Meta Advertising Standards and Community Standards, plus all applicable laws and regulations.</li></ul></div></article><article class="aac-vcard aac-vcard--teal"><span class="aac-vpill">CBD and THC advertising</span><h4 class="aac-vtitle">Rules for CBD and THC ads</h4><div class="aac-vbody"><ul><li>CBD products are not permitted to be promoted in ads unless the product is a topical CBD treatment with LegitScript certification. Hemp is the word to use in all ad copy.</li><li>THC products (for example, marijuana) are not permitted to be promoted in ads. Products themselves may contain less than 0.3% THC as long as the product page carries that disclosure. THC should not be referenced in the ad.</li></ul></div></article></div><h3 class="aac-vsub-h">What's permitted vs. what's not permitted in ads</h3><div class="aac-vgrid aac-vgrid--2"><article class="aac-vcard aac-vcard--allow"><span class="aac-vpill">Allowed</span><h4 class="aac-vtitle">Permitted in ads</h4><div class="aac-vbody"><ul><li>Hemp < 0.3% THC</li><li>Hemp Heart</li><li>Hemp Seed Oil</li><li>Hemp Fiber (for clothing)</li><li>Full-spectrum Hemp</li></ul></div></article><article class="aac-vcard aac-vcard--deny"><span class="aac-vpill">Not allowed</span><h4 class="aac-vtitle">Prohibited in ads</h4><div class="aac-vbody"><ul><li>Cannabidiol (CBD)</li><li>CBD Oil</li><li>CBD Isolate</li><li>PCR (phytocannabinoid-rich)</li><li>Cannabis Sativa Seed Oil</li></ul></div></article></div><p style="color:#6b7280;font-size:13px;font-style:italic;margin:20px 0 0">Source: ComplyAi CBD/Hemp Policy</p>
The CBD enforcement pattern
For brands selling eligible product types and passing both authorization gates, the Policy-Enforcement Gap is worth understanding. Meta's published text describes what is permitted; how those rules are applied to individual ads may not always be apparent from the policy text alone. The gap between the two is what CBD brands most often need to plan around.
<article class="aac-vcard" style="border-left:4px solid #6b7280"><span class="aac-vpill">The pattern</span><h4 class="aac-vtitle">From individual rejection to broader account effects</h4><ol class="aac-vsteps"><li>An ad is rejected because of language, creative, destination, or other compliance concerns.</li><li>Additional enforcement may follow if similar issues continue.</li><li>Account-level restrictions can affect the ability to continue advertising.</li><li>In more serious cases, enforcement can extend beyond an individual ad to other connected business assets.</li><li>Recovery depends on the scope and underlying reason for the enforcement action.</li></ol></article><p style="color:#334055;font-size:15px;line-height:1.7;margin:24px 0 0">Understanding that gap helps CBD brands plan for review, rejection, and recovery more realistically.</p>
CBD compliance considerations we monitor
These are recurring compliance considerations observed across CBD advertising. They reflect ComplyAi's analysis of enforcement outcomes and public policy requirements, not published Meta classifier rules or thresholds.
<ul class="aac-vlist"><li><strong>Health-claim language.</strong> Explicit therapeutic claims that describe CBD as a treatment for a specific condition (anxiety, depression, pain, inflammation, insomnia, PTSD, arthritis) are a recurring compliance concern in CBD advertising. Softer or implicit claims (“calm,” “relief,” “wellness”) can still create review concerns depending on the full ad and destination.</li><li><strong>Personal-attributes framing.</strong> Second-person language that ascribes a condition to the viewer (“Lose your anxiety,” “stop suffering,” “tired of pain?”) can create additional compliance concerns.</li><li><strong>Quantified efficacy.</strong> Specific percentages of symptom reduction, guaranteed sleep hours, or precise physiological effects can create additional compliance considerations, including where the underlying claim is study-supported.</li><li><strong>Brand-name drug references.</strong> Mentioning prescription drugs that the CBD product is positioned to replace (such as Xanax, Ambien, or Oxycodone) can create additional review, as can references to THC consumables when the product is non-THC CBD.</li><li><strong>Medical-style imagery.</strong> Pills, syringes, gummies styled to look pharmaceutical, or dropper bottles styled like medicine can suggest a medicinal product context. Advertisers should consider how visual elements read alongside the ad copy.</li><li><strong>Landing-page claim consistency.</strong> A clean ad pointing at a landing page with health-claim language can still be evaluated against that destination content. Review the ad and destination together.</li></ul>
How CBD brands can maintain compliant advertising
With authorizations in place and the flagged policies as an avoidance map, four operational patterns actually keep spend live through enforcement waves.
<div class="aac-vgrid aac-vgrid--1"><article class="aac-vcard"><span class="aac-vpill">Pattern 01</span><h4 class="aac-vtitle">Wellness-state language, not therapeutic-claim language</h4><div class="aac-vbody"><p>“Supports a balanced evening routine” is generally less explicit than a therapeutic claim such as “Treats insomnia.” Wellness-state language describes what someone does with the product rather than a condition it is claimed to treat. Neither wording is automatically approved; the full claim, product, destination, and applicable requirements still matter.</p></div></article><article class="aac-vcard aac-vcard--teal"><span class="aac-vpill">Pattern 02</span><h4 class="aac-vtitle">FDA and regulatory disclosures where applicable</h4><div class="aac-vbody"><p>“This statement has not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.” Where applicable, required FDA and regulatory disclosures should be present on the landing page. Disclosures do not override Meta's advertising policies or make otherwise prohibited claims permissible.</p></div></article><article class="aac-vcard"><span class="aac-vpill">Pattern 03</span><h4 class="aac-vtitle">Landing-page hygiene above the fold</h4><div class="aac-vbody"><p>Advertisers should review the landing page as part of the broader advertising surface, rather than treating it as separate from the creative. Wellness-state framing above the fold and product-detail information in the product-detail section is a common pattern.</p></div></article><article class="aac-vcard aac-vcard--teal"><span class="aac-vpill">Pattern 04</span><h4 class="aac-vtitle">United States targeting only, with state-level care beneath it</h4><div class="aac-vbody"><p>Meta's CBD self-serve authorization is currently scoped to the United States for eligible CBD advertising. Within the US, state-level CBD regulation varies, and campaigns should be aligned to markets where the product is legal to sell and advertise. Confirm current Meta and jurisdictional requirements before launch.</p></div></article></div>
What to review when CBD ads face enforcement
Recovery is the highest-stakes surface on this page. Time off-air compounds quickly, and the appropriate response depends on the specific decision, the affected asset, and the account's current status. ComplyAi helps identify the underlying issue behind an enforcement event so teams can choose whether to revise, replace, or appeal the affected asset.
<p style="color:#334055;font-size:15px;line-height:1.7;margin:0 0 20px">The appropriate response depends on which situation the account is in.</p><div class="aac-vgrid aac-vgrid--1"><article class="aac-vcard"><span class="aac-vpill">Situation 01 · Ad rejected</span><h4 class="aac-vtitle">Individual ad rejected</h4><div class="aac-vbody"><p><strong>What is happening:</strong> An individual ad has been rejected. Common reasons include health-claim language, personal-attributes framing, quantified efficacy, or destination content that is inconsistent with the ad.</p><p><strong>What to review:</strong> The specific rejection reason, the affected creative and destination, and whether the underlying issue is a wording change, a landing-page fix, or something more substantive.</p></div></article><article class="aac-vcard aac-vcard--teal"><span class="aac-vpill">Situation 02 · Account restricted</span><h4 class="aac-vtitle">Account-level restrictions affecting delivery</h4><div class="aac-vbody"><p><strong>What is happening:</strong> The account has received an account-level restriction that affects the ability to continue running ads normally.</p><p><strong>What to review:</strong> The specific restriction notice, the ads and destinations that preceded it, and whether the underlying pattern can be addressed before broader effects follow.</p></div></article><article class="aac-vcard"><span class="aac-vpill">Situation 03 · Account suspended</span><h4 class="aac-vtitle">Enforcement extending beyond the individual ad</h4><div class="aac-vbody"><p><strong>What is happening:</strong> Enforcement may extend beyond the individual ad to other connected business assets.</p><p><strong>What to review:</strong> The connected account and affected business assets, the reason provided by Meta, and whether the appropriate response is to appeal, revise, or replace at the account scope rather than the individual ad.</p></div></article><article class="aac-vcard aac-vcard--teal"><span class="aac-vpill">Situation 04 · Spend capacity change</span><h4 class="aac-vtitle">Quieter account-level effects</h4><div class="aac-vbody"><p><strong>What is happening:</strong> Some account-level changes may not appear as a direct rejection of a single ad. These can include changes in delivery or spending capacity, depending on the account and enforcement context.</p><p><strong>What to review:</strong> Recent ad activity, account status notices, and the broader compliance surface. Investigate these changes in context rather than treating them as isolated budget changes.</p></div></article></div><h3 class="aac-vsub-h">Two considerations behind faster resolutions</h3><p style="color:#334055;font-size:15px;line-height:1.7;margin:0 0 12px">Two considerations are especially useful when responding to CBD enforcement:</p><ul class="aac-vlist"><li><strong>Understand the decision before responding.</strong> The information Meta provides in Ads Manager can be broad. Understanding the specific decision and its policy context helps teams determine the appropriate response rather than defaulting to a generic appeal.</li><li><strong>Consider the full advertising surface.</strong> Enforcement may extend beyond the individual ad. Reviewing the connected account and affected business assets before responding tends to be more useful than treating each rejection as isolated.</li></ul><p style="color:#334055;font-size:15px;line-height:1.7;margin:20px 0 0">Broader guidance on account-level enforcement situations lives at <a href="/blog/meta-ad-account-reinstatement" class="aac-vlink">Meta Ad Account Reinstatement</a>, the Pillar 2 hub.</p>
Cross-account observation and adjacent-category context
A brand monitoring only its own account sees its own enforcement history. ComplyAi adds a cross-account view, allowing advertisers to identify recurring compliance patterns and broader changes affecting the vertical.
<p style="color:#334055;font-size:15px;line-height:1.7;margin:0 0 12px">A CBD brand monitoring only its own account sees only its own rejections. ComplyAi adds a cross-account view, allowing advertisers to identify recurring compliance patterns and broader changes affecting the vertical.</p><ul class="aac-vlist"><li><strong>Recurring copy patterns across similar accounts.</strong></li><li><strong>Landing-page elements associated with enforcement outcomes.</strong></li><li><strong>Broader enforcement trends across the vertical.</strong></li><li><strong>Cross-account context that helps distinguish isolated events from broader patterns.</strong></li></ul><p style="color:#334055;font-size:15px;line-height:1.7;margin:20px 0 0">ComplyAi's <strong>Enforcement Signal Layer</strong> adds context to the enforcement information available through connected platform data. For advertisers operating across multiple regulated categories, review each product and campaign according to its own policy, authorization, and market requirements. A compliance approach that is appropriate for one vertical may not transfer directly to another.</p>