Medical cannabis and CBD clinic marketing: FDA, DEA scheduling and ad policy

A medical cannabis certification clinic sells a clinical evaluation: a licensed practitioner reviews a patient’s history against the rules of the state program and decides whether to sign a certification. A practice that stocks CBD at the front desk sells a consumer product that FDA has not approved for any use outside one prescription drug. Both businesses face the same pull in their marketing, toward condition lists, relief promises and approval guarantees, and both sit under several sets of rules at once: FDA on product claims, DEA on scheduling, the FTC on advertising, the state program on who may certify and for what, and Google and Meta on what can run as an ad. This guide sets out what each of those sources says as of October 29, 2026, and how to write pages, listings and ads that describe the visit or the product without promising what the evaluation or the product will do.

Several neighboring topics have their own guides, so they are not repeated here. Video visits in general are covered in telehealth marketing for practices, and pain claims in pain management clinic marketing. Restricted categories across ad platforms are covered in healthcare ad policy basics and Facebook and Instagram ads for medical practices. Patient stories are covered in testimonials and before and after photos, and natural product claims in integrative medicine marketing claims. For natural, organic and non-toxic wording on products, see our guide to natural, organic and eco-friendly claims.

Medical cannabis and CBD are two different things

FDA draws the line in its question and answer page on cannabis products. Cannabis is a plant with more than eighty biologically active compounds; the best known are delta-9-tetrahydrocannabinol, or THC, which produces the high, and cannabidiol, or CBD. Parts of the plant have been controlled under the Controlled Substances Act since 1970 as marihuana. The 2018 Farm Bill removed hemp, defined as cannabis and its derivatives with no more than 0.3 percent delta-9 THC on a dry weight basis, from that definition.

FDA adds a point that is easy to miss: removing hemp from the Controlled Substances Act did not take CBD out of FDA’s reach. FDA says cannabis and cannabis-derived products are subject to the same authorities and requirements as FDA-regulated products containing any other substance, whether or not they count as hemp. So a certification clinic answers mainly to state program rules and DEA scheduling, and a CBD shelf answers mainly to FDA and FTC claims rules. A practice that does both has two sets of copy to get right, and they belong on separate pages.

Federal scheduling as of October 2026

On April 28, 2026, a final rule published at 91 FR 22714 and effective the same day placed two groups of marijuana products in Schedule III of the Controlled Substances Act: drug products containing marijuana that FDA has approved, and marijuana, marijuana extract and naturally derived THC that are subject to a state issued license to manufacture, distribute or dispense marijuana for medical purposes. The current text of 21 CFR 1308.13(g) lists both. The same rule says that marijuana outside those groups remains a Schedule I controlled substance, and 21 CFR 1308.11 still lists marihuana in Schedule I.

The rule also says it does not affect the status of hemp, and that nothing in it is a determination about federal tax liability. A separate notice published the same day, at 91 FR 22777, set a DEA hearing on the broader proposal to move marijuana to Schedule III, beginning June 29, 2026. As of our check on October 29, 2026, we did not find a final rule in the Federal Register completing that broader rescheduling.

For marketing, two lines follow. First, do not write that marijuana is federally legal, or that federal law now allows medical marijuana everywhere. The 2026 rule covers state licensed medical marijuana and FDA approved products, and it ties DEA registration to the scope of the state license. Second, date any statement about federal status on your site, and recheck it before each campaign, because the broader proceeding was still open when we checked.

What a certification is under the 2026 rule

The 2026 rule added paragraph (k) to 21 CFR 1301.13, an expedited DEA registration process for entities that hold state medical marijuana licenses. Paragraph (k)(5) speaks to the document a certification clinic produces. A certification or other document, including an electronic one, that state law deems sufficient for a user to obtain marijuana for medical purposes is sufficient to permit dispensing, so long as it is dated as of and signed on the day it is issued, bears the full name and address of the user, and contains the name, address and state license number of the practitioner who signed it and is authorized to do so under state law.

The rule’s background section describes how state programs work: state medical licensing regimes confine distribution to registered patients or caregivers through approved dispensaries or other authorized channels, and registered and licensed physicians oversee patient qualification based on state specific criteria and qualifying conditions. Who may certify, which conditions qualify, whether a video visit is allowed, how long a certification lasts and what the patient registration costs are all set state by state. Your pages should say which state’s program you work under, link to that program’s official page for the list of qualifying conditions, and avoid restating that list as conditions your clinic treats.

Describing the visit without promising the outcome

The certification visit is a clinical evaluation, and its result is the practitioner’s decision. Copy that promises the result describes something else. Guaranteed approval, get your card today, 100 percent approval rate, and no approval, no charge, presented as a selling point, all tell the reader the decision is made before the evaluation. If the promise is false, it is a deceptive practice under 15 U.S.C. 45; and if it is true that every visit ends in a signature, the problem is the visit, which no rewrite of the ad fixes.

What a clinic can say is what happens and what it costs: who performs the evaluation and their license, what records to bring, how long the visit takes, whether it is in person or by video where the state allows it, the fee and whether it is charged whatever the practitioner decides, what the state registration step involves and who pays for it, and how renewal works. If the clinic refunds the fee when the practitioner does not certify, it can state that as a refund policy, in plain terms, without turning it into an approval promise.

Keep condition and relief claims out as well. FDA says it has not approved a marketing application for cannabis for the treatment of any disease or condition, and so has not determined that cannabis is safe and effective for any particular disease or condition. A state program that lists a condition as qualifying has made a decision about eligibility under state law; it has not established that cannabis treats that condition. Pages that say cannabis relieves pain, anxiety or insomnia are health benefit claims that need competent and reliable scientific evidence under the FTC Act, which the FTC’s guidance says will generally mean randomized, controlled human clinical testing.

CBD claims: what FDA has said

FDA has approved one CBD product, a prescription drug for seizures associated with three rare conditions, and its question and answer page says there are no other FDA approved drug products that contain CBD. Under the FD&C Act, a product intended for a therapeutic or medical use is a drug, and FDA says an unapproved new drug cannot be distributed or sold in interstate commerce. A CBD product marketed to treat a disease or condition is an unapproved new drug.

FDA has also concluded that THC and CBD products are excluded from the dietary supplement definition under 21 U.S.C. 321(ff)(3)(B). That provision excludes a substance that is an active ingredient in an approved drug, or that was authorized for investigation as a new drug with substantial clinical investigations made public, unless it was marketed as a supplement or food first, and FDA says the information submitted so far has not changed its conclusion. And 21 U.S.C. 331(ll) prohibits introducing into interstate commerce a food to which such a drug ingredient has been added. FDA’s answer to whether a food with added CBD may be sold in interstate commerce is no. So a CBD product cannot be marketed as a supplement, and a CBD gummy or drink cannot be marketed as a food.

FDA’s consumer update lists the risks it has identified: CBD can cause liver injury, can affect how other drugs work, and, used with alcohol or other drugs that slow brain activity, increases the risk of sedation and drowsiness. It reports male reproductive toxicity in studies of animals. It also says the agency tested the chemical content of some products and that “many were found to not contain the levels of CBD they claimed.” A shelf talker that says safe, natural, no side effects or pure contradicts what FDA has published.

FDA warning letters as a claims checklist

FDA keeps a page of warning letters it has issued to firms marketing cannabis-derived products, including CBD and delta-8 THC products, organized by year from 2016 through 2025 as of our check. FDA’s question and answer page links its announcements of those actions, and their titles show what drew them: claims to treat cancer, Alzheimer’s disease, opioid withdrawal, pain and pet anxiety; claims to treat teething and ear pain in infants, autism, ADHD and Parkinson’s disease; products sold to treat medical conditions and opioid addiction; an ingredient sold to treat seizures in a rare genetic disease; and CBD added to food and beverage products. Read the list as a set of claims to keep off your site, your social posts and your front desk.

FDA has said it will continue to take action against CBD and other cannabis-derived products in coordination with state regulatory partners. Google’s Unapproved substances policy, covered below, separately bars ads for products that have been subject to any government or regulatory action or warning.

A practice that sells CBD products

FDA’s answer to whether it is legal to sell CBD products is that it depends, among other things, on the intended use of the product and how it is labeled and marketed. In a clinic, the intended use is shaped by more than the label. A clinician who hands a patient a CBD product during a visit for a condition, or a page that places the product beside a treatment menu, ties the product to that condition. Keep any retail CBD on its own page, described by what it is, with no condition, symptom or treatment language, and no suggestion that a clinician has evaluated it for the patient’s condition.

The federal definition of hemp is changing. Public Law 119-37, enacted November 12, 2025, rewrites 7 U.S.C. 1639o effective 365 days after enactment, which falls on November 12, 2026. The new definition counts total THC, including THCA, and excludes final hemp-derived cannabinoid products with more than 0.4 milligrams combined total per container of total THC and cannabinoids with similar effects, along with products whose cannabinoids were synthesized or manufactured outside the plant. A product that is hemp today may not be hemp under the new text, so check each product’s lab results against the new definition and get your supplier’s statement in writing before the date arrives.

Google Ads

Google’s Recreational drugs policy, under Dangerous products or services, does not allow ads for substances that alter mental state for recreation or otherwise induce highs, and it lists marijuana among its examples. It also bars ads for products or services marketed as facilitating recreational drug use. We did not find a section of Google’s published policies written for medical cannabis certification visits; ad text and keywords that name marijuana products or dispensary terms run into the recreational drugs examples.

For CBD, the same policy allows ads for topical, hemp-derived CBD products with THC content of 0.3 percent or less, only after the advertiser applies, and only targeting two states and one territory that the policy names. Its examples are creams, sprays, roll-ons, lotions, bath bombs and candles, so ingestible CBD is not covered. The Unapproved substances policy, part of Healthcare and medicines, adds that a non-pharmaceutical topical CBD advertiser must hold a certification from a third party program the policy names before applying, and it bars ads for non-government approved products marketed in a way that implies they are safe or effective for preventing, curing or treating a disease or ailment, and for products subject to any government or regulatory action or warning.

Meta ads

Meta’s Drugs and Pharmaceuticals ad standard says ads may not promote or offer the sale of THC products or cannabis products containing related psychoactive components, ingestible or not. Ads for CBD or similar cannabinoid products are allowed only with Meta’s prior written authorization, only for advertisers actively certified by a third party program the standard names, only for products that do not contain more than 0.3 percent THC, only targeting people in the U.S. and only people 18 or older. Those ads cannot contain any claim that states or implies that the product can treat, cure, prevent, mitigate or diagnose a disease or medical condition in humans or animals.

Meta’s Health and Wellness standard adds an exhaustive list of incurable diseases and terminal illnesses that ads may not claim to cure, heal or eliminate, including cancer, Alzheimer’s, Parkinson’s and autism, and it bars clickbait such as promises of specific outcomes within a set timeframe. Meta’s transparency pages did not load from our server, so we checked these standards through a public web archive copy dated October 26, 2026; check the live pages before you launch.

Testimonials, reviews and local listings

A patient post that says cannabis fixed their sleep, or a review that says CBD cured their pain, is a claim once the clinic shares it. Under 16 CFR 255.2(b), an advertisement that conveys an endorser’s experience with a key attribute is likely to be read as showing what consumers will generally achieve, so unless the advertiser can substantiate that the experience is representative, the ad should clearly and conspicuously disclose the generally expected performance. For a claim the clinic could not make itself, a patient saying it does not help. A review that says I got approved in five minutes conveys an approval promise the clinic should not make either.

The business profile and directory listings follow the same rules as the site: the practice name as it is, the practitioner’s credentials, the address, hours and the visit types offered. Keep condition lists, relief claims and approval language out of the description and the posts. If the clinic certifies under one state’s program only, say so, so that patients from other states do not book a visit the practitioner cannot complete.

Illustration: a certification clinic rewrites its site

Illustration: a certification clinic’s old home page reads Get your medical card guaranteed, approved in minutes or your money back, with a grid of twenty conditions under the heading What we treat. The rewrite opens with what the visit is: an evaluation by a licensed practitioner under the state program, in person or by video where the state allows it. It lists the fee and states that it is charged for the evaluation, whatever the practitioner decides, and it explains the state registration step that follows a certification. The condition grid is replaced by a link to the state program’s own page of qualifying conditions, with a note that the practitioner decides eligibility. The page dates its one sentence on federal status and gives the source.

Illustration: an integrative practice sells CBD oils and gummies at checkout, with a sign that reads natural relief for anxiety and pain. It removes the gummies, since FDA says a food with added CBD cannot be sold in interstate commerce, and checks each remaining product’s lab results against the new federal hemp definition. The sign now gives the product name, size, price and lab result link and nothing more. Clinicians stop handing products to patients during visits, and the site moves the products off the treatment menu to a separate page with no condition language. The practice drops its plan for a search campaign on CBD for anxiety, which Google’s policy would not allow.

Checklist

• Certification visit pages and CBD product pages kept separate.
• No guaranteed approval, approval rate or approved in minutes claims; the practitioner’s decision described as a decision.
• Fee stated, with whether it is charged whatever the practitioner decides; any refund policy written as a policy, not a promise.
• The state program named, with a link to its official list of qualifying conditions, not a list of conditions you treat.
• No claim that cannabis or CBD treats, relieves or prevents a disease, symptom or condition (FDA; 15 U.S.C. 45, 52; FTC Health Products Compliance Guidance).
• Any statement on federal status dated, sourced to the April 28, 2026 rule and the current CFR, and rechecked before each campaign.
• No CBD sold as a dietary supplement or added to food or drinks (21 U.S.C. 321(ff)(3)(B), 331(ll)).
• No safe, natural, no side effects or pure claims for CBD.
• Each CBD product’s lab results checked against the new 7 U.S.C. 1639o definition before it takes effect.
• Google Ads: no marijuana product or dispensary terms; CBD ads only for eligible topical products, after applying, in the locations the policy names.
• Meta: no THC or psychoactive cannabis product ads; CBD only with written authorization, U.S. only, 18 and older, no health claims.
• Testimonials and reviews meet 16 CFR 255.2(b) and carry no claim you could not make yourself.

How we help

We build websites, local search, Google Ads and AI front desk tools for independent practices and health businesses. For a certification clinic, we can rebuild a website around the visit, the fee, the state program and booking, date and source every statement on federal status, and keep condition and approval claims out of pages, listings and ads. For a practice that sells CBD, we separate retail pages from clinical ones and check ad plans against Google and Meta policy before launch. Our tools are built with HIPAA in mind. We confirm in writing what a BAA covers before any patient information flows through a tool, and if it is not covered, we do not route patient information through it. We do not sell lead lists and we do not pay for referrals. For the wider rules, see our healthcare marketing rules hub.

Sources

• FDA: FDA Regulation of Cannabis and Cannabis-Derived Products, Including Cannabidiol (CBD) (content current as of July 16, 2024)
• FDA consumer update: What You Need to Know (And What We’re Working to Find Out) About Products Containing Cannabis or Cannabis-derived Compounds, Including CBD (content current as of March 5, 2020)
• FDA: Warning Letters for Cannabis-Derived Products (content current as of September 3, 2025)
• 21 U.S.C. 321(ff): Definition of dietary supplement
• 21 U.S.C. 331(ll): Prohibited acts, food with added drug ingredients
• 7 U.S.C. 1639o: Definition of hemp, with the amendment by Public Law 119-37 (November 12, 2025)
• DEA final rule: Rescheduling of FDA Approved Products Containing Marijuana From Schedule I to Schedule III, 91 FR 22714 (April 28, 2026)
• DEA notice of hearing: Rescheduling of Marijuana, 91 FR 22777 (April 28, 2026)
• 21 CFR 1301.13(k): Medical marijuana registrations
• 21 CFR 1308.11: Schedule I
• 21 CFR 1308.13: Schedule III
• 15 U.S.C. 45: Unfair methods of competition unlawful; prevention by Commission
• 15 U.S.C. 52: Dissemination of false advertisements (FTC Act section 12)
• FTC: Health Products Compliance Guidance (December 2022)
• 16 CFR 255.2: Consumer endorsements
• Google Ads policy: Recreational drugs
• Google Ads policy: Unapproved substances
• Meta Advertising Standards: Drugs and Pharmaceuticals (checked via archived copy of October 26, 2026)
• Meta Advertising Standards: Health and Wellness (checked via archived copy of October 23, 2026)

More in Cash-pay, aesthetic and wellness care