NC Hemp Shop Compliance Guide: Labeling, Testing & Age Verification (2026)

Ask a Triangle hemp shop owner who inspects them and you will usually get a pause, then a guess. There is no state hemp board. No inspector walks in with a checklist. No permit hangs by the register.

That gap is real, and it leads a lot of operators to the wrong conclusion. The absence of a hemp-specific rulebook in North Carolina does not mean the absence of rules. It means the rules that apply to you were written for food, for advertising, for mailed tobacco products, and for a federal hemp definition that is being rewritten on a deadline. They are scattered, they are enforceable, and almost none of them have the word "hemp" in the title.

This guide maps that terrain for the operator side of the counter. If you are still in the planning stage, start with our guide to opening a hemp dispensary in NC. If your question is what to do before the federal deadline, that is the preparation guide. This one is about what is required of you on an ordinary Tuesday, and what changes if the General Assembly finishes what it started.

What North Carolina Actually Requires of a Hemp Shop Today

Start with the honest answer, because most compliance advice aimed at hemp retailers is written for licensed marijuana markets and does not describe North Carolina at all.

There is no state hemp retail license. There is no state-mandated seed-to-sale tracking system. There is no state testing mandate for finished consumables, no state packaging standard, no state-required warning label, and as of today no state age restriction on buying hemp products. Two bills would add an age floor, and neither has finished.

What you do have is the general body of law that applies to anyone selling a consumable product to the public in North Carolina, plus federal law that applies to what is in the package and how it travels.

Read that table twice, because the shape of it is the point. Everything in the "no" column is hemp-specific. Everything in the "yes" column came from somewhere else. A compliance program built only around hemp headlines will miss every single obligation you actually have.

Why the State Has No Hemp Rulebook to Hand You

This is not an oversight, and it is not a loophole anyone is quietly exploiting. North Carolina deliberately handed hemp cultivation back to the federal government and never built a replacement on the retail side. Understanding how that happened matters, because it tells you which agency to call when you have a question and which ones will politely tell you they have no jurisdiction over your shop. It also explains why so much hemp compliance advice circulating online is useless here: nearly all of it is written for states that kept or created an agency with authority over the product.

The state ran an Industrial Hemp Pilot Program under the NC Industrial Hemp Commission, the research framework the 2014 Farm Bill authorized, until the newer federal program superseded it. NCDA&CS announced in August 2021 that the pilot would end and that "North Carolina farmers interested in growing hemp will now get their licenses from the U.S. Department of Agriculture," with roughly 1,500 licensed producers notified of the change. The department counted 14,016 licensed acres and 6.8 million licensed square feet of greenhouse production as of July 30, 2021, so this was not a small administrative handoff (NCDA&CS). The pilot closed on December 31, 2021 and USDA licensing took over on January 1, 2022.

The department's current guidance is blunter still. The governing article "was repealed effective June 30, 2022 and the governance of hemp cultivation in North Carolina transferred to the United State Department of Agriculture," and consequently "the State of North Carolina no longer possesses the regulatory authority to oversee or administer a regulatory system for the licensing or regulation of hemp producers and processors" (NCDA&CS).

Two things follow from that sentence, and operators routinely get both of them wrong.

First, nobody in Raleigh can issue you a hemp license, because the authority to create one was repealed. When a supplier waves a "North Carolina hemp license" at you, ask what agency issued it. If the answer is the NC Industrial Hemp Commission, the document is historical. A current grower credential is a USDA producer license.

Second, the vacuum applies to cultivation and processing, not to everything. The Food and Drug Protection Division of NCDA&CS never lost its authority over food, and a hemp gummy is food.

Hemp Labeling Requirements: The Federal Floor and the North Carolina Floor

Search "hemp labeling requirements" and you will land on Texas, Louisiana, Minnesota, and California program pages, because those states wrote hemp-specific labeling rules. North Carolina did not. The question is therefore not "what does NC's hemp label law require" but "which general laws does a hemp label have to satisfy," and there are two answers stacked on top of each other.

The North Carolina floor is the Food, Drug and Cosmetic Act. Under G.S. 106-122 it is unlawful to manufacture, sell, deliver, hold, or offer for sale any food that is adulterated or misbranded. G.S. 106-130 then defines misbranded, and the first condition is the broadest: a food is misbranded "if its labeling is false or misleading in any particular." The same statute requires "the name and place of business of the manufacturer, packer, or distributor" and "an accurate statement of the quantity of the contents in terms of weight, measure, or numerical count."

Those requirements are not suggestions with a warning-letter buffer in front of them. G.S. 106-125 authorizes a state agent who finds a suspect product to affix "a tag or other appropriate marking giving notice that such article is, or is suspected of being, adulterated or misbranded and has been detained or embargoed," and then to petition a court for condemnation. The Food Branch describes its own work as inspecting food manufacturers, warehouses, distributors, and retail outlets "utilizing the North Carolina Food, Drug and Cosmetic Act," with operators in violation "subject to civil and/or criminal penalties" (NCDA&CS Food Branch).

The federal floor is stricter than most operators expect. FDA's position has not softened: it is "a prohibited act to introduce or deliver for introduction into interstate commerce any food (including any animal food or feed) to which THC or CBD has been added" under section 301(ll) of the FD&C Act, and THC and CBD products "are excluded from the dietary supplement definition under section 201(ff)(3)(B)" (FDA). FDA has not brought enforcement against ordinary retailers over that provision, which is why the market exists at all, but it is the legal backdrop to every "supplement facts" panel you see on a hemp shelf.

Where FDA does act is claims. The agency has "sent warning letters in the past to companies illegally selling CBD products that claimed to prevent, diagnose, treat, or cure serious diseases, such as cancer." The practical rule for a shop is simple and absolute: your staff, your shelf talkers, your website, and your social posts must not say a product treats anything.

That rule is harder to hold than it sounds, because the violation usually happens in conversation rather than in print. A customer describes a symptom, a well-meaning budtender answers the question that was asked, and the shop has just made a drug claim out loud. Train the substitution: describe what a product is and what customers commonly report, never what it does to a condition. The same discipline applies to reposting a supplier's marketing copy, which is where a surprising share of non-compliant claims enter a retailer's website.

The copycat packaging issue deserves its own line because it is the one enforcement action most likely to touch a retailer. On July 16, 2024, FTC and FDA sent a second set of cease-and-desist letters to five companies selling delta-8 THC edibles in packaging designed to look like children's snacks. The FTC's stated basis was that the advertising "may violate the FTC Act's prohibition against unfair or deceptive acts in the marketplace, including practices that present unwarranted health or safety risks," and that "imitating non-THC-containing food products that children consume is also misleading," noting children "are less likely to focus on or be able to understand text on the product labels" (FTC). If a product on your shelf looks like a grocery-aisle candy brand, that is a product to send back, not to discount.

Testing and COAs: Mandatory in the Field, Voluntary on the Shelf

Here is the structural oddity at the center of hemp compliance, and understanding it will make you better at buying inventory than most of your competition.

The plant is tested under a federal mandate. The finished product on your shelf is not tested under any mandate at all.

USDA's hemp rule requires that samples "must be collected within 30 days prior to the anticipated harvest," and that after December 31, 2022 only laboratories registered with the DEA may conduct that testing. A result above the acceptable threshold "shall be conclusive evidence that the lot represented by the sample is not in compliance" and the lot must be disposed of or remediated (7 CFR 990.3).

Note what that test measures. USDA has always used total THC for the crop, not delta-9 alone. The rule defines total THC as the value "that expresses the potential total delta-9 tetrahydrocannabinol content derived from the sum of the THC and THCA content," with the conversion formula stated outright: Total THC = (0.877 x THCA) + THC (7 CFR 990.1).

Two operator takeaways come out of that diagram. The first is that the 87.7 percent figure everyone is now arguing about in Raleigh is not a new invention by prohibitionists. It is the decarboxylation math USDA has used on the growing crop since the program began. What changes under the new federal definition is that the same arithmetic follows the plant into the finished product, which is precisely why THCa flower is the category most exposed.

The second is that between the harvest test and your register, there is no required checkpoint. If a manufacturer supplies a certificate of analysis, it is because the market asked, a retailer demanded it, or a contract required it. That makes your purchase order the only real enforcement mechanism you have, so write it like one: full-panel COA per batch, cannabinoid profile including THCa and total THC, contaminant testing, batch number matching the package, and a dated report from a named laboratory. Our guide to reading a COA walks through what a real one looks like and the red flags on a fake.

Age Verification: No State Law Yet, and Why You Should Card at 21 Anyway

North Carolina currently sets no minimum age to buy hemp consumables. That surprises people, including some shop owners who assume the 21+ signs on their own door reflect a statute.

Two bills would change it. Senate Bill 328, "Age 21 Hemp-Derived Consumables," passed the Senate 42-0 on May 1, 2025 and passed the House 106-1 on June 25, 2025, then was referred to the Senate Committee on Rules and Operations on June 26, 2025, where it has sat ever since (NC General Assembly). It needs one concurrence vote to reach the Governor. House Bill 328 carries the same age rule inside a much larger package, and its conference report has been parked in House Rules since July 30, 2026 (NC General Assembly). Our 2026 session tracker follows both.

So the age rule is not law, and it has never received a vote against it worth counting. That is the strongest signal in the whole session: 148 legislators have voted yes on an age-21 hemp bill, and one has voted no.

Against that backdrop we audited our own directory to see what Triangle shops are actually doing. On September 14, 2026 we took all 86 locations tracked in our dispensary directory, of which 84 list a website, resolving to 42 distinct business domains. We requested each homepage and searched the delivered HTML for two things: any age-verification mechanism, and any reference to certificates of analysis or third-party lab results. Thirty-eight of the 42 domains responded.

Half the reachable sites carry no age-verification code on the homepage they serve, and six carry neither an age gate nor any mention of lab results. Because we read only the HTML the server delivers, a gate that a script injects after page load would not register, so treat 19 as a minimum rather than a measurement of intent. Even read generously, it is a wide spread for a category whose entire political defense rests on selling responsibly to adults.

There is a second reason to hold the line, and it is the evidence legislators actually cite in committee. FDA reported 104 adverse event reports from people who consumed delta-8 THC products between December 1, 2020 and February 28, 2022, of which 55 percent "required intervention (e.g., evaluation by emergency medical services) or hospital admission." Over a slightly different window, January 1, 2021 through February 28, 2022, national poison control centers logged 2,362 delta-8 exposure cases. Forty-one percent involved patients under 18, and 40 percent were unintentional exposures (FDA).

Those two percentages are the entire argument against your industry, compressed. A pediatric share that high and an unintentional share that high describe a product reaching people who did not choose it, which is what age gates and non-imitative packaging exist to prevent. A shop that cards rigorously and refuses candy-lookalike SKUs is not just avoiding a future fine, it is subtracting itself from the statistic that gets quoted in the next committee hearing.

Carding at 21 today costs you almost nothing and buys three things: it removes the single most effective argument used against the industry in committee, it means the day SB 328 becomes law your door policy does not change, and it protects you from the civil penalty schedule waiting in HB 328. Write the policy down rather than leaving it to judgment, train every new hire to it in their first shift, and log refusals the way a bar logs them, because a documented practice is worth far more than a remembered one if anyone ever asks. More on those penalty numbers below.

Shipping Hemp Vapes: The PACT Act Is the Rule Most Shops Miss

If you ship any inhalable hemp product to a customer, stop and read this section twice, because it is the compliance obligation most likely to be missed entirely by an otherwise careful Triangle operator. It is also the one with the least forgiving structure: unlike a labeling problem, which usually starts with a notice and a chance to fix it, this one is a registration and reporting regime that you are either inside of or outside of from the first package you hand to a carrier.

The reason it gets missed is that nothing about the rule announces itself as applying to hemp. It lives in a tobacco statute, it is administered by tobacco tax authorities, and the phrase that captures a hemp cartridge sits four definitions deep.

The Prevent All Cigarette Trafficking Act was written for mailed cigarettes. It was amended to cover vaping devices, and the definition Congress used is far broader than the name suggests. Under 15 U.S.C. 375, the term "cigarette" includes "an electronic nicotine delivery system," and an electronic nicotine delivery system is defined as "any electronic device that, through an aerosolized solution, delivers nicotine, flavor, or any other substance to the user inhaling from the device."

Read the last five words again. "Or any other substance." A hemp vape cartridge contains no nicotine and is still squarely inside that definition, because the statute is written around the delivery mechanism rather than the payload.

That pulls a hemp vape shipment into the PACT Act's machinery. A person who "sells, transfers, or ships for profit" covered products in interstate commerce must register with the Attorney General and with the tobacco tax administrator of the destination state, and must file by the tenth of each month "a memorandum or a copy of the invoice covering each and every shipment" made during the previous month, "organized by city or town and by zip code" (15 U.S.C. 376).

Registration is per destination state, not once nationally, which is the detail that turns a simple mail-order idea into a real administrative program. Shipping to six states means six registrations and six monthly filings, every month, whether or not you shipped anything that month.

The Postal Service has already ruled on the hemp question directly, and its answer leaves no room to argue. In the final rule implementing the ENDS amendment, USPS wrote that "notwithstanding Congress's use of 'nicotine' in the term 'electronic nicotine delivery systems,' the plain language of the POSECCA definition makes clear that nonmailable ENDS products include those containing or used with not only nicotine, but also 'flavor[ ] or any other substance.'" It then added that "it goes without saying that marijuana, hemp, and their derivatives are substances," and that such delivery systems, parts, components, liquids, and accessories "clearly fall within the POSECCA's scope" (86 FR 58398). Hemp vapes are generally nonmailable through USPS, subject to narrow exceptions including a business-to-business allowance a legally operating company can apply for.

One more layer sits on top of the reporting. A delivery seller must verify the buyer's age before accepting the order, "obtaining the full name, birth date, and residential address of that person" and verifying it "through the use of a commercially available database," then require at delivery that an adult of legal age "sign to accept delivery" and present government-issued photo identification (15 U.S.C. 376a). A checkout page checkbox satisfies none of that.

None of this touches a customer who walks into your store, picks up a cartridge, and walks out. It applies to shipping. Which means the moment you add a shipping option to your website for vapes or disposables, you have taken on a federal registration and monthly reporting obligation that your gummy line does not carry. Plenty of Triangle shops run a checkout without realizing this; our hemp shop marketing guide covers the channel side of selling online, but the shipping compliance side starts here.

The Two Federal Dates That Change Your Inventory

Everything above describes the rules as they are. The rules as they will be arrive on two separate days, and the split is recent enough that a lot of published guidance still gets it wrong.

Update, September 12, 2026: The delay is law. The President signed H.R. 6500 on September 2, 2026, and it became Public Law 119-103, after the House passed it 370-48 on September 1 and the Senate passed it 90-6 on August 8. Its Section 2019 splits the P.L. 119-37 hemp rewrite across two dates. On November 12, 2026, one narrow piece takes effect: intermediate and final products containing cannabinoids that a Cannabis sativa L. plant cannot naturally produce. Everything else waits until December 11, 2026 (Section 2019, enrolled text). That remainder is the part that reaches the shelf: the 0.3 percent total-THC test that counts THCa, the exclusion for cannabinoids the plant can make but that were synthesized outside it, and the 0.4mg total-THC-per-container cap that reaches nearly every gummy, tincture, and vape. Our NC hemp bill tracker follows what happens next.

Section 781 of P.L. 119-37 rewrites the federal definition of hemp to mean cannabis "with a total tetrahydrocannabinols concentration (including tetrahydrocannabinolic acid) of not more than 0.3 percent on a dry weight basis," and excludes from hemp any final product containing "greater than 0.4 milligrams combined total per container" of total THC and similar-effect cannabinoids (P.L. 119-37).

The word "container" is defined in the statute, and the definition matters for anyone planning inventory. It means "the innermost wrapping, packaging, or vessel in direct contact with a final hemp-derived cannabinoid product," such as "a jar, bottle, bag, box, packet, can, carton, or cartridge," and it excludes bulk shipping containers. A 20-count gummy bottle is one container, not twenty. That is the reading that makes a 0.4mg ceiling as severe as it is.

For an inventory plan built around those dates, see our dispensary preparation guide, which works through the audit, supplier renegotiation, and phase-out sequence product by product.

What HB 328 Would Add, and What It Still Would Not

If the House adopts the conference report, North Carolina gets an age law and a definitional cutoff with real money attached. It does not get a licensing system, a labeling statute, or a testing mandate, which is worth saying plainly because the bill is frequently described as "hemp regulation."

The conference text adds a new G.S. 14-313.1 making it unlawful to knowingly sell or deliver a hemp-derived consumable product to anyone under 21, and unlawful for anyone under 21 to possess one. A seller "shall demand proof of age from a prospective purchaser if the person has reasonable grounds to believe that the prospective purchaser is under 21 years of age." Violation is a Class 2 misdemeanor. Critically for owners, the bill states that "a retail establishment is responsible for violations committed by its owners, officers, managers, employees, or agents acting within the scope of their employment," so a budtender's mistake is the business's liability.

Then come the civil penalties, which stack on top of the criminal charge and escalate within a three-year window.

A "prohibited finished hemp-derived consumable product" is defined in the same text as a final-form product for ingestion or inhalation containing more than 0.4mg of total THC per container, "measured as the innermost packaging in direct contact with the product offered for retail sale," or any synthetic or chemically converted cannabinoid. The Attorney General or the local district attorney can sue to collect. Each violation counts separately, which on a busy Saturday is an arithmetic problem rather than a fine.

Two more provisions catch shops off guard. Section 1 would rewrite G.S. 90-87 so that hemp means total THC at or below 0.3 percent, defined as delta-9 plus 87.7 percent of THCa plus any other tetrahydrocannabinol including delta-7, delta-8, and delta-10, effective November 12, 2026 by the bill's own terms. That is a month before the matching federal cap now lands, a gap created when Congress moved its own date in September. And Section 5 adds a new G.S. 14-401.28 banning synthetic kratom products outright and barring kratom sales to anyone under 21, effective July 15, 2026 by the bill's terms. If you sell kratom alongside hemp, and many Triangle shops do, that provision applies to you too. Our HB 328 breakdown covers the politics of how the bill got here.

Your NC Hemp Compliance Checklist

None of the above requires a compliance department. It requires a binder, a supplier contract with teeth, and a staff rule about language.

Print it, tape it inside the office door, and revisit it the week either chamber moves.

The Bottom Line

North Carolina is not an unregulated hemp market. It is an unlicensed one, which is a different thing and a more demanding one, because nobody hands you the checklist.

The obligations you have come from food law, from federal advertising law, from a mailing statute written for cigarettes, and from a federal definition that changes on December 11. The obligations you do not have yet, an age floor and a product cutoff, have already passed one chamber each and carry penalties that start at $2,500 and reach $50,000. A shop that cards at 21, keeps batch-matched COAs, reads its own labels, and refuses candy-lookalike packaging is already compliant with the law that is coming and comfortably ahead of the law that exists.

This article is educational information for business planning and is not legal advice. North Carolina and federal hemp law are moving on a short timeline, so verify current status before making decisions. For the consumer side of these rules see our guide to what is legal in NC right now, and if you run a Triangle shop and want it listed in our directory, see advertising options.