Cosmetic Product Safety Report (CPSR)

CBD and Hemp Oil Cosmetics: Legal Status and Safety Assessment in the EU

The SCCS set 0.19% as the safe CBD level for cosmetics in April 2026. Which hemp ingredients are legal, which are banned under Annex II, and what a compliant CBD dossier needs.

Close-up of a green hemp plant with detailed serrated leaves

CBD cosmetics in the EU have spent years in a regulatory grey zone, with brands relying on conflicting national guidance and safety assessors refusing to sign off on formulas because nobody could point to an agreed safe concentration. That changed in April 2026, when the Scientific Committee on Consumer Safety published its final opinion on cannabidiol and, for the first time, gave the market a number to work with.

If you are formulating a CBD balm, a hemp face oil or a cannabinoid serum for the European market, this is the moment to get your documentation in order. The picture is now clearer than it has ever been — but it is also more specific, and formulas that were quietly sold at 1% or 2% CBD are now demonstrably outside what the EU’s own scientific committee considers safe. This guide explains what is permitted, what the SCCS actually said, which hemp ingredients are legal and which are banned, and what a compliant CBD cosmetic dossier needs to contain.

Key takeaways

  • The SCCS final opinion of 24 April 2026 concluded that CBD is safe up to 0.19% in dermal and oral cosmetic products, with THC impurities safe up to 0.00025%.
  • Synthetically produced CBD and CBD from isolate are permitted; Cannabis Sativa Extract derived from the flowering and fruiting tops is prohibited under Annex II, entry 306 as a cannabis resin or tincture.
  • Cannabis Sativa Seed Oil and seed-derived ingredients are unproblematic — the seeds are outside the narcotics scope.
  • There is no CBD-specific entry in Annex III yet, so the SCCS opinion is guidance for your safety assessor, not a hard legal limit — but it is the benchmark any assessor will now apply.
  • National interpretations still diverge; several Member States apply stricter narcotics or novel-food positions.
  • Your CPSR must document the source of the cannabinoid, a full cannabinoid profile including THC, and heavy metal and pesticide data for the plant material.
  • Therapeutic claims (pain, anxiety, inflammation, sleep) push the product out of cosmetics entirely and into medicinal product law.

Yes — with an important distinction that trips up almost every new brand. The question is not “is CBD allowed”, it is “where did your CBD come from”.

Annex II, entry 306 of Regulation (EC) No 1223/2009 prohibits narcotics as listed in the 1961 Single Convention on Narcotic Drugs. That Convention covers cannabis, cannabis resin and extracts and tinctures of cannabis — where “cannabis” means the flowering or fruiting tops of the plant. It expressly excludes the seeds and leaves when not accompanied by the tops.

The consequence is a source test rather than a molecule test:

Ingredient INCI / source EU cosmetic status
Synthetic CBD Cannabidiol, chemically synthesised Permitted — not derived from the plant at all
CBD isolate from leaves/stalks Cannabidiol, purified Generally accepted as permitted where not an extract of the tops
Hemp seed oil Cannabis Sativa Seed Oil Permitted — seeds are outside the Convention
Hemp seed extract / flour Cannabis Sativa Seed Extract Permitted
Full-spectrum flower extract Cannabis Sativa Extract / Flower Extract Prohibited — Annex II/306
THC (any level as an active) Tetrahydrocannabinol Prohibited — narcotic

The commercial pull toward “full spectrum” marketing is exactly the wrong direction in EU cosmetics. A full-spectrum extract of the flowering tops is a prohibited substance regardless of its THC content, and a supplier’s certificate showing <0.2% THC does not cure that — the prohibition attaches to what the material is, not only to what it contains. Ask your supplier for the botanical part used and the extraction route in writing, and keep it in the file.

What the SCCS actually concluded in April 2026

The European Commission asked the SCCS to assess the safety of cannabidiol in cosmetic products, and the committee adopted its final opinion on 24 April 2026 after a preliminary opinion and public consultation.

The headline conclusions:

  • CBD is safe at concentrations up to 0.19% in dermal cosmetic products (creams, balms, serums, body products) and in oral cosmetic products (lip and oral care).
  • The presence of THC as an impurity is safe up to 0.00025% (2.5 ppm) in those same product types.
  • The assessment covered synthetically produced CBD and purified CBD of the quality specified in the dossier — it does not validate crude or full-spectrum plant extracts.

Two practical consequences follow. First, 0.19% is a great deal lower than what much of the market has been selling; “1000mg CBD” balms in 50 ml jars sit at 2%, roughly ten times the level the SCCS considers safe. Second, a safety assessor now has a defensible reference point, which means they can sign a CPSR for a compliant formula — and will have a very hard time signing one above 0.19% without extraordinary justification.

An SCCS opinion is scientific advice to the Commission, not law in itself. Until CBD is added to an Annex of the Cosmetic Regulation, 0.19% is not a statutory maximum. But Article 3 requires cosmetics to be safe, the CPSR must demonstrate that safety, and no assessor is going to contradict the EU’s own expert committee. Treat 0.19% as the working ceiling.

The narcotics question is not the only one

Three other regimes touch CBD products, and confusing them with the cosmetic rules causes real problems.

Novel Food does not apply to cosmetics

The EU’s novel food position on CBD — that cannabinoid extracts require authorisation before use in food supplements — applies to ingestible products only. It has no bearing on a topical cream. Brands selling both an oil tincture and a body balm often incorrectly apply the food rules to the cosmetic, or vice versa.

Medicinal product boundaries

CBD is an active pharmaceutical ingredient in an authorised medicine in the EU. That makes claim discipline critical: the moment your topical product is presented as treating pain, arthritis, eczema, inflammation, anxiety or sleep, it is being presented as a medicinal product by function or by presentation, and it leaves the cosmetic framework entirely. Our guide to classifying borderline products walks through the test national authorities apply.

National divergence

Member States still take different positions. Some apply stricter national narcotics laws to any cannabis-derived material; others have historically restricted CBD cosmetics outright before aligning with the EU position. The Court of Justice’s 2020 Kanavape judgment established that lawfully produced CBD from the whole hemp plant cannot be treated as a narcotic for free movement purposes, which pushed national positions toward convergence, but you should still check your priority markets rather than assume uniformity.

What a compliant CBD cosmetic dossier contains

CBD products attract more scrutiny than an average moisturiser, so the documentation needs to be tighter than average. Beyond the standard documents needed to order a CPSR, expect your assessor to require:

Full cannabinoid profile

A certificate of analysis from the raw material supplier showing CBD content and, critically, quantified THC — with a limit of quantification low enough to demonstrate the 2.5 ppm threshold in the finished product. A CoA that only reports “THC: not detected” without stating the detection limit is not sufficient.

Botanical part and extraction method

Written confirmation of which part of the plant the material derives from and how it was extracted. This is what establishes that you are not using a prohibited extract of the flowering tops.

Heavy metals and pesticides

Hemp is a known bioaccumulator — it takes up cadmium, lead and other contaminants from soil efficiently enough that it has been studied for phytoremediation. Annex II prohibits heavy metals, and Article 17 only tolerates technically unavoidable traces where the product remains safe. Batch-level heavy metal data on the cannabinoid raw material is effectively mandatory, and residual solvent data is needed for solvent-extracted grades.

Standard safety data set

Stability and compatibility, preservative efficacy where the formula is water-containing, and microbiological testing per ISO 17516. A CBD balm that is fully anhydrous may qualify for a challenge test exemption under ISO 29621 — see our guide to anhydrous cosmetics and reduced testing. A CBD-containing water-based lotion will not.

CBD is lipophilic and oxidatively unstable, degrading under light, heat and oxygen. Stability testing is not a box-tick here: it determines whether the CBD concentration you declare is still present at the end of shelf life, and an assessor may ask for CBD assay at time points, not just organoleptic stability. Plan for accelerated stability testing early.

Labelling a CBD cosmetic

Standard EU labelling rules apply in full — see our INCI list preparation guide — with a few CBD-specific points.

Declare the cannabinoid by its correct INCI name: Cannabidiol for isolate or synthetic material, Cannabis Sativa Seed Oil for hemp seed oil. These are different ingredients and using them interchangeably on the label is a misdeclaration. Do not put milligram totals (“1500mg”) on the front of pack as the primary identifier — it is a supplement convention, it invites a medicinal reading, and it does not correspond to any cosmetic labelling requirement. If you state a percentage, it must be true and consistent with the notified formula.

The ingredient list must match the CPNP notification exactly. Mismatches between the label INCI list and the notified formulation are the single most common reason for notification queries — see our guide to common CPNP mistakes when you get to that stage.

What to do if your formula is above 0.19%

Realistically, three options.

Reformulate down. The cleanest route. In most topical formats the sensory and marketing story survives the change perfectly well, and 0.19% of a well-characterised isolate in a properly designed vehicle is a defensible product.

Justify upward with data. Possible in principle — the CPSR is a risk assessment, not a lookup table — but you would need product-specific exposure and toxicological data strong enough to depart from the SCCS position. That is an expensive, uncertain path and few assessors will take it on.

Reclassify the product. If the concentration and the claims are genuinely medicinal, the honest answer may be that it is not a cosmetic. That is a much bigger regulatory undertaking, but it is better than selling a non-compliant cosmetic.

If you already have stock above 0.19% on the EU market, do not simply keep selling while you decide. Article 5 obliges the Responsible Person to take corrective measures where a product does not conform, and the safety file is now materially out of step with the available scientific opinion. Document your assessment and your decision either way — enforcement asks what you knew and when.

Bringing it all together

CBD cosmetics moved in April 2026 from “nobody can tell you” to “here is the number”. That is genuinely good news for serious brands: an assessor can now sign a CPSR, a notification can be filed with confidence, and a retailer’s compliance team has something to check against. The catch is that the number is low, and a lot of product on the market today is well above it.

The compliant path is narrow but well lit. Use synthetic CBD or a properly documented isolate rather than a full-spectrum extract of the tops. Formulate at or below 0.19%. Get batch-level cannabinoid, heavy metal and pesticide data from your supplier. Keep the claims cosmetic. Do that and you have a product that survives scrutiny in every EU market rather than one that depends on nobody looking closely.

Lexora prepares safety assessments for cannabinoid cosmetics, including the source verification and contaminant review these products need. Start with our CPSR service, or bundle the safety report, testing and notification with the Full Compliance Pack.

Frequently asked questions

What is the maximum CBD concentration allowed in EU cosmetics?

There is no statutory maximum in an Annex of the Cosmetic Regulation yet. However, the SCCS final opinion of 24 April 2026 concluded that CBD is safe up to 0.19% in dermal and oral cosmetic products. In practice this is now the working ceiling, because a safety assessor cannot readily justify a higher concentration against the EU’s own scientific committee.

Is full-spectrum CBD allowed in EU cosmetics?

No. Cannabis Sativa Extract derived from the flowering and fruiting tops is prohibited under Annex II, entry 306 as a cannabis extract or tincture. The prohibition depends on what the material is and which plant part it comes from, not only on its THC content, so a low-THC certificate does not make a full-spectrum flower extract compliant.

Can I use hemp seed oil instead?

Yes. Cannabis Sativa Seed Oil and other seed-derived ingredients sit outside the narcotics scope entirely, because the 1961 Single Convention excludes the seeds. Hemp seed oil is a conventional cosmetic emollient and raises no special regulatory issue — though it is also not CBD, and you should not market it as if it were.

Do CBD cosmetics need CPNP notification?

Yes. A CBD topical is a cosmetic product and must be notified through the CPNP before being placed on the EU market, exactly like any other cosmetic. See our step-by-step CPNP submission guide. The declared formulation in the notification must match your label and your CPSR.

Does the EU novel food rule apply to my CBD cream?

No. The novel food framework governs ingestible products such as food supplements and oils taken orally. A topical cosmetic is regulated under Regulation (EC) No 1223/2009 instead. If you sell both a tincture and a cream, they follow two entirely separate regulatory routes.

What claims can I make about a CBD cosmetic?

Only cosmetic claims — appearance, cleansing, perfuming, protecting, keeping in good condition. Claims about pain, inflammation, arthritis, eczema, anxiety or sleep present the product as medicinal and take it outside the cosmetic framework. Our guide to permitted cosmetic claims covers the substantiation rules that apply to everything you do say.

Do I need heavy metal testing for a CBD product?

In practice, yes, at the raw material level. Hemp readily accumulates cadmium and lead from soil, Annex II prohibits heavy metals, and Article 17 only tolerates technically unavoidable traces where the product remains safe. Expect your safety assessor to require batch-level heavy metal and pesticide data on the cannabinoid ingredient before signing the CPSR.