Florida Hemp Extract Sales: Food Permits, Packaging and the Medical Marijuana Divide

Rules checked: November 10, 2026. Laws and agency guidance can change. This is general information, not legal or medical advice.

Verified November 10, 2026. A Florida store selling hemp extract can fall under the state's food-safety system even when the product is intended for inhalation. That unusual detail helps explain why a food establishment permit matters—and why it should never be confused with permission to dispense medical marijuana.

For shoppers and businesses, there are three separate checks: the establishment's authorization, the particular product's packaging and batch documentation, and whether the transaction belongs in Florida's medical marijuana program instead. Passing one does not settle the others.

Why hemp extract appears in the food-permit system

The Florida Department of Agriculture and Consumer Services (FDACS) lists businesses selling prepackaged foods, including hemp extract intended for human consumption, on its retail food establishment permit page.

The current Rule 5K-4.034 defines human consumption to include ingestion and inhalation, but not topical applications. Ingestion includes absorption through tissues in the mouth, not just swallowing. This guide therefore concerns that defined category; it is not a blanket statement about every CBD skin-care product.

The rule requires each establishment distributing covered products to be permitted as a hemp food establishment and sets an annual permit fee of $650. FDACS says retail permits are issued after the application process, successful inspection and payment. They require annual renewal and generally do not transfer to another owner or fixed location.

A cultivation license answers a different question. Under Florida Statutes §581.217, growing hemp requires a cultivation license; that is not a substitute for the food authorization associated with retail activity. Nor does paying a retail permit fee establish that every product on the shelf complies.

The permit does not approve the product or label

FDACS makes an important limitation explicit in its July 2025 hemp extract FAQ: the department does not approve individual products or labels. Compliance remains the food establishment's responsibility, including at retail.

The current rule also requires sourcing documentation. For ingestible products, the establishment must be able to provide the approved source's valid food license or permit and most recent food-safety or health inspection report on request. Inhalable products have their own permitted-source requirement.

This is not a cottage-food shortcut. Covered hemp products cannot be made or sold under Florida's cottage-food law, and hemp extract intended for human consumption cannot be manufactured, processed, packed, held or prepared in a private home or living or sleeping quarters. Local zoning and other business requirements also need separate attention.

What should connect the package to its lab report?

Section 581.217(7) requires a certificate of analysis (COA) from an independent testing laboratory. It must connect the extract to a tested batch, address the statutory total delta-9 THC limit and unsafe contaminants, and document the processing facility's regulatory status and sanitation compliance.

The container must carry a scannable barcode or QR code linked to the batch COA, the batch number, a website address for batch information, an expiration date, and milligrams of each marketed cannabinoid per serving.

The current rule adds practical detail: the code must be conspicuous, lead to a webpage where the COA can be found in three or fewer steps, and remain operational for at least 90 days after expiration. The COA must identify the laboratory and its ISO certification number, the processing facility and permit number, and required contaminant and pathogen results.

For a shopper, the useful test is whether the report matches the actual batch—not whether scanning the code opens an impressive-looking homepage. Our COA reading guide explains why sample identity, units and testing scope matter.

Florida's rule defines total delta-9 THC as delta-9 THC plus 0.877 times delta-9 THCA. A delta-9-only result therefore does not answer that total-THC question. The statute distinguishes the dry-weight hemp limit from the wet-weight limit for hemp extract. These are Florida provisions, not a nationwide legality test or a conclusion about every other cannabinoid.

Child-resistant packaging is more than a warning sticker

Florida requires suitable containers that minimize light exposure, mitigate high-temperature exposure, are not attractive to children and comply with its child-resistant packaging requirements. The current rule incorporates ASTM D3475-20; a plain-looking pouch or an “adults only” warning is not, by itself, evidence of compliance.

FDACS's FAQ distinguishes single-serving and multi-serving packages. A single-serving package must be child-resistant but need not be reclosable. A multi-serving package with servings not individually wrapped must reclose in a child-resistant manner. Where servings are individually packaged, those immediate packages must themselves be child-resistant—even inside a child-resistant outer package.

Labels must also state serving size and servings per container using common household measures, with net contents in the required metric and customary units. Under the rule, a serving size cannot be a fraction of a piece. Products and marketing that imitate familiar branded candy or target children raise separate restrictions; a compliant closure does not cure those problems.

Age checks apply online and at the counter

Section 581.217 bars selling hemp-extract products intended for ingestion or inhalation to anyone under 21. The rule requires a conspicuous sign next to the display stating the age restriction and that proof of age is required.

It also requires confirmation that the purchaser is at least 21 before mailing, shipping or otherwise delivering the product, including in-store sales. Giving samples to people under 21 is prohibited. Expired products cannot be further distributed or offered for sale, and the rule prohibits vending-machine sales and its defined form of self-service merchandising of unpackaged products.

These controls are obligations, not product endorsements. For the distinction between a compliance statement and approval, see our CBD labels guide.

Medical marijuana uses a separate authorization route

Florida's Department of Health, through the Office of Medical Marijuana Use (OMMU), describes a different pathway on its patient guidance page: a qualified physician, a qualifying condition, registry entry and an active Medical Marijuana Use Registry identification card.

OMMU says patients and caregivers may purchase medical marijuana only from a state-approved medical marijuana treatment center, filling an order placed by the qualified physician. An FDACS hemp food permit is not that authorization. Conversely, a hemp-product COA does not establish a patient's eligibility or turn a general retailer into a medical marijuana treatment center.

Sources, dates and limits

All linked official sources were read November 10, 2026. Florida's official rule register identifies the latest adopted version of Rule 5K-4.034 as effective November 2, 2025; this is not an announcement of new rules today. The July 2025 FAQ supplies packaging explanations, cross-checked against the later rule.

This is a Florida retail snapshot, not legal advice, a complete product audit or a federal-law update. Section 581.217 expressly does not authorize violations of other state or federal law. No federal transition dates or interstate-sale permissions are asserted here. Follow the US edition and our editorial standards for the scope of this reporting.