EU Novel Food Regulation for CBD: What Importers Need to Know

The European CBD market has matured considerably since the early days of regulatory ambiguity. Today, any business importing CBD isolate into the EU — whether for use in food supplements, functional beverages, or nutraceutical formulations — must navigate a well-defined but demanding regulatory pathway. At the centre of that pathway sits EU Regulation 2015/2283 on Novel Foods.

This guide is written for procurement managers, regulatory affairs leads, and B2B buyers who are sourcing high-purity CBD isolate and need a clear, actionable picture of what EU compliance actually requires. We cover the legal basis, the application process, EFSA's safety assessment criteria, THC thresholds, and the practical steps your supply chain needs to satisfy before your product reaches a European shelf.

What Is the EU Novel Food Regulation?

EU Regulation 2015/2283, which came into force on 1 January 2018, replaced the earlier Novel Food Regulation (EC) No 258/97. It establishes a centralised, EU-wide authorisation procedure for foods and food ingredients that do not have a significant history of consumption within the Union prior to 15 May 1997.

Under Article 3(2)(a) of Regulation 2015/2283, a "novel food" is defined as any food not used for human consumption to a significant degree within the Union before that date. The regulation applies to:

• New foods from plants, animals, microorganisms, or cell cultures
• Foods produced using new production processes
• Food from third countries with no history of use in the EU

CBD (cannabidiol) extracted from Cannabis sativa L. falls squarely within this definition. The European Commission confirmed CBD's novel food status in the EU Novel Food Catalogue in January 2019, following a period of significant industry uncertainty. That catalogue entry has been updated several times since and remains the authoritative reference point for importers.

It is worth noting that the legal basis for food safety in the EU more broadly rests on Regulation (EC) No 178/2002, which establishes the general principles and requirements of food law, creates the European Food Safety Authority (EFSA), and lays down procedures in matters of food safety. Any novel food authorisation must be consistent with the risk assessment principles set out in that regulation.

Why CBD Was Classified as Novel

The classification of CBD as a novel food was not without controversy. Several operators argued that hemp extracts — including CBD-rich preparations — had a documented history of use in Europe predating 1997. The European Commission's position, however, is that while hemp seed and hemp seed oil have a pre-1997 history of consumption, extracts from other parts of the Cannabis sativa plant (including flowers and leaves, from which CBD is typically derived) do not meet the threshold for significant prior use.

This distinction is critical for importers. It means that:

1. Hemp seed oil and hemp seed protein are not novel foods and can be placed on the market without authorisation.
2. CBD isolate, broad-spectrum CBD extracts, and full-spectrum extracts derived from flowers or leaves are novel foods and require authorisation before they can be sold as food or food ingredients in the EU.

The Commission's Novel Food Catalogue entry for Cannabis sativa L. explicitly states that extracts of Cannabis sativa L. and derived products containing cannabinoids are considered novel foods. This applies regardless of the THC content of the final product.

The Novel Food Authorisation Process

Obtaining a novel food authorisation is a multi-year, resource-intensive process. The procedure is centralised — applications are submitted to the European Commission via an online submission system, and EFSA conducts the scientific safety assessment.

Below is a summary of the key stages and indicative timelines:

It is important to understand that authorisations under Regulation 2015/2283 can be either generic (available to all operators) or data-protected (exclusive to the applicant for five years under Article 26). Most CBD applicants are pursuing data-protected authorisations, which means that even if one company obtains authorisation, competitors cannot rely on that authorisation without submitting their own dossier or negotiating access to the protected data.

As of the date of this article, no CBD novel food application has received full authorisation from the European Commission. EFSA published a call for data on CBD in 2020 and has been evaluating submitted dossiers. The process has been slower than many in the industry anticipated, partly due to the volume and complexity of the safety data required.

What EFSA Requires: The Safety Dossier

The core of any novel food application is the safety dossier. EFSA's assessment framework for CBD is demanding, reflecting genuine scientific uncertainty about the compound's safety profile at the doses used in food supplements.

EFSA's 2022 assessment of CBD identified several areas of concern, including effects on the liver, the male reproductive system, and the central nervous system. These concerns have shaped the data requirements for applicants. A complete dossier for CBD isolate must typically include:

Compositional Data

• Full characterisation of the CBD isolate, including purity (expressed as percentage of CBD), residual cannabinoid profile (including THC, CBN, CBG, and others), residual solvents, heavy metals, pesticide residues, and microbiological contaminants.
• For high-purity isolates such as those produced by Vetrux (≥99.5% CBD purity, THC-free), the compositional profile is relatively straightforward to document. The absence of detectable THC simplifies the toxicological assessment considerably.

Production Process

• A detailed description of the manufacturing process, including extraction method, purification steps, and quality control procedures.
• Batch-to-batch consistency data.

Proposed Conditions of Use

• The food categories in which the novel food will be used (e.g., food supplements, beverages, confectionery).
• The proposed maximum use levels in each category.
• The anticipated intake levels across different consumer groups, including high consumers.

Toxicological Data

This is typically the most resource-intensive component. EFSA expects:

• Genotoxicity studies (in vitro and in vivo)
• Repeated-dose toxicity studies (90-day and, ideally, chronic studies)
• Reproductive and developmental toxicity data
• Human clinical data where available

EFSA has indicated that the toxicological database for CBD is still developing, and applicants should expect requests for additional studies during the assessment phase.

Nutritional Information

• Demonstration that the novel food does not disadvantage the consumer nutritionally compared to foods it might replace.

THC Limits and the Psychotropic Substance Question

One of the most practically significant issues for CBD importers is the question of THC limits. THC (delta-9-tetrahydrocannabinol) is a controlled substance under national laws in most EU member states, and its presence in food products — even at trace levels — creates significant legal risk.

The EU does not currently have a harmonised maximum residue level (MRL) for THC in food supplements or CBD products specifically. However, Regulation (EC) No 396/2005 sets MRLs for THC in certain food categories, and the European Industrial Hemp Association (EIHA) has published guidance suggesting that a threshold of 0.2 mg/kg body weight per day is a reasonable reference point for risk assessment purposes.

For importers, the practical implication is clear: sourcing CBD isolate with a verified THC-free specification is the lowest-risk approach. A product with no detectable THC eliminates the need to model THC intake across consumer groups and removes a significant source of regulatory uncertainty.

This is one reason why the purity specification matters so much in B2B procurement. Vetrux's CBD isolate, produced at ≥99.5% purity with a THC-free certificate of analysis, is specifically designed to meet the documentation requirements that European regulatory dossiers demand.

The UK Position: Post-Brexit Divergence

Following the UK's departure from the EU, the regulatory framework for CBD in Great Britain (England, Scotland, and Wales) has diverged from the EU approach. The Food Standards Agency (FSA) has established its own novel food authorisation process for CBD products.

The FSA published a validated list of CBD products in February 2020, allowing products that had been submitted for novel food authorisation to remain on the market while applications were assessed. The FSA's guidance makes clear that:

• CBD products intended for human consumption require novel food authorisation.
• Products must meet the FSA's compositional standards, including a maximum of 1 mg of THC per day for food supplements.
• Applicants must submit a full safety dossier to the FSA, which conducts its own risk assessment independently of EFSA.

The FSA has been more active than the EU Commission in progressing individual applications, and several products have moved through the validation stage. However, full authorisation remains pending for most applicants.

For importers supplying both EU and UK markets, it is worth noting that a single dossier cannot serve both jurisdictions — separate applications must be submitted to the European Commission (for the EU) and to the FSA (for Great Britain). Northern Ireland remains subject to EU food law under the Windsor Framework, adding a further layer of complexity for UK-based operators.

Compliance Strategies for B2B Importers

Given the current state of play — where no CBD novel food authorisation has been granted in the EU, but enforcement varies significantly by member state — importers need a clear compliance strategy. The following approaches are commonly adopted:

1. Monitor the Authorisation Pipeline

Several well-resourced applicants have submitted dossiers to EFSA. When the first authorisation is granted, it will likely be data-protected, meaning competitors cannot rely on it. However, the authorisation will establish a precedent for acceptable safety data and use levels that will inform subsequent applications. Staying close to industry associations such as the European Industrial Hemp Association (EIHA) and the European Cannabinoid Association (EIHA) is essential for early intelligence.

2. Build a Compliance-Ready Supply Chain Now

Even before authorisation is granted, importers can take steps to ensure their supply chain will be ready to move quickly once the regulatory pathway opens. This means:

• Sourcing from manufacturers who can provide full compositional data, batch certificates of analysis, and production process documentation.
• Establishing contractual requirements for purity, THC content, and contaminant limits.
• Maintaining traceability records consistent with the requirements of Regulation (EC) No 178/2002, Article 18, which mandates traceability at all stages of production, processing, and distribution.

3. Understand Member State Enforcement Postures

Enforcement of the novel food rules for CBD varies considerably across EU member states. Some national food safety authorities have taken an active enforcement approach, removing non-authorised CBD products from the market. Others have adopted a more permissive stance pending EU-level authorisation. Importers should take legal advice specific to the member states in which they intend to operate.

4. Consider the Cosmetics and Topical Route

For some applications, the novel food framework may not apply. CBD used in cosmetic products is regulated under Regulation (EC) No 1223/2009 on cosmetic products, not under the novel food framework. Similarly, CBD used in veterinary products or industrial applications falls outside the scope of Regulation 2015/2283. Importers whose end-use applications fall into these categories should ensure they are applying the correct regulatory framework.

5. Engage Early with Regulatory Consultants

The novel food application process is not something most importers can navigate without specialist support. Regulatory consultants with experience in EFSA submissions can help applicants design studies that meet EFSA's requirements, prepare dossiers that pass the validity check, and manage the dialogue with EFSA during the assessment phase.

Documentation Requirements for Importers

Regardless of whether a novel food authorisation has been granted, importers bringing CBD isolate into the EU must comply with the general food law requirements of Regulation (EC) No 178/2002. This includes:

• Ensuring that food placed on the market is safe (Article 14).
• Maintaining traceability records that allow the identification of suppliers and customers (Article 18).
• Notifying competent authorities if a product is considered unsafe (Article 19).

In practice, this means importers should maintain:

• Certificates of analysis for each batch, covering purity, cannabinoid profile, heavy metals, pesticide residues, residual solvents, and microbiological parameters.
• Supplier qualification documentation, including manufacturing site audits or third-party audit reports.
• Import records and customs documentation.
• A documented food safety management system, ideally aligned with HACCP principles.

For importers sourcing from manufacturers like Vetrux, whose production processes are designed to meet European documentation standards, assembling this compliance package is significantly more straightforward than sourcing from suppliers who are not oriented toward the European regulatory environment.

Key Regulatory References

For importers building their compliance files, the following primary sources are essential:

• EU Regulation 2015/2283 on novel foods — the primary legislative instrument governing CBD as a food ingredient in the EU.
• EU Novel Food Catalogue — the Commission's online database confirming the novel food status of specific substances, including Cannabis sativa extracts.
• EFSA's 2022 call for data on CBD — sets out the data requirements for novel food applications and summarises EFSA's preliminary safety concerns.
• Regulation (EC) No 178/2002 — the general food law regulation establishing traceability, safety, and notification requirements.
• FSA Novel Food guidance (UK) — the FSA's published guidance on the novel food authorisation process for CBD in Great Britain, including the validated product list.
• Regulation (EC) No 396/2005 — sets MRLs for pesticides, including THC, in food and feed.

FAQ

Q: Can I import CBD isolate into the EU right now, or do I need to wait for novel food authorisation?

The legal position is that CBD isolate intended for use as a food or food ingredient requires novel food authorisation under Regulation 2015/2283 before it can be placed on the EU market. No such authorisation has been granted as of April 2026. In practice, enforcement varies by member state, and some operators continue to sell CBD products while applications are pending. However, importers should be aware that they are operating in a legally uncertain environment and should take jurisdiction-specific legal advice before proceeding.

Q: Does the novel food requirement apply to CBD used in cosmetics or topical products?

No. The novel food framework applies specifically to foods and food ingredients intended for human consumption. CBD used in cosmetic products is regulated under Regulation (EC) No 1223/2009 on cosmetic products. Importers whose products are intended exclusively for cosmetic use do not need a novel food authorisation, but must comply with the cosmetics regulation, including safety assessment requirements and notification via the Cosmetic Products Notification Portal (CPNP).

Q: What purity level should I specify when sourcing CBD isolate for a novel food application?

EFSA's assessment framework requires detailed compositional characterisation of the novel food. For CBD isolate, a higher purity specification simplifies the toxicological assessment by reducing the number of co-occurring cannabinoids and other compounds that must be characterised and assessed for safety. A specification of ≥99.5% CBD purity, with a THC-free certificate of analysis and full residual cannabinoid profiling, is the standard that serious applicants are working to. It also reduces the risk of THC-related regulatory complications at the member state level.

Conclusion

The EU novel food framework for CBD is demanding, but it is navigable for importers who approach it systematically. The key steps are understanding the legal basis under Regulation 2015/2283, building a supply chain that can generate the documentation EFSA requires, and staying current with the evolving authorisation landscape.

For B2B buyers, the most important procurement decision is choosing a manufacturer whose product specifications and documentation capabilities are aligned with European regulatory requirements from the outset. Sourcing high-purity, THC-free CBD isolate with full batch traceability is not just a quality preference — it is a regulatory necessity for any serious novel food application.

If you are evaluating CBD isolate suppliers for the European market and want to understand how Vetrux's product specifications and documentation standards align with EU novel food requirements, submit an inquiry and our team will respond with full technical and compliance documentation.