Partly. Google Ads allows ads for topical, hemp-derived CBD products with 0.3% THC or less (creams, lotions, roll-ons, bath bombs) in permitted US locations, but only if you're certified by LegitScript. Meta allows legally permissible, non-ingestible CBD in the US for LegitScript-certified advertisers with prior written permission. Ingestible CBD (oils, gummies, edibles, vapes) and THC products can't be advertised on either platform.
If you sell CBD, you've probably had an ad rejected, an account suspended, or a sales rep tell you "we can't help with that category." The rules have loosened since 2023, but they're still narrow, and the fine print matters.
This guide covers exactly what Google and Meta allow in 2026, how to get approved, what's still off limits, the UK picture, and how we drive paid revenue for restricted brands anyway.
Quick summary: Topical, hemp-derived CBD with 0.3% THC or less can be advertised on Google and Meta in the US, but only after LegitScript certification (and, on Meta, prior written permission). Ingestible CBD and anything THC remains off-limits as an ad subject on both.
Google Ads CBD policy in 2026
Google's current healthcare and medicines policy permits two types of CBD advertising:
- Topical, hemp-derived CBD products with a THC content of 0.3% or less. Google lists examples like creams, sprays, roll-ons, lotions, bath bombs and candles. Retailers must be certified through LegitScript and must sell in locations where CBD promotion is permitted.
- FDA-approved pharmaceuticals containing CBD. These advertisers must apply to Google and can only target California, Colorado and Puerto Rico.
Still prohibited: ingestible CBD products such as oils, tinctures, capsules, gummies, edibles, beverages, supplements, food additives and inhalants (vapes). THC products, including hemp-derived delta-8, delta-9 and THCA, are not eligible either.
Some ad formats also carry extra restrictions. Google has said premium placements such as the YouTube Masthead aren't eligible for CBD ads.
How to get approved on Google
- Confirm your products qualify. Topical, hemp-derived, 0.3% THC or less, with third-party certificates of analysis (COAs).
- Apply for LegitScript CBD certification. Expect to submit product samples or COAs, company information and website details, and pay application and annual monitoring fees.
- Clean up your website. Remove disease and treatment claims, show COAs, include age restrictions where required, and make sure the landing page only sells the eligible products you're advertising.
- Submit Google's CBD ads certification form with your LegitScript details.
- Build campaigns around eligible products only. One ingestible product in the ad or on the landing page can trigger disapproval.
Meta (Facebook & Instagram) CBD policy
In July 2023, Meta updated its policies for Facebook, Instagram and Threads:
- Legally permissible, non-ingestible CBD can be promoted in the US, with restrictions.
- Advertisers selling CBD still need LegitScript certification and Meta's prior written permission.
- Hemp products with no CBD, or with 0.3% THC or less, such as hemp seed, hemp seed oil and hemp fibre, no longer need written permission in the US, Canada and Mexico, as long as they follow local law.
- Advocacy and educational ads about CBD that don't sell a product no longer need prior permission.
Ingestible CBD remains off the table, and Meta's reviewers are quick to flag anything that looks like a health claim. Even approved advertisers can see creatives rejected for words like "relief," "anxiety" or "pain."
Got an account banned or ads stuck in review? We've rebuilt restricted-category ad accounts from scratch.
Book a Free CallWhat about other platforms?
| Platform | Topical CBD | Ingestible CBD | THC / cannabis |
|---|---|---|---|
| Google Ads | ✅ With LegitScript, permitted US locations | ❌ | ❌ |
| Meta (FB/IG) | ✅ With LegitScript + written permission, US | ❌ | ❌ |
| Microsoft Ads | Restricted, check current policy | ❌ | ❌ |
| TikTok Ads | ❌ | ❌ | ❌ |
| Programmatic / cannabis ad networks | ✅ | ✅ Varies by network | ✅ In legal markets, with age-gating |
Policies change often, so always check the platform's current policy page before launching.
CBD advertising in the UK
The UK has its own, stricter framework:
- No medicinal claims. The MHRA says a CBD product used for a medical purpose needs to be licensed as a medicine before it can be advertised. The ASA has ruled against ads saying products help with pain, anxiety, sleep disorders and even hangovers.
- Oral CBD is a novel food. CBD foods like drops and gummies need Food Standards Agency authorisation. You can't state or imply FSA approval you don't have.
- Health claims for food must be authorised. Health claims for oral CBD are only allowed if they're authorised on the GB Nutrition and Health Claims Register for CBD as an ingredient. In practice, that rules out almost every health claim brands want to make.
- Topicals need evidence. Even non-medical claims for skincare need robust documentary evidence, usually human clinical trials. Testimonials alone aren't enough.
Because Google and Meta's CBD permissions are mainly US-focused, UK CBD brands lean much more heavily on SEO, email, affiliate partners and compliant organic social.
How restricted brands still win with paid search
We ran Google Ads for a wellness and microdosing brand in a restricted category. The account started from zero, with no history and no Quality Score. Here's what it delivered:
What made it work:
- Product-based campaign structure. Campaigns built around individual products, not broad categories, gave us control over bids and budgets at product level.
- Bottom-of-funnel keywords only. No awareness or educational terms. Only searches from people ready to buy, including branded and product-name queries.
- Target CPA bidding from day one. We kept the algorithm accountable to conversions, not clicks.
- Negative keyword discipline. In a restricted niche, irrelevant clicks are expensive and risky. We built and maintained an aggressive negative list.
- Compliant copy, tested carefully. Certain product words triggered disapprovals, so every keyword and headline was vetted before going live.
The constraint is also the advantage: retargeting and interest-based audiences weren't available, so every dollar went to people actively searching. Read the full PPC case study.
A compliant CBD paid media checklist
- Only advertise products the platform explicitly permits
- Get LegitScript certification before you build campaigns
- Send ad traffic to landing pages that only feature eligible products
- Remove disease, treatment and medical claims from ads and landing pages
- Publish COAs and make them easy to find
- Age-gate where state law requires it
- Avoid words that commonly trigger review: "cure," "treat," "anxiety," "pain relief," "high"
- Keep a log of every disapproval and appeal
- Build your own audience (email, SMS) so you're never fully dependent on ad platforms
Don't build your business on rented ground
Even with perfect compliance, a policy change can switch off your paid traffic overnight. That's why the CBD brands that last invest in channels they own. SEO is the biggest one: our cannabinoid client generated $814K in organic revenue in 18 months with zero paid ads. Start with our cannabis SEO guide, or see how we run cannabis and CBD marketing end to end.
Platform policies summarised from Google Ads Help (healthcare and medicines policy), Meta's July 2023 CBD policy update, and ASA/CAP guidance on CBD advertising. This is general marketing guidance, not legal advice. Policies change frequently, so confirm current rules before launching campaigns.
Frequently asked questions
Can you run Google Ads for CBD oil?
Not for ingestible CBD oil in most cases. Google's policy permits ads for topical, hemp-derived CBD products with 0.3% THC or less, and FDA-approved CBD pharmaceuticals. Ingestible products such as oils, tinctures, gummies, supplements and food additives remain prohibited as ad subjects.
What is LegitScript CBD certification?
LegitScript is a third-party compliance company that Google and Meta use to vet CBD advertisers. To get certified you apply, pay an application and monitoring fee, and submit product samples or third-party certificates of analysis so THC levels and labelling can be verified. Certification is required before you can advertise eligible CBD products.
Can I advertise CBD on Instagram?
Instagram ads run through Meta's ad system, so the same rules apply. Legally permissible non-ingestible CBD can be advertised in the US by LegitScript-certified advertisers with Meta's prior written permission. Organic Instagram posts are allowed but must follow community guidelines, and accounts that appear to sell drugs can be restricted.
Can you advertise CBD on TikTok?
TikTok's ad policies prohibit CBD product ads. Brands still use organic content and creators on TikTok, but should avoid direct selling language, health claims and links that look like drug sales.
Can you advertise CBD in the UK?
Yes, but with strict rules. Under the CAP Code and ASA rulings, you cannot make medicinal claims for unlicensed CBD products. Oral CBD products are novel foods that need Food Standards Agency authorisation, and you can't imply FSA approval you don't have. Google and Meta's CBD ad permissions are mainly US-focused, so UK brands rely more on SEO, email, affiliates and compliant social content.
How do CBD brands grow without paid ads?
Through SEO, email and SMS marketing, affiliate and influencer programmes, wholesale and retail partnerships, PR, and branded search campaigns where policies allow. SEO is usually the biggest lever. Hello Bleu has grown organic revenue by 300%+ for brands in restricted categories.