Short answer: yes. Under Estonian law, CBD derived from industrial hemp is legal, provided the finished product stays within the EU tetrahydrocannabinol (THC) threshold and is marketed within the categories Estonian regulators accept. The nuance — and the reason buyers ask the question at all — is that "legal" depends on how a product is classified, labelled, and what claims are attached to it. This guide is written for English-speaking residents, expats, and EU visitors who want a calm, source-backed answer to the question is CBD legal in Estonia in 2026, without marketing gloss. It covers the EU framework, the Estonian statute, what you can and cannot buy, and how to read a lab certificate before you pay for anything.
Bottom line: as of April 2026, CBD is legal in Estonia when it is derived from EU-certified industrial hemp with a THC content not exceeding 0.3% and is sold in a lawful product category — cosmetics, aroma oils, or other non-food classifications. No CBD product has been authorised as a novel food in Estonia, so CBD sold explicitly for ingestion remains restricted.
The EU framework: industrial hemp, CBD, and free movement
Estonia is an EU member state, so Estonian CBD law sits on top of two foundational European pieces that any informed buyer should understand.
Regulation (EU) 2021/2115 — the hemp threshold
Regulation (EU) 2021/2115, which governs the Common Agricultural Policy for 2023–2027, sets the legal definition of "industrial hemp" across the Union. Under Article 4(4), hemp cultivation qualifies for CAP support only when the variety used contains a delta-9-THC content not exceeding 0.3% of the plant's dry weight. The threshold was raised from the previous 0.2% limit on 1 January 2023 to align with international hemp standards, superseding the old regime under Regulation (EU) 1307/2013. Commission Delegated Regulation (EU) 2022/126 supplements 2021/2115 with the technical rules for hemp varieties, sampling and testing. Only seed varieties listed in the EU's common catalogue of agricultural plant species may be used. This is the legal line that separates "industrial hemp" — a recognised agricultural crop — from "cannabis" as a controlled narcotic.
CJEU Case C-663/18 (Kanavape)
On 19 November 2020, the Court of Justice of the European Union ruled in Case C-663/18 (known as the Kanavape judgment) that cannabidiol lawfully produced in one EU member state cannot be banned in another under the principle of free movement of goods — unless a member state can show such a ban is strictly necessary for protecting public health. The Court held that CBD is not a narcotic drug under the 1961 Single Convention. This ruling is why CBD cosmetics and aroma products cross EU borders legally and why national bans on lawfully produced CBD have been rolled back across the Union.
Together, these two instruments set the European baseline: industrial hemp below 0.3% THC is an agricultural crop, and CBD derived from it is not a narcotic.
Estonian law: the Narcotic Drugs and Psychotropic Substances Act
Estonia's domestic framework sits in the Narcotic Drugs and Psychotropic Substances and Precursors Act (Narkootiliste ja psühhotroopsete ainete ning nende lähteainete seadus), passed in 1997 and consolidated on Riigi Teataja. The Act implements Estonia's obligations under the UN drug conventions.
Two points matter for CBD buyers:
- THC is controlled. Tetrahydrocannabinol is listed in Schedule I of Estonia's narcotic and psychotropic substances list. Cultivation of cannabis for the purpose of preparing narcotic drugs is prohibited.
- Industrial hemp is carved out. The Act permits cannabis cultivation "for the purpose of agricultural production pursuant to the requirements of a relevant market measure of the European Union Common Agricultural Policy." In other words: EU-certified industrial hemp varieties are not treated as a controlled narcotic.
The Estonian State Agency of Medicines (Ravimiamet) has published its position directly: the legal threshold for non-narcotic hemp is 0.3% THC. Hemp varieties registered in the EU's common catalogue and staying below this limit are not classified as narcotic substances in Estonia. Ravimiamet also clarifies that cannabidiol itself is not listed as a narcotic — with one specific caveat: if CBD is extracted from narcotic cannabis (i.e. a plant exceeding the hemp threshold), the CBD is treated as narcotic by association with its source.
This is the key distinction: the THC percentage in the finished product matters, but so does the legal status of the plant it came from.
The 0.3% is not a ceiling on THC in the finished bottle — it is a rule about the hemp variety, set by Regulation (EU) 2021/2115 Article 4 for CAP eligibility. A cultivation standard, not a product spec. It reaches the Tallinn shelf only because Estonia's narcotic-substances regulation treats cannabis extracts, tinctures and resins as Schedule I unless they come from an EU-catalogue industrial hemp variety at or below 0.3% THC — the line reaches the bottle through the source plant.
Novel food status: why CBD oils are sold as "aroma" products
This is the part that confuses most buyers. If CBD is legal, why don't shops label their oils as food supplements?
Since January 2019, the European Commission's Novel Food Catalogue has classified extracts of Cannabis sativa L. and derived products containing cannabinoids — including CBD — as novel foods. That means any CBD product intended for ingestion requires authorisation under Regulation (EU) 2015/2283 before it can be sold as food. As of April 2026, the European Commission has not authorised a single CBD food product for the EU market. EFSA's safety assessment of CBD as a novel food is ongoing as of early 2026, and the agency has not yet finalised its evaluation — meaning no safe intake level has been formally established for regulatory purposes. EFSA has noted that safety data gaps remain, particularly for individuals under 25, pregnant or breastfeeding women, and people on concurrent medications. CBD itself remains unauthorised as a novel food.
Because no CBD food supplement is currently approved, Estonian retailers classify CBD oils either as cosmetics (under EU Regulation (EC) No 1223/2009, notified through the CPNP portal) or as aroma oils and technical hemp products that are not intended for internal consumption. This is not a loophole — it is the only legal shelf the product fits on until the novel food status changes.
What you can legally buy in Estonia
As of April 2026, the following categories are lawfully sold to adult consumers in Estonia when produced within the hemp framework:
- Hemp flower from EU-catalogue industrial hemp varieties with THC content at or below 0.3%. Sold as a raw agricultural product. If you are not sure how CBD hemp flower differs from ordinary cannabis, our primer on what CBD flower actually is breaks down the strains and chemistry. Browse the CBD flowers category for examples of compliant product sheets.
- CBD cosmetics — creams, balms, oils intended for topical application — registered via the EU Cosmetic Products Notification Portal under Regulation 1223/2009. See the CBD cosmetics range for the typical format.
- CBD aroma oils and technical hemp products, labelled as not for internal consumption.
- Raw industrial hemp (seeds for food use, hemp fibre, hemp protein) from approved varieties. Shelled hemp seed and hemp seed oil have a settled food status that pre-dates the CBD novel food question.
What you cannot legally buy — or sell as such
- CBD as a dietary supplement or food without novel food authorisation. No CBD food product is currently authorised in Estonia or the EU.
- Any hemp product with THC above 0.3%. This crosses the line into controlled cannabis under both EU and Estonian law.
- Synthetic cannabinoids such as HHC, HHCP, THCP — the Estonian Minister of Social Affairs added several synthetic cannabinoids to the Schedule I list in recent years.
- Hemp seeds for home cultivation without a licence. Growing hemp for agricultural purposes in Estonia requires certified seed and registration with the Agriculture and Food Board (Põllumajandus- ja Toiduamet, PTA).
- Medical cannabis products outside the pharmaceutical channel. The only CBD-containing medicine authorised in Estonia is Epidyolex, prescribed under specific conditions.
Lab certificates: how to verify what you are buying
Because the category relies on precise THC thresholds, a lab certificate — commonly called a Certificate of Analysis or COA — is the single most important document a buyer can ask for. A compliant Estonian retailer will publish the COA for every batch. For a panel-by-panel walkthrough, see our field guide on how to read a CBD COA; below are the headline checks.
- Third-party accredited lab. The report should be from an independent laboratory, ideally ISO 17025 accredited. In-house testing from the producer is not sufficient.
- Batch and date. The COA must reference a specific batch number that matches what you are buying, and the test date should be within the last 12 months.
- Cannabinoid profile with exact THC content. Look for a line showing total THC (or delta-9-THC) in percentage. Anything at or under 0.3% fits the Estonian threshold. Anything above is non-compliant.
- Contaminant testing. A serious COA tests for heavy metals (lead, cadmium, mercury, arsenic), pesticides, residual solvents from extraction, and microbial contamination (mould, yeast, E. coli, salmonella). Pass/fail limits should be visible.
- CBD content that matches the label. If the bottle says 10% CBD, the COA should show a figure within a reasonable tolerance (roughly ±10%). Large gaps are a red flag.
If a seller cannot produce a COA, or the COA is older than a year, or the numbers do not match the label — walk away. This is also how regulators will evaluate the product if it ever lands on a desk at Ravimiamet or the PTA.
Travel and customs: the honest answer
CBD moves well within the legal framework inside Estonia. Crossing borders is a different question, and this article will not offer workarounds.
Every EU country applies its own interpretation of the Kanavape ruling. Some tolerate CBD cosmetics and aroma products freely; others still restrict CBD flower or impose stricter labelling rules. Finland, Sweden, Latvia, Lithuania, Poland, and Germany each have different enforcement practices. Customs officers make case-by-case decisions, and carrying a product legal in one country into another that treats it differently is a personal risk. Non-EU destinations (the UK, Norway, and anywhere further afield) sit outside the free-movement framework entirely, with stricter country-specific rules.
If you are travelling, the responsible move is to check the destination's customs position directly. This article does not advise on crossing borders with CBD.
A checklist for safe buying in Estonia
Before you pay for any CBD product in Estonia, run through this list:
- Registered Estonian seller. The shop should be a registered legal entity with a business registration code visible in the footer or About page.
- Clear product classification. Is the product sold as cosmetic, aroma oil, or technical hemp? The label and the shop's description should align.
- Certificate of Analysis available per batch. Third-party lab, within the last 12 months, matching the batch number on the bottle.
- THC content at or below 0.3%. Visible on the COA, ideally also on the label.
- EU-certified industrial hemp varieties. The source plant should be named or the varietal confirmed as EU-catalogue hemp.
- Full contaminant screening. Heavy metals, pesticides, solvents, microbial — all reported.
- No medical claims in the listing. A compliant Estonian seller will not promise effects on the body. That is a legal signal, not a marketing weakness.
- Transparent shipping and returns. A real shop has a real shipping and delivery page with terms, carrier, and timelines.
EcoCBD is built around exactly this checklist. Every product sold through the shop is sourced from EU-certified industrial hemp, batch-tested by independent laboratories, and classified according to Estonian and EU law. If you want to see what compliance looks like in practice, the catalogue is a good place to start — and the About page documents Ougrumant OÜ, the registered Estonian company behind the brand, and the standards we work to.
The rules will keep evolving. EFSA's ongoing safety assessment and the review of novel food applications suggest a regulated CBD food pathway may eventually open in the EU. Until it does, the structure described above is the one that applies. Buy from sellers who know the framework, read the COA, and treat marketing that skips either of those as a warning sign.
Sources
- Narcotic Drugs and Psychotropic Substances and Precursors Act (Estonia), consolidated text: riigiteataja.ee
- Ravimiamet (Estonian State Agency of Medicines) — position on cannabis, THC and CBD: ravimiamet.ee
- Regulation (EU) 2021/2115 (CAP Strategic Plans Regulation), EUR-Lex: eur-lex.europa.eu
- CJEU Case C-663/18 (Kanavape), judgment of 19 November 2020: eur-lex.europa.eu
- European Commission — Novel Food Catalogue (Cannabis sativa L. entry): food.ec.europa.eu
- Commission Delegated Regulation (EU) 2022/126, supplementing Regulation (EU) 2021/2115: eur-lex.europa.eu
- Põllumajandus- ja Toiduamet (Agriculture and Food Board, PTA) — food supplements guidance: pta.agri.ee
This article is for informational purposes only and is not legal advice. Laws may change; for the current version consult riigiteataja.ee. Publication date is shown in the article header; if more than 6 months have passed since publication, verify against the primary sources.