Is CBD Legal In Australia? Business Compliance Guide

CBD (cannabidiol) has moved from niche interest to mainstream conversation in Australia. If you’re a wellness founder, pharmacist, importer, or manufacturer exploring CBD products, you’re likely asking a simple question with a complex answer: is CBD legal in Australia?

Short answer: yes, but only within strict medical and regulatory pathways. For businesses, that means you’re dealing with a tightly regulated prescription medicine, layered federal and state rules, and specialised licences if you plan to import, manufacture, or cultivate.

In this guide, we break down how CBD is regulated, what’s legal across the states and territories, how pharmacies and online pharmacies can dispense CBD, and the licences, permits, and documents you’ll need to operate compliantly. Our goal is to help you move forward with confidence and a practical roadmap.

How Is CBD Regulated In Australia?

CBD is one of many cannabinoids in the cannabis plant. Unlike THC, CBD is non‑intoxicating and is being researched for therapeutic uses such as pain, inflammation and anxiety.

Legally, CBD is not treated like a normal health supplement in Australia. Most CBD medicines are classified as Schedule 4 (Prescription Only Medicine) under the national Poisons Standard, overseen by the Therapeutic Goods Administration (TGA). That triggers strict rules on manufacture, importation, supply, dispensing, advertising and record‑keeping.

Key regulatory pillars to understand

• TGA scheduling and approvals: Most CBD products supplied in Australia are “unapproved” medicines and are accessed via the Special Access Scheme (SAS) or the Authorised Prescriber (AP) pathway. A minority may be fully registered on the Australian Register of Therapeutic Goods (ARTG), but this is still rare for CBD.
• Down‑schedule to S3 (Pharmacist‑Only): In principle, certain low‑dose CBD could be sold over the counter if registered on the ARTG as a Schedule 3 product. As at the time of writing, no CBD has been registered for OTC sale, so genuine over‑the‑counter CBD is not yet available.
• Office of Drug Control (ODC) licensing: If you plan to cultivate, produce, or manufacture medicinal cannabis (including CBD), you may need licences and permits under the Narcotic Drugs Act 1967 administered by the ODC.
• Import/export permits: Importing CBD usually requires a permit under the Customs (Prohibited Imports) Regulations and ODC authorisation. Shipments without the right permits can be seized at the border.
• Advertising restrictions: Prescription medicines can’t be advertised to the general public. CBD businesses must comply with the Therapeutic Goods Act and the Therapeutic Goods Advertising Code.

Is CBD Oil Legal In Australia Right Now?

Yes, CBD oil is legal in Australia when accessed through lawful medical pathways. In practice, this means:

• Prescription‑only access: A registered medical practitioner prescribes a CBD medicine via the SAS (typically SAS‑B) or as an Authorised Prescriber. Dispensing is through a pharmacy.
• No general retail sales: You can’t legally sell CBD from a health store, wellness clinic, or standard ecommerce site direct to the public. Unauthorised supply is an offence.
• Online pharmacy dispensing is possible: Pharmacies may lawfully dispense prescription CBD, including through a distance/online model, provided the supply complies with federal and state medicines and poisons laws (valid prescription, pharmacist oversight, storage, identity checks, and record‑keeping).

What about hemp seed oil?

Hemp seed oil is not the same as CBD. Hemp seed oil contains negligible cannabinoids and can be sold as a food or cosmetic. If any product contains CBD or makes therapeutic claims, medicine rules apply. For broader context on industrial hemp and food products, see hemp laws in Australia.

State And Territory Snapshot: Who Can Prescribe And Dispense?

National scheduling decisions set the overall framework, but each state and territory has its own medicines and poisons legislation governing prescribing, supply, and pharmacy practice. Here’s the high‑level picture (be sure to check local rules and health department guidance for the latest details):

New South Wales (NSW)

Doctors can prescribe CBD as a Schedule 4 medicine via SAS or Authorised Prescriber arrangements. Pharmacists dispense on prescription and must follow NSW Poisons and Therapeutic Goods legislation. Retail sale without prescription is unlawful.

Victoria (VIC)

CBD is accessible by prescription. Victorian prescribers generally use the SAS or AP pathways. Pharmacies must meet storage, dispensing and record‑keeping obligations under Victorian medicines and poisons laws.

Queensland (QLD)

Prescribing CBD typically occurs through SAS‑B or AP, subject to Queensland’s health and medicines regulatory framework. Pharmacists dispense in line with state requirements.

Western Australia (WA)

CBD can be prescribed via SAS or AP pathways. Pharmacists must comply with WA medicines and poisons regulations for receipt, storage, dispensing, and records.

South Australia (SA)

Prescribers use SAS or AP to access CBD medicines. Pharmacies dispense by prescription only in accordance with SA legislation.

Tasmania (TAS) – update

Tasmania no longer relies on the former Controlled Access Scheme for medicinal cannabis. Prescribers now access CBD through the national SAS or AP pathways, consistent with other states. Dispensing is by prescription only through pharmacies.

Australian Capital Territory (ACT) and Northern Territory (NT)

In both the ACT and NT, access to CBD is by prescription via SAS or AP, with local medicines and poisons obligations applying to prescribers and pharmacies. There is no lawful non‑prescription retail channel at present.

Across all jurisdictions, advertising prescription CBD to the general public remains prohibited, and businesses need to be careful with any product claims.

How Can A Business Legally Supply CBD In Australia?

Your obligations depend on your role in the supply chain. Many CBD ventures involve more than one role, so map this carefully before you start.

Pharmacies and online pharmacies

• Dispense CBD only on a valid prescription written by an authorised medical practitioner via SAS/AP or for an ARTG‑listed product.
• Comply with state storage, record‑keeping, identity verification, and pharmacist‑supervision requirements. This applies to in‑store and lawful online/telepharmacy dispensing models.
• Avoid consumer advertising of prescription products; promotional activity is confined to permitted healthcare‑professional communications.

Wholesalers and distributors

• Ensure your upstream product source is lawfully manufactured and imported, with the appropriate TGA and ODC permissions in place.
• Put robust contracts in place with pharmacies and clinics, including product handling, recalls, and compliance obligations. A clear Distribution Agreement helps allocate responsibilities and reduce risk.

Manufacturers and compounders

• Secure the right TGA manufacturing licences and comply with Good Manufacturing Practice (GMP) for medicinal products.
• If compounding, follow all compounding standards and limits with careful oversight of API sources and quality controls.
• Use a tailored Supply Agreement to set product specifications, testing, quality assurance, and liability.

Importers and exporters

• Confirm whether the product is an “unapproved” medicine and ensure you have SAS/AP patient access and an Australian pharmacy pathway.
• Obtain ODC import permits and meet any Customs requirements for each shipment. Missing or incorrect permits often lead to seizure.
• Keep documentation for batch testing, GMP status, and chain of custody to satisfy border and health regulators.

Cultivation and production

• If your business involves cultivating cannabis or producing CBD in Australia, you will need ODC licences and permits under the Narcotic Drugs Act. Expect rigorous fit‑and‑proper person checks, site security standards, and ongoing reporting.
• Many producers also need TGA approvals if they wish to manufacture finished dosage forms or supply ingredients to medicine sponsors.

Clinical research

• Trials require appropriate Human Research Ethics Committee (HREC) approvals, and products must be covered by TGA clinical trial schemes (e.g. CTN/CTX). Participants generally access product inside the trial framework only.

Can CBD Be Sold Over The Counter (OTC)?

The TGA has down‑scheduled certain low‑dose CBD to Schedule 3 (Pharmacist‑Only) in principle. However, an OTC CBD product must first be registered on the ARTG with evidence supporting safety and efficacy for the proposed indication and dosage. As of now, no CBD products have completed that process for OTC sale, so consumers still require a prescription.

If and when an OTC CBD product is registered, it will only be available through pharmacies (not supermarkets, supplement stores, or general ecommerce), and advertising restrictions will still apply.

Step‑By‑Step: Setting Up A Compliant CBD Business

Here’s a practical roadmap you can tailor to your role in the supply chain.

1) Research the market and choose your role

• Identify whether you’ll act as a pharmacy, distributor, importer, manufacturer, compounder, or producer (or a combination).
• Map the regulatory pathway for each role, including prescriptions (SAS/AP), TGA licences, ODC permits, and state medicines obligations.
• Document risks and controls in a simple plan, including product sourcing, quality assurance, recalls, and advertising controls.

2) Pick a business structure

• Sole trader: Simple setup, but you’re personally liable for business debts and obligations.
• Partnership: Shared control and liability between partners.
• Company: A separate legal entity with limited liability - often preferred for regulated industries and growth. If you’re heading toward investment or multiple founders, a company is usually the safer vehicle.

If you’re building a serious medicinal cannabis venture, consider a company from day one and put founder documents (like a Shareholders Agreement and governance settings) in place alongside your company set up.

3) Register and secure your brand

• Apply for an ABN and, if you incorporate, get an ACN. Register your business name with ASIC and make sure it doesn’t conflict with existing brands - using a clear business name helps customers find you.
• Consider trade mark protection for your name and logo to safeguard your brand in the long term.

4) Obtain licences and permits

• Pharmacies: Ensure your pharmacy registration and any state approvals are current for Schedule 4 supply (including distance dispensing, if applicable).
• ODC: Apply for ODC licences/permits if cultivating, producing, or importing. Allow significant lead time; applications are detailed and assessments are rigorous.
• TGA: If manufacturing or sponsoring a product, secure TGA licences and comply with GMP and pharmacovigilance obligations.
• Customs: Line up import/export permits for every shipment involving CBD.

5) Put essential contracts and policies in place

• Supply Agreement: Sets product specs, testing, delivery, rejection rights, recalls, warranties and liability with local or overseas suppliers.
• Distribution Agreement: Allocates responsibilities for compliant warehousing, order fulfilment, and pharmacy relationships.
• Business Terms: If you supply B2B (e.g. to clinics or pharmacies), set credit terms, returns, and risk allocation.
• Privacy Policy: Required if you collect personal (and especially health) information for prescriptions, dispensing or marketing.
• Website Terms and Conditions: Cover permitted site use, disclaimers, and IP notices - particularly important for online pharmacy models.
• Employment Contract and policies: Clarify roles, confidentiality, handling of health information, and regulatory responsibilities.
• Non‑Disclosure Agreement: Protect confidential formulations, supplier pricing and R&D when negotiating with partners.

You might not need every document on day one, but getting the core contracts right upfront reduces risk and speeds up onboarding of suppliers, pharmacies and staff.

6) Build compliant operations

• Implement SOPs for receiving, storing, dispensing and shipping CBD products, aligned with state medicines rules and (if applicable) GMP.
• Set up a robust record‑keeping system. Expect audits and requests from regulators.
• Design your marketing within the law: no consumer advertising of prescription CBD, careful use of claims, and a compliance sign‑off before anything goes live.

7) Stay on top of changes

• Monitor TGA scheduling and ARTG developments for low‑dose CBD (S3), and any state‑level updates to medicines and poisons legislation.
• Review supplier qualifications and batch documentation regularly - don’t assume yesterday’s paperwork satisfies today’s requirements.

What Laws And Risks Should CBD Businesses Watch?

A well‑set‑up CBD venture is all about risk management and compliance. Key areas include:

Therapeutic Goods and advertising controls

Prescription CBD products can’t be advertised to consumers. Be careful with websites, social posts, and packaging. Misleading or therapeutic claims can attract enforcement from the TGA and the ACCC.

Australian Consumer Law (ACL)

Your dealings with clinics, pharmacies and any consumer‑facing material must comply with the ACL (product safety, refunds, warranties and no misleading conduct). Keep claims accurate and evidence‑based, and ensure your processes align with the ACL’s expectations around product quality.

Privacy and health data

Collecting prescriptions, patient details, and health information triggers strict obligations under the Privacy Act, including consent, security, access rights and breach response. A tailored Privacy Policy and internal controls are essential.

State medicines and poisons rules

Storage, labelling, record‑keeping, and pharmacist oversight vary by state and must be followed meticulously - both in‑store and for online dispensing models.

ODC and Customs compliance

Licences and shipment‑specific permits are non‑negotiable. Incorrect classifications or missing paperwork can lead to seizures, fines, or prosecution.

Employment and workplace safety

If you’re hiring, ensure compliant contracts, onboarding, and training for regulated handling of medicines. Clear role descriptions and policies through an Employment Contract help prevent errors and protect your licence.

Common penalties for non‑compliance

• Fines, prosecution, or loss of licences for unlawful supply or importation.
• Product seizures or forced recalls.
• ACL penalties for misleading claims.
• Privacy investigations following data breaches.

Key Takeaways

• CBD is legal in Australia when supplied as a medicine through lawful pathways - typically via prescription under the SAS or Authorised Prescriber frameworks and dispensed by a pharmacy (including lawful online pharmacy models).
• Over‑the‑counter CBD is not available yet; no CBD has been registered on the ARTG for Schedule 3 sale at the time of writing.
• If you plan to cultivate, produce, manufacture, or import CBD, expect to need ODC licences/permits, TGA permissions, and shipment‑specific Customs permits.
• Every state and territory applies medicines and poisons rules to prescribing and dispensing; Tasmania no longer uses the old Controlled Access Scheme and now follows national SAS/AP pathways.
• Set your foundation early with the right structure, registrations and contracts - consider a company and put in place core documents such as a Supply Agreement, Distribution Agreement, Business Terms, Privacy Policy, Website Terms and Conditions, Employment Contracts and NDAs.
• Strict advertising controls apply to prescription CBD. Keep claims accurate and ensure your operations comply with the Therapeutic Goods Act, the ACL, privacy law and state pharmacy rules.
• Staying proactive on compliance protects your reputation, keeps regulators onside, and positions your CBD business for sustainable growth.

If you would like a consultation on starting or running a CBD or medicinal cannabis business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.