Compliance isn't optional. Violations can result in fines, license suspension, or criminal charges. This guide covers the regulatory landscape smoke shop owners must navigate in 2026.
Regulatory Overview
Who Regulates What?
| Agency | Jurisdiction | Products |
|---|---|---|
| FDA | Federal | Tobacco, vapes, certain CBD |
| State agencies | State | Licensing, taxes, age restrictions |
| Local authorities | Local | Zoning, local licenses, additional rules |
| DEA | Federal | Controlled substances |
| FTC | Federal | Advertising, labeling |
Key Compliance Areas
- Age verification
- Licensing and permits
- Product compliance
- Labeling requirements
- Record keeping
- Advertising restrictions
- Tax compliance
Age Verification
Federal Law: Tobacco 21
As of December 2019, federal law prohibits sale of tobacco products (including vapes) to anyone under 21.
- Applies to: All tobacco products, e-cigarettes, vaping products
- No exceptions: Military service doesn't exempt
- Enforcement: FDA conducts compliance checks
Best Practices
- ID everyone: Even if they look older, check ID
- Train staff thoroughly: Document training
- Use ID scanners: Reduces human error
- Post signage: "We ID" signs required in most states
- No exceptions policy: Deny questionable sales
What IDs to Accept
- State-issued driver's license
- State-issued ID card
- Passport
- Military ID (varies by state)
Reject: Expired IDs, student IDs, foreign IDs (except passports)
FDA Tobacco Regulations
Retail Requirements
- No self-service displays (customers must request)
- Health warnings must be visible
- No free samples
- No sales to minors
- ID verification required
PMTA Compliance
Pre-Market Tobacco Applications (PMTA) affect vape products:
- Only products with FDA authorization should be sold
- Enforcement has increased
- Know which products are authorized
State-Specific Requirements
Varies By State
- Licensing requirements and fees
- Age verification specifics
- Product restrictions
- Tax rates and collection
- Signage requirements
Common State Rules
- Tobacco retailer licensing
- Minimum pricing laws (some states)
- Flavor bans (some states)
- Distance from schools requirements
- Display restrictions
Hemp/CBD Product Regulations
Federal Status
2018 Farm Bill legalized hemp (under 0.3% THC), but FDA hasn't approved CBD in food/supplements.
What This Means
- Hemp CBD products exist in regulatory gray area
- No FDA-approved CBD supplements (except one drug)
- State laws vary significantly
- Keep COAs (Certificates of Analysis) on file
2026 Hemp Considerations
- Total THC testing in some states
- Delta-8 bans in various states
- Potential federal regulation changes
Record Keeping
What to Keep
- Age verification records: ID scan logs, refusal logs
- Purchase records: Invoices from suppliers
- Tax records: Sales tax, tobacco tax
- Employee training: Training documentation
- Product testing: COAs for CBD/hemp products
How Long to Keep
- Tax records: 7 years minimum
- Compliance records: 5+ years recommended
- Training documentation: Duration of employment + 3 years
Complete Record Keeping Guide →
Advertising Restrictions
Tobacco/Vape Advertising
- No advertising targeting youth
- Platform restrictions (Google, Facebook, etc.)
- Health warning requirements
- No TV/radio advertising
- State-specific restrictions
CBD/Hemp Advertising
- No health claims
- No therapeutic claims
- Can't claim FDA approval
- Platform restrictions similar to tobacco
Tax Compliance
Sales Tax
- Collect on all applicable sales
- Different rates for different products in some states
- Remit to state on schedule
- Keep detailed records
Tobacco/Vape Excise Taxes
- State excise taxes on tobacco/vape products
- May need tax stamps
- Rates vary widely by state
- Ensure suppliers are tax-paid or handle yourself
Common Compliance Mistakes
1. Selling to Minors
Even accidental sales have severe consequences:
- Fines from $500 to $10,000+
- License suspension or revocation
- Criminal charges possible
2. Unauthorized Products
- Selling products without PMTA authorization
- Products exceeding THC limits
- Mislabeled or counterfeit products
3. Poor Record Keeping
- Can't prove compliance without records
- Tax audit failures
- Licensing renewal problems
4. Expired Licenses
- Track all renewal dates
- Set calendar reminders
- Operating with expired license is serious violation
Compliance Checklist
Daily
- ☐ ID verification on all tobacco/vape sales
- ☐ Log refusals if required
- ☐ Maintain proper displays
Weekly/Monthly
- ☐ Review sales reports
- ☐ Check inventory compliance
- ☐ Staff compliance reminders
Quarterly/Annually
- ☐ License renewal tracking
- ☐ Staff retraining
- ☐ Policy updates
- ☐ Regulatory change review
Staying Updated
Resources
- FDA tobacco retailer resources
- State tobacco control office
- Industry associations
- Legal counsel (for complex issues)
What to Watch
- PMTA enforcement updates
- Hemp/CBD regulation changes
- State law changes
- Local ordinance changes
Frequently Asked Questions
What happens if I fail a compliance check?
First offense typically results in warning or small fine. Repeat violations lead to larger fines and potential license suspension. Selling to actual minor (not compliance check) is more serious.
Can I sell CBD without FDA approval?
It's a gray area. Many retailers do, but technically FDA hasn't approved CBD in food/supplements. Keep COAs on file and don't make health claims.
How often do compliance checks happen?
Varies by location. FDA conducts checks nationally. States and localities also conduct their own. You could be checked several times per year.