Hemp · Compliance
The 2mg Cap Is Live: Virginia Hemp SKUs Need a Compliance Audit Now
Jan Carlos Byl · September 2026 · 5 min read
This is no longer a pending-bill story. On August 15, 2026, the new hemp product requirements in Virginia took effect, and the enforcement math changed with them. If your hemp portfolio still includes products over two milligrams of total THC per package, you are not tracking a debate — you are carrying inventory that cannot lawfully be produced or sold in the Commonwealth.
Here is what changed, straight from the regulator's own published guidance.
What is now in force
According to the Virginia Cannabis Control Authority (CCA), following action by the 2026 General Assembly and Governor Abigail Spanberger, three things happened in a compressed window:
1. The 2mg total THC cap took effect August 15, 2026. The law eliminates the "25:1 ratio" provision that previously allowed a hemp product to exceed two milligrams of total THC if it contained 25 parts CBD for every one part THC. The CCA's language is unambiguous: beginning August 15, 2026, a product with more than two milligrams of total THC per package cannot be produced or sold as a hemp product in Virginia. The ratio workarounds are gone. The limit is per package, not per serving — which matters for multi-serving SKUs where cumulative THC was previously spread across the container.
2. Hemp regulation moved from VDACS to the CCA. House Bill 30 shifted the Office of Hemp Enforcement's responsibilities for regulated hemp products from the Virginia Department of Agriculture and Consumer Services to the CCA, a transfer the two agencies anticipated would occur in August 2026. Existing Hemp Product Retail Facility Registrations remain valid until their expiration; the CCA has said information about applying for or renewing registrations will be posted on its website as it becomes available. Track that page — your renewal counterparties have changed.
3. The CCA holds real enforcement power. Under Senate Bill 543, the Authority can take enforcement action against unlicensed cannabis and hemp businesses and issue notices of violation, cease and desist orders, and civil penalties. The public can report suspected illegal activity through a tip line at 1-844-WEED-TIP or via the CCA's webpage. Enforcement is no longer an abstract possibility; it is a funded mandate with an intake channel.
Separately, the CCA's published timeline confirms regulated retail marijuana sales begin July 1, 2027 — relevant context for hemp operators weighing whether to pursue licenses in the emerging adult-use market, but not a reason to defer hemp compliance.
Where the exposure sits
The cap has been in force for weeks. The exposure now lives in four places:
- Legacy inventory. Every unit produced or stocked before the deadline does not carry a grandfather. If it exceeds 2mg total THC per package, producing or selling it as a hemp product in Virginia is prohibited — full stop.
- Former ratio products. SKUs formulated around 25:1 compliance were the backbone of many CBD portfolios. Under the new rule their THC content per package, not their ratio, is what counts. Most ratio beverages and edibles above the cap are simply non-compliant as formulated.
- Labeling and testing documentation. Total THC per package must be demonstrable from your COAs. If your certificates report per-serving values or delta-9 only, your documentation does not currently prove compliance with a per-package total-THC standard.
- Registration gaps. With the VDACS-to-CCA transition, registration status, expiration dates, and renewal mechanics all need re-verification against the new regulator's records.
How we run the overhaul
Proxis approaches this as a SKU-level compliance audit, not a legal memo. The sequence:
SKU audit against the cap. Pull every SKU sold into Virginia. For each, compute total THC per package from the COA — THC content per serving times servings per package, plus any delta-8, delta-10, or other isomers that count toward total THC under the statute. The output is a simple compliant / non-compliant ledger.
Reformulate-or-discontinue triage. Non-compliant SKUs get one of three dispositions: reformulate under the cap, exit the Virginia market for that SKU, or hold pending reformulation economics. The decision is commercial as much as regulatory; our job is to make the compliance status of each option explicit.
Documentation rebuild. Labels and COAs aligned to a per-package total-THC presentation, so that a regulator, a distributor, or a retailer can verify the cap from the paperwork on hand.
Registration transition tracking. Verify current registration validity, calendar expirations, and monitor the CCA site for renewal procedures as they are posted.
Enforcement-response protocol. If a notice of violation or cease-and-desist arrives, the first 48 hours determine the outcome. We maintain a response playbook: preserve records, verify the cited product's COA and registration status, and prepare the corrective-action position before responding — never an improvised reply to a regulator holding civil-penalty authority.
The audit is the CTA
The deadline passed three weeks ago. The question is no longer whether to comply with the 2mg cap — it is whether your current SKU ledger, COA file, and registration status would survive a CCA examination tomorrow. Request a hemp SKU compliance audit and we will build that ledger with you: every SKU, every package, one pass/fail line against the cap, and a disposition plan for everything that fails.
Sources
- Virginia Cannabis Control Authority, "Virginia's New Marijuana and Hemp Laws: What You Need to Know": https://cca.virginia.gov/news/virginias-new-marijuana-and-hemp-laws-what-you-need-to-know
- Virginia Cannabis Control Authority, Retail Marijuana Market timeline: https://cca.virginia.gov/retailmarijuanamarket
Would your hemp SKU ledger survive a CCA exam tomorrow?
Request a hemp SKU compliance audit: every SKU, one pass/fail line against the 2mg cap, and a disposition plan for everything that fails.
Talk to our team →