Which States Require a QR Code on Hemp Product Labels?
At least eleven states now have a specific labeling rule requiring a QR code, scannable barcode, or URL linking to a certificate of analysis (COA) on hemp/CBD product packaging. We checked the actual code text for each one below — not just a summary — so you can see exactly what's required before you print a single label.
Sources reviewed July 2026. Rules change — confirm the current text with your state before a print run. This is general information, not legal advice.
Texas 25 TAC § 300.402
A URL linking directly to a COA, reachable in three steps or fewer. The threshold the COA is measured against is a total delta-9 THC figure — the rule defines Total THC as (0.877 × THCA) + delta-9 THC — at 0.3% or less with the lab's measurement of uncertainty accounted for (§ 300.101). A QR code is an optional add-on, not a substitute for the URL — DSHS's own words on the March 31, 2026 amendment: "a firm has the option to also incorporate a QR code, but the URL is required."
Separately, and more importantly: effective July 31, 2026 Texas placed delta-8, delta-10, THCP and THCA flower in Schedule I — a reclassification that is currently being challenged in court, so its status could move again. Delta-9 at or under 0.3% is unaffected. Labeling does not change a product's scheduling status. Full breakdown on our Texas guide.
Source: Texas Register — adopted rule
California Cal. Health & Safety Code § 111926.2
The label must carry "a label, scannable barcode, internet website, or quick response (QR) code linked to the certificate of analysis," plus "the batch number, which matches the batch number on the product." The statute also specifies what the COA itself must show — product name, the manufacturer/packer/distributor with contact information, the matching batch number, cannabinoid concentrations including total THC and every marketed cannabinoid, and contaminant levels. Added by AB 45, the law that legalized hemp in food, beverages and supplements statewide. Full breakdown on our California guide.
Source: California Health & Safety Code § 111926.2 (codified text, verified August 2026)
Florida Fla. Admin. Code R. 5K-4.034
A scannable barcode or QR code must link "directly to a webpage where the required certificate of analysis may be found in three or fewer steps," and must stay working for at least 90 days after the product's expiration date.
Source: law.cornell.edu
Louisiana La. Admin. Code tit. 49, § I-519
Labels must include "a scannable bar code, QR code, or a web address linked to a document or website containing the certificate of analysis." Effective January 1, 2025.
Source: law.cornell.edu
Connecticut Conn. Gen. Stat. § 22-61m
Requires a scannable barcode, website address, or QR code linked to the COA of the final product batch — and the batch number on the COA has to match the batch number printed on the package.
Source: justia.com
Tennessee Tenn. Code § 43-27-209
A QR code must link to a page showing the batch number, testing dates, method of analysis, and full-panel potency results. The Tennessee ABC has moved from recommending this to actively enforcing it at compliance checks.
Source: justia.com
New York 9 NYCRR § 114.9
Requires "a scannable bar code or QR code linked to a downloadable certificate of analysis, or linked to a website where the certificate of analysis can be downloaded."
Source: law.cornell.edu
Oregon OAR 845-025-7140 / Ch. 845-026
Labels need a Label ID and a publicly accessible website address (QR code is an accepted way to present it) that lets a customer look up the certificate of analysis for that specific batch.
Source: oregon.public.law
Indiana Ind. Code § 24-4-21-4
A bit more layered than most: packaging needs (1) a scannable barcode or QR code linked to manufacturing information, (2) a separate website address for batch information, and (3) a download link for the certificate of analysis. Three distinct requirements, not one QR code doing everything.
Source: codes.findlaw.com
Georgia Ga. Comp. R. & Regs. 40-32-5-.03
An either/or rule: labels must show either all full-panel COA results printed directly, or a QR code giving direct access to them. A QR code isn't strictly mandatory here if you'd rather print the full panel.
Source: law.cornell.edu
Hawaii Haw. Admin. Rules §§ 11-37-22, 11-37-23
Lab results have to be made accessible to the purchaser one of two ways: a scannable QR code on the label that opens a website showing that specific batch's results, or a website address on the label where a customer can enter the batch number to look up results. Part of Chapter 11-37, "Hemp Processing and Manufactured Hemp Products," amended late 2024.
Alabama Ala. Code §§ 28-12-22, 28-12-25
Each consumable hemp container needs a scannable barcode or QR code linked to the certificate of analysis, which itself must carry a matching scannable code back to the product's label. Part of the state's new consumable hemp licensing law (Act 2025-385 / HB 445), operative January 1, 2026 — confirmed against the Alabama ABC Board's own administrative rule (Ala. Admin. Code 20-X-32-.02), which cites §28-12-22 directly as its statutory authority for certificate-of-analysis requirements.
One permanent link per batch, whichever state you're in
Every rule above is built around the same thing: a link that opens the current COA for that batch. BatchLink generates that link and a printable QR code — it doesn't decide whether your label meets your state's rule. Free for your first 2 batches.
Create my batch page →This page is informational, not legal advice — confirm current requirements with your own state agency before finalizing packaging.