Which States Require a QR Code on Hemp Product Labels?
At least ten states now have a specific labeling rule requiring a QR code, scannable barcode, or URL linking to a certificate of analysis (COA) on hemp/CBD product packaging. We checked the actual code text for each one below — not just a summary — so you can see exactly what's required before you print a single label.
Texas 25 TAC § 300.402
QR code or URL linking to a COA showing delta-9 THC ≤0.3% (with the lab's measurement of uncertainty accounted for). Full breakdown on our Texas guide.
Source: law.cornell.edu
Florida Fla. Admin. Code R. 5K-4.034
A scannable barcode or QR code must link "directly to a webpage where the required certificate of analysis may be found in three or fewer steps," and must stay working for at least 90 days after the product's expiration date.
Source: law.cornell.edu
Louisiana La. Admin. Code tit. 49, § I-519
Labels must include "a scannable bar code, QR code, or a web address linked to a document or website containing the certificate of analysis." Effective January 1, 2025.
Source: law.cornell.edu
Connecticut Conn. Gen. Stat. § 22-61m
Requires a scannable barcode, website address, or QR code linked to the COA of the final product batch — and the batch number on the COA has to match the batch number printed on the package.
Source: justia.com
Tennessee Tenn. Code § 43-27-209
A QR code must link to a page showing the batch number, testing dates, method of analysis, and full-panel potency results. The Tennessee ABC has moved from recommending this to actively enforcing it at compliance checks.
Source: justia.com
New York 9 NYCRR § 114.9
Requires "a scannable bar code or QR code linked to a downloadable certificate of analysis, or linked to a website where the certificate of analysis can be downloaded."
Source: law.cornell.edu
Oregon OAR 845-025-7140 / Ch. 845-026
Labels need a Label ID and a publicly accessible website address (QR code is an accepted way to present it) that lets a customer look up the certificate of analysis for that specific batch.
Source: oregon.public.law
Indiana Ind. Code § 24-4-21-4
A bit more layered than most: packaging needs (1) a scannable barcode or QR code linked to manufacturing information, (2) a separate website address for batch information, and (3) a download link for the certificate of analysis. Three distinct requirements, not one QR code doing everything.
Source: codes.findlaw.com
Georgia Ga. Comp. R. & Regs. 40-32-5-.03
An either/or rule: labels must show either all full-panel COA results printed directly, or a QR code giving direct access to them. A QR code isn't strictly mandatory here if you'd rather print the full panel.
Source: law.cornell.edu
Hawaii Haw. Admin. Rules §§ 11-37-22, 11-37-23
Lab results have to be made accessible to the purchaser one of two ways: a scannable QR code on the label that opens a website showing that specific batch's results, or a website address on the label where a customer can enter the batch number to look up results. Part of Chapter 11-37, "Hemp Processing and Manufactured Hemp Products," amended late 2024.
Whichever state you're in, one page covers you
Generate a permanent batch page + QR code that meets the "link to a current COA" part of every rule above. Free for your first 2 batches.
Create my batch page →This page is informational, not legal advice — confirm current requirements with your own state agency before finalizing packaging.