In states where recreational and medical marijuana is legal, such as California, CBD derived from the cannabis plant is taxed and regulated, but can be sold only at dispensaries. But as far as the federal government is concerned, CBD pulled from industrial hemp is unregulated, untaxed and illegal.